Efficient Anonymous Certificate-Based Multi- Message and Multi-Receiver Signcryption Scheme for Healthcare Internet of Things

Healthcare Internet of Things (IoT) is an emerging paradigm, which can provide comprehensive and different types of health services and enable various types of medical sensors to monitor patient's health conditions.In the healthcare IoT, patient is deployed with a variety of medical sensors, which continuously monitors and collects patient's sensitive health data that needs specially protection for preventing privacy leakage.To safely send multiple different health data monitored by multiple different medical sensors to multiple corresponding healthcare professionals in one data report, several multi-message and multi-receiver signcryption schemes have been introduced by employing the traditional public key cryptography, identity-based cryptography or certificateless cryptography.However, these schemes suffer from the certificate management, key escrow and key distribution problem.Besides, due to the resource-constraint property of medical sensors, they are unsuitable for healthcare IoT in terms of both performance and privacy requirements.To solve these issues, this paper introduces an efficient anonymous certificate-based multimessage and multi-receiver signcryption scheme for healthcare IoT, where the certificate-based cryptography and elliptic curve cryptography are combined to simplify the certificate management problem, eliminate the key escrow problem, solve the key distribution problem and ensure the privacy-preserving.Furthermore, the security analysis suggests that the proposed scheme is able to achieve the confidentiality, unforgeability, receiver anonymity, sender anonymity and decryption fairness; the performance evaluation indicates that the proposed scheme brings to the lower computation cost and communication cost in comparison to the existing schemes.INDEX TERMS Certificate-based cryptography, elliptic curve cryptography, multi-message and multi-receiver signcryption, healthcare Internet of Things.adversary may attempt to eavesdrop the wireless communication, so it is advisable to protect the health data during transmission.In order to securely and efficiently send monitored health data to multiple corresponding healthcare professionals in the healthcare IoT system, the multicast communication [7] has received considerable attention recently, which is an essential one-to-many communication architecture.It is worth noting that data reports are transmitted via open wireless networks, so they are vulnerable to various attacks [8].To achieve secure multicast communication, several multi-receiver encryption (ME) schemes [9]-[28] and multi-receiver signcryption (MSC) schemes [29]-[42] have been introduced.However, existing schemes [9]-[42] cannot send multiple different health data monitored by multiple different medical sensors to multiple corresponding healthcare professionals in one data report.To find a solution to the issue, several multi-message and multi-receiver signcryption (MMSC) schemes [43]-[49] have been introduced by using the public key infrastructure (PKI)-based cryptography [50], identity (ID)-based cryptography [51] or certificateless (CL)based cryptography [52].However, the traditional PKI-based MMSC schemes [43], [44] suffers from the heavy certificate management burden, the ID-based MMSC scheme [45] brings the key escrow issue, the ID-based and CL-based Heterogeneous MMSC schemes [46], [47] exist the key escrow and key distribution problem, the CL-based MMSC schemes [48], [49] cause the key distribution problem.Furthermore, the schemes [43]-[49] either have a poor performance or fail to satisfy the security requirements.To solve the aforementioned problems, based on the certificate-based (CB) cryptography [53] and the elliptic curve cryptography (ECC) [54], [55], this paper proposes an efficient anonymous certificate-based MMSC scheme for healthcare IoT.The main contributions of this paper are able to be summarized as follows:• Firstly, based on the certificate-based cryptography and ECC, an efficient anonymous certificate-based MMSC scheme is proposed, which avoids the problem of certificate management, key escrow and key distribution.• Secondly, through comprehensive security analysis, the proposed certificate-based MMSC scheme satisfies the confidentiality, unforgeability, receiver anonymity, sender anonymity and decryption fairness.• Finally, the performances evaluation results illustrates that the proposed certificate-based MMSC scheme brings the lower communication and computation cost compared with existing MMSC schemes.This paper is organized as follows.Section 2 surveys the related work.In Section 3, the background was introduced.Section 4 presents the concrete scheme.The security proof and analysis are performed in Section 5. Section 6 makes the performance evaluation.The paper is summaried in Section 7.153562