An Efficient ECC-Based Certificate-Based Signature Scheme with Batch Verification for IoT

Authentication and data integrity are critical security requirements in Internet of Things (IoT) environments, where resource-constrained devices generate large volumes of data. Certificate-based cryptography eliminates certificate management overhead of traditional public-key infrastructures while avoiding the key escrow problem inherited from identity-based cryptography. This paper proposes a pairing-free elliptic curve cryptography (ECC)-based certificate-based signature scheme with lightweight batch verification for general IoT environments. Unlike aggregate signature schemes that compress multiple signatures into a single short signature requiring an aggregator node, the proposed scheme performs verification of multiple signatures and supports efficient identification of invalid signatures. The construction is without escrow problem, does not require secure channels for certificate delivery, and resists both Type I and Type II adversaries in the random oracle model under the Elliptic Curve Discrete Logarithm Problem (ECDLP) assumption. Experimental results show that the proposed batch verification achieves an average speed up of approximately ۳۵-۳۷% over individual verification, reducing the signature verification overhead in dense IoT deployments.

کلیدواژه ها:

Certificate-based signature ، batch verification ، elliptic curve cryptography ، Internet of Things