{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,20]],"date-time":"2026-08-20T05:24:00Z","timestamp":1787203440873,"version":"build-2736575974"},"reference-count":32,"publisher":"MDPI AG","issue":"16","license":[{"start":{"date-parts":[[2026,8,18]],"date-time":"2026-08-18T00:00:00Z","timestamp":1787011200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["62302152"],"award-info":[{"award-number":["62302152"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"award":["62302152"],"award-info":[{"award-number":["62302152"]}],"id":[{"id":"https:\/\/ror.org\/01h0zpd94","id-type":"ROR","asserted-by":"publisher"}]},{"name":"Henan Provincial Key Scientific and Technological Project","award":["242102211074"],"award-info":[{"award-number":["242102211074"]}]},{"name":"Zhengzhou Municipal R&D Special Fund-Supported Research Project","award":["22ZZRDZX30"],"award-info":[{"award-number":["22ZZRDZX30"]}]},{"name":"Key Laboratory of Grain Information Processing and Control, Ministry of Education","award":["KFJN2022017"],"award-info":[{"award-number":["KFJN2022017"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>IoT-connected healthcare sensor networks require authenticated and privacy-preserving data exchange among wearable sensors, mobile medical terminals, edge gateways, cloud servers, and medical institutions. Existing authentication schemes for healthcare IoT often bind signatures directly to user identities, exposing sensitive personal or institutional information and imposing heavy verification costs on resource-constrained sensing devices. To address this problem, we propose a fine-grained and flexible dual authentication scheme for healthcare sensor networks. In the proposed scheme, health data and diagnoses are signed with a fresh signing key and a fine-grained access control policy each time, so that the signer identity remains hidden while authorized entities can still modify permitted parts of signed data. No entity other than an authorized entity can trace a malicious signer or modify signed data without changing the data source. To support lightweight verification in sensor-edge-cloud deployments, we further present a verifiable outsourced authentication scheme that outsources time-consuming pairing operations to cloud servers; the online verification process then requires only six multiplication operations. As a fundamental technical component, we present a practical attribute-based sanitizable signature with shorter signature and key lengths and more efficient signing and signature-changing operations than the state-of-the-art policy-based sanitizable signature (P3S). Formal security analysis and experiments demonstrate the security and practicality of the proposed scheme for privacy-preserving healthcare sensing and medical data exchange.<\/jats:p>","DOI":"10.3390\/s26165223","type":"journal-article","created":{"date-parts":[[2026,8,18]],"date-time":"2026-08-18T12:09:32Z","timestamp":1787054972000},"page":"5223","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Fine-Grained and Flexible Dual Authentication for IoT-Connected Healthcare Sensor Networks"],"prefix":"10.3390","volume":"26","author":[{"given":"Huiying","family":"Hou","sequence":"first","affiliation":[{"name":"The Key Laboratory of Grain Information Processing and Control, Henan University of Technology, Zhengzhou 450001, China"},{"name":"The School of Artificial Intelligence and Big Data, Henan University of Technology, Zhengzhou 450001, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jianyu","family":"Miao","sequence":"additional","affiliation":[{"name":"The School of Artificial Intelligence and Big Data, Henan University of Technology, Zhengzhou 450001, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yucong","family":"Ma","sequence":"additional","affiliation":[{"name":"The School of Artificial Intelligence and Big Data, Henan University of Technology, Zhengzhou 450001, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xuerui","family":"Gan","sequence":"additional","affiliation":[{"name":"School of Electrical Engineering, Henan University of Technology, Zhengzhou 450001, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xuefeng","family":"Li","sequence":"additional","affiliation":[{"name":"The School of Artificial Intelligence and Big Data, Henan University of Technology, Zhengzhou 450001, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2026,8,18]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"1645","DOI":"10.1016\/j.future.2013.01.010","article-title":"Internet of Things (IoT): A vision, architectural elements, and future directions","volume":"29","author":"Gubbi","year":"2013","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"2","DOI":"10.1109\/MIS.2014.52","article-title":"Smart and connected health","volume":"29","author":"Leroy","year":"2014","journal-title":"IEEE Intell. Syst."