An enhanced scheme for mutual authentication for healthcare services

Shamshad, Salman; Ayub, Muhammad Faizan; Mahmood, Khalid; Kumari, Saru; Chaudhry, Shehzad Ashraf; Chen, Chien‐Ming

doi:10.1016/j.dcan.2021.07.002

Cited by 41 publications

(24 citation statements)

References 31 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Their strategy does not ensure the property of sensor node anonymity. In 2021, Shamshad et al 14 designed a secure mutual authentication scheme for healthcare service. They claimed that their scheme can withstand a variety of cryptographic attacks including insider, replay, masquerade and offline password guessing attack.…”

Section: Related Workmentioning

confidence: 99%

“…Our proposed scheme provides authentication and a key agreement scheme between fog server and IoT device. The proposed authentication and key agreement scheme overcomes the flaws in the existing literature 10‐14 The proposed scheme provides device anonymity, ensuring that cryptanalyst cannot get device information in place of a legitimate fog server. The proposed scheme employs ECC to provide cost‐effective operation in the resource‐constrained environment.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

A secure lightweight anonymous elliptic curve cryptography‐based authentication and key agreement scheme for fog assisted‐Internet of Things enabled networks

Verma

Bhardwaj²

2022

Concurrency and Computation

View full text Add to dashboard Cite

Summary The fog assisted‐Internet of Things (IoT) enabled network has been a novel topic in recent years. With the rapid development of the IoT, it is imperative to accomplish security in the fog computing environment. The surface for cryptographic attacks is expanded since the fog node can analyze, store, and process data between cloud and IoT device. This article proposes elliptic curve cryptography (ECC) based mutual authentication and key agreement scheme to support secure communication between device and fog server. In this work, we have formally analyzed the proposed scheme using the most widely accepted automated validation of Internet security protocols and application (AVISPA) tool. The informal security analysis of the proposed scheme shows that the proposed method is robust against several attacks. The performance analysis has been evaluated in terms of computation and storage overhead. The security and performance analysis with theoretical proof indicates that proposed scheme attains better security than related schemes.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

A secure lightweight anonymous elliptic curve cryptography‐based authentication and key agreement scheme for fog assisted‐Internet of Things enabled networks

Verma

Bhardwaj²

2022

Concurrency and Computation

View full text Add to dashboard Cite

show abstract

“…Although healthcare can provide people with significant convenience, several security problems [13][14][15][16][17] exist, such as the disclosure of patients' medical data and the tampering of patients' medical schemes by illegal personnel of the system. Many researchers have proposed a large number of schemes [12,[18][19][20] to address the security problems inherent in the healthcare environment. However, some existing authentication and key agreement protocols have security vulnerabilities, such as against offline guessing, impersonation and insider attacks.…”

Section: Introductionmentioning

confidence: 99%

Amassing the Security: An Enhanced Authentication and Key Agreement Protocol for Remote Surgery in Healthcare Environment

Wu¹,

Meng²,

Yang³

et al. 2023

Computer Modeling in Engineering &Amp; Sciences

Self Cite

View full text Add to dashboard Cite

The development of the Internet of Things has facilitated the rapid development of various industries. With the improvement in people's living standards, people's health requirements are steadily improving. However, owing to the scarcity of medical and health care resources in some areas, the demand for remote surgery has gradually increased. In this paper, we investigate remote surgery in the healthcare environment. Surgeons can operate robotic arms to perform remote surgery for patients, which substantially facilitates successful surgeries and saves lives. Recently, Kamil et al. proposed a secure protocol for surgery in the healthcare environment. However, after cryptanalyzing their protocol, we deduced that their protocols are vulnerable to temporary value disclosure and insider attacks. Therefore, we design an improved authentication and key agreement protocol for remote surgeries in the healthcare environment. Accordingly, we adopt the real or random (ROR) model and an automatic verification tool Proverif to verify the security of our protocol. Via security analysis and performance comparison, it is confirmed that our protocol is a relatively secure protocol.

show abstract

“…As explained in [12], TMIS has made it possible for patients to access doctor's telemedicine services over the internet. In so doing, TMIS accelerate the convenience of healthcare services access to patients at their place of preference [13], providing real-time remote diagnosis. As discussed in [14], these digital healthcare technologies have revolutionized the healthcare sector, enabling efficient collection, storage and access to ePHI.…”

Section: Introductionmentioning

confidence: 99%

“…However, ensuring the security of massive personal health information (PHI) being collected by numerous electronic devices has been noted to be cumbersome [32]. As such, the assurance of perfect confidentiality, integrity, secrecy and security in TMIS remains challenging [13].…”

Section: Introductionmentioning

confidence: 99%

Health information systems security: Risks, prospects and frameworks

Odiango¹,

Abeka²,

Liyala³

2022

World J. Adv. Eng. Technol. Sci.

View full text Add to dashboard Cite

Information is the most precious asset of any organization and assessing risk to information is a core mandate of any institutional management to ensure availability of effective controls to protect information assets. The increasing digitization of health information and the ever-changing cyber security threat environment, has led to some public health data breaches and as information security become increasingly important to the continued success for businesses, majority of organizations are searching for an appropriate security framework. Security risk assessment framework enables identification of threats and vulnerabilities. Although numerous frameworks available in the market, selection of the right framework to meet the organization’s need is a challenge due to lack of prescriptiveness, standard, inconsistencies, complexity, compliance, cost, and certifications. To address the gap, this study assessed the security of health information system and privacy risks in addition to existing frameworks and developed an enhanced framework. The study adopted a descriptive cross – sectional design and was conducted in Siaya County, in Kenya. A questionnaire was used to collect data which was analyzed and presented inform of tables, and charts. The results indicated that confidentiality of information is good (use of identifiers and passwords at 96.8% approval rate), availability of physical controls to protect authorized access at 95.2%, availability of policies stating staff responsible for protection of information confidentiality at 91.9%, availability of written policy on patient confidentiality and privacy at 74.2% and use of access privileges at 68.8%. The findings on integrity of information was poor with availability of systems to review data accuracy having 71.9% approval rate, frequency of data review at 81.2%, availability of written description of information security manager’s responsibility at 39.5%, monitoring of electronic systems to detect potential breaches at 40%, creation of audit logs to track system transactions at 54% and frequency of reviewing audit logs at 51.5%. The findings on availability of information was good (availability of inventory of computers at 69.9%), regular updates of inventory at 61.3%, updates of patient data on laptops and desktops at 68.2%, sharing of data confidentiality and security policy at 36%, and regular backups of audited logs at 51% approval rates. Regarding the assessment of existing security frameworks, it was noted that HIPAA has the following shortcomings: lacks complete valid risk analysis, not certifiable, security rule is safeguarding electronic protected health information only, the security does not regulate emails and does not require encryption, and commitment on security is verbal. On the other hand, ISO/IEC 27001 is expensive, requires specific IT budget, special expertise, and more time to apply in public hospitals. Finally, NIPP framework is expensive, and uses consequence’s assessment which is outside the scope of this study.

show abstract

An enhanced scheme for mutual authentication for healthcare services

Cited by 41 publications

References 31 publications

A secure lightweight anonymous elliptic curve cryptography‐based authentication and key agreement scheme for fog assisted‐Internet of Things enabled networks

A secure lightweight anonymous elliptic curve cryptography‐based authentication and key agreement scheme for fog assisted‐Internet of Things enabled networks

Amassing the Security: An Enhanced Authentication and Key Agreement Protocol for Remote Surgery in Healthcare Environment

Health information systems security: Risks, prospects and frameworks

Contact Info

Product

Resources

About