A lightweight certificateless edge-assisted encryption method and system

Abstract

The present invention discloses a lightweight certificateless edge-assisted encryption method and system thereof. The method is aimed at data transmission between a terminal device with limited IoT resources and a data user. The IoT device uses the receiver's public key PK r and the processing parameter σ pre-calculated by the edge server ES to encrypt the message, and then pass the encrypted message to the receiver; and the receiver uses his own private key SK r Decryption is performed and the plaintext is restored. The present invention aims to enhance the encryption capability of IoT devices without involving data encryption operations, thereby ensuring security and performance in the encryption process. The proposed CL‑EAED scheme ensures the confidentiality of data by implementing IND‑CCA security in the standard model (SM). Comparative analysis shows that the scheme of the present invention has more advantages than other certificateless encryption schemes.

Description

Technical Field

[0001] The present invention relates to the field of Internet of Things encryption technology, and in particular to a lightweight certificateless edge-assisted encryption method and system suitable for Internet of Things (IoT) devices. Background Art

[0002] Internet of Things (IoT) devices provide modern society with a wealth of value-added and user-friendly applications: smart homes, telemedicine, environmental monitoring and energy management, providing huge potential and opportunities in various fields. With the development of IoT technology, the number of IoT devices connected to the IoT network will show explosive growth. This unprecedented scale of connection will not only generate a large amount of data, but also put forward significant demands on data processing and analysis capabilities.

[0003] In the prior art, Chinese patent documents such as CN109361520A and CN111552949A mainly focus on dynamic encryption and data security of IoT devices. Although these methods improve security to a certain extent, they may not fully consider the limitations of IoT devices in computing resources and storage capabilities. Especially for resource-constrained devices, complex encryption algorithms and frequent key exchanges may increase the burden on the device and affect its performance and response speed.

[0004] The solution disclosed in CN111552949A relies on the network environment parameters between the device gateway and the IoT device to achieve encryption and verification. This method may perform poorly when the network environment is unstable or there is interference, resulting in reduced reliability of the encryption process. In addition, the high dependence on the network status may also lead to the failure of the encryption and decryption process when the network connection is unstable.

[0005] Chinese patent document CN117951718A proposes an authorization control system based on asymmetric encryption. Although double encryption improves security, this method may lack flexibility and ease of use. Especially for IoT devices that require frequent authorization and activation operations, the complex encryption and decryption process may increase the difficulty of use for users and affect the user experience.

[0006] Some scholars have proposed a new edge computing scheme that can process the large amount of data generated by IoT devices in real time. In this scheme, a nearby edge server processes the collected user data locally and then uploads the processed data to a cloud service center for storage or further analysis, thereby providing specific services for IoT devices. In this cloud-edge collaboration framework, resource-constrained devices are an important part of the IoT. These devices generate a large amount of different types of data that affect user privacy. Therefore, protecting data privacy and ensuring secure sharing of resource-constrained devices in the IoT is a huge challenge.

[0007] The advent of edge computing strengthens the Internet of Things (IoT) ecosystem by providing local computing resources, enabling faster and more secure data processing, enabling rapid response to user needs, while reducing the computing requirements of traditional centralized cloud models. However, many traditional cloud-based encryption schemes are not suitable for IoT environments due to the resource limitations of IoT devices. Therefore, a secure and efficient encryption method is needed to protect the data generated by IoT devices. Summary of the invention

[0008] The purpose of the present invention is to provide a lightweight certificateless edge-assisted encryption method and system thereof to overcome the deficiencies of the prior art.

[0009] Based on the first main aspect of the present invention, a lightweight certificateless edge-assisted encryption method is provided, which is mainly used in the data transmission between the resource-constrained terminal device of the Internet of Things and the data user, through the IoT device using the public key PK of the receiver r and the processing parameter σ pre-calculated by the edge server ES to encrypt the message, and then pass the encrypted message to the receiver; and the receiver uses his own private key SK r Decrypt and restore the plaintext.

[0010] The present invention is designed for point-to-point data transmission in an Internet of Things (IoT) environment. The core advantage of this solution is that it can significantly reduce the computational burden of IoT devices during the encryption process. By utilizing the processing parameter σ pre-calculated by the edge server ES, combined with the public key of the receiver, the IoT device can efficiently complete the encryption of the message. This method not only improves the efficiency of the encryption process, but also reduces the resource consumption of IoT devices by transferring operations with relatively large computational overhead to the edge server. Overall, this solution optimizes the use of computing resources without sacrificing security, and is particularly suitable for IoT devices with limited computing power, reflecting substantial progress and innovation in the field of secure transmission of the IoT.

