Secure Wearable Apps for Remote Healthcare Through Modern Cryptography

Andric Li,Grace Luo,Christopher Tao,Diego Zuluaga
2024-10-10
Abstract:Wearable devices like smartwatches, wristbands, and fitness trackers are designed to be lightweight devices to be worn on the human body. With the increased connectivity of wearable devices, they will become integral to remote healthcare solutions. For example, a smartwatch can measure and upload a patient's vital signs to the cloud through a network which is monitored by software backed with Artificial Intelligence. When an anomaly of a patient is detected, it will be alerted to healthcare professionals for proper intervention. Remote healthcare offers substantial benefits for both patients and healthcare providers as patients may avoid expensive in-patient care by choosing the comfort of staying at home while being monitored after a surgery and healthcare providers can resolve challenges between limited resources and a growing population. While remote healthcare through wearable devices is ubiquitous and affordable, it raises concerns about patient privacy. Patients may wonder: Is my data stored in the cloud safe? Can anyone access and manipulate my data for blackmailing? Hence, securing patient private information end-to-end becomes crucial. This paper explores solutions for applying modern cryptography to secure wearable apps and ensure patient data is protected with confidentiality, integrity, and authenticity from wearable edge to cloud.
Cryptography and Security
What problem does this paper attempt to address?
The main objective of this paper is to address the privacy protection issues encountered when collecting patient data through wearable devices (such as smartwatches, wristbands, etc.) in telemedicine. Specifically, with the widespread application of wearable devices in telemedicine services, these devices can collect and upload patients' health data to the cloud, where AI-supported software monitors the data. When an abnormal situation is detected, the system alerts medical professionals to intervene. However, this convenience also raises concerns about the security of patient data, such as whether the data might be illegally accessed or tampered with. Therefore, ensuring the confidentiality, integrity, and authenticity of data throughout the entire process from data collection to the cloud becomes crucial. The paper explores how modern cryptographic techniques can be used to protect the security of wearable applications and ensure that patient data is not leaked or tampered with during transmission. The researchers demonstrate this process by developing an encrypted smartwatch application prototype for remote patient care, showing how to build a secure channel, how to encrypt heart rate information at the time of data collection and send it through an open network to a remote server, and how the server decrypts the data to ensure its confidentiality, authenticity, and integrity. Additionally, the paper discusses the standards and regulatory requirements related to telemedicine, such as HIPAA and GDPR regulations, emphasizing the importance of compliance.