Post-Quantum Lightweight Certificateless Hybrid Signcryption Scheme for Time-Series Data Sharing

doi:10.19678/j.issn.1000-3428.0260093

Abstract

Abstract:

The demand for continuous time-series data sharing in Internet of Things (IoT) scenarios has been increasing. Traditional Certificateless Signcryption (CLSC) schemes based on bilinear pairings or elliptic curves offer limited security under quantum computing threats and incur high computational and communication overheads when repeatedly signcrypting multiple data segments. To address these issues, this paper proposes a post-quantum lightweight certificateless hybrid signcryption scheme tailored for time-series data sharing. First, a bidirectional hash chain-driven symmetric key generation and management mechanism is designed to enable rapid key generation for multiple consecutive data segments while ensuring forward and backward security. Subsequently, a lightweight hybrid signcryption scheme with conditional privacy protection is constructed using a module lattice framework. Combined with an offline/online separation that shifts part of the computation ahead of time, the scheme achieves post-quantum security while significantly reducing the burden on end devices and communication links. The scheme is proven to satisfy IND-CCA confidentiality and EUF-CMA unforgeability in a random oracle model. Prototype implementation and evaluation on resource-constrained terminal devices show that, the proposed scheme achieves significant advantages: on average, the end-side overall latency and transmission volume can be reduced to approximately 40% of those of comparable post-quantum schemes. The advantages of this scheme become even more pronounced in long-duration continuous time-series data scenarios. It effectively balances post-quantum security, lightweight design, and scalability, making it well-suited for time-series data sharing applications in next-generation intelligent IoT.

Key words: Internet of Things (IoT), time-series data sharing, certificateless signcryption, post-quantum cryptography, key generation

摘要：

面向物联网(IoT)场景中海量、连续的时序数据共享需求, 传统基于双线性映射或椭圆曲线的无证书签密(CLSC)方案在量子计算威胁下安全性受限, 且在多段数据的重复签密中引入了较高的计算与通信开销。为此, 提出一种面向时序数据共享的后量子轻量化无证书混合签密方案。首先, 设计双向哈希链驱动的对称密钥生成与管理机制, 实现多段连续数据的密钥快速生成与前向/后向安全; 然后, 在模块格框架下构建条件隐私保护的轻量化混合签密体制, 并结合离线/在线分离将部分计算前移, 在实现后量子安全的同时显著降低端侧与链路负担。在随机预言机模型下证明了该方案满足IND-CCA机密性与EUF-CMA不可伪造性。在资源受限的终端设备上开展原型实现与评测, 对比实验结果显示, 该方案相较代表性对比方案具有显著优势, 端侧整体时延与传输体量平均可降至同类后量子方案的40%左右。在长时段、连续时序数据场景下, 该方案优势将进一步扩大, 其能兼顾后量子安全、轻量化与可扩展性要求, 适用于新一代智能IoT中的时序数据共享应用。

关键词: 物联网, 时序数据共享, 无证书签密, 后量子密码, 密钥生成

CHENG Guanjie, SU Taolong, HUANG Junqin, KONG Linghe. Post-Quantum Lightweight Certificateless Hybrid Signcryption Scheme for Time-Series Data Sharing[J]. Computer Engineering, 2026, 52(9): 265-281.

程冠杰, 苏韬龙, 黄俊钦, 孔令和. 面向时序数据共享的后量子轻量化无证书混合签密方案[J]. 计算机工程, 2026, 52(9): 265-281.

