A secure lightweight fuzzy embedder based user authentication scheme for internet of medical things applications

Abstract

The Internet of Medical Things (IoMT) is a network of medical devices, hardware infrastructure, and software that allows healthcare information technology to be communicated over the web. The IoMT sensors communicate medical data to server for the quick diagnosis. As, it handles private and confidential information of a user, security is the primary objective. The existing IoT authentication schemes either using two-factor(Username, password) or multi-factor (username, password, biometric) to authenticate a user. Typically the structural characteristics-based biometric trait like Face, Iris, Palm print or finger print is used as a additional factor. There are chances that these biometrics can be fabricated. Thus, these structural biometrics based authentication schemes are fail to provide privacy, security, authenticity, and integrity. The biodynamic-based bioacoustics signals are gained attention in the era of human-computer interactions to authenticate a user as it is a unique feature to each user. So, we use a frequency domain based bio-acoustics as a biometric input. Thus, this work propose a Secure Lightweight Bioacoustics based User Authentication Scheme using fuzzy embedder for the Internet of Medical Things applications. Also, the IoT sensors tends to join and leave the network dynamically, the proposed scheme adopts chinese remainder technique for generate a group secret key to protect the network from the attacks of former sensor nodes. The proposed scheme’s security is validated using the formal verification tool AVISPA(Automated Validation of Internet Security Protocols and Applications). The system’s performance is measured by comparing the proposed scheme to existing systems in terms of security features, computation and communication costs. It demonstrates that the proposed system outperforms existing systems.

Biometric Template Attacks and Recent Protection Mechanisms: A Survey

“…To improve on the efficiency and overcome attacks such as offline password guessing, three factor-based authentication schemes such as [168][169][170][171][172] were introduced. Other lightweight privacy-preserving techniques including [173][174][175]176] also provide improved efficiency.…”

A novel and provably secure mutual authentication protocol for cloud environment using elliptic curve cryptography and fuzzy verifier

“…However, M-FA requires specialized hardware such as fingerprint sensor, iris sensor, camera and so forth to capture the user's biometric data. 31 Furthermore, binding or generating secret keys from biometric characteristics (such as fuzzy commitment, 32 fuzzy extractors 33,34 etc.) incurs additional computational complexity on the end-user.…”