边缘计算环境下基于PUF的多接收者匿名签密方案
PUF-Based Multi-Receiver Anonymous Signcryption Scheme in Edge Computing
- 电子学报 2024年52卷第12期 页码：4087-4100
- 作者机构：
战略支援部队信息工程大学， 河南郑州 450001
- 作者简介：
[ "李森森 男，1993年7月出生于河南省洛阳市.现为战略支援部队信息工程大学讲师、博士研究生.主要研究方向为物联网安全、云数据安全.E-mail: lss589@163.com" ]
[ "刘燕江 男，1990年7月出生于河南省南阳市.现为战略支援部队信息工程大学讲师.主要研究方向为物理不可克隆函数设计及其应用.E-mail: liuyj_1013@126.com" ]
- 基金信息：国家自然科学基金(62302519)
DOI：10.12263/DZXB.20231181
中图分类号： TP309收稿：2023-12-21，
修回：2024-06-24，
纸质出版：2024-12-25
- 稿件说明：
移动端阅览
李森森, 刘燕江, 郁滨, 等. 边缘计算环境下基于PUF的多接收者匿名签密方案[J]. 电子学报, 2024, 52(12): 4087-4100.
LI Sen-sen, LIU Yan-jiang, YU Bin, et al. PUF-Based Multi-Receiver Anonymous Signcryption Scheme in Edge Computing[J]. Acta Electronica Sinica, 2024, 52(12): 4087-4100.
李森森, 刘燕江, 郁滨, 等. 边缘计算环境下基于PUF的多接收者匿名签密方案[J]. 电子学报, 2024, 52(12): 4087-4100. DOI：10.12263/DZXB.20231181
LI Sen-sen, LIU Yan-jiang, YU Bin, et al. PUF-Based Multi-Receiver Anonymous Signcryption Scheme in Edge Computing[J]. Acta Electronica Sinica, 2024, 52(12): 4087-4100. DOI：10.12263/DZXB.20231181
摘要
边缘计算将部分云中心业务扩展至网络边缘，能够有效缓解万物互联时代海量设备和数据造成的云中心计算开销大、处理时延长等问题.在边缘计算环境下，边缘节点和终端设备常部署于无人值守的开放环境中，使其在面临传统安全威胁的同时，也存在遭受物理攻击的风险.为实现边缘计算环境下设备的安全通信，已有学者提出了具有较高通信效率的多接收者签密方案.然而，现有方案应用于高安全性要求领域仍存在两个方面的不足：（1）未提供对物理攻击的防范机制；（2）未实现对发送者的匿名性保护.针对上述问题，基于物理不可克隆函数（Physical Unclonable Function， PUF）这一硬件安全原语，提出一种高效的多接收者多消息签密方案.方案将PUF与椭圆曲线上的无证书公钥密码体制相结合，无需使用高计算复杂度的双线性对运算且无密钥托管问题.安全性分析表明，方案在具备机密性、不可伪造性、匿名性等安全属性的同时，能够有效防范物理攻击.相较于同类方案，本文方案能够在不明显增加计算开销的前提下，以更低的通信开销实现更高的安全性，满足边缘计算环境下设备的安全通信需求.
Abstract
Edge computing extends some tasks of center cloud server to the edge of the network
which can effectively alleviate the problems of high computation overhead and long processing latency caused by massive devices and data in the era of Internet of Everything. In edge computing environment
edge nodes and terminal devices are usually deployed in the unattended and open places
making them vulnerable to physical attacks while facing traditional security threats. To achieve secure communication in edge computing
several multi-receiver signcryption schemes with high communication efficiency have been proposed. However
there are still two issues with the application of existing schemes in areas with high security requirements: (1) no prevention mechanism for physical attacks is provided; (2) the anonymity protection for the senders has not been implemented. To fill this gap
we propose an efficient multi-receiver and multi-message signcryption scheme based on the hardware security primitive physical unclonable function (PUF) in this paper. Combining PUF with certificateless public key cryptography (CL-PKC) on elliptic curve
the proposed scheme does not need to use bilinear pairings with high computational complexity and is free from the key escrow problem. The security analysis shows that the scheme can effectively prevent physical attacks while possessing security attributes including confidentiality
unforgeability
and anonymity. Compared with related schemes
the proposed scheme achieves higher security with lower communication overhead without significantly increasing the computation overhead
which can better meet the requirements of secure communication in edge computing.
