A medical cyber–physical system (MCPS) is a unique cyber–physical system (CPS), which combines embedded software control devices, networking capabilities, and complex physiological dynamics of patients in the modern medical field. In the process of communication, device, and information system interaction of MCPS, medical cyber–physical data are generated digitally, stored electronically, and accessed remotely by medical staff or patients. With the advent of the era of medical big data, a large amount of medical cyber–physical data is collected, and its sharing provides great value for diagnosis, pathological analysis, epidemic tracking, pharmaceutical, insurance, and so on. This overview will present MCPS’s architectures and frameworks from different perspectives, modeling and verification methods, identification and sign sensing technologies, key communications’ technologies, data storage and analysis technologies, monitoring systems, data security and privacy protection technologies, and key research perspectives and directions. We can have a comprehensive understanding of the important characteristics and technical route of MCPS, and grasp its research status and progress.

In the community medical Internet of Things (IoT) environment, there exist a large number of device nodes, network nodes and user nodes which form a heterogeneous network. In order to ensure smooth data exchange, some gateway nodes are adopted to connect different network spaces. Therefore, how to identify and authenticate the identities of heterogeneous nodes is an urgent problem to be solved. In this paper, we start with node security identity authentication, make uses of the mechanism of elliptic curve encryption algorithm signature and session key symmetric encryption, design an efficient community medical IoT node secure two-way identity authentication method, and propose a secure and reliable update mechanism for the update of authentication keys and session keys. These measures can effectively ensure the legality of nodes and communication security in the community medical IoT system. Through the analysis and comparison of experimental performance, this scheme is more suitable for the scene of community medical Internet of Things.

In a mobile edge computing environment, the computing tasks of resource-constrained IoT devices are often offloaded to mobile edge computing servers for processing. In order to ensure the security of the task offloading process, both parties need to perform mutual authentication and negotiate a session key first. The security defenses in the existing authentication schemes are often only aimed at external attackers, while ignoring the possible malicious behaviors of semi-trusted servers. Furthermore, they cannot effectively take into account the device-side lightweight and security, as well as the load problem of a single registry. In this paper, we propose a new anonymous authentication key agreement scheme that fully considers the resource constraints of terminal devices and the security risks of semi-trusted servers. In the scheme, we use the method of generating pairing information during registration to avoid the server-side directly contacting the user’s private information, and support trusted third parties not to participate in the authentication process. In addition, by setting up authentication servers to outsource computing tasks, the device-side can avoid blindly selecting a computing server for task offloading, achieve accurate task assignment and efficient execution of authentication. We use Real-Or-Random model and BAN logic to demonstrate the security of the proposed scheme, and use the ProVerif tool to verify its authenticated reachability and confidentiality. Compared with other schemes with the same structure, this scheme is superior to similar schemes, and has higher security on the basis of ensuring the least amount of computation on the device-side.

In mobile edge computing, the computing tasks of IoT terminal devices with limited computing power often need to be offloaded to servers for processing. However, there are malicious attacks by adversaries and malicious behaviors of servers in the network, coupled with the use of insecure network channels for data information transmission. These factors seriously threaten the privacy and data security of terminal devices and users. Therefore, it is urgent to use a safe and efficient anonymous authentication key agreement mechanism to verify the legitimacy of the identities of computing participants and ensure the safe transmission of task data. Recently Jia et al. proposed an identity-based authentication scheme, which combines many advantages of previous work and is resistant to various attacks. However, we found that their scheme has security problems, such as offline key guessing attack, internal attack, and user anonymity problems. We classify them as semi-trusted server attacks. In order to solve these security problems, we propose an improved scheme to better realize the authentication function by using flexible and security-enhanced keys for terminal equipment (TE), while ensuring the anonymity of the TE through implicit ID. Furthermore, we provide formal security proof, formal security verification, and security analysis for the improved protocol. Compared with the previous scheme, the scheme has certain improvements in security and performance.