Search

• ECC-based certificateless signature scheme with compact aggregation. • Fine-grained access control using attribute-based encryption and signature scheme. • Proof of security in the random oracle model (ROM). • Efficient, secure, and privacy-preserving for practical deployment. Very recently, a number of intelligent applications have evolved in smart cities such as smart grid, smart parking, smart waste management, smart manufacturing, smart home, and smart health, making our cities more smarter. In the context of smart health, smart devices are employed to collect and transmit biomedical information to a medical server, allowing medical practitioners to give better and improved healthcare services. However, considering the sensitive nature of the medical data, any illegal access may have devastating effects on the patient's health condition. A lightweight privacy-preserving authentication and fine-grained access control scheme for smart health known as PAASH is proposed. In PAASH, a new ultraefficient certificateless signature scheme with compact aggregation is developed to achieve source authentication and data integrity. To achieve efficient user authorization and data confidentiality, a privacy-preserving access control technique using the developed aggregate signature and ciphertext-policy attribute-based encryption (CP-ABE) is implemented. An analysis of PAASH reveals that it can provide desirable privacy and security measures in smart health. Moreover, the formal security demonstrated in the random oracle model (ROM) shows that PAASH is semantically secure under the intractability of the Discrete Logarithm Problem (DLP). The performance evaluation shows that PAASH is par excellence practically suitable for smart health. [ABSTRACT FROM AUTHOR]

Recently, several privacy-preserving data aggregation schemes have been proposed in smart grid system to achieve secure communication and protect consumer's privacy. However, most of them are either inefficient, insecure or not fault-tolerant. To address these challenges, we propose a lightweight fault-tolerant privacy-preserving data aggregation scheme known as EPDAS using the combination of elliptic curve cryptography, modified Paillier cryptosystem, Chinese remainder theorem, and hash chain technique. Security analysis shows that EPDAS is secure and can provide confidentiality, anonymous authentication, autonomy, integrity, and fault tolerance. Extensive performance analysis demonstrates that the proposed scheme is more efficient than most recent related schemes. Therefore, EPDAS is suitable for practical implementation in smart grid environment. [ABSTRACT FROM AUTHOR]

In this work, an autonomous lightweight certificateless aggregate signature-based data aggregation scheme for internet-of-things (IoT) is proposed. In the scheme, IoT terminals only need to contact the key generation center (KGC) once. Subsequently, they can generate their pseudonyms on their own without any interaction with the KGC. An efficient revocation mechanism is provided to punish malicious terminals. The proposed scheme is anonymous, can provide conditional traceability, resist various attacks, and solves private key compromise problem. The formal security proof demonstrates that the scheme is secure against both Type I and Type II adversaries in the random oracle model based on the intractability of the Discrete Logarithm Problem. The performance evaluation shows that the proposed scheme is more efficient than the state-of-the-art schemes and fits the resource-constraint IoT environment. [ABSTRACT FROM AUTHOR]