关键词
Keywords
references
DONG S , SU H D , XIA Y J , et al . A comprehensive survey on authentication and attack detection schemes that threaten it in vehicular ad-hoc networks [J ] . IEEE Transactions on Intelligent Transportation Systems , 2023 , 24 ( 12 ): 13573 - 13602 .
SU H , DONG S , WANG N , et al . An efficient privacy-preserving authentication scheme that mitigates TA dependency in VANETs [J ] . Vehicular Communications , 2024 , 45 : 100727 .
周俊 , 沈华杰 , 林中允 , 等 . 边缘计算隐私保护研究进展 [J ] . 计算机研究与发展 , 2020 , 57 ( 10 ): 2027 - 2051 .
ZHOU J , SHEN H J , LIN Z Y , et al . Research advances on privacy preserving in edge computing [J ] . Journal of Computer Research and Development , 2020 , 57 ( 10 ): 2027 - 2051 . (in Chinese)
王菲菲 , 汪定 . 基于雾计算的智能医疗三方认证与密钥协商协议 [J ] . 软件学报 , 2023 , 34 ( 7 ): 3272 - 3291 .
WANG F F , WANG D . Fog computing-based three-party authentication and key agreement protocol for smart healthcare [J ] . Journal of Software , 2023 , 34 ( 7 ): 3272 - 3291 . (in Chinese)
施巍松 , 张星洲 , 王一帆 , 等 . 边缘计算: 现状与展望 [J ] . 计算机研究与发展 , 2019 , 56 ( 1 ): 69 - 89 .
SHI W S , ZHANG X Z , WANG Y F , et al . Edge computing: State-of-the-art and future directions [J ] . Journal of Computer Research and Development , 2019 , 56 ( 1 ): 69 - 89 . (in Chinese)
ALWARAFY A , AL-THELAYA K A , ABDALLAH M , et al . A survey on security and privacy issues in edge-computing-assisted Internet of things [J ] . IEEE Internet of Things Journal , 2021 , 8 ( 6 ): 4004 - 4022 .
BELGUITH S , KAANICHE N , HAMMOUDEH M , et al . PROUD: Verifiable privacy-preserving outsourced attribute based signcryption supporting access policy update for cloud assisted IoT applications [J ] . Future Generation Computer Systems , 2020 , 111 : 899 - 918 .
CHEN J , WANG L , WEN M , et al . Efficient certificateless online/offline signcryption scheme for edge IoT devices [J ] . IEEE Internet of Things Journal , 2022 , 9 ( 11 ): 8967 - 8979 .
ALI I , CHEN Y , LI J , et al . Efficient offline/online heterogeneous-aggregated signcryption protocol for edge computing-based Internet of vehicles [J ] . IEEE Transactions on Intelligent Transportation Systems , 2023 , 24 ( 12 ): 14506 - 14519 .
XIE Z , CHEN Y , ALI I , et al . Efficient and secure certificateless signcryption without pairing for edge computing-based Internet of vehicles [J ] . IEEE Transactions on Vehicular Technology , 2023 , 72 ( 5 ): 5642 - 5653 .
XU G , DONG J , MA C , et al . A certificateless signcryption mechanism based on blockchain for edge computi-ng [J ] . IEEE Internet of Things Journal , 2023 , 10 ( 14 ): 11960 - 11974 .
YU X , ZHAO W , TANG D . Efficient and provably secure multi-receiver signcryption scheme using implicit certificate in edge computing [J ] . Journal of Systems Architecture , 2022 , 126 : 102457 .
LIANG Y , YAN H , LIU Y . Unlinkable signcryption scheme for multi-receiver in VANETs [J ] . IEEE Transactions on Intelligent Transportation Systems , 2023 , 24 ( 9 ): 10138 - 10154 .
PENG C , CHEN J , OBAIDAT M S , et al . Efficient and provably secure multireceiver signcryption scheme for multicast communication in edge computing [J ] . IEEE Internet of Things Journal , 2020 , 7 ( 7 ): 6056 - 6068 .
WANG L , GUAN Z , CHEN Z , et al . Multi-receiver signcryption scheme with multiple key generation centers through public channel in edge computing [J ] . China Communications , 2022 , 19 ( 4 ): 177 - 198 .
AN J H , DODIS Y , RABIN T . On the security of joint signature and encryption [M ] // Lecture Notes in Computer Science . Berlin : Springer , 2002 : 83 - 107 .
JIN C , ZHU H , QIN W , et al . Heterogeneous online/offline signcryption for secure communication in Internet of things [J ] . Journal of Systems Architecture , 2022 , 127 : 102522 .
