The rapid growth of the Internet of Things (IoT) introduces challenges in secure authentication and delegation due to the limited computational capabilities of devices. Proxy signature schemes offer an effective solution by enabling controlled delegation of signing rights to more capable entities, such as gateway nodes. However, most existing schemes rely on classical assumptions that are likely to be broken by quantum adversaries. In this work, we address these challenges by proposing an isogeny-based post-quantum proxy signature scheme, \textit{CSI-PS}. The scheme leverages the hardness of the Group Action Inverse Problem (GAIP) to ensure quantum-resistant security while maintaining efficiency suitable for resource-constrained environments. We further demonstrate its applicability in IoT architectures through a gateway-based delegation model. Our analysis shows that the proposed scheme strikes an effective balance between security and efficiency in terms of computation and communication overhead, along with provable security under the EUF-CMA notion.

翻译：物联网（IoT）的快速发展带来了安全认证与授权委托方面的挑战，这主要是由于设备计算能力有限所致。代理签名方案通过将签名权限受控委托给能力更强的实体（例如网关节点），提供了一种有效的解决方案。然而，现有的大多数方案都依赖于可能被量子攻击者破解的经典假设。在本工作中，我们针对这些挑战，提出了一种基于同源的后量子代理签名方案——\textit{CSI-PS}。该方案利用群作用逆问题（GAIP）的困难性来保证抗量子安全性，同时保持适用于资源受限环境的高效性。我们通过一个基于网关的委托模型，进一步展示了其在物联网架构中的适用性。我们的分析表明，所提出的方案在计算与通信开销方面实现了安全性与效率的有效平衡，并在EUF-CMA安全概念下具有可证明安全性。