Lightweight and efficient privacy‐preserving mutual authentication scheme to secure Internet of Things‐based smart healthcare

Abstract

In recent years, Internet of Things (IoT) technology has been adopted in numerous application areas, such as healthcare, agriculture, industrial automation, and many more. The use of IoT and other technologies like cloud computing and machine learning has made the modern healthcare system to be smart, automated, and efficient. However, the continuous proliferation of cyber‐attacks on IoT devices has increased IoT challenges like data security, privacy protection, authentication, and so forth. In smart healthcare systems, due to the lack of authentication protocols, attackers can undermine the availability, confidentiality, and integrity of both smart healthcare devices and data, which can be life‐threatening in some situations. In this article, a privacy‐preserving mutual authentication scheme for IoT‐enabled healthcare systems is proposed to achieve lightweight and effective authentication of network devices. To support the processing capabilities of the IoT devices, this proposed authentication scheme is designed using lightweight cryptographic primitives, namely XOR, concatenation, and hash operation. The proposed scheme can establish a secure session between an authorized device and a gateway, and prevent unauthorized devices from getting access to healthcare systems. The security analysis and performance analysis assess the proposed authentication technique's effectiveness over existing well‐known schemes.

Digitization of healthcare sector: A study on privacy and security concerns

“…Das et al [32] introduced a privacy-preserving mutual authentication scheme aimed at overcoming the security and privacy challenges faced by IoT-based healthcare systems. The scheme utilizes efficient cryptographic methods such as XOR, concatenation, and hash operation, taking into account the processing limitations of IoT devices.…”

Managing Security of Healthcare Data for a Modern Healthcare System

“…For IoT-enabled hospitals, a reciprocal authentication method that protects privacy was suggested by Das, S. and Namasudra in order to accomplish quick and efficient network device verification [ 38 ]. This suggested authentication method was built using lightweight cryptographic primitives, such as XOR, combination, and hash operation, to accommodate the computing power of the IoT devices.…”

Explainable artificial intelligence envisioned security mechanism for cyber threat hunting

“…Hence, an illegal session key computation attack is not possible on proposed XAISM-CTH. 26,27 • The messages which need to be exchanged should contain different timestamp values, random nonce values, secret key values, and various identities. The secret values are only known to the associated parties, not to the attackers.…”

“…This protects XAISM-CTH against the replay, man-in-the-middle, and impersonation attacks. 26,28 • There is a provision to store secret values in the secured region of the database of cloud servers. Therefore, these values are not available to the attackers.…”

“…This provides distinct session keys for different entities in different sessions. Hence, an illegal session key computation attack is not possible on proposed XAISM‐CTH 26,27 The messages which need to be exchanged should contain different timestamp values, random nonce values, secret key values, and various identities.…”