Abstract:Reinforcement of the Internet of Medical Things (IoMT) network security has become extremely significant as these networks enable both patients and healthcare providers to communicate with each other by exchanging medical signals, data, and vital reports in a safe way. To ensure the safe transmission of sensitive information, robust and secure access mechanisms are paramount. Vulnerabilities in these networks, particularly at the access points, could expose patients to significant risks. Among the possible security measures, biometric authentication is becoming a more feasible choice, with a focus on leveraging regularly-monitored biomedical signals like Electrocardiogram (ECG) signals due to their unique characteristics. A notable challenge within all biometric authentication systems is the risk of losing original biometric traits, if hackers successfully compromise the biometric template storage space. Current research endorses replacement of the original biometrics used in access control with cancellable templates. These are produced using encryption or non-invertible transformation, which improves security by enabling the biometric templates to be changed in case an unwanted access is detected. This study presents a comprehensive framework for ECG-based recognition with cancellable templates. This framework may be used for accessing IoMT networks. An innovative methodology is introduced through non-invertible modification of ECG signals using blind signal separation and lightweight encryption. The basic idea here depends on the assumption that if the ECG signal and an auxiliary audio signal for the same person are subjected to a separation algorithm, the algorithm will yield two uncorrelated components through the minimization of a correlation cost function. Hence, the obtained outputs from the separation algorithm will be distorted versions of the ECG as well as the audio signals. The distorted versions of the ECG signals can be treated with a lightweight encryption stage and used as cancellable templates. Security enhancement is achieved through the utilization of the lightweight encryption stage based on a user-specific pattern and XOR operation, thereby reducing the processing burden associated with conventional encryption methods. The proposed framework efficacy is demonstrated through its application on the ECG-ID and MIT-BIH datasets, yielding promising results. The experimental evaluation reveals an Equal Error Rate (EER) of 0.134 on the ECG-ID dataset and 0.4 on the MIT-BIH dataset, alongside an exceptionally large Area under the Receiver Operating Characteristic curve (AROC) of 99.96% for both datasets. These results underscore the framework potential in securing IoMT networks through cancellable biometrics, offering a hybrid security model that combines the strengths of non-invertible transformations and lightweight encryption.

A Robust and Reusable Ecg-Based Authentication and Data Encryption Scheme for Ehealth Systems

ECG Authentication Method Based on Parallel Multi-Scale One-Dimensional Residual Network with Center and Margin Loss.

Efficient Anonymous Certificate-Based Multi- Message and Multi-Receiver Signcryption Scheme for Healthcare Internet of Things.

Secure and resource-efficient communications for telemedicine systems

ECG-Cryptography and Authentication in Body Area Networks

A Secure Three-Factor Authentication Scheme for E-health Systems

Securing Internet-of-Medical-Things networks using cancellable ECG recognition

Research on Privacy Preserving ECG-based Identiifcation Technology

Robust Patient Information Embedding and Retrieval Mechanism for ECG Signals

A Key to Your Heart: Biometric Authentication Based on ECG Signals

Data preparation services for the authentication of people by their electrocardiogram

ECC-based lightweight authentication and access control scheme for IoT E-healthcare

Symmetric Cryptography With a Chaotic Map and a Multilayer Machine Learning Network for Physiological Signal Infosecurity: Case Study in Electrocardiogram

ECG-PPS: Privacy Preserving Disease Diagnosis and Monitoring System for Real-Time ECG Signal

Encryption of ECG signals for telemedicine applications

An Authentic and Privacy-Preserving Scheme Towards E-Health Data Transmission Service

Intelligent Healthcare System Using Patients Confidential Data Communication in Electrocardiogram Signals

Real-time privacy preserving disease diagnosis using ECG signal

Protecting Patient Confidential Information Based on ECG Reversible Data Hiding

Selective encryption on ECG data in body sensor network based on supervised machine learning

A joint resource-aware and medical data security framework for wearable healthcare systems