AN H , HE D , PENG C , et al . Efficient certificateless online/offline signcryption scheme without bilinear pairing for smart home consumer electronics [J ] . IEEE Transactions on Consumer Electronics , 2024 , 70 ( 1 ): 4005 - 4015 .
NIU S , SHAO H , SU Y , et al . Efficient heterogeneous signcryption scheme based on edge computing for industrial Internet of things [J ] . Journal of Systems Architecture , 2023 , 136 : 102836 .
MARCHAND C , BOSSUET L , MUREDDU U , et al . Implementation and characterization of a physical unclonable function for IoT: A case study with the TERO-PUF [J ] . IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems , 2018 , 37 ( 1 ): 97 - 109 .
AMAN M N , CHUA K C , SIKDAR B . Mutual authentication in IoT systems using physical unclonable functi-ons [J ] . IEEE Internet of Things Journal , 2017 , 4 ( 5 ): 1327 - 1340 .
PAPPU R , RECHT B , TAYLOR J , et al . Physical one-way functions [J ] . Science , 2002 , 297 ( 5589 ): 2026 - 2030 .
AMAN M N , BASHEER M H , SIKDAR B . Data provenance for IoT with light weight authentication and privacy preservation [J ] . IEEE Internet of Things Journal , 2019 , 6 ( 6 ): 10441 - 10457 .
LI S , ZHANG T , YU B , et al . A provably secure and practical PUF-based end-to-end mutual authentication and key exchange protocol for IoT [J ] . IEEE Sensors Journal , 2021 , 21 ( 4 ): 5487 - 5501 .
POINTCHEVAL D , STERN J . Security arguments for digital signatures and blind signatures [J ] . Journal of Cryptology , 2000 , 13 ( 3 ): 361 - 396 .
LI S , HUANG Y , YU B . A practical and flexible PUF-based end-to-end anonymous authentication protocol for IoT [J ] . Computer Networks , 2024 , 247 : 11426 .
SEIFELNASR M , ALTAWY R , YOUSSEF A . SKAFS: Symmetric key authentication protocol with forward secrecy for edge computing [J ] . IEEE Internet of Things Journal , 2024 , 11 ( 1 ): 510 - 525 .
SUZUKI M , UENO R , HOMMA N , et al . Efficient fuzzy extractors based on ternary debiasing method for biased physically unclonable functions [J ] . IEEE Transactions on Circuits and Systems I: Regular Papers , 2019 , 66 ( 2 ): 616 - 629 .
DODIS Y , OSTROVSKY R , REYZIN L , et al . Fuzzy extractors: How to generate strong keys from biometrics and other noisy data [J ] . SIAM Journal on Computing , 2008 , 38 ( 1 ): 97 - 139 .
张效林 , 谷大武 . 一种基于PUF的可证明安全消息认证算法及应用 [J ] . 中国科学(信息科学) , 2022 , 52 ( 12 ): 2336 - 2350 .
ZHANG X L , GU D W . A PUF-based provably secure message authentication algorithm and application [J ] . Scientia Sinica (Informationis) , 2022 , 52 ( 12 ): 2336 - 2350 . (in Chinese)
BROWN D R L . SEC 2: Recommended elliptic curve domain parameters [S/OL ] . Standards for Efficient Cryptography. ( 2010-01-27 )[ 2023-12-12 ] . https://www.secg.or g/sec2-v2.pdf https://www.secg.org/sec2-v2.pdf .
BOWE S . BL S12 - 381 : New zk-SNARK elliptic curve construction[EB/OL ] . ( 2017-03-11 )[ 2023-12-12 ] . https://electriccoin.co/blog/new-snark-curve/ https://electriccoin.co/blog/new-snark-curve/ .
VERCAUTEREN F . Optimal pairings [J ] . IEEE Transactions on Information Theory , 2010 , 56 ( 1 ): 455 - 461 .
0
浏览量
17
下载量
0
CSCD
- 网络PDF下载
- Meta-XML下载
- BibTeX下载
- Endnote下载
- RefMan 下载
- NoteExpress下载
- NoteFirst下载
关联资源
相关文章
相关作者
相关机构
- 技术支持由北京北大方正电子有限公司提供 京ICP备09064830号-19
京公网安备11010802024621 - 本系统建议在Chrome、 IE9+ 以上版本浏览器阅读本站内容，360浏览器请切换至极速模式
- Cookies帮助我们提供服务并提供个性化体验。使用本网站，即表示您同意我们使用Cookies