The Internet of Things (IoT) needs complex sensor networks.The increasing number of sensors and their networks underlines the importance of network security.Traditional digital signature schemes validate signatures from each node of networks, which need huge resources for storage and computation.To reduce the resources needed for security, a new scheme with a proxy signature is proposed.If an IoT application adopts the scheme and assigns its signing rights to the underlying nodes, the storage of their public keys is no longer necessary as the application trusts the signing rights.The development of computing technology introduces many risks to cryptographic schemes with a traditional digital signature, and a system with improved security at the quantum-resistant level is required.We propose a scheme with lattice-based cryptography using the bonsai-tree technique for a security system.The new scheme effectively protects the system from a chosen static message attack in the standard model.In the new scheme, an IoT application securely recognizes its honest nodes in the underlying sensor networks at a low storage cost, even in quantum computing.
The Internet of Things (IoT) needs complex sensor networks.The increasing number of sensors and their networks underlines the importance of network security.Traditional digital signature schemes validate signatures from each node of networks, which need huge resources for storage and computation.To reduce the resources needed for security, a new scheme with a proxy signature is proposed.If an IoT application adopts the scheme and assigns its signing rights to the underlying nodes, the storage of their public keys is no longer necessary as the application trusts the signing rights.The development of computing technology introduces many risks to cryptographic schemes with a traditional digital signature, and a system with improved security at the quantum-resistant level is required.We propose a scheme with lattice-based cryptography using the bonsai-tree technique for a security system.The new scheme effectively protects the system from a chosen static message attack in the standard model.In the new scheme, an IoT application securely recognizes its honest nodes in the underlying sensor networks at a low storage cost, even in quantum computing.
Proxy re-signature enables transitive authentication of digital identities across different domains and has significant application value in areas such as digital rights management, cross-domain certificate validation, and distributed system access control. However, most existing proxy re-signature schemes, which are predominantly based on traditional public-key cryptosystems, face security vulnerabilities and certificate management bottlenecks. While identity-based schemes alleviate some issues, they introduce key escrow concerns. Certificateless schemes effectively resolve both certificate management and key escrow problems but remain vulnerable to quantum computing threats. To address these limitations, this paper constructs an efficient post-quantum certificateless proxy re-signature scheme based on algebraic lattices. Building upon algebraic lattice theory and leveraging the Dilithium algorithm, our scheme innovatively employs a lattice basis reduction-assisted parameter selection strategy to mitigate the potential algebraic attack vectors inherent in the NTRU lattice structure. This ensures the security and integrity of multi-party communication in quantum-threat environments. Furthermore, the scheme significantly reduces computational overhead and optimizes signature storage complexity through structured compression techniques, facilitating deployment on resource-constrained devices like Internet of Things (IoT) terminals. We formally prove the unforgeability of the scheme under the adaptive chosen-message attack model, with its security reducible to the hardness of the corresponding underlying lattice problems.
Blockchain technology has become a research hotspot in recent years with the prominent characteristics as public, distributed and decentration. And blockchain-enabled internet of things (BIoT) has a tendency to make a revolutionary change for the internet of things (IoT) which requires distributed trustless consensus. However, the scalability and security issues become particularly important with the dramatically increasing number of IoT devices. Especially, with the development of quantum computing, many extant cryptographic algorithms applied in blockchain or BIoT systems are vulnerable to the quantum attacks. In this paper, an anti-quantum proxy blind signature scheme based on the lattice cryptography has been proposed, which can provide user anonymity and untraceability in the distributed applications of BIoT. Then, the security proof of the proposed scheme can derive that it is secure in random oracle model, and the efficiency analysis can indicate it is efficient than other similar literatures.
