Lee Dae-Hwi, Yim Kangbin, Lee Im-Yeong
Department of Computer Science and Engineering, Soonchunhyang University, Asan 31538, Korea.
Department of Information Security Engineering, Soonchunhyang University, Asan 31538, Korea.
Sensors (Basel). 2020 Jul 17;20(14):3983. doi: 10.3390/s20143983.
The Internet of Things (IoT) environment consists of numerous devices. In general, IoT devices communicate with each other to exchange data, or connect to the Internet through a gateway to provide IoT services. Most IoT devices participating in the IoT service are lightweight devices, in which the existing cryptographic algorithm cannot be applied to provide security, so a more lightweight security algorithm must be applied. Cryptographic technologies to lighten and provide efficiency for IoT environments are currently being studied a lot. In particular, it is necessary to provide efficiency for computation at a gateway, a point where many devices are connected. Additionally, as many devices are connected, data authentication and integrity should be fully considered at the same time, and thus digital signature schemes have been proposed. Among the recently studied signature algorithms, the certificateless signature (CLS) based on certificateless public key cryptography (CL-PKC) provides efficiency compared to existing public key-based signatures. However, in CLS, security threats, such as public key replacement attacks and signature forgery by the malicious key generation center (KGC), may occur. In this paper, we propose a new signature scheme using CL-PKC in generating and verifying the signature of a message in an IoT environment. The proposed scheme is a certificateless aggregate arbitrated signature, and the gateway aggregates the signatures of messages generated by the device group to reduce the size of the entire signature. In addition, it is designed to be safe from security threats by solving the problems caused by public key replacement attacks and malicious KGC, and adding arbitrated signatures of the gateway to strengthen non-repudiation.
物联网（IoT）环境由众多设备组成。一般来说，物联网设备相互通信以交换数据，或者通过网关连接到互联网以提供物联网服务。参与物联网服务的大多数物联网设备都是轻量级设备，现有加密算法无法应用于此类设备以提供安全性，因此必须应用更轻量级的安全算法。目前正在大量研究用于减轻物联网环境负担并提高其效率的加密技术。特别是，有必要在许多设备连接的网关处提高计算效率。此外，由于连接了许多设备，数据认证和完整性应同时得到充分考虑，因此已经提出了数字签名方案。在最近研究的签名算法中，基于无证书公钥密码学（CL-PKC）的无证书签名（CLS）与现有的基于公钥的签名相比具有更高的效率。然而，在CLS中，可能会出现诸如公钥替换攻击和恶意密钥生成中心（KGC）伪造签名等安全威胁。在本文中，我们提出了一种在物联网环境中生成和验证消息签名时使用CL-PKC的新签名方案。所提出的方案是一种无证书聚合仲裁签名，网关聚合设备组生成的消息签名以减小整个签名的大小。此外，它通过解决公钥替换攻击和恶意KGC引起的问题，并添加网关的仲裁签名以加强不可否认性，从而设计得能够抵御安全威胁。
