Cargando…
An Improved Lightweight User Authentication Scheme for the Internet of Medical Things
The Internet of Medical Things (IoMT) is used in the medical ecosystem through medical IoT sensors, such as blood glucose, heart rate, temperature, and pulse sensors. To maintain a secure sensor network and a stable IoMT environment, it is important to protect the medical IoT sensors themselves and...
Autores principales: | , , , |
---|---|
Formato: | Online Artículo Texto |
Lenguaje: | English |
Publicado: |
MDPI
2023
|
Materias: | |
Acceso en línea: | https://www.ncbi.nlm.nih.gov/pmc/articles/PMC9920152/ https://www.ncbi.nlm.nih.gov/pubmed/36772160 http://dx.doi.org/10.3390/s23031122 |
_version_ | 1784887000237604864 |
---|---|
author | Kim, Keunok Ryu, Jihyeon Lee, Youngsook Won, Dongho |
author_facet | Kim, Keunok Ryu, Jihyeon Lee, Youngsook Won, Dongho |
author_sort | Kim, Keunok |
collection | PubMed |
description | The Internet of Medical Things (IoMT) is used in the medical ecosystem through medical IoT sensors, such as blood glucose, heart rate, temperature, and pulse sensors. To maintain a secure sensor network and a stable IoMT environment, it is important to protect the medical IoT sensors themselves and the patient medical data they collect from various security threats. Medical IoT sensors attached to the patient’s body must be protected from security threats, such as being controlled by unauthorized persons or transmitting erroneous medical data. In IoMT authentication, it is necessary to be sensitive to the following attack techniques. (1) The offline password guessing attack easily predicts a healthcare administrator’s password offline and allows for easy access to the healthcare worker’s account. (2) Privileged-insider attacks executed through impersonation are an easy way for an attacker to gain access to a healthcare administrator’s environment. Recently, previous research proposed a lightweight and anonymity preserving user authentication scheme for IoT-based healthcare. However, this scheme was vulnerable to offline password guessing, impersonation, and privileged insider attacks. These attacks expose not only the patients’ medical data such as blood pressure, pulse, and body temperature but also the patients’ registration number, phone number, and guardian. To overcome these weaknesses, in the present study we propose an improved lightweight user authentication scheme for the Internet of Medical Things (IoMT). In our scheme, the hash function and XOR operation are used for operation in low-spec healthcare IoT sensor. The automatic cryptographic protocol tool ProVerif confirmed the security of the proposed scheme. Finally, we show that the proposed scheme is more secure than other protocols and that it has 266.48% better performance than schemes that have been previously described in other studies. |
format | Online Article Text |
id | pubmed-9920152 |
institution | National Center for Biotechnology Information |
language | English |
publishDate | 2023 |
publisher | MDPI |
record_format | MEDLINE/PubMed |
spelling | pubmed-99201522023-02-12 An Improved Lightweight User Authentication Scheme for the Internet of Medical Things Kim, Keunok Ryu, Jihyeon Lee, Youngsook Won, Dongho Sensors (Basel) Article The Internet of Medical Things (IoMT) is used in the medical ecosystem through medical IoT sensors, such as blood glucose, heart rate, temperature, and pulse sensors. To maintain a secure sensor network and a stable IoMT environment, it is important to protect the medical IoT sensors themselves and the patient medical data they collect from various security threats. Medical IoT sensors attached to the patient’s body must be protected from security threats, such as being controlled by unauthorized persons or transmitting erroneous medical data. In IoMT authentication, it is necessary to be sensitive to the following attack techniques. (1) The offline password guessing attack easily predicts a healthcare administrator’s password offline and allows for easy access to the healthcare worker’s account. (2) Privileged-insider attacks executed through impersonation are an easy way for an attacker to gain access to a healthcare administrator’s environment. Recently, previous research proposed a lightweight and anonymity preserving user authentication scheme for IoT-based healthcare. However, this scheme was vulnerable to offline password guessing, impersonation, and privileged insider attacks. These attacks expose not only the patients’ medical data such as blood pressure, pulse, and body temperature but also the patients’ registration number, phone number, and guardian. To overcome these weaknesses, in the present study we propose an improved lightweight user authentication scheme for the Internet of Medical Things (IoMT). In our scheme, the hash function and XOR operation are used for operation in low-spec healthcare IoT sensor. The automatic cryptographic protocol tool ProVerif confirmed the security of the proposed scheme. Finally, we show that the proposed scheme is more secure than other protocols and that it has 266.48% better performance than schemes that have been previously described in other studies. MDPI 2023-01-18 /pmc/articles/PMC9920152/ /pubmed/36772160 http://dx.doi.org/10.3390/s23031122 Text en © 2023 by the authors. https://creativecommons.org/licenses/by/4.0/Licensee MDPI, Basel, Switzerland. This article is an open access article distributed under the terms and conditions of the Creative Commons Attribution (CC BY) license (https://creativecommons.org/licenses/by/4.0/). |
spellingShingle | Article Kim, Keunok Ryu, Jihyeon Lee, Youngsook Won, Dongho An Improved Lightweight User Authentication Scheme for the Internet of Medical Things |
title | An Improved Lightweight User Authentication Scheme for the Internet of Medical Things |
title_full | An Improved Lightweight User Authentication Scheme for the Internet of Medical Things |
title_fullStr | An Improved Lightweight User Authentication Scheme for the Internet of Medical Things |
title_full_unstemmed | An Improved Lightweight User Authentication Scheme for the Internet of Medical Things |
title_short | An Improved Lightweight User Authentication Scheme for the Internet of Medical Things |
title_sort | improved lightweight user authentication scheme for the internet of medical things |
topic | Article |
url | https://www.ncbi.nlm.nih.gov/pmc/articles/PMC9920152/ https://www.ncbi.nlm.nih.gov/pubmed/36772160 http://dx.doi.org/10.3390/s23031122 |
work_keys_str_mv | AT kimkeunok animprovedlightweightuserauthenticationschemefortheinternetofmedicalthings AT ryujihyeon animprovedlightweightuserauthenticationschemefortheinternetofmedicalthings AT leeyoungsook animprovedlightweightuserauthenticationschemefortheinternetofmedicalthings AT wondongho animprovedlightweightuserauthenticationschemefortheinternetofmedicalthings AT kimkeunok improvedlightweightuserauthenticationschemefortheinternetofmedicalthings AT ryujihyeon improvedlightweightuserauthenticationschemefortheinternetofmedicalthings AT leeyoungsook improvedlightweightuserauthenticationschemefortheinternetofmedicalthings AT wondongho improvedlightweightuserauthenticationschemefortheinternetofmedicalthings |