PCL-BPRE : privacy-preserving certificateless-based broadcast proxy re-encryption for data sharing in cloud-based IIoT

Zhou, Y. and Zhao, T. and Jing, Z. and Meng, W. and Gu, C. and Hu, H. (2026) PCL-BPRE : privacy-preserving certificateless-based broadcast proxy re-encryption for data sharing in cloud-based IIoT. Future Generation Computer Systems, 178: 108307. ISSN 0167-739X

Abstract

With the rapid advancement of industrial automation and intelligent manufacturing, an increasing volume of sensing data generated by Industrial Internet of Things (IIoT) devices is being transmitted to cloud platforms. Identity-based broadcast proxy re-encryption (IB-BPRE), as an efficient cryptographic mechanism, has been deployed in IIoT data-sharing environments. However, existing IB-BPRE schemes are susceptible to identity privacy breaches of data recipients. Furthermore, IIoT devices are structurally vulnerable to key escrow compromises resulting from the exposure of encrypted key. To mitigate these critical security challenges, we propose a privacy-preserving certificateless-based broadcast proxy re-encryption scheme for data sharing in cloud-based IIoT, and formally prove its security against chosen ciphertext attacks under the random oracle model. The PCL-BPRE scheme employs a Lagrange interpolation polynomial to obfuscate the identity information of data receivers. Additionally, it integrates certificateless encryption to eliminate the inherent key escrow dependency in IB-BPRE, thereby preventing unauthorized disclosure of private keys in the event of a compromised key generation center. Experimental results validate that the proposed scheme achieves both strong practical feasibility and computational efficiency in IIoT data-sharing.