The emergence of edge computing makes it possible to realize new technologies, such as virtual reality and augmented reality. However, a large number of devices and more messages at the edge bring more security problems. Therefore, it is an important research topic to provide users with faster network services while ensuring confidentiality and authentication of data transmission. Because signcryption can encrypt and sign messages at the same time, it has become a new cryptographic primitive. In the meantime, certificateless signcryption guarantees data confidentiality and authentication and addresses traditional single point failure problems based on the trust center and the problem of relying on a trusted third party. Therefore, certificateless signcryption has attracted great attention from academia and industry. But certificateless signcryption also faces two types of attacks. In order to more effectively resist these two types of attacks, we propose a certificateless signcryption mechanism based on blockchain. This mechanism can make good use of the nontamperable feature of blockchain, prevent illegal users from substituting the public key of the user, and guarantee signature nonrepudiation. And our scheme is investigated in a comparative study with eight schemes. Comparative analysis outcomes demonstrate our scheme has achieved better results in efficiency and security. The process of signcryption and unsigncryption consumes the least amount of computation, which is very suitable for the edge computing environment.
As the Industrial Internet of Things (IIoT) continues to grow in scale, edge devices will generate massive amounts of data every single day. However, most of the IIoT data exists in the form of data silos, which makes it difficult to share data across domains securely. Therefore, a secured data sharing scheme for IIoT based on blockchain and federated learning is proposed in this paper. Leveraging blockchain in federated learning systems to enhance the tamper-proof and decentralized capabilities of IIoT devices. Model parameter validation and incentives are also added to the consensus algorithm to encourage more IIoT data owners to contribute local privacy data and arithmetic power. To address potential security issues such as parameter leakage and inference attacks in data sharing, this paper designs an adaptive differential privacy mechanism and a node contribution consensus mechanism. Without affecting the global model’s accuracy, some of the noise is also reduced. The reputation mechanism is used to resist poisoning attacks by malicious nodes. It is demonstrated on different datasets that our scheme has high global model accuracy and can effectively resist 30% model poisoning attacks.
In Industrial Internet, mutual authentication between enterprises is a prerequisite for establishing reliable upstream and downstream relationships. Existing authentication methods suffer from complicated certificate management and key escrow problems. Moreover, many authentication mechanisms cannot resist common security attacks and have high computational overhead and communication costs. Therefore, this article proposes a blockchain-based certificate-free cross-domain authentication mechanism for Industrial Internet. By establishing an Ethereum consortium blockchain as the trusted cornerstone among different regions, industrial enterprises in each region generate the user’s private key with the key generation center in the region, thus avoiding the key escrow problem. This consortium blockchain adopts the Proof-of-Authority consensus mechanism for scalability and throughput. Industrial enterprises in different regions invoke smart contracts and query other industrial enterprises for mutual authentication and key negotiation. SVO logic proves the proposed scheme achieves the intended authentication goal, and the automated formal verification tool Scyther proves the scheme’s security. In addition, compared with seven related schemes in the last three years, the experimental results show that the proposed scheme has low communication overhead and computational cost in the authentication key negotiation phase. The experiments on the Ethereum consortium blockchain built by Raspberry Pi prove the effectiveness of the proposed scheme. Finally, the comparative analysis of common security properties proves the reliability of the scheme.
27 April 2021 in Peer-to-Peer Networking and Applications