{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,11]],"date-time":"2026-09-11T09:07:23Z","timestamp":1789117643536,"version":"build-2803163510"},"reference-count":42,"publisher":"MDPI AG","issue":"18","license":[{"start":{"date-parts":[[2026,9,10]],"date-time":"2026-09-10T00:00:00Z","timestamp":1788998400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>With the rapid development of the Internet of Medical Things (IoMT), wearable sensors and intelligent medical terminals continue to generate a large amount of sensitive medical data, which needs to be uploaded to the cloud platform for storage and sharing. However, IoMT devices usually have the characteristics of limited computing resources and limited energy, and it is difficult for traditional high-complexity encryption schemes to meet the requirements of security and efficiency. In addition, the existing Proxy Re-Encryption (PRE) scheme has the risk of authorization transfer, and it is difficult to achieve fine-grained and secure sharing of medical data. In response to the above problems, this paper proposes a lightweight non-pairing proxy re-encryption enhancement scheme SM2-PRE+ based on the SM2 algorithm, which is used for the secure sharing of IoMT medical sensing data. The scheme combines the SM2 elliptic curve cipher algorithm and the SM4 symmetric encryption algorithm to achieve data protection through a double-layer key structure, and it uses the re-encryption mechanism of message binding to enhance the authorization control ability. Compared with the traditional PRE scheme, the proposed scheme avoids bilinear pairing operations, reduces the computing overhead of resource-limited equipment, and supports collusion-resistant and authorization non-transferability. Security analysis shows that the scheme meets the security requirements of IND-CCA under the Random Oracle Model (ROM). Performance analysis results show that SM2-PRE+ has low computing overhead and storage burden, which is suitable for wearable medical devices, intelligent sensing terminals, and cloud-assisted IoMT data sharing scenarios.<\/jats:p>","DOI":"10.3390\/s26185761","type":"journal-article","created":{"date-parts":[[2026,9,10]],"date-time":"2026-09-10T15:54:19Z","timestamp":1789055659000},"page":"5761","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["SM2-PRE+: A Lightweight Pairing-Free Proxy Re-Encryption Scheme for Secure IoMT Healthcare Data Sharing"],"prefix":"10.3390","volume":"26","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8188-2820","authenticated-orcid":false,"given":"Shuanggen","family":"Liu","sequence":"first","affiliation":[{"name":"School of Cyberspace Security, Xi\u2019an University of Posts and Telecommunications, Xi\u2019an 710121, China"}],"role":[{"vocabulary":"crossref","role":"author"},{"role":"conceptualization","vocabulary":"credit"}]},{"given":"Mingxing","family":"Zhu","sequence":"additional","affiliation":[{"name":"School of Cyberspace Security, Xi\u2019an University of Posts and Telecommunications, Xi\u2019an 710121, China"}],"role":[{"vocabulary":"crossref","role":"author"},{"role":"writing-original-draft","vocabulary":"credit"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2070-4913","authenticated-orcid":false,"given":"Xu-An","family":"Wang","sequence":"additional","affiliation":[{"name":"Key Laboratory of Network and Information Security, Engineering University of People\u2019s Armed Police, Xi\u2019an 710086, China"}],"role":[{"vocabulary":"crossref","role":"author"},{"role":"supervision","vocabulary":"credit"}]},{"given":"Ziqi","family":"Fan","sequence":"additional","affiliation":[{"name":"School of Cyberspace Security, Xi\u2019an University of Posts and Telecommunications, Xi\u2019an 710121, China"}],"role":[{"vocabulary":"crossref","role":"author"},{"role":"investigation","vocabulary":"credit"}]},{"given":"Xinyu","family":"Zhou","sequence":"additional","affiliation":[{"name":"School of Cyberspace Security, Xi\u2019an University of Posts and Telecommunications, Xi\u2019an 710121, China"}],"role":[{"vocabulary":"crossref","role":"author"},{"role":"data-curation","vocabulary":"credit"}]}],"member":"1968","published-online":{"date-parts":[[2026,9,10]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"110851","DOI":"10.1016\/j.comnet.2024.110851","article-title":"Secure collaborative EHR Sharing using multi-authority attribute-based proxy re-encryption in Web 3.0","volume":"255","author":"Duan","year":"2024","journal-title":"Comput. Netw."},{"key":"ref_2","unstructured":"Qin, Z., Xiong, H., Wu, S., and Batamuliza, J. (2016). A survey of proxy re-encryption for secure data sharing in cloud computing. IEEE Trans. Serv. Comput., Early Access."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"e3986","DOI":"10.1002\/ett.3986","article-title":"Proxy re-encryption with equality test for secure data sharing in Internet of Things-based healthcare systems","volume":"33","author":"Li","year":"2022","journal-title":"Trans. Emerg. Telecommun. Technol."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"110373","DOI":"10.1016\/j.comnet.2024.110373","article-title":"Proxy re-encryption for secure data sharing with blockchain in internet of medical things","volume":"245","author":"Pei","year":"2024","journal-title":"Comput. Netw."