An efficient privacy-preserving authentication scheme with adaptive key evolution in remote health monitoring system
An efficient privacy-preserving authentication scheme with adaptive key evolution in remote health monitoring system
复制标题
DOI：
10.1007/s12083-014-0299-6
复制
发表时间：
2014-06
影响因子：
4.2
通讯作者：
Haomiao Yang;Hyunsung Kim;Kambombo Mtonga
中科院分区：
文献类型：
--
作者：
Haomiao Yang;Hyunsung Kim;Kambombo Mtonga
远程健康监测系统使医生能够随时随地诊断和监测患者的健康问题。然而，由于患者的健康信息非常敏感，而且互联网不安全且容易受到许多攻击，因此数据很容易被对手泄露。更糟糕的是，手机也很容易受到损害。显然，这些问题给无线医疗保健带来了不同的隐私和安全要求。为了解决这些具有挑战性的问题，在本文中，我们提出了一种具有自适应密钥演化的有效隐私保护认证方案，可以防止非法访问患者的生命体征。此外，我们对密钥信息的泄漏过程进行建模，以设置适当的密钥更新间隔，从而可以自适应地控制密钥演化，以平衡通信效率和安全级别之间的权衡。安全分析表明，我们的方案可以实现经过认证的密钥协商、完美且强的密钥隔离、隐私保护以及其他重要的安全目标，例如：传输消息的真实性、完整性和新鲜度。性能评估表明，我们的方案对于资源有限的典型手机来说计算效率较高，并且通信开销较低。
The remote health monitoring system enables a doctor to diagnose and monitor health problems anywhere for a patient. However, since the patient health information is very sensitive and the Internet is unsecure and prone to many attacks, data can be easily compromised by adversaries. Worse, the mobile phone is also easy to be compromised. Clearly, these issues have brought different privacy and security requirements in wireless healthcare. To address these challenging issues, in this paper, we propose an efficient privacy-preserving authentication scheme with adaptive key evolution, which can prevent illegal access to the patient’s vital signs. Furthermore, we model the leakage process of the key information to set proper key renewal interval, which can adaptively control the key evolution to balance the trade-off between the communication efficiency and security level. The security analysis demonstrates that our scheme can achieve authenticated key agreement, perfect and strong key insulation, privacy preservation, and other important security goals, e.g. authenticity, integrity and freshness of transmitted messages. The performance evaluation shows that our scheme is computationally efficient for the typical mobile phone with limited resources, and it has low communication overhead.