Earticle

Machine-to-machine (M2M) communication brings numerous challenges in security which traditional communication models have not yet addressed. Particularly, due to their inherent unguarded, low- cost, and mass-deployed nature, M2M devices would invite new threats in security with the collaboration of multiple entities to perform collaborative tasks that rely on communication. This paper considers the security issues at network layer, where in routing and packet forwarding are the main operations. We propose a novel efficient security scheme in order to provide various security characteristics, such as authentication, confidentiality, integrity and non-repudiation for machine to machine networks. In our security mechanism, we implemented the adaptive identity-based signcryption to define the proposed security mechanism in context of dynamic source routing (DSR) protocol. Without any assumption of pre-fixed trust relationship between nodes, the wireless network works in a self-organizing way to provide key generation and key management services using secret sharing algorithm in the traditional public-key infrastructure (PKI).

Signcryption is a cryptographic primitive that can provide valid solution for authentication and confidentiality. In this paper, an efficient identity-based signcryption scheme from lattice was proposed. Our scheme based on Macciancio and Piekert’s trapdoor generation method and delegate algorithm for lattice. Our main idea is that establish the identity-based system master key via trapdoor generation method for lattice, and extract user’s key by trapdoor delegate algorithm. With the aid of random oracle, we prove that the proposed scheme has CCA security under the learning with errors (LWE) assumption and unforgeability against adaptive chosen messages attacks under the small integer solution (SIS) assumption. Comparison with signature-then-encryption approach shows that our scheme is efficient.

ID기반 사인크립션(Signcryption) 기법은 메시지의 기밀성과 메시지 인증을 동시에 제공한다. 하지만 높은 연산 비용이 요구되기 때문에 스마트카드나 PDA와 같은 저전력 디바이스 환경에서는 사용되기 어렵다. 이러한 문제점을 해결하기 위한 새로운 개념의 기법이 온라인/오프라인 기법이다. 온라인/오프라인 기법은 서명이나 암호화의 연산 단계를 두 단계로 나누어서 한다. 첫 번째 단계는 오프라인 단계로서 서명 또는 암호화될 메시지를 알기 전에 수행할 수 있는 연산을 미리 하는 단계이다. 두 번째 단계는 온라인 단계로서 보낼 메시지와 수신자의 공개키를 알고 나서 서명 또는 암호화 연산을 수행하는 단계이다. 온라인 단계에서는 가능한 한 페어링이나 지수승 같은 연산 비용이 높은 연산을 하지 않게 설계되어 진다. 이러한 온라인 단계의 효율성 때문에 비용의 한계가 있는 디바이스에서 유용하게 사용될 수 있다. 본 논문에서는 기밀성과 메시지 인증을 제공하는 ID기반 사인크립션을 제안하고, 저전력 디바이스에서 사용될 수 있는 ID기반 온라인/오프라인 사인크립션 기법을 제안한다. 이 기법은 랜덤오라클 모델에 안전성을 두지 않는 최초의 ID기반 온라인/오프라인 사인크립션 기법이다.

Signcryption is a cryptographic primitive which offers authentication and confidentiality simultaneously with a cost lower than signing and encrypting the message independently. We propose a new cryptographic notion called Identity-based online/offline signcryption. The notion of online/offline scheme can be divided into two phases, the first phase is performed offline prior to the arrival of a message to be signed or encrypted and the second phase is performed online phase after knowing the message and the public key of recipient. The Online phase does not require any heavy computations such as pairings or exponents. It is particularly suitable for power-constrained devices such as smart cards. In this paper, we propose ID-based signcryption scheme and ID-based online/offline signcryption scheme where the confidentiality and authenticity are simultaneously required to enable a secure and trustable communication environment. To our best knowledge, this is the first ID-based online/offline signcryption scheme that can be proven secure in the standard model.