[0011] Specifically, the method includes at least the following steps:

[0012] The method comprises at least the following steps:

[0013] S1, Public parameter and master key generation: Given security parameters, the key generation center KGC selects two groups with prime orders, generates corresponding generators and hash functions, sets the plaintext space, and generates the master key and master public key;

[0014] S2, partial private key generation: given the public parameters and the recipient's identity, KGC generates a partial private key and sends it to the data recipient ID through a secure channel r ;

[0015] S3, key generation: data recipient ID r After receiving part of the private key, generate your own private key and public key;

[0016] S4, edge-assisted encryption: When the edge server ES receives the encryption request from the IoT device, it calculates the pre-encryption processing parameters and sends them to the IoT device to assist it in completing the encryption operation;

[0017] S5, encryption operation: The IoT device uses its own private key and preprocessing parameters to encrypt the message to be sent, generates an encrypted message and sends it to the data recipient;

[0018] S6, decryption operation: After receiving the encrypted message, the data recipient uses its private key to decrypt and verify the integrity and authenticity of the message.

[0019] In the present invention, the key generation step ensures the complexity of the key space by selecting groups and generators with prime orders, thereby increasing the difficulty of cracking. The generation of the master key and the master public key provides a secure cornerstone for the system and ensures the security of the entire encryption system. The effective preprocessing parameter generation generates preprocessing parameters for each IoT device, including a random private key and a public key based on the device identity, which not only provides a unique identity for the device, but also enhances the randomness and unpredictability of the key, thereby enhancing the security of the system.

[0020] In addition, the auxiliary role of the edge server ES significantly reduces the computing burden of IoT devices. By calculating the pre-encryption processing parameters and sending them to the IoT device, ES makes the encryption process more efficient while maintaining the security of the operation. The IoT device uses dynamic keys and pre-processing parameters to encrypt the message. This step not only reduces the computing pressure of the device, but also ensures the confidentiality and integrity of the data during transmission by generating and uploading encrypted messages. The receiving IoT device uses its private key to decrypt. This process simplifies the decryption process and verifies the integrity and authenticity of the message through the hash function, ensuring the security and reliability of data transmission.

[0021] In one embodiment, as a further preferred solution, the key generation step includes:

[0022] Choose two groups G1 and G2 of prime order q, and a bilinear map e: G1×G1→G2;

[0023] Choose P and Q as generators of G1, and choose three cryptographic hash functions: H1 and H2: H3:

[0024] set up As a plaintext space;

[0025] choose As the master key, and calculate the master public key P pub =xP.

[0026] Broadcast system parameters PP = (G1, G2, q, P, Q, P pub ,H1,H2,H3).

[0027] In one embodiment, as a further preferred solution, the preprocessing parameter generation step includes: given a master key msk and an identity ID i ∈{0,1} * As input, KGC performs the following steps:

[0028] Random Selection And calculate R i =r i P;

[0029] Calculate h i =H1(ID i ,R i ) and d i =r i +h i x mod q;

[0030] Finally, D i =(R i ,d i ) is transmitted to device users DUs.

[0031] In one embodiment, as a further preferred solution, the edge-assisted encryption step includes:

[0032] Given system parameters and a preprocessed public key, with identity ID i The device user DUs randomly generate a secret value And set SK i =(t i ,D i ) as its private key; then calculate T i =t i P, and set PK i =(T i ,R i ) as its public key;

[0033] To have an ID r The receiver sends a message m∈M, given the receiver’s PK r and ID rAs input, where ID r ∈{ID i}, PK r ∈{PK i}, the edge server ES performs the following steps:

[0034] Calculate h r =H1(ID r ,R r ).σ1=e(R r +h r P pub ,Q),σ2=e(T r ,Q);

[0035] The pre-encryption processing parameter σ'=(σ1, σ2) is sent to the IoT device.

[0036] In one embodiment, as a further preferred solution, the encryption operation step includes:

[0037] The IoT device receives a tuple σ' = (σ1, σ2); then it performs the following operations:

[0038] Random Selection

[0039] Calculate the C, C', S and k required for encryption, where S = sP, k = H2(m, ω, S, ID r ,PK r ),

[0040] Upload δ = (C, S, k) to the receiver or edge server ES as an encrypted IoT message.

