Intelligent two-phase dual authentication framework for Internet of Medical Things

Area of Science:

• Biomedical Engineering
• Cybersecurity
• Computer Science

Background:

• The Internet of Medical Things (IoMT) offers real-time healthcare monitoring but faces significant security challenges due to sensitive data and cyber threats.
• Existing security solutions for IoMT often fail to balance robust security with low computational overhead, leading to performance issues and vulnerabilities.
• Inadequate security in IoMT communication can compromise the confidentiality and integrity of patient health information.

Purpose of the Study:

• To develop and evaluate an intelligent two-phase dual authentication framework to enhance the security of sensor-to-server communication in IoMT environments.
• To address the limitations of current security approaches that struggle with performance bottlenecks and vulnerabilities.
• To ensure the secure and efficient transmission of sensitive medical data within IoMT networks.

Main Methods:

• Implemented a two-phase dual authentication framework utilizing Elliptic Curve Diffie-Hellman (ECDH) for key exchange during registration.
• Employed Advanced Encryption Standard Galois Counter Mode (AES-GCM) for secure data encryption during real-time communication.
• Conducted simulations to assess encryption-decryption time, computational cost, latency, packet delivery ratio, and resilience against common cyberattacks (man-in-the-middle, replay, brute force).

Main Results:

• The proposed framework demonstrated significant improvements: over 45% reduction in encryption/decryption time, 45.38% decrease in computational cost, and 28.42% reduction in latency compared to existing methods.
• Achieved a high packet delivery ratio, indicating efficient data transmission.
• Showcased strong defense capabilities against sophisticated cyber threats, ensuring data confidentiality and integrity.

Conclusions:

• The intelligent two-phase dual authentication framework effectively enhances IoMT security without compromising device functionality.
• The framework offers an ideal solution for integrating advanced security into existing healthcare systems.
• This approach provides a robust and efficient method for protecting sensitive medical data in IoMT communications.