Summary Through the Industrial Internet of Things (IIoT), the manufacturing enterprises have significantly enhanced the production efficiency. The transmission of data in IIoT over public channels has brought about information leakage issues. Therefore, it is crucial to agree on a session key among the participants. In recent years, numerous authenticated key exchange (AKE) schemes have been designed. However, those AKE schemes which adopt the certificateless approach to tackle certificate management and key escrow may remain vulnerable to quantum attacks, and other AKE schemes which are based on lattice hard problem so as to achieve the post quantum security may incur key management issues. To simultaneously address the aforementioned challenges, we propose a lightweight certificateless lattice‐based authenticated key exchange (C2LAKE) scheme. Upon the hardness assumptions of the inhomogeneous small integer solution (ISIS) and computational bilateral inhomogeneous small integer solution (CBi‐ISIS) problems, the C2LAKE scheme has been demonstrated to be secure in the eCK model and the random oracle model (ROM). Better trade‐off among security and functionality features, and communication and computation costs make the C2LAKE scheme suitable and applicable in the IIoT environment.
Summary Through the Industrial Internet of Things (IIoT), the manufacturing enterprises have significantly enhanced the production efficiency. The transmission of data in IIoT over public channels has brought about information leakage issues. Therefore, it is crucial to agree on a session key among the participants. In recent years, numerous authenticated key exchange (AKE) schemes have been designed. However, those AKE schemes which adopt the certificateless approach to tackle certificate management and key escrow may remain vulnerable to quantum attacks, and other AKE schemes which are based on lattice hard problem so as to achieve the post quantum security may incur key management issues. To simultaneously address the aforementioned challenges, we propose a lightweight certificateless lattice‐based authenticated key exchange (C2LAKE) scheme. Upon the hardness assumptions of the inhomogeneous small integer solution (ISIS) and computational bilateral inhomogeneous small integer solution (CBi‐ISIS) problems, the C2LAKE scheme has been demonstrated to be secure in the eCK model and the random oracle model (ROM). Better trade‐off among security and functionality features, and communication and computation costs make the C2LAKE scheme suitable and applicable in the IIoT environment.
In recent years, the Internet of Things (IoT) has gained immense popularity in various aspects of work, learning, and daily life. Within the IoT realm, there is a growing concern regarding communication security issues between users and servers. However, addressing the communication security between servers is equally imperative, which has not received as much attention. To this end, we propose a certificateless anonymous authenticated key agreement (AKA) algorithm based on learning with errors (LWEs) and inhomogeneous small integer solution (ISIS) security assumptions. Our scheme provides strong resistance to quantum attacks and protects the privacy of communication servers. It also has constant communication costs and lower computational requirements than existing lattice-based anonymous AKA algorithms on the broadcast channel. Additionally, the proposed scheme eliminates the resource consumption of managing complex certificates and addresses the security risks associated with key escrow in the key generation center (KGC). Through security and performance analysis, we demonstrate that our approach can enhance the security of IoT-based healthcare systems while significantly improving communication efficiency. Our proposed scheme provides a promising solution to security issues related to server communication in IoT systems.
The Edge-enabled Industrial Internet of Things (Edge-IIoT) has emerged as a fundamental architecture for intelligent manufacturing by enabling low-latency data collection, processing, and communication among distributed industrial devices. However, the open and distributed nature of Edge-IIoT introduces significant challenges to secure data authentication and privacy preservation. Meanwhile, conventional public key infrastructure incurs considerable certificate management overhead and is not well suited for future industrial environments in the presence of quantum computing. To address these challenges, this paper proposes a lattice-based certificateless blind signature scheme for secure and privacy-preserving authentication in Edge-IIoT. The proposed scheme integrates the Dilithium signature algorithm with certificateless public key cryptography and blind signature techniques to simultaneously provide anonymous authentication, data integrity, conditional identity revocation, and post-quantum security while eliminating the certificate management overhead associated with traditional public key infrastructures. Furthermore, the proposed construction improves existing lattice-based certificateless blind signature schemes by addressing identified security weaknesses and strengthening resistance against forgery attacks, while effectively avoiding the key escrow problem inherent in identity-based cryptography. The correctness, blindness, and unforgeability of the proposed scheme are formally proved in the random oracle model based on the hardness of the Module Short Integer Solution (MSIS) problem. In addition, theoretical performance analysis demonstrates that the proposed scheme incurs acceptable computational, communication, and storage overhead while providing comprehensive security properties, including certificateless operation, identity anonymity, no key escrow, conditional revocation, and post-quantum security. Overall, the proposed scheme achieves an effective balance between security, privacy preservation, and efficiency, which exhibits favorable theoretical security-efficiency trade-offs for secure industrial data authentication in resource-constrained Edge-IIoT environments. Practical implementation is left for future investigation.