[0041] In one embodiment, as a further preferred solution, the decryption operation step includes:

[0042] When the receiver receives a ciphertext δ = (C, S, k), it performs the following steps:

[0043] calculate

[0044] Verify the equation H2(m,ω,S,ID r ,PK r )=k. If the equation is true, m is regarded as the message decrypted by IoT; otherwise, the message is rejected and corresponding security measures are taken.

[0045] According to a second main aspect of the present invention, a lightweight certificateless edge-assisted encryption system is provided, comprising at least:

[0046] A key generation center KGC, used to generate master keys and master public keys, as well as pre-processing parameters based on device identities;

[0047] IoT devices that perform cryptographic operations.

[0048] Edge server ES, used to assist IoT devices in performing encryption operations;

[0049] A data user terminal is used to perform decryption operations.

[0050] According to a third main aspect of the present invention, a computer-readable storage medium is provided, on which a computer program is stored, and when the program is executed, the lightweight certificateless edge-assisted encryption method as described above is implemented.

[0051] Based on the fourth main aspect of the present invention, a hardware device for lightweight certificateless edge-assisted encryption is provided, including a data storage device, a processor, and a computer program stored in the data storage device and executable on the processor, wherein when the processor executes the program, the lightweight certificateless edge-assisted encryption method as described above is implemented.

[0052] Advantages and beneficial effects of the present invention:

[0053] This paper proposes a lightweight certificate-assisted edge-enhanced encryption method (LC-EAED) that supports edge-assisted architecture. This method is particularly suitable for IoT devices and can achieve efficient point-to-point data transmission encryption with the assistance of edge servers. Compared with traditional centralized encryption methods, edge-assisted architecture can reduce the computational burden of IoT devices during data encryption, while improving data processing speed and response time.

[0054] In the present invention, the edge server pre-calculates and provides processing parameters, and the IoT device can significantly reduce the amount of calculation required when performing encryption operations. This improvement in computing efficiency, especially on resource-constrained IoT devices, makes the present invention have obvious advantages over the prior art when processing large amounts of data.

[0055] The present invention implements IND-CCA security in the Standard Model (SM), which means that data confidentiality can be guaranteed even in the face of chosen ciphertext attacks. By using the receiver's public key and preprocessing parameters calculated by the edge server, the present invention enhances the security of data transmission and provides a higher level of security protection than the prior art.

[0056] In view of the limited resource characteristics of IoT devices, the present invention optimizes resource utilization and communication costs through edge server-assisted encryption. Compared with traditional encryption schemes, the present invention reduces the resource consumption of IoT devices during key generation, encryption and decryption, while reducing communication overhead, which is particularly important for large-scale IoT systems.

[0057] The present invention is not only innovative in theory, but also shows high practicality and flexibility in practical applications. With the assistance of edge servers, the present invention can adapt to different network environments and device conditions, providing a data encryption solution for IoT devices that is both secure and efficient. In addition, the design of the present invention allows it to be seamlessly integrated with existing IoT architectures and protocols, further improving its applicability in the real world. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, without paying creative labor, other drawings obtained based on these drawings still belong to the scope of the present invention.

[0059] Figure 1 The comparison of communication overhead between one embodiment of the present invention and five prior arts is shown;

[0060] Figure 2 The comparison of encryption time of Raspberry Pi in one embodiment of the present invention and five prior arts is shown;

[0061] Figure 3 The comparison of encryption time in a personal computer between one embodiment of the present invention and five prior arts is shown;

[0062] Figure 4 A trend chart of encryption cost and number of encrypted ciphertexts in one embodiment of the present invention and five prior arts is shown. DETAILED DESCRIPTION

[0063] The preferred embodiments of the present invention will be described in detail below so that the purpose, features and advantages of the present invention can be more clearly understood. It should be understood that the following embodiments are not intended to limit the scope of the present invention, but are only intended to illustrate the essential spirit of the technical solution of the present invention.

[0064] In the following description, certain specific details are set forth for the purpose of illustrating the various disclosed embodiments to provide a thorough understanding of the various disclosed embodiments. However, those skilled in the relevant art will recognize that the embodiments may be practiced without one or more of these specific details. In other cases, well-known devices, structures, and techniques associated with the present application may not be shown or described in detail to avoid unnecessarily obscuring the description of the embodiments.

