Search

Showing total 3 results
3 results

1. A Light Weight Self-Adaptive Honey Encryption for User Authentication Scheme in Cloud-IoT Health Services.

Author

Renuka, P. and Booba, B.

Subjects
CLOUD computing, INTERNET of things, ALGORITHMS, ELECTRONIC health records, INTRUSION detection systems (Computer security)
Abstract

The recent advancement in cloud computing and Internet of Things (IoT) paradigms, paves a way to support the patients through remote monitoring and they can enjoy their health services at home. The medical professional (MP) needs to analyze IoT health data or Electronic Health Records (EHR) from a cloud server using their authorized login credentials. However, the Cloud-IoT network is vulnerable to many malicious attacks, it is necessary to make strong user authentication. Therefore, strong user authentication is a prerequisite for a successful global deployment of centralized healthcare systems. In this paper, we present a secure, efficient authentication protocol to allow MPs to access patient data through a Cloud IoT network. The proposed protocol contains Light Weight Self-Adaptive Honey Encryption (LWSHE) for securing the Internet of Things (IoT) medical data in a cloud server. The traditional Honey encryption algorithm has a message space limitation problem which is overcome through a discrete distribution function in Distribution Transforming Encoder (DTE) which maps the plain text strings into the seed strings. In the honey encryption algorithm, our proposed honeyword generation method can eliminate storage overhead and typo safety problems. Based on the result of the security and performance comparison analysis, the proposed protocol does not only prevents the vulnerable attacks from being performed but also achieves more complex security operations and efficient user authentication. [ABSTRACT FROM AUTHOR]

Published
2022

2. Security analysis and secure channel-free certificateless searchable public key authenticated encryption for a cloud-based Internet of things

Author

Caifen Wang, Bin Wu, and Hailong Yao

Subjects
Security analysis, Health Information Exchange, Computer science, Economics, Internet of Things, Encryption, Social Sciences, Health Care Sector, Information Storage and Retrieval, Cloud computing, Cryptography, 02 engineering and technology, computer.software_genre, Efficiency, Organizational, Public-key cryptography, 0202 electrical engineering, electronic engineering, information engineering, Medicine and Health Sciences, Electronic Health Records, Data Management, Multidisciplinary, Applied Mathematics, Simulation and Modeling, Software Engineering, Physical Sciences, Medicine, Engineering and Technology, Wireless Technology, Algorithms, Confidentiality, Research Article, Authenticated encryption, Computer and Information Sciences, Science, Computer security, Research and Analysis Methods, Subroutines, Health Economics, Humans, Secure channel, Computer networks, Computer Security, Internet, Public Sector, business.industry, 020208 electrical & electronic engineering, 020206 networking & telecommunications, Outsourced Services, Computer security model, Cloud Computing, Computing Methods, Health Care, business, computer, Mathematics
Abstract

With the rapid development of informatization, an increasing number of industries and organizations outsource their data to cloud servers, to avoid the cost of local data management and to share data. For example, industrial Internet of things systems and mobile healthcare systems rely on cloud computing’s powerful data storage and processing capabilities to address the storage, provision, and maintenance of massive amounts of industrial and medical data. One of the major challenges facing cloud-based storage environments is how to ensure the confidentiality and security of outsourced sensitive data. To mitigate these issues, He et al. and Ma et al. have recently independently proposed two certificateless public key searchable encryption schemes. In this paper, we analyze the security of these two schemes and show that the reduction proof of He et al.’s CLPAEKS scheme is incorrect, and that Ma et al.’s CLPEKS scheme is not secure against keyword guessing attacks. We then propose a channel-free certificateless searchable public key authenticated encryption (dCLPAEKS) scheme and prove that it is secure against inside keyword guessing attacks under the enhanced security model. Compared with other certificateless public key searchable encryption schemes, this scheme has higher security and comparable efficiency.

Published
2020

3. Algebraic secret sharing using privacy homomorphisms for IoT-based healthcare systems

Author

Chang-Tsun Li and Ching-Chun Chang

Subjects
Scheme (programming language), Information privacy, Databases, Factual, Computer science, Internet of Things, Monitoring, Ambulatory, 02 engineering and technology, Computer security, computer.software_genre, Encryption, Secret sharing, Domain (software engineering), 0502 economics and business, 0202 electrical engineering, electronic engineering, information engineering, Electronic Health Records, Humans, Computer Security, computer.programming_language, Residential gateway, business.industry, Applied Mathematics, 05 social sciences, Homomorphic encryption, General Medicine, Cloud Computing, Models, Theoretical, Computational Mathematics, Privacy, Modeling and Simulation, Collusion, 020201 artificial intelligence & image processing, General Agricultural and Biological Sciences, business, computer, Wireless Technology, 050203 business & management, Algorithms, Medical Informatics
Abstract

Healthcare industry is one of the promising fields adopting the Internet of Things (IoT) solutions. In this paper, we study secret sharing mechanisms towards resolving privacy and security issues in IoT-based healthcare applications. In particular, we show how multiple sources are possible to share their data amongst a group of participants without revealing their own data to one another as well as the dealer. Only an authorised subset of participants is able to reconstruct the data. A collusion of fewer participants has no better chance of guessing the private data than a non-participant who has no shares at all. To realise this system, we introduce a novel research upon secret sharing in the encrypted domain. In modern healthcare industry, a patient's health Article often contains data acquired from various sensor nodes. In order to protect information privacy, the data from sensor nodes is encrypted at once and shared among a number of cloud servers of medical institutions via a gateway device. The complete health Article will be retrieved for diagnosis only if the number of presented shares meets the access policy. The retrieval procedure does not involve decryption and therefore the scheme is favourable in some time-sensitive circumstances such as a surgical emergency. We analyse the pros and cons of several possible solutions and develop practical secret sharing schemes for IoT- based healthcare systems.

Published
2019