The interconnected environment of the Internet of Vehicles (IoV) facilitates the development of various low-carbon and secure location-based services. However, sharing data with semi-trusted service providers poses serious security risks. In particular, it can threaten the confidentiality of past messages after the leakage of the user’s key. In this article, we propose an efficient and forward-secure conditional privacy-preserving scheme for IoV, namely, EFSC. We construct a cryptographic method with forward secrecy in the proposed EFSC scheme, which ensures the confidentiality of past messages even after the user’s secret key has been compromised. This method incorporates key derivation functionality and efficiently addresses the complex certificate management issue with the assistance of smart contracts. Additionally, the designed smart contract facilitates authentication. We analyze and prove that the proposed EFSC scheme satisfies the proposed privacy and security requirements with better security performance. We use Goerli, an Ethernet test network, to deploy customized smart contracts to prove its feasibility. Furthermore, the proposed EFSC scheme exhibits high-index generation and pairing efficiency and realizes less computational and communication overhead. Compared with the existing schemes, its computational overhead in message signing, signature verification, and user revocation can be reduced by up to 95.61%, 36.53%, and 67.01%, respectively. Moreover, the communication overhead for initiating a location service query is only 0.3760 kB. These results show that the proposed EFSC scheme has certain advantages regarding efficiency and security.

With the development of new-generation mobile communication technology, the Internet of Vehicles is playing an increasingly important role in people’s lives. However, the sensitive information contained in its “data fingerprinting” raises many privacy and security concerns. To better protect the location privacy of users on the Internet of Vehicles, this article proposes a collaborative service-based privacy protection scheme for the Internet of Vehicles. In this scheme, each requesting user first initiates a location service query by generating a pairing index of the location points set. Then a customized pairing result threshold is used to determine the collaborating users that can participate in the service response. And in the process, the location privacy of users is secured by location point generalization and encryption. In addition, redundant location service recommendations are eliminated by the proposed repeatability tests. Security analysis and experiments show that this scheme has good performance and anti-privacy leakages, forgery attacks, collusion attacks, etc.

Data management services provided by the public cloud can economize the enterprise’s local storage costs, and meanwhile, realize data sharing among the enterprise. Corporate users, however, usually have concerns about the security and privacy of their data stored in the public cloud. Searchable encryption has been used as a secure method for enterprise users in the public cloud to share data via keyword search for many years. Nevertheless, conventional search and encryption primitives are challenging to realize several critical functions flexibly, such as key update, user revocation, lightweight computation, and low communication overhead for users, which will impede their widespread application. Besides, it may cause single-key-exposure security concerns by using untrusted devices. To address these issues, we present a dynamic consensus committee-based for secure data sharing with authorized multi-receiver searchable encryption (called DCC-SE), which exploits the blockchain dynamic committee to eliminate a single-key-exposure problem and enables fast keyword search without pairing and dynamic user management. The proposed DCC-SE scheme enjoys minor computation and communication overheads. It maintains a constant ciphertext size as the receiver increases. Furthermore, it periodically supports secure key and ciphertext updating and has been proven secure against chosen plaintext attacks and the chosen keyword guessing attacks under the random oracle model. The performance evaluation results show that DCC-SE has more feasibility and higher efficiency than the previous public key with keyword search(PEKS) schemes through theoretical analysis and simulation studies.