[0065] References throughout the specification to "one embodiment" or "an embodiment" indicate that a particular feature, structure, or characteristic described in connection with the embodiment is included in at least one embodiment. Thus, the appearances of "in one embodiment" or "in an embodiment" in various places throughout the specification are not necessarily all referring to the same embodiment. Furthermore, the particular features, structures, or characteristics may be combined in any manner in one or more embodiments.

[0066] Embodiment 1:

[0067] This embodiment builds a specific CL-EAED scheme that supports edge-assisted architecture. The scheme of this embodiment is built for point-to-point data transmission. The IoT device uses the public key of the recipient and the processing parameters pre-calculated by the edge server ES to encrypt the message and then pass the ciphertext to the recipient. The recipient uses his own private key to decrypt and recover the plaintext.

[0068] The complete solution of this embodiment includes the following steps:

[0069] (1)Settings(1 λ ): Given security parameter 1 λ As input, KGC then performs the following steps.

[0070] a) Choose two groups G1 and G2 of prime order q, and a bilinear map e: G1×G1→G2.

[0071] b) Choose P and Q as the two generators of G1, and choose three cryptographic hash functions:

[0072] H1:

[0073] H2:

[0074] H3:

[0075] c) Set As plaintext space.

[0076] d) Select As the master key, and calculate the master public key Ppub = xP.

[0077] e) Broadcast system parameters PP = (G1, G2, q, P, Q, P pub , H1, H2, H3).

[0078] (2) Extract the preprocessed public key (PP, msk, ID i ): Given a master key msk and an identity ID i ∈{0, 1} * As input, KGC performs the following steps:

[0079] a) Random selection And calculate R i =r i P.

[0080] b) Calculate h i =H1(ID i , R i ) and d i =r i +h i x mod q. Here, mod q is a mathematical expression used to represent the modulo operation, where q is a prime number. In cryptography and other mathematical fields, this expression is used to indicate the remainder after dividing a number by q.

[0081] c) Safely place D i =(R i , d i ) is transmitted to device users DUs.

[0082] (3) Generate secret value SV(PP, D i ): With identity ID i DUs are randomly selected

[0083] (4) Set the secret key SK(PP, t i , ID i ): With identity ID i DUs set SK i =(t i , D i ) as its private key.

[0084] (5) Generate user public key UPK(PP, t i ): With identity ID i DUs calculation T i =t i P, and set PK i =(T i , R i ) as its public key.

[0085] (6) Edge-assisted encryption (PP, PK r , ID r ): To send an ID r The receiver sends a message m∈M. Given the receiver’s PK r and ID r As input, where ID r ∈{ID i}, PK r ∈{PK i}, the edge server ES performs the following steps:

[0086] a) Calculate h r =H1(ID r , R r ) Calculate σ1 = e(R r +h r P pub , Q), σ2=e(T r , Q).

[0087] b) Send the pre-encryption processing parameter σ′=(σ1, σ2) to the IoT device.

[0088] (7) Encryption (PP, m, PK r ,σ′,ID r ): A tuple σ′=(σ1,σ2) is received. Usually, the IoT device encrypts multiple messages to be sent to the recipient, and the edge server only needs to assist in encryption once to complete the whole process. The IoT device then performs the following operations:

[0089] a) Random selection

[0090] b) Calculate S = sP, k = H2 (m, ω, S, ID r , PK r ), This calculation process is the IoT device encryption process.

[0091] c) Upload δ = (C, S, k) as an encrypted IoT message.

[0092] Note that the IoT device sends the recipient ID r Send one or more messages. ES calculates preprocessing parameters σ′ to assist the encryption phase. σ′ can be reused to encrypt data.

[0093] (8) Decryption (PP, δ, SK r , ID r ): When a device user DU receives a ciphertext δ = (C, S, k), it performs the following steps:

[0094] a) Calculation This calculation process is the data user's decryption process.

[0095] b) Verify the equation H2(m, ω, S, ID r , PK r )=k. If the equality holds, m is regarded as an encrypted message of IoT; otherwise, terminate.

[0096] In order to verify the superiority of the technical solution of the present invention, the solution of the present invention is compared with five prior art solutions in the following experiment. Among them, the five prior art solutions are:

[0097] 1. G. Premsankar, M.D. Francesco, and T. Taleb, “Edge Computing for the Internet of Things: A Case Study,” IEEE Internet Things J, Vol. 5, No. 2, pp. 1275-1284, 2018, hereinafter referred to as HLC.

