Privacy-based medical data protection against internal security threats in heterogeneous Internet of Medical Things

Abstract

Data and information security is considered to be an important and challenging task for any field of life. But it becomes more critical especially when it deals with the medical field due to life and health hazards. The ratio of internal security threats to external threats always remains high. A huge number of efforts and technical expertise are required in the case of attacking the system from the external environment. But it requires fewer efforts if a system is attacked internally by the stakeholders of the system. This article presents an access control model that secures the medical data of patients against internal cybersecurity threats. It allows only the legitimate users, that is, authorized patients and doctors to communicate despite the fact of physical boundaries. The proposed model implements authorization in combination with permissions and roles instead of roles only for medical staff. It removes the discrepancies in the existing access control models. The proposed model ensures communication among doctors and patients in a secure, private, and efficient manner. The model is demonstrated by using mathematical modeling along with implementation examples. The proposed model outperformed in comparison with state-of-the-art access control models.

A Survey on Blockchain-Based IoMT Systems: Towards Scalability

“…These studies are as follows: [22], [45], [57], [58]. The papers [43], [47]- [49], [52], [53] also considered the access control property, although this property is not the main focus of these studies.…”

“…In [49], an access control model named MDPAC for the purpose of security is proposed. This model enables legitimate entities to get access to health data and guarantees communication among patients and doctors in a private, secure, and efficient manner.…”

A Comprehensive Survey of the Internet of Things (IoT) and AI-Based Smart Healthcare

“…A unified blockchain-based technique would solve many of the difficulties related to a centralized cloud solution. Authors in [89] introduced an access management model that safeguarded patients' medical data from internal information security attacks. It enabled only legally permitted people to connect despite physical limitations.…”

Security, Privacy and Trust in IoMT Enabled Smart Healthcare System: A Systematic Review of Current and Future Trends

“…Muhammad Asif et al [14] proposed a technique to ensure privacy of medical data especially against the threats emerging internally within SHS. The system allows access only for authorized users such as doctors and patients to communicate across the physical boundaries.…”