},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Chen, W., Zhu, S., Li, J., Wu, J., Chen, C.L., and Deng, Y.Y. (2021). Authorized shared electronic medical record system with proxy re-encryption and blockchain technology. Sensors, 21.","DOI":"10.3390\/s21227765"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/1127345.1127346","article-title":"Improved proxy re-encryption schemes with applications to secure distributed storage","volume":"9","author":"Ateniese","year":"2006","journal-title":"ACM Trans. Inf. Syst. Secur. (TISSEC)"},{"key":"ref_7","first-page":"102543","article-title":"Proxy re-encryption for fine-grained access control: Its applicability, security under stronger notions and performance","volume":"54","author":"Pareek","year":"2020","journal-title":"J. Inf. Secur. Appl."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Blaze, M., Bleumer, G., and Strauss, M. (1998). Divertible Protocols and Atomic Proxy Cryptography. International Conference on the Theory and Applications of Cryptographic Techniques, Springer.","DOI":"10.1007\/BFb0054122"},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"44","DOI":"10.1504\/IJWGS.2018.088394","article-title":"PRE+: Dual of proxy re-encryption for secure cloud data sharing service","volume":"14","author":"Wang","year":"2018","journal-title":"Int. J. Web Grid Serv."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Yan, L., Qin, H., Yang, K., Xie, H., Wang, X.A., and Liu, S. (2024). Pairing-free certificate-based proxy re-encryption plus scheme for secure cloud data sharing. Electronics, 13.","DOI":"10.3390\/electronics13030534"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Ateniese, G., Benson, K., and Hohenberger, S. (2009). Key-private Proxy Re-encryption. Cryptographers\u2019 Track at the RSA Conference, Springer.","DOI":"10.1007\/978-3-642-00862-7_19"},{"key":"ref_12","unstructured":"Canetti, R., and Hohenberger, S. (November, January 31). Chosen-ciphertext secure proxy re-encryption. Proceedings of the 14th ACM Conference on Computer and Communications Security, Alexandria, VA, USA."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"1301","DOI":"10.1137\/S009753970544713X","article-title":"Chosen-ciphertext security from identity-based encryption","volume":"36","author":"Boneh","year":"2007","journal-title":"SIAM J. Comput."},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Zengin, B., Deupmann, P., Buchmann, N., and Margraf, M. (2024). Chosen-Ciphertext Secure Unidirectional Proxy Re-Encryption Based on Asymmetric Pairings. Appl. Sci., 14.","DOI":"10.3390\/app142311322"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Boneh, D., and Franklin, M. (2001). Identity-based Encryption from the Weil Pairing. Annual International Cryptology Conference, Springer.","DOI":"10.1007\/3-540-44647-8_13"},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Green, M., and Ateniese, G. (2007). Identity-based Proxy Re-encryption. International Conference on Applied Cryptography and Network Security, Springer.","DOI":"10.1007\/978-3-540-72738-5_19"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Libert, B., and Vergnaud, D. (2008). Unidirectional Chosen-ciphertext Secure Proxy Re-encryption. International Workshop on Public Key Cryptography, Springer.","DOI":"10.1007\/978-3-540-78440-1_21"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Shao, J., Liu, P., Cao, Z., and Wei, G. (2011, January 5\u20139). Multi-use Unidirectional Proxy Re-encryption. Proceedings of the 2011 IEEE International Conference on Communications (ICC), Kyoto, Japan.","DOI":"10.1109\/icc.2011.5962455"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"100836","DOI":"10.1016\/j.iot.2023.100836","article-title":"A certificate-based proxy re-encryption plus scheme for secure medical data sharing","volume":"23","author":"Liu","year":"2023","journal-title":"Internet Things"},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"44","DOI":"10.1186\/s13677-024-00608-w","article-title":"A secure and efficient electronic medical record data sharing scheme based on blockchain and proxy re-encryption","volume":"13","author":"Liu","year":"2024","journal-title":"J. Cloud Comput."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"2048","DOI":"10.1109\/TNSE.2020.2999551","article-title":"A blockchain-based proxy re-encryption with equality test for vehicular communication systems","volume":"8","author":"Chen","year":"2020","journal-title":"IEEE Trans. Netw. Sci. Eng."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"17999","DOI":"10.1109\/TVT.2025.3579252","article-title":"A CCA-secure pairing-free broadcast proxy re-encryption scheme for VANETs","volume":"74","author":"Li","year":"2025","journal-title":"IEEE Trans. Veh. Technol."},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Chu, C.K., and Tzeng, W.G. (2007). Identity-based proxy re-encryption without random oracles. International Conference on Information Security, Springer.","DOI":"10.1007\/978-3-540-75496-1_13"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Weng, J., Deng, R.H., Ding, X., Chu, C.K., and Lai, J. (2009, January 10\u201312). Conditional proxy re-encryption secure against chosen-ciphertext attack. Proceedings of the 4th International Symposium on Information, Computer, and Communications Security, Sydney, Australia.","DOI":"10.1145\/1533057.1533100"},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Weng, J., Yang, Y., Tang, Q., Deng, R.H., and Bao, F. (2009). Efficient Conditional Proxy Re-encryption with Chosen-ciphertext Security. International Conference on Information