SM2-PRE+: A Lightweight Pairing-Free Proxy Re-Encryption Scheme for Secure IoMT Healthcare Data Sharing

With the rapid development of the Internet of Medical Things (IoMT), wearable sensors and intelligent medical terminals continue to generate a large amount of sensitive medical data, which needs to be uploaded to the cloud platform for storage and sharing. However, IoMT devices usually have the characteristics of limited computing resources and limited energy, and it is difficult for traditional high-complexity encryption schemes to meet the requirements of security and efficiency. In addition, the existing Proxy Re-Encryption (PRE) scheme has the risk of authorization transfer, and it is difficult to achieve fine-grained and secure sharing of medical data. In response to the above problems, this paper proposes a lightweight non-pairing proxy re-encryption enhancement scheme SM2-PRE+ based on the SM2 algorithm, which is used for the secure sharing of IoMT medical sensing data. The scheme combines the SM2 elliptic curve cipher algorithm and the SM4 symmetric encryption algorithm to achieve data protection through a double-layer key structure, and it uses the re-encryption mechanism of message binding to enhance the authorization control ability. Compared with the traditional PRE scheme, the proposed scheme avoids bilinear pairing operations, reduces the computing overhead of resource-limited equipment, and supports collusion-resistant and authorization non-transferability. Security analysis shows that the scheme meets the security requirements of IND-CCA under the Random Oracle Model (ROM). Performance analysis results show that SM2-PRE+ has low computing overhead and storage burden, which is suitable for wearable medical devices, intelligent sensing terminals, and cloud-assisted IoMT data sharing scenarios.