Abstract:Wireless medical sensor network (WMSN) is an application of the Internet of Things (IoT) that plays a very important role in today's era for the healthcare industry, especially after the COVID-19 pandemic. To maintain the security and privacy of the real-time health information of the users or patients, the proper mutual authentication and key agreement (AKA) is the foremost necessity. In this context, Shadi Nashwan proposed an end-to-end authentication scheme for a healthcare IoT system i.e. WMSN, and claimed that their scheme could resist so many existing possible threats and could maintain a low computational cost too. Unfortunately, during this research, it is found that their scheme can be threatened by eavesdropping and jamming/desynchronization attacks and have many computational flaws, as well. Moreover, they also assumed that the gateway node (GWN) is always trustworthy, but in reality, it is not always feasible, as the GWN may act as a local server. Hence, in this article, a new AKA scheme has been proposed using the user's physiological information like ECG data in order to make the WMSN more secure and reliable. In addition, the proposed scheme can resist many well-known threats like GWN spoofing attack, key escrow problem and can guard against GWN stolen database problem, also. To proof the superiority of the proposed scheme, the informal and formal security analysis have been performed using automated validation of internet security protocols and applications (i.e. AVISPA) and Burrows–Abadi–Needham (BAN) logic, respectively. Based on the comparative study with existing schemes concerning security features, computational and communicational cost, and storage requirement; the proposed scheme can perform better than the existing schemes and well suitable for practical implementations.

Dac-Pre: Practical Anonymous Data Access Scheme Control with Proxy Re-Encryption For Implantable Medical Devices

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

A Secure Proxy-based Access Control Scheme for Implantable Medical Devices

e-SAFE: Secure, Efficient and Forensics-Enabled Access to Implantable Medical Devices

Sensory-Data-Enhanced Authentication For Rfid-Based Access Control Systems

Efficient Anonymous Certificate-Based Multi- Message and Multi-Receiver Signcryption Scheme for Healthcare Internet of Things.

DAPriv: Decentralized architecture for preserving the privacy of medical data

Proxy re-signature scheme with cryptographic reverse firewall for medical data security

Securing Communications Between External Users and Wireless Body Area Networks

An Access Control Scheme With Privacy-Preserving Authentication and Flexible Revocation for Smart Healthcare

Backdoor-resistant identity-based proxy re-encryption for cloud-assisted wireless body area networks

A blockchain based secure and privacy aware medical data sharing using smart contract and encryption scheme

Collusion-resistant and privacy-preserving data sharing scheme on outsourced data in e-healthcare system

An anonymous mutual authentication and key agreement scheme in WMSN using physiological data

An anti-impersonation attack electronic health record sharing scheme based on proxy re-encryption and blockchain

A Secure Authentication Scheme for Wireless Sensor Networks Based on DAC and Intel SGX

Conditional Anonymous Remote Healthcare Data Sharing Over Blockchain

DAC‐MD: A privacy preserving drone‐access control scheme for last mile delivery

IMDfence: Architecting a Secure Protocol for Implantable Medical Devices

A permission‐combination scalable access control model for Internet of things

An Efficient User Authentication and User Anonymity Scheme with Provably Security for IoT-Based Medical Care System