Security, Springer.","DOI":"10.1007\/978-3-642-04474-8_13"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"1214","DOI":"10.1109\/TDSC.2019.2899300","article-title":"Revocable identity-based broadcast proxy re-encryption for data sharing in clouds","volume":"18","author":"Ge","year":"2019","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Liang, K., Liu, J.K., Wong, D.S., and Susilo, W. (2014). An Efficient Cloud-based Revocable Identity-based Proxy Re-encryption Scheme for Public Clouds Data Sharing. European Symposium on Research in Computer Security, Springer International Publishing.","DOI":"10.1007\/978-3-319-11203-9_15"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Sun, B., Wang, L., Fu, Y., Yang, Z., and Wang, F. (2026, January 27\u201329). Lightweight Data Sharing Scheme Based on Proxy Re-Encryption in IIoT. Proceedings of the 2026 IEEE 8th International Conference on Communications, Information System and Computer Engineering (CISCE), Guangzhou, China.","DOI":"10.1109\/CISCE69494.2026.11504656"},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"42754","DOI":"10.1109\/JIOT.2025.3593909","article-title":"A pairing-free data sharing scheme based on certificateless conditional broadcast proxy re-encryption suitable for cloud-assisted IoT","volume":"12","author":"Li","year":"2025","journal-title":"IEEE Internet Things J."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"3892","DOI":"10.1109\/TIFS.2024.3372806","article-title":"Blockchain-based secure cross-domain data sharing for edge-assisted industrial internet of things","volume":"19","author":"Wang","year":"2024","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Manzoor, A., Liyanage, M., Braeke, A., Kanhere, S.S., and Ylianttila, M. (2019, January 14\u201317). Blockchain Based Proxy Re-encryption Scheme for Secure IoT Data Sharing. Proceedings of the 2019 IEEE International Conference on Blockchain and Cryptocurrency (ICBC), Seoul, Republic of Korea.","DOI":"10.1109\/BLOC.2019.8751336"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Kirshanova, E. (2014). Proxy Re-encryption from Lattices. International Workshop on Public Key Cryptography, Springer.","DOI":"10.1007\/978-3-642-54631-0_5"},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"16","DOI":"10.1016\/j.tcs.2021.04.008","article-title":"Collusion-resistant identity-based proxy re-encryption: Lattice-based constructions in standard model","volume":"871","author":"Dutta","year":"2021","journal-title":"Theor. Comput. Sci."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1049\/ise2.12000","article-title":"Lattice-based unidirectional Proxy Re-Encryption and Proxy Re-Encryption+ schemes","volume":"15","author":"Singh","year":"2021","journal-title":"IET Inf. Secur."},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Fan, X., and Liu, F.H. (2019). Proxy Re-encryption and Re-signatures from Lattices. International Conference on Applied Cryptography and Network Security, Springer International Publishing.","DOI":"10.1007\/978-3-030-21568-2_18"},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Tang, Y., Jin, M., Meng, H., Yang, L., and Zheng, C. (2023). Attribute-based verifiable conditional proxy re-encryption scheme. Entropy, 25.","DOI":"10.3390\/e25050822"},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"2907","DOI":"10.1109\/TDSC.2021.3076580","article-title":"A verifiable and fair attribute-based proxy re-encryption scheme for data sharing in clouds","volume":"19","author":"Ge","year":"2021","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"20048","DOI":"10.1038\/s41598-024-70533-0","article-title":"Blockchain-based proxy re-encryption access control method for biological risk privacy protection of agricultural products","volume":"14","author":"Wang","year":"2024","journal-title":"Sci. Rep."},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"153","DOI":"10.1016\/j.jpdc.2019.03.018","article-title":"Controlled secure social cloud data sharing based on a novel identity based proxy re-encryption plus scheme","volume":"130","author":"Wang","year":"2019","journal-title":"J. Parallel Distrib. Comput."},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"Zhang, Y., Zhang, Z., Ji, S., Wang, S., and Huang, S. (2024). Conditional proxy re-encryption-based key sharing mechanism for clustered federated learning. Electronics, 13.","DOI":"10.3390\/electronics13050848"},{"key":"ref_41","first-page":"103967","article-title":"A pairing-free proxy re-encryption scheme suitable for cloud medical information systems","volume":"89","author":"Zhou","year":"2025","journal-title":"J. Inf. Secur. Appl."},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"102105","DOI":"10.1016\/j.jksuci.2024.102105","article-title":"Pairing-free proxy re-encryption scheme with equality test for data security of IoT","volume":"36","author":"Han","year":"2024","journal-title":"J. King Saud Univ.-Comput. Inf. Sci."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/18\/5761\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,9,11]],"date-time":"2026-09-11T08:22:40Z","timestamp":1789114960000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/18\/5761"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,9,10]]},"references-count":42,"journal-issue":{"issue":"18","published-online":{"date-parts":[[2026,9]]}},"alternative-id":["s26185761"],"URL":"https:\/\/doi.org\/10.3390\/s26185761","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,9,10]]}}}