English

We describe and analyze a new digital signature scheme. The new scheme is quite efficient, does not require the signer to maintain any state, and can be proven secure against adaptive chosen message attack under a reasonable intractability assumption, the so-called strong RSA assumption. Moreover, a hash function can be incorporated into the scheme in such a way that it is also secure in the random oracle model under the standard RSA assumption.

Recently, Boneh and Boyen proposed a new provably secure short signature scheme under the q-strong Diffie-Hellman assumption without random oracles. This scheme is based on bilinear map which is different from Cramer-Shoup signature scheme (which is based on the strong RSA assumption). However, Tan TC[17] showed that Boneh- Boyen scheme is subjected to key substitution attacks in the multi-user setting. In this paper, we propose a new signature scheme. We prove that the proposed scheme is provably secured against existential forgery under adaptive chosen message attack in the standard model and also secure against key substitution attacks.

The smart meters in electricity grids enable fine-grained consumption monitoring. Thus, suppliers could adjust their tariffs. However, as smart meters are deployed within the smart grid field, authentication and key establishment between smart grid parties (smart meters, aggregators, and servers) become an urgency. Besides, as privacy is becoming a big concern for smart meters, smart grid parties are reluctant to leak their real identities during the authentication phase. In this paper, we analyze the recent authentication schemes in smart grids and other applied fields, and propose an anonymous authentication and key establishment scheme between smart grid parties: FAuth. The proposed scheme is based on bilinear maps and the computational Diffie–Hellman problem. We changed the way the smart meter parties registered at Key Generation Center, making the proposed scheme robust against various potential attacks that could be launched by the Key Generation Center, as the scheme could avoid the private key of the smart meter parties from leaking to the Key Generation Center. Besides, the proposed scheme reduced the computational load, both at the smart meter side and at the aggregator side, which make it perfectly suitable for computation-constrained devices. Security proof results show the proposed scheme is secure under the BAN logic and random oracle model.

Direct Anonymous Attestation (DAA) is a scheme that enables the remote authentication of a Trusted Platform Module (TPM) while preserving the user's privacy. A TPM can prove to a remote party that it is a valid TPM without revealing its identity and without linkability. In the DAA scheme, a TPM can be revoked only if the DAA private key in the hardware has been extracted and published widely so that verifiers obtain the corrupted private key. If the unlinkability requirement is relaxed, a TPM suspected of being compromised can be revoked even if the private key is not known. However, with the full unlinkability requirement intact, if a TPM has been compromised but its private key has not been distributed to verifiers, the TPM cannot be revoked. Furthermore, a TPM cannot be revoked from the issuer, if the TPM is found to be compromised after the DAA issuing has occurred. In this paper, we present a new DAA scheme called Enhanced Privacy ID (EPID) scheme that addresses the above limitations. While still providing unlinkability, our scheme provides a method to revoke a TPM even if the TPM private key is unknown. This expanded revocation property makes the scheme useful for other applications such as for driver's license. Our EPID scheme is efficient and secure in the same security model as DAA, i.e. in the random oracle model under the strong RSA assumption and the decisional Diffie-Hellman assumption.

We introduce the notion of hierarchical group signatures. This is a proper generalization of group signatures, which allows multiple group managers organized in a tree with the signers as leaves. When opening a signature a group manager only learns to which of its subtrees, if any, the signer belongs.We provide definitions for the new notion and construct a scheme that is provably secure given the existence of a family of trapdoor permutations. We also present a construction which is relatively practical, and prove its security in the random oracle model under the strong RSA assumption and the DDH assumption.

提出了一个组件级的细粒度属性证明方案,用于向远程依赖方证明用户平台满足某种安全属性.与现有的远程证明方案相比,组件属性远程证明具有一定的语义和属性表述性等优势.该方案不但证明粒度细和扩展性强,而且属性证书的颁发、验证和撤销实现简单;本方案以组件承诺的方法保证属性证明的真实性,采用零知识证明实现平台组件的隐私性.基于强RSA假设,在Random Oracle模型下可被证明是安全的.实现的原型系统实验结果表明,组件属性证明是一种灵活、实用、高效的证明,对系统性能没有影响.

