An Improved Lightweight User Authentication Scheme for the Internet of Medical Things

Abstract

The Internet of Medical Things (IoMT) is used in the medical ecosystem through medical IoT sensors, such as blood glucose, heart rate, temperature, and pulse sensors. To maintain a secure sensor network and a stable IoMT environment, it is important to protect the medical IoT sensors themselves and the patient medical data they collect from various security threats. Medical IoT sensors attached to the patient’s body must be protected from security threats, such as being controlled by unauthorized persons or transmitting erroneous medical data. In IoMT authentication, it is necessary to be sensitive to the following attack techniques. (1) The offline password guessing attack easily predicts a healthcare administrator’s password offline and allows for easy access to the healthcare worker’s account. (2) Privileged-insider attacks executed through impersonation are an easy way for an attacker to gain access to a healthcare administrator’s environment. Recently, previous research proposed a lightweight and anonymity preserving user authentication scheme for IoT-based healthcare. However, this scheme was vulnerable to offline password guessing, impersonation, and privileged insider attacks. These attacks expose not only the patients’ medical data such as blood pressure, pulse, and body temperature but also the patients’ registration number, phone number, and guardian. To overcome these weaknesses, in the present study we propose an improved lightweight user authentication scheme for the Internet of Medical Things (IoMT). In our scheme, the hash function and XOR operation are used for operation in low-spec healthcare IoT sensor. The automatic cryptographic protocol tool ProVerif confirmed the security of the proposed scheme. Finally, we show that the proposed scheme is more secure than other protocols and that it has 266.48% better performance than schemes that have been previously described in other studies.

Lightweight Hash-Based Authentication Protocol for Smart Grids

“…In this section, we discuss the results of a formal analysis of our scheme conducted using ProVerif. The analysis using ProVerif demonstrates the results of verifying and analyzing the security of the proposed scheme as in several recent studies [29][30][31][32].…”

The Retrieval and Effect of Core Parameters for Near-Field Inter-Body Coupling Communication

“…The simulation setup is as described in Section 3.1. By combining the simulated curve and the results from previous works [26,27], we can derive a fitting equation that describes the relationship between C H and the relative distance d (m), and the surface area of the body BSA, as shown in Equation (4), where ε 0 is the vacuum permittivity, and ε r is the relative permittivity of the substance between the human bodies. The value of BSA is determined by the smaller surface area in the two human bodies.…”

“…Early screening and diagnosis are crucial in preventing and managing fatal or chronic ailments. The Internet of Body (IoB) represents a promising extension of the Internet of Things (IoT); it utilizes connected devices in, on, and around the human body to enable various applications [ 3 , 4 , 5 ]. The IoB offers proactive wellness screening and post-surgery or medication monitoring opportunities, among others [ 6 , 7 ].…”

Steganography in IoT: Information Hiding with Joystick and Touch Sensors

“…Input devices collect data from the environment. They may measure temperature [ 46 ], medical parameters [ 47 ], displacement [ 48 ], pH [ 49 ], pressure [ 50 ], humidity [ 51 ], inertia [ 52 ], etc. Output devices broadcast messages to the external world.…”