Lightweight and Efficient Authentication and Key Distribution Scheme for Cloud-Assisted IoT for Telemedicine

Area of Science:

• Computer Science
• Biomedical Engineering
• Cybersecurity

Background:

• Medical Internet of Things (IoT) systems are vital for remote patient monitoring and telemedicine.
• Existing authentication schemes for medical IoT face security and efficiency challenges.
• The Wang et al. scheme has limitations, including susceptibility to attackers generating illegitimate session keys and inefficiency.

Purpose of the Study:

• To propose a novel, secure, and efficient authentication and key distribution scheme for medical IoT systems.
• To address the identified limitations of the Wang et al. authentication scheme.
• To enhance patient privacy and data security in telemedicine applications.

Main Methods:

• Incorporation of a physically unclonable function (PUF) for enhanced security.
• Utilizing public-key computation, with intensive operations offloaded to the cloud center for efficiency.
• Implementation of temporary IDs for IoT devices to protect patient privacy.
• Formal security validation using the ProVerif tool.

Main Results:

• The proposed scheme effectively overcomes the security vulnerabilities of the Wang et al. scheme.
• Enhanced efficiency is achieved by centralizing computationally intensive operations in the cloud.
• Improved patient privacy is ensured through the use of temporary device IDs.
• Formal security analysis confirms the robustness of the proposed approach.

Conclusions:

• The novel authentication and key distribution scheme offers a more secure and efficient solution for medical IoT.
• The integration of PUF and cloud-based computation significantly strengthens system security and performance.
• The scheme effectively balances security, efficiency, and patient privacy in telemedicine contexts.