Abstract:Reinforcement of the Internet of Medical Things (IoMT) network security has become extremely significant as these networks enable both patients and healthcare providers to communicate with each other by exchanging medical signals, data, and vital reports in a safe way. To ensure the safe transmission of sensitive information, robust and secure access mechanisms are paramount. Vulnerabilities in these networks, particularly at the access points, could expose patients to significant risks. Among the possible security measures, biometric authentication is becoming a more feasible choice, with a focus on leveraging regularly-monitored biomedical signals like Electrocardiogram (ECG) signals due to their unique characteristics. A notable challenge within all biometric authentication systems is the risk of losing original biometric traits, if hackers successfully compromise the biometric template storage space. Current research endorses replacement of the original biometrics used in access control with cancellable templates. These are produced using encryption or non-invertible transformation, which improves security by enabling the biometric templates to be changed in case an unwanted access is detected. This study presents a comprehensive framework for ECG-based recognition with cancellable templates. This framework may be used for accessing IoMT networks. An innovative methodology is introduced through non-invertible modification of ECG signals using blind signal separation and lightweight encryption. The basic idea here depends on the assumption that if the ECG signal and an auxiliary audio signal for the same person are subjected to a separation algorithm, the algorithm will yield two uncorrelated components through the minimization of a correlation cost function. Hence, the obtained outputs from the separation algorithm will be distorted versions of the ECG as well as the audio signals. The distorted versions of the ECG signals can be treated with a lightweight encryption stage and used as cancellable templates. Security enhancement is achieved through the utilization of the lightweight encryption stage based on a user-specific pattern and XOR operation, thereby reducing the processing burden associated with conventional encryption methods. The proposed framework efficacy is demonstrated through its application on the ECG-ID and MIT-BIH datasets, yielding promising results. The experimental evaluation reveals an Equal Error Rate (EER) of 0.134 on the ECG-ID dataset and 0.4 on the MIT-BIH dataset, alongside an exceptionally large Area under the Receiver Operating Characteristic curve (AROC) of 99.96% for both datasets. These results underscore the framework potential in securing IoMT networks through cancellable biometrics, offering a hybrid security model that combines the strengths of non-invertible transformations and lightweight encryption.

An IoT Real-Time Biometric Authentication System Based on ECG Fiducial Extracted Features Using Discrete Cosine Transform

ECG Authentication Method Based on Parallel Multi-Scale One-Dimensional Residual Network with Center and Margin Loss.

Continuous User Authentication using IoT Wearable Sensors

ECG classification system based on multi-domain features approach coupled with least square support vector machine (LS-SVM)

Practical human authentication method based on piecewise corrected Electrocardiogram

A Two-Stage Feature Transformation-Based Fingerprint Authentication System for Privacy Protection in IoT

Securing Internet-of-Medical-Things networks using cancellable ECG recognition

A Key to Your Heart: Biometric Authentication Based on ECG Signals

A Smart Biometric Identity Management Framework for Personalised IoT and Cloud Computing-Based Healthcare Services

A Secure Face Recognition for IoT-enabled Healthcare System

Priority-based Multi-feature Vector Model Using Convolution Neural Network for Biometric Authentication

Parallel score fusion of ECG and fingerprint for human authentication based on convolution neural network

Data Improvement Model Based on ECG Biometric for User Authentication and Identification

ECG Biometric Authentication Using Self-Supervised Learning for IoT Edge Sensors

An IoT-oriented Privacy-preserving Fingerprint Authentication System

A Novel Multimodal Biometric Person Authentication System Based on ECG and Iris Data

A Novel PPG-Based Biometric Authentication System Using a Hybrid CVT-ConvMixer Architecture with Dense and Self-Attention Layers

Electrocardiogram-Based Biometric Identification Using Mixed Feature Extraction and Sparse Representation

Security-Level Improvement of IoT-Based Systems Using Biometric Features

Efficient thermal face recognition method using optimized curvelet features for biometric authentication

Data preparation services for the authentication of people by their electrocardiogram