The growth of electronic healthcare (e-health) systems is promoted by the evolution of Internet of Things (IoT) technology, as this new environment provides a variety of alternatives for medical data collection. Traditional authentication models in e-health systems cannot be applied directly to scenarios requiring low-latency, real-time services. Providing a variety of means for data transmission is considered an important method to achieve effective control in e-health systems. However, this new approach also leads to security and privacy concerns as increasingly flexible communication services are introduced. Achieving effective authentication of medical data for different users while providing security guarantees in e-health systems is an interesting problem. In this paper, we present a permissioned blockchain-based identity management and user authentication(PBBIMUA) scheme for the e-health environment. Our scheme satisfies the extensive security requirements of medical data. An evaluation and security analysis show that performance, in terms of lightweight construction and lower network latency with high security standards, is improved in comparison to known methods. The experimental results show that the system has good efficiency.
The NarrowBand Internet of Things (NB-IoT) system has become an integral part of the future fifth generation (5G) network. Although the NB-IoT system has gradually been improved in the traditional LTE network currently, the NB-IoT system does not have an effective access authentication scheme in the future 5G network. According to the current 3GPP standard, NB-IoT devices still use the traditional access authentication method to perform mutual authentication with the network, which may bring a large amount of signaling and communication overhead. This problem will be magnified in a large-scale device environment in the future 5G network. In this paper, a quantum resistance access authentication and data distribution scheme is proposed for large-scale NB-IoT devices. The scheme can simultaneously implement access authentication and data transmission of a group of NB-IoT devices based on the lattice-based homomorphic encryption technology. Our scheme not only greatly reduce the network burden, but also achieve strong security including privacy protection and anti-quantum attacks. The performance analysis results show that our scheme has the ideal efficiency.
4 February 2022 in Journal of Systems Architecture
Cyber-physical systems (CPSs) connected in the form of the Industrial Internet of Things (IIoT) are susceptible to various security threats. Due to the extensive deployment of infrastructure for IIoT devices, the trustworthiness and security of data are among the major concerns in CPSs. Therefore, establishing security measures against potential threats through trust assessment and trust authentication has become a key goal. Blockchain has the characteristics of traceability, anonymity, transparency, etc., and can achieve trust authentication for trust assessment. In our work, we propose a lightweight decentralized authentication and trust management scheme for edge AI-enabled CPSs that supports access control on the basis of extended chaotic maps, which meets the privacy and security needs of data transmission in a broader sense. Moreover, we develop a trust model for checking the trustworthiness of data collected by smart devices/sensor nodes. A formal security analysis is executed by utilizing the broadly applicable real-or-random (RoR) model. Our scheme, which is different from previous methods, combines high security with relatively low communication and computational costs. Through an informal security analysis, we verify that our proposal is in compliance with the security requirements and can withstand various forms of attacks. Furthermore, the functionality and performance analysis results indicate that our method is better suited for lightweight validation in CPS networks while providing a higher level of security than other methods.
Trusted data transmission is the foundation of the Internet of Things (IoT) security, so in the process of data transmission, the trust of IoT nodes needs to be confirmed in real time, and the real-time tracking of node trust is also expected. Yet, modern IoT devices provide limited security capabilities, forming a new attack focus. Remote attestation is a kind of technology to detect network threats by remotely checking the internal situation of terminal devices by a trusted entity. Multidevice attestation is rarely studied although the ongoing single device attestation techniques lack scalability in the application of IoT. In this article, we present a lightweight attestation protocol based on an IoT system under an ideal physical unclonable functions environment. Our protocol can resilient against any strong adversary who physically accesses IoT devices. Simulation results show that our protocol is scalable and can be applied to dynamic networks.
30 September 2013 in Security and Communication Networks