The enormous benefits of Internet of Things (IoT) technology have driven its deployment in various applications. Additionally, the development of quantum computers has directed attention towards lattice-based cryptography. Consequently, the computational capabilities of quantum computers pose a threat to the security of the existing IoT signature mechanisms. Quantum computers are proficient at unraveling the complexity bound of computationally hard problems like the integer factorization problem (IFP) and the discrete logarithm problem (DLP). As a result, security is an essential requirement for the IoT communication network against quantum attacks. The amalgamation of certificateless public key cryptosystems (CL-PKC) and lattice-based cryptography (LBC) is one of the solution for alleviating these security menaces. Lucidly, CL-PKC prevents key escrow issues and key management problems; LBC prevents quantum attacks. The Shortest Integer Solution (SIS) problem, which the NTRU lattices offer, serves as the basis for this paper’s introduction of a certificateless signature mechanism for IoT environments. By adopting the Random Oracle Model, we demonstrated the security of the suggested mechanism against Type 1 and Type 2 attackers. Furthermore, security analysis and performance evaluation demonstrate robust communication, as evidenced by metrics such as the computational cost of CL-Sign and CL-Verify phases at 536μs, 376.81μs and communication cost of KGC at 418 bits, CL-Sign at 532 bits and CL-Verify at 446 bits. Also, we calculate the cost of single-message signature generation and verification on an IoT device. These results show that the suggested mechanism’s security and computational efficiency are more reliable, and efficient than other relevant competing frameworks.
The rapid growth of the Internet of Things (IoT) introduces challenges in secure authentication and delegation due to the limited computational capabilities of devices. Proxy signature schemes offer an effective solution by enabling controlled delegation of signing rights to more capable entities, such as gateway nodes. However, most existing schemes rely on classical assumptions that are likely to be broken by quantum adversaries. In this work, we address these challenges by proposing an isogeny-based post-quantum proxy signature scheme, CSI-PS. The scheme leverages the hardness of the Group Action Inverse Problem (GAIP) to provide post-quantum security in a gateway-assisted IoT setting. In the proposed construction, expensive isogeny-based operations are assigned to resource-capable entities such as IoT gateways, while sensor nodes only transmit data to the gateway. We provide explicit storage, communication, Merkle-authentication, key-distribution, and setup-cost accounting to clarify the practical deployment profile of the construction. Our analysis shows that the proposed scheme strikes an effective balance between security and efficiency in terms of computation and communication overhead, along with provable security under the EUF-CMA notion.
A lightweight, robust, and efficient security mechanism is necessary to combat quantum-generation threats across multiple domains, including healthcare, transportation, and industrial automation, in the Internet of Things (IoT). Post-quantum cryptography has emerged in response to the increasing vulnerability of traditional cryptographic methods, such as RSA and ECC, to quantum attacks. Taking advantage of the hardness of Short Integer Solutions (SIS) and Learning with Errors (LWE), we propose a lattice-based signature scheme for IoT applications. A computationally efficient IoT device model that maintains authenticated, integrity, and anonymity is proposed. The scheme has the advantage of being faster and more efficient than existing key size schemes such as IBS, CLS, and FALCON, according to a detailed security assessment. The proposed scheme maintains practical deployment ability while reducing post-quantum security in IoT ecosystems.
With the rapid development of quantum computers and quantum computing, Internet of Things (IoT) networks equipped with traditional cryptographic algorithms have become very weak against quantum attacks. This paper focuses on the privacy-preserving problem in IoT networks and proposes a certificateless ring signature (CLRS) scheme. This CLRS is constructed with lattice theories, which show promising advantages in resisting quantum attacks. Meanwhile, the certificateless mechanism reduces the key control ability of the key generation center (KGC) by adding personal secret keys to the private key generated by the system. Meanwhile, the ring signature mechanism protects users' privacy information through a non-central control mechanism. Next, the security proof in a random oracle model is given, which shows that this CLRS scheme can obtain unforgeability and ensure the signer's anonymity. Its security properties include non-repudiation, traceability, and post-quantum security. Then, the efficiency comparison and performance results show that this CLRS scheme is more efficient and practical than similar schemes. Moreover, this work presents an exploration of the post-quantum cryptographic algorithm and its application in IoT networks.