Lightweight Fuzzy Extractor Based on LPN for Device and Biometric Authentication in IoT

Ebrahimi, Shahriar; Bayat-Sarmadi, Siavash

doi:10.1109/jiot.2021.3050555

Cited by 14 publications

(4 citation statements)

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Biometric information is the best way to authenticate and verify users [ 16 , 17 , 18 ]. In 2004, Dodis et al [ 19 ] proposed the Fuzzy Extractor to obtain a unique bit string extracted from the biometric template.…”

Section: Preliminariesmentioning

confidence: 99%

An Improved Lightweight User Authentication Scheme for the Internet of Medical Things

Kim

Ryu

Lee

et al. 2023

Sensors

View full text Add to dashboard Cite

The Internet of Medical Things (IoMT) is used in the medical ecosystem through medical IoT sensors, such as blood glucose, heart rate, temperature, and pulse sensors. To maintain a secure sensor network and a stable IoMT environment, it is important to protect the medical IoT sensors themselves and the patient medical data they collect from various security threats. Medical IoT sensors attached to the patient’s body must be protected from security threats, such as being controlled by unauthorized persons or transmitting erroneous medical data. In IoMT authentication, it is necessary to be sensitive to the following attack techniques. (1) The offline password guessing attack easily predicts a healthcare administrator’s password offline and allows for easy access to the healthcare worker’s account. (2) Privileged-insider attacks executed through impersonation are an easy way for an attacker to gain access to a healthcare administrator’s environment. Recently, previous research proposed a lightweight and anonymity preserving user authentication scheme for IoT-based healthcare. However, this scheme was vulnerable to offline password guessing, impersonation, and privileged insider attacks. These attacks expose not only the patients’ medical data such as blood pressure, pulse, and body temperature but also the patients’ registration number, phone number, and guardian. To overcome these weaknesses, in the present study we propose an improved lightweight user authentication scheme for the Internet of Medical Things (IoMT). In our scheme, the hash function and XOR operation are used for operation in low-spec healthcare IoT sensor. The automatic cryptographic protocol tool ProVerif confirmed the security of the proposed scheme. Finally, we show that the proposed scheme is more secure than other protocols and that it has 266.48% better performance than schemes that have been previously described in other studies.

show abstract

Section: Preliminariesmentioning

confidence: 99%

An Improved Lightweight User Authentication Scheme for the Internet of Medical Things

Kim

Ryu

Lee

et al. 2023

Sensors

View full text Add to dashboard Cite

show abstract

“…To address the challenges of privacy leakage and data tampering by unauthorised users, the authors of [27] proposed an attribute-based secure access control mechanism that uses federated deep learning (FDL). Moreover, various biometric-based authentication systems have been explored to secure IoT-based healthcare systems [12,28,29].…”

Section: Related Workmentioning

confidence: 99%

BioChainReward: A Secure and Incentivised Blockchain Framework for Biomedical Data Sharing

Elkhodr,

Gide,

Darwish

et al. 2023

IJERPH

View full text Add to dashboard Cite

In the era of digital healthcare, biomedical data sharing is of paramount importance for the advancement of research and personalised healthcare. However, sharing such data while preserving user privacy and ensuring data security poses significant challenges. This paper introduces BioChainReward (BCR), a blockchain-based framework designed to address these concerns. BCR offers enhanced security, privacy, and incentivisation for data sharing in biomedical applications. Its architecture consists of four distinct layers: data, blockchain, smart contract, and application. The data layer handles the encryption and decryption of data, while the blockchain layer manages data hashing and retrieval. The smart contract layer includes an AI-enabled privacy-preservation sublayer that dynamically selects an appropriate privacy technique, tailored to the nature and purpose of each data request. This layer also features a feedback and incentive mechanism that incentivises patients to share their data by offering rewards. Lastly, the application layer serves as an interface for diverse applications, such as AI-enabled apps and data analysis tools, to access and utilise the shared data. Hence, BCR presents a robust, comprehensive approach to secure, privacy-aware, and incentivised data sharing in the biomedical domain.

show abstract

“…In the field of public-key cryptography, elliptic-curve cryptography is one method that utilises the algebraic structure of elliptic curves over finite fields. A public essential encryption technique based on the algebraic arrangement of elliptic curves over finite fields can create faster, more minor, or more competent cryptographic keys [12]. (I) Key Mechanism: The sender (signer) is the only one who knows the private key, it is used to make a signature.…”

Section: F Ecc Algorithm Eccmentioning

confidence: 99%

Secure Authentication Scheme for the Internet of Things

Srivastava

Kumar

2023

IJRITCC

View full text Add to dashboard Cite

The Internet of Things (IoT) is based on an extensive and wide range of interconnected heterogeneous units’ general applications, including healthcare systems, environmental monitoring, household automation, and business automation. This work presents an approach variant of the elliptic curve; The cryptography approach is implemented to provide more security with fewer key sizes and with protocol enhancements to perform an efficient authentication process. In the process of authenticating the device, we use the Electronic Product Code (EPC) as a key to authentication, where the overhead of giving input is removed. Mention the methods followed to meet all your performance metrics (minimum execution time; low energy consumption, and qualitative comparison). This proposed scheme (i.e., the energy consumption of 0.27 mJ, the reduction in end delay of 0.058 sec., the reduction in the computation cost, and being more resistant to attack) is compared with other recent authentication protocols. The proposed system creates a secure network to lessen the damage if there is an attack in the IoT environment. The performance evaluation results indicate that the proposed scheme has a lower energy consumption and a more resistant authentication scheme, and we observe a trade-off between security and the lightweight factor.

show abstract

Lightweight Fuzzy Extractor Based on LPN for Device and Biometric Authentication in IoT

Cited by 14 publications

References 25 publications

An Improved Lightweight User Authentication Scheme for the Internet of Medical Things

An Improved Lightweight User Authentication Scheme for the Internet of Medical Things

BioChainReward: A Secure and Incentivised Blockchain Framework for Biomedical Data Sharing

Secure Authentication Scheme for the Internet of Things

Contact Info

Product

Resources

About