SEA: A Secure and Efficient Authentication and Authorization Architecture for IoT-Based Healthcare Using Smart Gateways

Abstract

In this paper, a secure and efficient authentication and authorization architecture for IoT-based healthcare is developed. Security and privacy of patients' medical data are crucial for the acceptance and ubiquitous use of IoT in healthcare. Secure authentication and authorization of a remote healthcare professional is the main focus of this work. Due to resource constraints of medical sensors, it is infeasible to utilize conventional cryptography in IoT-based healthcare. In addition, gateways in existing IoTs focus only on trivial tasks without alleviating the authentication and authorization challenges. In the presented architecture, authentication and authorization of a remote end-user is done by distributed smart e-health gateways to unburden the medical sensors from performing these tasks. The proposed architecture relies on the certificate-based DTLS handshake protocol as it is the main IP security solution for IoT. The proposed authentication and authorization architecture is tested by developing a prototype IoT-based healthcare system. The prototype is built of a Pandaboard, a TI SmartRF06 board and WiSMotes. The CC2538 module integrated into the TI board acts as a smart gateway and the WisMotes act as medical sensor nodes. The proposed architecture is more secure than a state-of-the-art centralized delegation-based architecture because it uses a more secure key management scheme between sensor nodes and the smart gateway. Furthermore, the impact of DoS attacks is reduced due to the distributed nature of the architecture. Our performance evaluation results show that compared to the delegation-based architecture, the proposed architecture reduces communication overhead by 26% and communication latency from the smart gateway to the end-user by 16%.

A Survey Paper on Security Challenges in Healthcare Cloud Computing

“…User names and passwords, biometric(finger, iris, face ,ECG etc), HIPPA policies, ABE(attribute based encryption) on patient health record, kerberos server authentication, SEA(Secure and efficient authentication using smart gateways [7] User names and passwords can be easily hacked. Biometrics guarantees high levels of security compared to traditional user names and passwords.…”

Secure Authentication and Prescription Safety Protocol for Telecare Health Services Using Ubiquitous IoT

“…Rahimi et al [29,30] introduced a more secure and powerful user authentication and key agreement technique for fitness-IoT structures which requires considerable processing power. It exploits the property of a sensible gateway in fog computing for critical and security services-associated organization.…”

“…Other conceivable assaults are participant impersonation attacks, brute-force attacks, or dictionary assaults. Furthermore, an illegal participant may misuse the other participant's personal information to conduct various login sessions and follow participant's exercises by phishing techniques [30]. Also, the breaching of user privacy and their routine activities may likewise encourage an unapproved user to follow the participant's login history and even their current location.…”

“…Entity or node contains a local set that can be categorized into ownership, represented as POSS (), a set of beliefs known as belief BEL (), and to represent the behavior, set BL (). Detailed specification of these sets can be explored in [14,30]. Table 2 represents the local set for the application scenario of Rubin logic on SAPS-AN.…”

Development and Implementation of the Technical Accident Prevention Subsystem for the Smart Home System

“…In particular, in the paper the authors propose a technical solution to protect data in distributed systems [12]. The paper is devoted to the issue of authorization and authentication in medical systems data [13]. The technical solutions how to protect data in the energy consumption system [14] and "smart" city [15] are described.…”