[0098] 2. YHH Wang, JK Liu and SSM Chow, “Certificateless public key cryptography against malicious KGC attacks in the standard model”, Journal of Computer Science (J. Univers. Comput. Sci), Vol. 14, No. 3, pp. 463-480, 2008, hereinafter referred to as CWJZ scheme.

[0099] 3. W. Yang, J. Weng, and F. Zhang, “A New Standard Model for Certificateless Public Key Cryptography to Prevent Malicious KGC Attacks,” 19th International Conference on Information and Communications Security (ICICS 2017), hereinafter referred to as the CT scheme.

[0100] 4. S. Canard and V.C. Trinh, “Standard Model for Certificateless Public-Key Cryptography”, Fundamenta Informaticae, Vol. 161, No. 3, p. 219, 2018, hereinafter referred to as DXH scheme.

[0101] 5. L. Deng, T. Xia, and X. He, “Provably secure certificateless encryption schemes in the standard model,” KSII Trans. Internet Inf. Syst, vol. 14, no. 6, pp. 2534–2553, hereinafter referred to as the ZDT scheme.

[0102] like Figure 1As shown, in terms of communication overhead, compared with the five schemes, the scheme proposed in the present invention significantly reduces the communication cost of the ciphertext generation stage, which is particularly beneficial for lightweight IoT devices.

[0103] Through the above analysis and comparison, the LC-EAED scheme of the present invention achieves strong security in the standard model (SM) with low communication cost and high computational efficiency. It is worth mentioning that although the scheme proposed in the present invention is based on bilinear pairing operation, this operation can be calculated by the edge server during the encryption process, thereby greatly improving the computational efficiency.

[0104] In order to confirm the applicability of the solution of the present invention in real-world scenarios, the present invention designed experiments based on specific scenarios.

[0105] In the experiment, the present invention uses two computing devices: a resource-constrained Raspberry Pi (RP) (Raspbian system, Cortex-A72 (ARM v8) 1.5GHz CPU and 8-GB RAM) and a powerful personal computer (PC) (Windows 11 system, Intel Core i5-9500 CPU and 8-GB RAM). The RP is used to simulate the data sender in the IoT environment according to the scheme of the present invention, while the PC is used to simulate the data user.

[0106] The experimental results are Figure 2 , Figure 3 , Figure 4 Displayed in.

[0107] The experiment simulated the implementation of the encryption algorithm executed by RP and the decryption algorithm executed by PC, focusing only on some costly computing operations. Each algorithm was executed 100 times in the experiment, and then the average time consumed by each scheme in a single run was recorded.

[0108] The average encryption and decryption times of the proposed scheme executed on different devices are only 13.15 milliseconds and 3.39 milliseconds, which are better than other schemes.

[0109] Compared with a certain scheme, the computational overhead of the encryption phase is increased by 89%. The execution time of the encryption algorithm executed on the Raspberry Pi (RP) and the decryption algorithm executed on the personal computer (PC) is shown in Figure 2 and Figure 3 shown.

[0110] IoT devices usually need to process a large amount of data in a real-world environment. When an IoT device sends a message to the same recipient, the edge server pre-processes the high-overhead calculations in the encryption phase, and the pre-processed results can be used for data encryption. As the amount of encrypted data increases, the edge server only needs to calculate once and then can be reused. This method greatly improves the efficiency of the solution of the present invention.

[0111] from Figure 4 In the present invention, it can be seen that when the lightweight device performs the encryption phase and the number of encrypted ciphertexts is between 1 and 50, the encryption time cost of each scheme ranges from 29.2 milliseconds to 1460 milliseconds, and the encryption time of the scheme of the present invention ranges from 13.15 milliseconds to 685 milliseconds. Obviously, when the number of ciphertexts gradually increases, the scheme of the present invention has a more obvious advantage than the other five schemes.

[0112] In summary, compared with the performance of existing certificateless encryption schemes, the CL-EAED proposed in this invention has lightweight computational overhead and low communication cost.

[0113] The matters not described in detail in the present invention are all known technologies to those skilled in the art.

[0114] The above shows and describes the basic principles and main features of the present invention and the advantages of the present invention. It should be understood by those skilled in the art that the present invention is not limited to the above embodiments. The above embodiments and descriptions are only for explaining the principles of the present invention. Without departing from the spirit and scope of the present invention, the present invention may have various changes and improvements, which fall within the scope of the present invention to be protected. The scope of protection of the present invention is defined by the attached claims and their equivalents.

