Secure sharing scheme for low-altitude UAV operational data based on broadcast proxy re-encryption

In the open and dynamic low-altitude intelligent network, unmanned aerial vehicle (UAV) operational data sharing faces security threats such as data eavesdropping, replay attacks, and unauthorized access, which may seriously jeopardize low-altitude operation security. It is crucial to guarantee the secure sharing of UAV operational data. Existing schemes utilize identity-based broadcast encryption to achieve point-to-multipoint data security sharing. Nevertheless, the sharing flexibility is sometimes restricted by these schemes' requirement to preset the sharing group capacity. Moreover, in the decryption process, the sharer needs to perform additional mathematical operations for other group members, which leads to a heavy burden of decryption computation. In this paper, we propose a secure sharing scheme for low-altitude UAV operational data based on broadcast proxy re-encryption. Through ciphertext re-encryption, the suggested technique creates a hybrid encryption mechanism that converts point-to-point sharing into point-to-multipoint sharing by utilizing identity-based broadcast encryption and symmetric encryption. In point-to-multipoint sharing, the scheme supports stateless data group sharing with fixed-length private keys and without preset group capacity, taking into account the security, flexibility, and efficiency of sharing. Experimental results show that in point-to-point sharing, the encryption and decryption computation overhead is fixed; in point-to-multipoint sharing, compared with the suboptimal scheme, the re-encryption key generation overhead is reduced by more than 40%, and the re-encryption ciphertext decryption algorithm costs about 3.6 milliseconds.