Plug-n-trust

Abstract

Mobile computing and sensing technologies present exciting opportunities for healthcare. Prescription wireless sensors worn by patients can automatically deliver medical data to care providers, dramatically improving their ability to diagnose, monitor, and manage a range of medical conditions. Using the mobile phones that patients already carry to provide connectivity between sensors and providers is essential to keeping costs low and deployments simple. Unfortunately, software-based attacks against phones are also on the rise, and successful attacks on privacy-sensitive and safety-critical applications can have significant consequences for patients.In this paper, we describe Plug-n-Trust (PnT), a novel approach to protecting both the confidentiality and integrity of safety-critical medical sensing and data processing on vulnerable mobile phones. With PnT, a plug-in smart card provides a trusted computing environment, keeping data safe even on a compromised mobile phone. By design, PnT is simple to use and deploy, while providing a flexible programming interface amenable to a wide range of applications. We describe our implementation, designed for Java-based smart cards and Android phones, in which we use a split-computation model with a novel path hashing technique to verify proper behavior without exposing confidential data. Our experimental evaluation demonstrates that PnT achieves its security goals while incurring acceptable overhead.

Mobile Healthcare Adoption among Patients in a Developing Country Environment: Exploring the Influence of Age and Gender Differences

“…The trust aspect has been incorporated in a wide variety of healthcare-based research studies and found to influence significantly the adoption behavior of e-healthcare (Fogel et al, 2008;Bansal et al, 2010;Mohamed et al, 2011). In the context of m-healthcare, formation of positive trust perceptions in utilizing m-healthcare technologies can be considered as one of the most critical parameters that requires to be accounted for in the design of the technology to improve consumers" adoption of mobile services in healthcare domains (Sorber et al, 2012;Akter et al, 2013). Because patients would never adopt systems unless they make sure that these systems are technically able to function properly and deliver accurate and reliable information to enable patients to take closely more effective role in the management of their own illnesses.…”

WIP: Interrupt Attack on TEE-protected Robotic Vehicles

“…For more accurate timestamps, previous work also reads timestamps twice at the beginning and the end of the execution [17]. This approach was applied to mobile health monitoring [20] and blockchain [25]. While the previous studies discussed timestamp integrity in sensor inputs, this paper represents the first to discuss and evaluate the timestamp integrity problem in the context of RVs.…”

Trustworthiness of Medical Devices and Body Area Networks

“…In addition to logical separation, the goal of data confidentiality and integrity can also be achieved by physically separated and secured data storage on the hub (smartphone). For example, Plug-n-Trust [67] is a plug-in smart card that provides a trusted computing environment and keeps medical data safe. The principle of Plug-n-Trust is as follows.…”