},{"key":"ref_3","first-page":"13","article-title":"A semantic similarity evaluation for healthcare ontologies matching to HL7 FHIR resources","volume":"270","author":"Kiourtis","year":"2020","journal-title":"Stud. Health Technol. Inform."},{"key":"ref_4","unstructured":"Kai, S., and Slamanig, D. (2000). Policy-based sanitizable signatures. Cryptographers\u2019 Track at the RSA Conference, Springer International Publishing."},{"key":"ref_5","first-page":"159","article-title":"Sanitizable signatures","volume":"Volume 3679","author":"Ateniese","year":"2005","journal-title":"European Symposium on Research in Computer Security"},{"key":"ref_6","first-page":"444","article-title":"Unlinkability of sanitizable signatures","volume":"Volume 6056","author":"Brzuska","year":"2010","journal-title":"International Workshop on Public Key Cryptography"},{"key":"ref_7","first-page":"258","article-title":"Trapdoor sanitizable signatures and their application to content protection","volume":"Volume 5037","author":"Canard","year":"2008","journal-title":"International Conference on Applied Cryptography and Network Security"},{"key":"ref_8","first-page":"117","article-title":"Accountable trapdoor sanitizable signatures","volume":"Volume 7863","author":"Lai","year":"2013","journal-title":"International Conference on Information Security Practice and Experience"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Miyazaki, K., Hanaoka, G., and Imai, H. (2006). Digitally signed document sanitizing scheme based on bilinear maps. 13th ACM Conference on Computer and Communications Security 2006, Association for Computing Machinery.","DOI":"10.1145\/1128817.1128868"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"80","DOI":"10.1007\/978-3-540-89641-8_6","article-title":"Sanitizable signatures revisited","volume":"Volume 5339","author":"Yuen","year":"2008","journal-title":"Proceedings of the 7th International Conference on Cryptology and Network Security"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Goyal, V., Pey, O., Sahai, A., and Waters, B. (2006). Attribute-based encryption for fine-grained access control of encrypted data. Proceedings of the 13th ACM Conference on Computer and Communications Security, Association for Computing Machinery.","DOI":"10.1145\/1180405.1180418"},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"94","DOI":"10.1109\/TIFS.2017.2738601","article-title":"Auditable sigma-times outsourced attribute-based encryption for access control in cloud computing","volume":"13","author":"Ning","year":"2018","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_13","first-page":"111","article-title":"CryptCloud+: Secure and expressive data access control for cloud storage","volume":"14","author":"Ning","year":"2021","journal-title":"IEEE Trans. Serv. Comput."},{"key":"ref_14","first-page":"376","article-title":"Attribute-based signatures","volume":"Volume 6558","author":"Maji","year":"2011","journal-title":"11th International Conference on Topics in Cryptology"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"721","DOI":"10.1109\/TNET.2019.2894625","article-title":"An attribute-based framework for secure communications in vehicular ad hoc networks","volume":"27","author":"Cui","year":"2019","journal-title":"IEEE\/Acm Trans. Netw."},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Li, J., Au, M.H., Susilo, W., Xie, D., and Ren, K. (2010). Attribute-based signature and its applications. Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security, Association for Computing Machinery.","DOI":"10.1145\/1755688.1755697"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Okamoto, T., and Takashima, K. (2011, January 6\u20139). Efficient attribute-based signatures for non-monotone predicates in the standard model. Proceedings of the 14th International Conference on Practice and Theory in Public Key Cryptography, Taormina, Italy.","DOI":"10.1007\/978-3-642-19379-8_3"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"9424","DOI":"10.1109\/TII.2022.3228688","article-title":"Distributed attribute-based signature with attribute dynamic update for smart grid","volume":"19","author":"Su","year":"2023","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"81","DOI":"10.1007\/s10207-015-0289-6","article-title":"Efficient attribute-based signature and signcryption realizing expressive access structures","volume":"15","author":"Rao","year":"2016","journal-title":"Int. J. Inf. Secur."