Claims

1. A lightweight certificateless edge-assisted encryption method, characterized in that: In the data transmission between the resource-constrained terminal device of the IoT and the data user, the public key PK of the receiver is used by the IoT device. r and the processing parameter σ pre-calculated by the edge server ES to encrypt the message, and then pass the encrypted message to the receiver; and the receiver uses his own private key SK r Decrypt and restore the plaintext; The method comprises at least the following steps: S1, Public parameter and master key generation: Given security parameters, the key generation center KGC selects two groups with prime orders, generates corresponding generators and hash functions, sets the plaintext space, and generates the master key and master public key; S2, partial private key generation: Given the public parameters and the recipient identity, KGC generates a partial private key and sends it to the data recipient ID through a secure channel. r ; S3, key generation: data recipient ID r After receiving part of the private key, generate your own private key and public key; S4, edge-assisted encryption: When the edge server ES receives the encryption request from the IoT device, it calculates the pre-encryption processing parameters and sends them to the IoT device to assist it in completing the encryption operation; S5, encryption operation: The IoT device uses its own private key and preprocessing parameters to encrypt the message to be sent, generates an encrypted message and sends it to the data recipient; S6, decryption operation: After receiving the encrypted message, the data recipient uses its private key to decrypt and verify the integrity and authenticity of the message; The key generation and edge-assisted encryption steps include: Given system parameters and a preprocessed public key, with identity ID i The device user DUs randomly generate a secret value And set SK i =(t i ,D i ) as its private key; calculate T i =t i P, and set PK i =(T i ,R i ) as its public key; To have an ID r The receiver sends a message m∈M, given the receiver’s PK r and ID r As input, where ID r ∈{ID i }, PK r ∈{PK i }, the edge server ES performs the following steps: Calculate h r =H1(ID r ,R r ).σ1=e(R r +h r P pub ,Q),σ2=e(T r ,Q); Send the pre-encryption processing parameter σ'=(σ1,σ2) to the IoT device; The encryption operation steps include: The IoT device receives a tuple σ' = (σ1, σ2); then it performs the following operations: Random Selection Calculate C, C', S and k required for encryption, where S = sP, k = H2(m, ω, S, ID r ,PK r ), Upload δ = (C, S, k) as an encrypted IoT message to the receiver or edge server ES; The decryption operation steps include: When the receiver receives a ciphertext δ = (C, S, k), it performs the following steps: calculate Verify the equation H2(m,ω,S,ID r ,PK r )=k. If the equation is true, m is regarded as the message decrypted by IoT; otherwise, the message is rejected and corresponding security measures are taken.

2. The lightweight certificateless edge-assisted encryption method according to claim 1, characterized in that: The steps of generating the public parameters and the master key include: Choose two groups G1 and G2 of prime order q, and a bilinear map e: G1×G1→G2; Select P and Q as generators of G1, and choose three cryptographic hash functions: H1 and set up As a plaintext space; choose As the master key, and calculate the master public key P pub = xP; Broadcast system parameters PP = (G1, G2, q, P, Q, P pub ,H1,H2,H3).

3. The lightweight certificateless edge-assisted encryption method according to claim 1, characterized in that: The steps of generating a partial private key include: given a master key msk and an identity ID i ∈{0,1} * As input, KGC performs the following steps: Random Selection And calculate R i =r i P; Calculate h i =H1(ID i ,R i ) and d i =r i +h i x mod q; Finally, D i =(R i ,d i ) is transmitted to device users DUs.

4. A lightweight certificateless edge-assisted encryption system, characterized in that: A lightweight certificateless edge-assisted encryption method for implementing any one of claims 1 to 3, comprising at least: A key generation center KGC, used to generate master keys and master public keys, as well as pre-processing parameters based on device identities; IoT devices, used to perform cryptographic operations; Edge server ES, used to assist IoT devices in performing encryption operations; A data user terminal is used to perform decryption operations.

5. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed, the lightweight certificateless edge-assisted encryption method as described in any one of claims 1 to 3 is implemented.

6. A hardware device for lightweight certificateless edge-assisted encryption, comprising a data storage device, a processor, and a computer program stored in the data storage device and executable on the processor, characterized in that: When the processor executes the program, the lightweight certificateless edge-assisted encryption method as described in any one of claims 1 to 3 is implemented.

Images