As an imperative division of the Internet of Things (IoT), Industrial IoT (IIoT) has also attracted full attention. IIoT networks are equipped with various authenticated key exchange techniques under the cumbersome Diffie–Hellman (DH) problems and certificate management overheads. However, DH-type problems are vulnerable to quantum cryptanalysis. In this article, a novel identity-based authenticated key exchange protocol is designed using the concept of lattice cryptography, which enables the different security features in the IIoT in open wireless communication. Due to the lattice hard assumptions, the proposed protocol can withstand a quantum attack. Rigorous formal security analysis has been made, which shows the ability of the proposed protocol to resist existing as well as quantum attacks. Performance results demonstrate that the proposed protocol exhibits better communication, energy consumption, cryptographic key storage, and computation costs than other similar state of the arts.
The enormous benefits of Internet of Things (IoT) technology have driven its deployment in various applications. Additionally, the development of quantum computers has directed attention towards lattice-based cryptography. Consequently, the computational capabilities of quantum computers pose a threat to the security of the existing IoT signature mechanisms. Quantum computers are proficient at unraveling the complexity bound of computationally hard problems like the integer factorization problem (IFP) and the discrete logarithm problem (DLP). As a result, security is an essential requirement for the IoT communication network against quantum attacks. The amalgamation of certificateless public key cryptosystems (CL-PKC) and lattice-based cryptography (LBC) is one of the solution for alleviating these security menaces. Lucidly, CL-PKC prevents key escrow issues and key management problems; LBC prevents quantum attacks. The Shortest Integer Solution (SIS) problem, which the NTRU lattices offer, serves as the basis for this paper’s introduction of a certificateless signature mechanism for IoT environments. By adopting the Random Oracle Model, we demonstrated the security of the suggested mechanism against Type 1 and Type 2 attackers. Furthermore, security analysis and performance evaluation demonstrate robust communication, as evidenced by metrics such as the computational cost of CL-Sign and CL-Verify phases at 536μs, 376.81μs and communication cost of KGC at 418 bits, CL-Sign at 532 bits and CL-Verify at 446 bits. Also, we calculate the cost of single-message signature generation and verification on an IoT device. These results show that the suggested mechanism’s security and computational efficiency are more reliable, and efficient than other relevant competing frameworks.
The rapid proliferation of IoT technology has brought billions of devices into play that need to operate in a variety of diverse, resource-constrained environments. Secure authentication among these devices is a critical challenge, as traditional certificate-based public key infrastructures incur heavy computation and management overhead. Moreover, recent breakthroughs in quantum computing put at risk the security of classical cryptographic algorithms commonly used in IoT systems. This paper proposes a post-quantum certificateless authentication framework designed to address the efficiency-long-term security requirements of IoT environments. The proposed framework uses lattice-based cryptography to resist quantum-enabled adversaries while eliminating the need for digital certificates. The certificateless approach evades the problem of key escrow of identity-based cryptography and simplifies the key management process. A lightweight authentication protocol, which is suitable for constrained IoT devices, is developed. Security analyses prove that our proposed framework resists common attacks such as impersonation, replay, and man-in-the-middle attacks. The performance evaluation shows that our proposed framework reduces the communication and computational overheads compared with the traditional certificatebased authentication schemes. In this way, it is appropriate for large-scale and futureproof deployments of IoT systems.
The rapid expansion of the Industrial Internet of Things (IIoT) presents pressing challenges for secure, efficient, and privacy‐preserving communication among users, sensors, and cloud infrastructures. Existing lightweight authentication schemes, primarily based on classical cryptographic assumptions, are increasingly vulnerable to the emerging threat of quantum computing. To address these challenges, we propose a lightweight, quantum‐resilient, and privacy‐preserving mutual authentication scheme tailored to the IIoT ecosystem. The proposed scheme integrates the learning with errors (LWE) assumption to achieve postquantum secure authentication and identity protection, hash functions for message integrity, and ephemeral elliptic curve Diffie–Hellman (ECDH) to provide classical forward secrecy within a hybrid security model. A novel use of ephemeral pseudonyms further enhances unlinkability and resilience against traceability attacks. The security of the scheme is established through informal analysis, covering resistance to forgery, impersonation, replay, man‐in‐the‐middle, and key compromise impersonation attacks, and through formal analysis in both the random oracle model (ROM) and BAN logic, proving mutual authentication and secrecy properties. Performance evaluation demonstrates that the scheme achieves low computational cost for resource‐constrained sensors (≈ 4 ms) and practical communication overhead while maintaining comprehensive security features superior to existing solutions. These results highlight that the proposed scheme provides a robust, efficient, and deployable framework for postquantum secure authentication in IIoT ecosystems.