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"125","DOI":"10.1504\/IJWGS.2015.067161","article-title":"New attribute-based authentication and its application in anonymous cloud access service","volume":"11","author":"Li","year":"2015","journal-title":"Int. J. Web Grid Serv."},{"key":"ref_21","first-page":"148","article-title":"Attribute based sanitizable signature scheme","volume":"34","author":"Liu","year":"2013","journal-title":"J. Commun."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Xu, L., Zhang, X., Wu, X., and Shi, W. (2015). ABSS: An attribute-based sanitizable signature for integrity of outsourced database with public cloud. Proceedings of the 5th ACM Conference on Data and Application Security and Privacy, Association for Computing Machinery.","DOI":"10.1145\/2699026.2699135"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Mo, R., Ma, J., Liu, X., and Li, Q. (2017). FABSS: Attribute-based sanitizable signature for flexible access structure. International Conference on Information and Communications Security (ICICS), Springer International Publishing.","DOI":"10.1007\/978-3-319-89500-0_3"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Xie, Q., Ding, Z., and Xie, Q. (2023). A lightweight and privacy-preserving authentication protocol for healthcare in an IoT environment. Mathematics, 11.","DOI":"10.3390\/math11183857"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"1384","DOI":"10.1109\/TC.2022.3207138","article-title":"Lightweight authentication scheme for data dissemination in cloud-assisted healthcare IoT","volume":"72","author":"Liu","year":"2023","journal-title":"IEEE Trans. Comput."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"18140","DOI":"10.1109\/JIOT.2023.3279035","article-title":"Lightweight authentication scheme for healthcare with robustness to desynchronization attacks","volume":"10","author":"Shihab","year":"2023","journal-title":"IEEE Internet Things J."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"18486","DOI":"10.1109\/JIOT.2023.3283347","article-title":"Securing IoT-based smart healthcare systems by using advanced lightweight privacy-preserving authentication scheme","volume":"10","author":"Das","year":"2023","journal-title":"IEEE Internet Things J."},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Agrawal, S., and Chase, M. (2017). FAME: Fast attribute-based message encryption. Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, Association for Computing Machinery.","DOI":"10.1145\/3133956.3134014"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Tian, H., Zhang, F., and Ren, K. (2015). Secure bilinear pairing outsourcing made more efficient and flexible. Proceedings of the 10th ACM Symposium on Information, Computer and Communications Security (ASIACCS 2015), Association for Computing Machinery.","DOI":"10.1145\/2714576.2714615"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Backes, M., Hanzlik, L., Kluczniak, K., and Schneider, J. (2018). Signatures with flexible public key: Introducing equivalence classes for public keys. International Conference on the Theory and Application of Cryptology and Information Security, Springer International Publishing.","DOI":"10.1007\/978-3-030-03329-3_14"},{"key":"ref_31","unstructured":"(2026, January 20). Pairing-Based Cryptography (PBC) Library. Available online: https:\/\/crypto.stanford.edu\/pbc\/howto.html."},{"key":"ref_32","unstructured":"(2026, January 20). The GNU Multiple Precision Arithmetic Library (GMP). Available online: http:\/\/gmplib.org."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/16\/5223\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,20]],"date-time":"2026-08-20T04:34:24Z","timestamp":1787200464000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/16\/5223"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8,18]]},"references-count":32,"journal-issue":{"issue":"16","published-online":{"date-parts":[[2026,8]]}},"alternative-id":["s26165223"],"URL":"https:\/\/doi.org\/10.3390\/s26165223","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,8,18]]}}}