On the Security of a Verifiable Data Aggregation Scheme for Internet of Things

Liu et al. proposed a verifiable data aggregation scheme for Internet of Things based on a certificateless aggregate signature algorithm. (DOI: 10.1109/ICC.2017.7996720, 2017 IEEE International Conference on Communications). Under the random oracle model, Liu et al.'s scheme was proved that there is unforgeability under the adaptive chosen message attack. However, we analyze the security of Liu et al.'s scheme and show that it cannot resist type of II attacks, coalition attacks and forge attacks without any secret authorization. To overcome the above security flaws, we propose a new certificateless aggregate signature scheme based on Liu et al.'s scheme. According to the security and performance analysis, the enhanced scheme improves the security and maintains the performance of the original scheme.