Fine-grained forward-secure signature schemes without random oracles

In this paper we show that RSA-OAEP is secure against related key attacks (RKA) in the random oracle model under the strong RSA (sRSA) assumption. The key related functions can be affine functions. Compared to the chosen ciphertext security proof of OAEP, we overcome two major obstacles: answering the decryption queries under related keys; and preventing the adversary from promoting queries that are corresponding to the same message with the challenge ciphertext. These two obstacles also exist in the RKA security proof of RSA-OAEP+ and RSA-SAEP\(^+\). By combining our technique and the chosen ciphertext security proofs, RSA-OAEP+ and RSA-SAEP\(^+\) can also be proved RKA secure. In our proof, the security of the scheme relies substantially on the algebraic property of the sRSA function.KeywordsRelated key attackRSA-OAEPStrong RSA assumptionRSA assumption

Gennaro introduced the notion of multi-trapdoor commitments which is a stronger form of trapdoor commitment schemes at CRYPTO 2004. Multi-trapdoor commitments have several cryptographic applications. For example, Gennaro proposed a conversion that makes a non-interactive multi-trapdoor commitment scheme into a noninteractive and reusable non-malleable commitment scheme and a compiler that transforms any proof of knowledge into concurrently nonmalleable one. Gennaro gave constructions of multi-trapdoor commitments, but they rely on stronger assumptions, such as the strong RSA assumption, the q-strong Diffie-Hellman assumption. In this paper, we propose a non-interactive multi-trapdoor commitment scheme from the standard RSA assumption. Thus, as a corollary of our result, we obtain a non-interactive and reusable non-malleable commitment scheme from the standard RSA assumption. Our scheme is based on theHohenberger-Waters signature scheme proposed at CRYPTO2009. Several non-interactive and reusable non-malleable commitment schemes (in the common reference string model) have been proposed, but all of them rely on stronger assumptions (e.g., strong RSA).

To fully support information management among various stakeholders in smart grid domains, how to establish secure communication sessions has become an important issue for smart grid environments. In order to support secure communications between smart meters and service providers, key management for authentication becomes a crucial security topic. Recently, several key distribution schemes have been proposed to provide secure communications for smart grid. However, these schemes do not support smart meter anonymity and possess security weaknesses. This paper utilizes an identity-based signature scheme and an identity-based encryption scheme to propose a new anonymous key distribution scheme for smart grid environments. In the proposed scheme, a smart meter can anonymously access services provided by service providers using one private key without the help of the trusted anchor during authentication. In addition, the proposed scheme requires only a few of computation operations at the smart meter side. Security analysis is conducted to prove the proposed scheme is secure under random oracle model.

In smart grid, key exchange protocols play a vital role in providing secure channels to read consumption reports from the smart meters. Thus far, several key exchange schemes have been proposed for the networked smart meters. However, for the first time, quite recently, Sha et al . have presented an interesting two-phase authentication and key agreement scheme that exclusively aims at the isolated smart meters. In their scheme, they have properly addressed the computationally constrained smart meters by offering a lightweight key exchange protocol. Nevertheless, after meticulous observation, we found that their proposed scheme cannot resist the desynchronization attack and cannot provide the perfect forward secrecy. Moreover, there are some other weaknesses in their scheme. As a result, to tackle the existing security challenges, in this paper, by utilization of the extended Chebyshev chaotic maps, we propose an efficient anonymous password-authenticated key exchange protocol that not only is free from the limitations of Sha et al .'s scheme, but also provides the anonymity. The security analysis in the random oracle model and using the widely accepted ProVerif tool besides the computational and communication costs comparison demonstrate that the proposed scheme has reached a proper level of efficiency without sacrificing the desired security properties.

The new generation of smart meters need to realize the requirements of flexible expansion of advanced applications and transplantation of application software across hardware platforms. The software platform composed of operating system and middle layer service components is conducive to reducing the cost of software and hardware development and management. This paper first introduces the research and development background of the new generation smart meter, then introduces its overall software and hardware architecture and management unit hardware development platform, then introduces the construction of development environment and development tools and the basic functions based on the software platform, and finally introduces the development practice of application software. The large-scale promotion of the new generation of smart meters has become a development trend. This paper has a good reference for the application software development based on the new generation of smart meter software platform and is conducive to promoting the large-scale application of the new generation of smart meters.