/ Recommend / Download Citations

URL: https://www.ecice06.com/EN/10.19678/j.issn.1000-3428.0260093

https://www.ecice06.com/EN/Y2026/V52/I9/265

Figures/Tables 14

Fig.1 System model

Fig.2 Key generation mechanism based on bidirectional hash chain

Fig.3 The interaction process between DO and DU

Fig.4 Scalability analysis results

Fig.5 Comparison of computational overhead in the hybrid signcryption phase

Fig.6 Comparison of computational overhead in the decryption and hybrid signcryption stages

Fig.7 Comparison of computational overhead of the signcryption stage

References 30

1	CHENG G J , HUANG J Q , WANG Y W , et al. Conditional privacy-preserving multi-domain authentication and pseudonym management for 6G-enabled IoV. IEEE Transactions on Information Forensics and Security, 2024, 19, 10206- 10220. doi: 10.1109/TIFS.2023.3314211
2	WEI Y Y , JANG J J , XU W , et al. LSTM-autoencoder-based anomaly detection for indoor air quality time-series data. IEEE Sensors Journal, 2023, 23 (4): 3787- 3800. doi: 10.1109/JSEN.2022.3230361
3	CHENG G J , WANG Y W , DENG S G , et al. A lightweight authentication-driven trusted management framework for IoT collaboration. IEEE Transactions on Services Computing, 2024, 17 (3): 747- 760. doi: 10.1109/TSC.2023.3349305
4	李哲成, 张波. 基于区块链的轻量级工业物联网跨域认证与数据共享方案. 计算机研究与发展, 2025, 62 (10): 2416- 2427.
	LI Z C , ZHANG B . A lightweight blockchain-based cross-domain authentication and data sharing scheme for the industrial Internet of Things. Journal of Computer Research and Development, 2025, 62 (10): 2416- 2427.
5	陈骁, 黄牧鸿, 田一凡, 等. 基于分片区块链的车联网数据共享方案. 计算机研究与发展, 2024, 61 (9): 2246- 2260.
	CHEN X , HUANG M H , TIAN Y F , et al. Internet of vehicles data sharing scheme via blockchain sharding. Journal of Computer Research and Development, 2024, 61 (9): 2246- 2260.
6	WANG Y H , JIA X Y , BAO Y Y , et al. Efficient and provably secure offline/online heterogeneous signcryption scheme for VANETs. IEEE Internet of Things Journal, 2024, 11 (24): 41248- 41260. doi: 10.1109/JIOT.2024.3458077
7	DU J W , AI B , LIANG J Y , et al. An adaptive secure identity-based signcryption with equality test for high-speed railway train-ground communication. IEEE Transactions on Network Science and Engineering, 2026, 13, 1872- 1886. doi: 10.1109/TNSE.2025.3605157
8	RAMADAN M , RAZA S . Secure equality test technique using identity-based signcryption for telemedicine systems. IEEE Internet of Things Journal, 2023, 10 (18): 16594- 16604. doi: 10.1109/JIOT.2023.3269222
9	ZHOU Y W , XU R , QIAO Z R , et al. An anonymous and efficient multimessage and multireceiver certificateless signcryption scheme for VANET. IEEE Internet of Things Journal, 2023, 10 (24): 22823- 22835. doi: 10.1109/JIOT.2023.3305489
10	ZHANG J H , DONG C H , LIU Y N . Efficient pairing-free certificateless signcryption scheme for secure data transmission in IoMT. IEEE Internet of Things Journal, 2024, 11 (3): 4348- 4361. doi: 10.1109/JIOT.2023.3298840
11	HAN Y , ZHOU Y W , YANG B , et al. An efficient and secure lightweight certificateless hybrid signcryption scheme. IEEE Internet of Things Journal, 2024, 11 (7): 12252- 12265. doi: 10.1109/JIOT.2023.3332492
12	杨小东, 周航, 任宁宁, 等. 支持多密文等值测试的无线体域网聚合签密方案. 计算机研究与发展, 2023, 60 (2): 341- 350.
	YANG X D , ZHOU H , REN N N , et al. Aggregate signcryption scheme supporting multi-ciphertext equality test for wireless body area network. Journal of Computer Research and Development, 2023, 60 (2): 341- 350.
