Jan Mian Ahmad, Khan Fazlullah, Mastorakis Spyridon, Adil Muhammad, Akbar Aamir, Stergiou Nicholas
Department of Computer Science, Abdul Wali Khan University Mardan, 23200, KPK, Pakistan.
Department of Computer Science, University of Nebraska at Omaha, NE, USA 68182-0002.
IEEE Trans Green Commun Netw. 2021 Sep;5(3):1202-1211. doi: 10.1109/tgcn.2021.3077318. Epub 2021 May 4.
Internet of Things (IoT) is considered as a key enabler of health informatics. IoT-enabled devices are used for in-hospital and in-home patient monitoring to collect and transfer biomedical data pertaining to blood pressure, electrocardiography (ECG), blood sugar levels, body temperature, etc. Among these devices, wearables have found their presence in a wide range of healthcare applications. These devices generate data in real-time and transmit them to nearby gateways and remote servers for processing and visualization. The data transmitted by these devices are vulnerable to a range of adversarial threats, and as such, privacy and integrity need to be preserved. In this paper, we present LightIoT, a lightweight and secure communication approach for data exchanged among the devices of a healthcare infrastructure. LightIoT operates in three phases: initialization, pairing, and authentication. These phases ensure the reliable transmission of data by establishing secure sessions among the communicating entities (wearables, gateways and a remote server). Statistical results exhibit that our scheme is lightweight, robust, and resilient against a wide range of adversarial attacks and incurs much lower computational and communication overhead for the transmitted data in the presence of existing approaches.
物联网（IoT）被视为健康信息学的关键推动因素。启用物联网的设备用于医院内和家庭中的患者监测，以收集和传输与血压、心电图（ECG）、血糖水平、体温等相关的生物医学数据。在这些设备中，可穿戴设备已在广泛的医疗保健应用中得到应用。这些设备实时生成数据，并将其传输到附近的网关和远程服务器进行处理和可视化。这些设备传输的数据容易受到一系列对抗性威胁，因此，需要保护隐私和完整性。在本文中，我们提出了LightIoT，这是一种用于医疗保健基础设施设备之间数据交换的轻量级安全通信方法。LightIoT分三个阶段运行：初始化、配对和认证。这些阶段通过在通信实体（可穿戴设备、网关和远程服务器）之间建立安全会话来确保数据的可靠传输。统计结果表明，我们的方案是轻量级的、健壮的，并且能够抵御广泛的对抗性攻击，并且在现有方法存在的情况下，对于传输的数据产生的计算和通信开销要低得多。
