Blockchain and PUF-Based Lightweight Authentication Protocol for Wireless Medical Sensor Networks
Blockchain and PUF-Based Lightweight Authentication Protocol for Wireless Medical Sensor Networks
复制标题
基于区块链和PUF的无线医学传感器网络轻量级认证协议
DOI：
10.1109/jiot.2021.3117762
复制
发表时间：
2022-06-01
影响因子：
10.6
通讯作者：
Su, Chunhua
中科院分区：
文献类型：
--
作者：
Wang, Weizheng;Chen, Qiu;Su, Chunhua
由于异构物联网(IoMT)的出现(例如可穿戴医疗设备、智能手表监测和自动胰岛素输送系统)，大量患者数据被分派到中央云服务器进行疾病分析和诊断。虽然这种直接模式给患者和医务人员(MPS)带来了很多便利，但他们之间开放的通信通道也带来了一些安全和隐私问题，如中间人攻击、窃听攻击和跟踪攻击。基于无线医疗传感器网络(WMSN)中尚未解决的挑战，一些研究人员最近提出了各种针对这类医疗系统的认证和密钥协商(AKA)协议。然而，这些协议中的大多数都没有感知到WMSN中的物理层安全和过度集中的服务器问题。在本文中，针对这两个公开问题，我们提出了一种轻量级可靠的WMSN认证协议，它由尖端的区块链技术和物理不可克隆函数(PUF)组成。此外，还引入了一种模糊提取方案来处理生物特征信息。随后，使用两种安全评估方法证明了所提方案的高可靠性。最后，性能评估实验表明，在比较的方案中，所提出的相互认证协议所需的计算和通信代价最小。
Due to the emergence of heterogeneous Internet of Medical Things (IoMT) (e.g., wearable health devices, smartwatch monitoring, and automated insulin delivery systems), large volumes of patient data are dispatched to central cloud servers for disease analysis and diagnosis. Although this direct mode brings a lot of convenience for both patients and medical professionals (MPs), the open communication channel between them also incurs several security and privacy issues, such as man-in-the-middle attacks, eavesdropping attacks, and tracking attacks. Based on the unsolved challenges in wireless medical sensor networks (WMSNs), several researchers have proposed various authentication and key agreement (AKA) protocols for this type of healthcare system recently. However, most of these protocols do not perceive physical-layer security and over-centralized server problem in WMSN. In this article, to address these two open problems, we propose a lightweight and reliable authentication protocol for WMSN, which is composed of cutting-edge blockchain technology and physically unclonable functions (PUFs). In addition, a fuzzy extractor scheme is introduced to deal with biometric information. Subsequently, two security evaluation methods are used to prove the high reliability of our proposed scheme. Finally, performance evaluation experiments illustrate that the proposed mutual authentication protocol requires the least computation and communication cost among the compared schemes.