An Identity-Based Authentication Protocol for the Telecare Medical Information System (TMIS) Using a Physically Unclonable Function

Shamshad, Salman; Ayub, Muhammad Faizan; Mahmood, Khalid; Rana, Minahil; Shafiq, Akasha; Rodrigues, Joel J. P. C.

doi:10.1109/jsyst.2021.3118014

Cited by 18 publications

(9 citation statements)

References 31 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Cost savings are achievable through reduced data transfers and optimized resource usage. Scalability is facilitated by the ability to horizontally scale resources by adding more edge devices [41].…”

Section: Proposed Methodsmentioning

confidence: 99%

See 1 more Smart Citation

An Elliptic Curve Menezes–Qu–Vanston-Based Authentication and Encryption Protocol for IoT

Chanda,

Luhach,

Francis

et al. 2024

Wireless Communications and Mobile Computing

View full text Add to dashboard Cite

The exponential growth of the Internet of Things (IoT) has led to a surge in data generation, critical for business decisions. Ensuring data authenticity and integrity over unsecured channels is vital, especially due to potential catastrophic consequences of tampered data. However, IoT’s resource constraints and heterogeneous ecosystem present unique security challenges. Traditional public key infrastructure offers strong security but is resource intensive, while existing cloud-based solutions lack comprehensive security and rise to latency and unwanted wastage of energy. In this paper, we propose a universal authentication scheme using edge computing, incorporating fully hashed Elliptic Curve Menezes–Qu–Vanstone (ECMQV) and PUF. This approach provides a scalable and reliable solution. It also provides security against active attacks, addressing man-in-the-middle and impersonation threats. Experimental validation on a Zybo board confirms its effectiveness, offering a robust security solution for the IoT landscape.

show abstract

Section: Proposed Methodsmentioning

confidence: 99%

“…It can uniquely identify a billions of ICs even though they are manufactured by the same vendor using same design specification. Another noteworthy feature is it can be used as private-public key generation [41]. Asymmetric key generation process using PUF has been explained in Marchand et al [22] and Park et al's [42] studies.…”

Section: Related Workmentioning

confidence: 99%

An Elliptic Curve Menezes–Qu–Vanston-Based Authentication and Encryption Protocol for IoT

Chanda,

Luhach,

Francis

et al. 2024

Wireless Communications and Mobile Computing

View full text Add to dashboard Cite

show abstract

“…Brand image can increase brand trust levels and trigger brand impact, which in turn increases the level of brand loyalty [24] . Similarly, a number of researchers have performed simulations [25][26][27][28][29][30][31][32][33][34][35] . In order to maximize the significant economic benefits offered by brand equity as an interactive, market-based resource, businesses need to create brand trust [36] .…”

Section: Brand Trustmentioning

confidence: 99%

Enhancing customer satisfaction in e-commerce: The role of service quality and brand trust

Iqbal,

Tanveer,

Ul Haq

et al. 2023

Forum. Econ. Fin. Stud.

View full text Add to dashboard Cite

Although online shopping has become more and more popular, keeping clients is still a big problem. Satisfaction, which is mostly dependent on comprehending and establishing trust with customers, is what determines whether or not a business can retain its customers. In the ever-changing world of e-commerce, this study examines the relationship between consumer loyalty, happiness, and service quality, with a focus on brand trust. The findings indicate that several aspects of service quality, including order processing, speed, convenience, and quality of communication from couriers, have a big impact on how satisfied customers are with their online purchases. The most powerful element influencing pleasure, however, turned out to be ease. The relationship’s key mediator is brand trust. As a result, consumer loyalty is increased and uncertainty is decreased. In particular, in developing e-commerce countries such as Pakistan, the study emphasizes how important it is to enhance consumer happiness, service quality, and brand credibility. By stressing the mediating function of brand trust and highlighting the dynamics in emerging nations, this research adds to the body of current work. It emphasizes how crucial trust and quality customer service are to creating long-lasting, customer-focused e-commerce enterprises. While acknowledging its limits, the study provides useful insights and avenues for further cross-country research.

show abstract

“…Although the protocol developed in [103] is efficient and secure, it cannot provide anonymity and is susceptible to impersonation and password guessing attacks [104], [105]. This anonymity challenge is addressed by the PUF based scheme developed in [106]. Based on RFID, a privacy preservation protocol is presented in [107] securing remote medical data.…”

Section: Related Workmentioning

confidence: 99%

Health information systems security: Risks, prospects and frameworks

Odiango¹,

Abeka²,

Liyala³

2022

World J. Adv. Eng. Technol. Sci.

View full text Add to dashboard Cite

Information is the most precious asset of any organization and assessing risk to information is a core mandate of any institutional management to ensure availability of effective controls to protect information assets. The increasing digitization of health information and the ever-changing cyber security threat environment, has led to some public health data breaches and as information security become increasingly important to the continued success for businesses, majority of organizations are searching for an appropriate security framework. Security risk assessment framework enables identification of threats and vulnerabilities. Although numerous frameworks available in the market, selection of the right framework to meet the organization’s need is a challenge due to lack of prescriptiveness, standard, inconsistencies, complexity, compliance, cost, and certifications. To address the gap, this study assessed the security of health information system and privacy risks in addition to existing frameworks and developed an enhanced framework. The study adopted a descriptive cross – sectional design and was conducted in Siaya County, in Kenya. A questionnaire was used to collect data which was analyzed and presented inform of tables, and charts. The results indicated that confidentiality of information is good (use of identifiers and passwords at 96.8% approval rate), availability of physical controls to protect authorized access at 95.2%, availability of policies stating staff responsible for protection of information confidentiality at 91.9%, availability of written policy on patient confidentiality and privacy at 74.2% and use of access privileges at 68.8%. The findings on integrity of information was poor with availability of systems to review data accuracy having 71.9% approval rate, frequency of data review at 81.2%, availability of written description of information security manager’s responsibility at 39.5%, monitoring of electronic systems to detect potential breaches at 40%, creation of audit logs to track system transactions at 54% and frequency of reviewing audit logs at 51.5%. The findings on availability of information was good (availability of inventory of computers at 69.9%), regular updates of inventory at 61.3%, updates of patient data on laptops and desktops at 68.2%, sharing of data confidentiality and security policy at 36%, and regular backups of audited logs at 51% approval rates. Regarding the assessment of existing security frameworks, it was noted that HIPAA has the following shortcomings: lacks complete valid risk analysis, not certifiable, security rule is safeguarding electronic protected health information only, the security does not regulate emails and does not require encryption, and commitment on security is verbal. On the other hand, ISO/IEC 27001 is expensive, requires specific IT budget, special expertise, and more time to apply in public hospitals. Finally, NIPP framework is expensive, and uses consequence’s assessment which is outside the scope of this study.

show abstract

An Identity-Based Authentication Protocol for the Telecare Medical Information System (TMIS) Using a Physically Unclonable Function

Cited by 18 publications

References 31 publications

An Elliptic Curve Menezes–Qu–Vanston-Based Authentication and Encryption Protocol for IoT

An Elliptic Curve Menezes–Qu–Vanston-Based Authentication and Encryption Protocol for IoT

Enhancing customer satisfaction in e-commerce: The role of service quality and brand trust

Health information systems security: Risks, prospects and frameworks

Contact Info

Product

Resources

About