13	XU S Y , CHEN X , GUO Y , et al. Efficient and secure post-quantum certificateless signcryption with linkability for IoMT. IEEE Transactions on Information Forensics and Security, 2025, 20, 1119- 1134. doi: 10.1109/TIFS.2024.3520007
14	JIAO J T , GUO L , YU W S , et al. An efficient lattice-based heterogeneous signcryption scheme for VANETs. Concurrency and Computation: Practice and Experience, 2025, 37 (3): e8384. doi: 10.1002/cpe.8384
15	XIAO K F , CHEN X J , LI H B , et al. A fully secure lattice-based signcryption with designated equality test in standard model. Information Sciences, 2024, 658, 120015. doi: 10.1016/j.ins.2023.120015
16	YU H F , DANG N Z , YANG B . Blockchain-based insurance claim scheme using proxy signcryption from NTRU lattice. IEEE Sensors Journal, 2025, 25 (17): 33801- 33809. doi: 10.1109/JSEN.2025.3589371
17	YAN J H , LU X H , LI M Z , et al. Practical NTRU signcryption in the standard model. Entropy, 2023, 25 (12): 1651. doi: 10.3390/e25121651
18	BAI Y , HE D B , YANG Z C , et al. Efficient module-lattice-based certificateless online/offline signcryption scheme for Internet of medical things. IEEE Internet of Things Journal, 2025, 12 (14): 27350- 27363. doi: 10.1109/JIOT.2025.3562262
19	ZHENG Y L. Digital signcryption or how to achieve cost(signature & encryption) ≪ cost(signature) + cost(encryption)[EB/OL]. [2025-12-05]. https://link.springer.com/chapter/10.1007/BFb0052234.
20	AL-RIYAMI S S, PATERSON K G. Certificateless public key cryptography[EB/OL]. [2025-12-05]. https://link.springer.com/chapter/10.1007/978-3-540-40061-5_29.
21	SHOR P W. Algorithms for quantum computation: discrete logarithms and factoring[C]//Proceedings of the 35th Annual Symposium on Foundations of Computer Science. Washington D.C., USA: IEEE Press, 2002: 124-134.
22	BAVDEKAR R, JAYANT CHOPDE E, AGRAWAL A, et al. Post quantum cryptography: a review of techniques, challenges and standardizations[C]//Proceedings of the International Conference on Information Networking (ICOIN). Washington D.C., USA: IEEE Press, 2023: 146-151.
23	JEUDY C, ROUX-LANGLOIS A, SANDERS O. Phoenix: hash-and-sign with aborts from lattice gadgets[EB/OL]. [2025-12-05]. https://eprint.iacr.org/2023/446.
24	CHEN Y L, GENISE N, MUKHERJEE P. Approximate trapdoors for lattices and smaller hash-and-sign signatures[EB/OL]. [2025-12-05]. https://eprint.iacr.org/2019/1029.pdf.
25	BRAKERSKI Z , GENTRY C , VAIKUNTANATHAN V . (leveled) fully homomorphic encryption without bootstrapping. ACM Transactions on Computation Theory, 2014, 6 (3): 1- 36.
26	LANGLOIS A , STEHLÉ D . Worst-case to average-case reductions for module lattices. Designs, Codes and Cryptography, 2015, 75 (3): 565- 599. doi: 10.1007/s10623-014-9938-4
27	NIR Y, LANGLEY A. ChaCha20 and Poly1305 for IETF protocols[EB/OL]. [2025-12-05]. https://www.rfc-editor.org/info/rfc7539.
28	NAJM Z, JAP D, JUNGK B, et al. On comparing side-channel properties of AES and ChaCha20 on microcontrollers[C]//Proceedings of the IEEE Asia Pacific Conference on Circuits and Systems (APCCAS). Washington D.C., USA: IEEE Press, 2019: 552-555.
29	BARKER E, ROGINSKY A. NIST special publication 800-131A: transitioning the use of cryptographic algorithms and key lengths[EB/OL]. [2025-12-05]. https://doi.org/10.6028/NIST.SP.800-131Ar2.
30	POINTCHEVAL D, STERN J. Security proofs for signature schemes[EB/OL].[2025-12-05]. https://www.di.ens.fr/david.pointcheval/Documents/Papers/1996_eurocrypt.pdf.

