An Anonymous Key Distribution Scheme for Group Healthcare Services in 5G-Enabled Multi-Server Environments

Abstract

Fifth generation (5G) mobile technology enables a new kind of network that provides high peak data rates, ultra-low latency communication and high user density. Electronic healthcare (e-health) allows the data to be stored and shared in a highly efficient and flexible manner. Group e-health services help in improving long-term results of the treatments due to its collaborative characteristic. The services including real-time remote patient monitoring and transmission of large health data files can be facilitated by e-health systems enabled with the 5G network. Since the communication channel is open, security and privacy in the system should be taken into account. Our work proposes a key distribution scheme for group healthcare services in 5G network environments. We construct various healthcare domains and apply the proposed scheme to the group services. The paper also introduces Single Sign-On (SSO), a cost-efficient solution, for multi-server architecture of the constructed system. Security and privacy of the scheme are enforced by a three-factor authentication mechanism (integrating smart card, password and biometrics) and strong user anonymity property. We provide security proof of the proposed scheme using various well-known tools including RoR model, BAN logic and AVISPA simulation. Results of various performance comparisons indicate that our scheme provides most functions and bears rational costs, compared with its related works.

A Novel Three-Factor Authentication Protocol for Multiple Service Providers in 6G-Aided Intelligent Healthcare Systems

“…Furthermore, Lin et al [23] is not free from stolen smart card attacks since users' private credentials are directly stored in the card without being masked. Similarly, the work proposed by Le and Hsu [16] only prevents the smart card capture attacks partially as the adversaries can perform power analysis to obtain passwords of the users [25]. In this way, multiple attacks can be performed once they obtain users' biometrics.…”

“…Thus, three-factor authentication mechanism in their work will become ineffective. Le and Hsu [16] also did not provide password update solution to enhance the security. This solution was proposed in another anonymous three-factor authentication protocol introduced by Xu et al [26].…”

“…Besides, Tanveer et al [30] proposes an anonymous and reliable authentication protocol for smart grid systems. All above-mentioned works, except [26] and [16], did not design their protocols with threefactor authentication. Moreover, only [26] and [16] achieves user untraceability during the communication in the protocols.…”

“…Adversaries may perform various attacks (e.g., man-in-the-middle (MITM) attacks, etc. ), which violate patient privacy or directly obstruct the healthcare systems [16]. In addition, legitimacy of the doctors (healthcare providers) in the communications also needs to be taken into account for avoiding fraud services.…”

“…Two-factor authentication mechanism integrating user's password and smart card was discussed in many works to prevent possible risks [17,18]. Nevertheless, the mechanism may not be robust once the adversaries effectuate password guessing attacks or stolen smart card attacks [16]. Along with the advent of intelligent systems and the need of healthcare, there would be an increasing number of medical services provided by multiple providers.…”