Internet of Medical Things (IoMT) technology has gained a lot of attention. In the IoMT system, IoT devices collect and upload patient data through sensors, and doctors treat them remotely. In this process, doctors need to verify the correctness of the patient’s body data in bulk, a function that requires aggregated signature technology to achieve. However, due to the limitation that traditional verification of aggregated signatures requires access to all messages, doctors cannot efficiently verify the correctness of a particular piece of data. This will result in a significant additional verification overhead. Therefore, the efficiency problem of data batch authentication remains unsolved but imperative. In this paper, we propose an identity-based locally verifiable aggregated signature, (ID-LVEAS), that enables efficient local verification of patient data in IoMT. Building on top of both hybrid hash and inverse framework, we instantiate an ID-LVEAS scheme and prove its security in the EU-CMA security model. Based on ID-LVEAS, we further propose ID-based locally verifiable signcryption (ID-LVASC) that supports both confidentiality and integrity. We also present an instantiation and an application into IoMT from the proposed ID-LVASC. We conduct extensive experiments on the ID-LVEAS and ID-LVASC design. The results show that both cost constantly 0.01s for the verification, independent of the number of messages, which means our research has great promise for application in IoMT.

In recent years, Internet of Things (IoT) technology has gained a lot of attention. With the development of IoT technology, it comes the need for devices with different trust domains to interact and collaborate. In order to protect the security and reliability of the communication between devices in different trust domains, it raises the concerns about the technology of cross-domain authentication. Traditional cross-domain authentication methods may lead to heavy key management overhead or depend on trusted third parties, while existing blockchain-based cross-domain authentication schemes do not prevent the possibility of mischief by malicious domain managers. In this article, we design an efficient Blockchain and trusted execution environment (TEE)-assisted secure device authentication scheme for cross-domain IoT system, called blockchain and TEE-assisted authentication. Our solution solves the problem that managers are not fully trusted, which in turns protect the security and reliability in the blockchain-based cross-domain communication. Specifically, blockchain is introduced to build trust between different domains, the identity-based signatures are used to verify the identity information of devices and the TEE is introduced to prevent the possibility of mischief by domain managers. Finally, our experiments show that the introduction of TEE has greatly improved system security with a low-efficiency reduction, which proves that our scheme can achieve highly secure distributed IoT authentication.