Purpose – The purpose of this paper is to study business models (BMs) for smart meters (SMs) and discuss related issues in the French institutional context. Because SM introduce deregulation on both the demand and supply sides, the authors argue that they represent an opportunity to “unlock” the system by enabling feedback to consumers. The authors discuss the empirical findings from the TICELEC (Technologies de l’Information pour une Consommation Electrique – Information Technology for Sustainable Electricity Consumption Behaviors) project which is an experimental initiative to measure potential energy savings through the implementation of SM, and to test behavioral change. Design/methodology/approach – The empirical data are from the TICELEC project and refer to a municipality in southern France. The project was designed to show the qualitative changes deriving from a new technology, and the quantitative changes in the form of real reductions in residential electricity consumption in the short and medium terms. The authors discuss these changes and their potential replication, and examine the nature of the feedback provided to users and the implications for SM BMs for France and for smart cities more generally. Findings – The authors suggest that the opportunities provided by SM have to be compared with other kinds of intervention such as self-monitoring procedures. The results show that any intervention is important for moderating the sole impact of SM. The findings on the importance of changes to “energy habits” relate mainly to “curtailment” and “low efficiency” behaviors, which represent less costly changes. The lessons learned for BM developments linked to SM include incentive systems, smart tariffs, and technologies to increase potential behavior changes and energy savings in this field. Research limitations/implications – The authors’ analysis of the content of behavioral change shows that curtailment behavior and low-efficiency behavior remain dominant when SMs are implemented. Promoting high-efficiency behaviors is always difficult for reasons of cost. Thus, SM should be combined with other measures such as incentives systems, e.g. “smart tariffication,” and new services to increase their impact. Practical implications – A proper combination of smart tariffs and SMs to reduce peaks in demand would appear to be critical to boost SM development. It will also be important to integrate SMs with smart grids to improve energy efficiency and exploit renewables and energy storage in electricity networks. Social implications – SMs are important but any interventions that motivate households to change their energy habits also help in the French context. SMs enable households to try to reduce their energy consumption but they are not the solution. Originality/value – There are no detailed results published for France. Utilities such as Electricite Reseau Distribution France, have introduced R & D programs oriented to the deployment of SM which have been tested since 2009 (e.g. see the local LINKY meter projects in Lyon and Touraine). The empirical data are from the TICELEC project and refer to a municipality in southern France. The project was designed to show the qualitative changes deriving from a new technology, and the quantitative changes in the form of real reductions in residential electricity consumption in the short and medium terms. The authors discuss these changes and their potential replication, and examine the nature of the feedback provided to users and the implications for SM BMs for France and for smart cities more generally.

The urge to manage daily energy consumption has now become a worldwide priority. The Internet of Things (IoT)-based smart meter has been widely used to monitor energy consumption in many households. LoRaWAN connectivity is confirmed to be one of the most reliable connectivity to be used as a network system for IoT use cases. It can fulfill the needs of low power, long-range, efficient, and affordable IoT technology in utility energy monitoring. LoRaWAN-based smart electric meters are designed in rural areas for monitoring and managing electric energy consumption. The smart electric meter system consists of smart kWh meters, LoRa gateway, network system, and dashboard for energy usage monitoring. The system design process consists of feature design, architecture design, data flow design, LoRa gateway site planning, and platform setup. The implementation can be concluded that LoRa can be used for smart electric meters in rural areas. A gateway can reach a maximum distance of 1.58 km, with an RSSI of -99.40 dBm ±4.56 dBm. LoRa gateway availability can reach 100% by implementing gateway protection systems. The LoRaWAN-based smart electricity meter has also proven to be costoptimized, efficiently reducing monthly costs to 92.12%.

A forward secure blind signature scheme was proposed by Duc, Cheon and Kim, in ICICS 2003. The security of the scheme was proved to be equivalent to the strong RSA assumption in the random oracle model. In this paper we present an attack to the scheme by forging valid signatures with public keys only. The attack is so efficient that forging a valid signature needs less computation than legally generating a signature, even considering only the user side. Our result implies that the security proof of the scheme must be invalid. Furthermore we point out the fault of the proof and explain why it invalidates the proof.