[1]	WU Kun, TANG Jinyi, LI Peiqi, WANG Xiaorui, WANG Xiaoyu. Research on Lattice-Based Cryptographic Algorithms [J]. Computer Engineering, 2026, 52(9): 31-48.
[2]	LI Yan, SUN Jiuxing, CHEN Xin, XUE Yiming, LIU Jian. Compact Hardware and Software Cooperative Implementation of Aigis Digital Signature and Key Encapsulation [J]. Computer Engineering, 2026, 52(7): 277-286.
[3]	WU Xiaofeng, YUAN Peiyan. Dynamic Placement Strategy for Edge Servers Under Improved Snake Optimization Algorithm [J]. Computer Engineering, 2025, 51(6): 255-265.
[4]	ZHANG Lei, ZHAO Guangyue, XIAO Chaoen, WANG Jianxin. GPU Parallel Optimal Design and Implementation of Key Tree Generation Components for Falcon Post-Quantum Algorithms [J]. Computer Engineering, 2024, 50(9): 208-215.
[5]	Douwei LEI, Debiao HE, Min LUO, Cong PENG. High-speed Parallel Implementation of Lattice-based Cryptography Based on AVX512 [J]. Computer Engineering, 2024, 50(2): 15-24.
[6]	Bin LI, Po WU, Dan WANG, Haoyang AN, Debiao HE. A Certificateless Online/Offline Signcryption Scheme for Power Terminal Equipment [J]. Computer Engineering, 2023, 49(12): 146-151, 160.
[7]	ZHANG Xiaodong, CHEN Taowei, YU Yimin. A Blockchain Data Sharing Scheme Based on LWE-CPABE [J]. Computer Engineering, 2022, 48(10): 158-168,175.
[8]	PAN Shesu, ZHANG Jijun, ZHANG Zhaofeng. Key Generation Scheme for RFID Tag Based on SRAM PUF Stability Processing [J]. Computer Engineering, 2020, 46(9): 149-153,162.
[9]	YU Jinliang, TU Shanshan, MENG Yuan. Impersonation Attack Detection Algorithm Based on Reinforcement Learning in Mobile Fog Computing [J]. Computer Engineering, 2020, 46(1): 38-44.
[10]	ZHANG Xinmi,XU Ming. Key Generation Scheme Based on Wireless Multipath Channel Parameter [J]. Computer Engineering, 2018, 44(2): 177-181.
[11]	TANG Pengyi,LI Guochun,YU Gang,ZHONG Jun,ZHANG Yinghua,XUE Lu,ZHAO Ziyan. VPN Enhanced Power Grid Communication Security Scheme Based on QS-KMS [J]. Computer Engineering, 2018, 44(12): 13-17.
[12]	SU Qing,LI Qian,PENG Jiajin,LIU Fuchun. Wireless Key Generation Protocol for Encrypted RFID System Based on Pseudonym Logo [J]. Computer Engineering, 2017, 43(8): 173-177,183.
[13]	XIANG Xinyin. Identity-based Forward Secure Signature Scheme from Lattices [J]. Computer Engineering, 2015, 41(9): 155-158.
[14]	CAI Wen-bing, ZHANG Shui-lian. Research on Secret Key Capacity Based on Phase of Received Signals in Narrowband Channel [J]. Computer Engineering, 2014, 40(7): 118-122.
[15]	ZHOU Cai-Hua. Cryptanalysis and Improvement of Three Certificateless Signature Schemes [J]. Computer Engineering, 2012, 38(19): 114-118.

Please choose a citation manager

Content to export