Khan Habib Ullah, Ali Yasir
Accounting and Information Systems, College of Business and Economics, Qatar University, Doha, Qatar.
Shahzeb Shaheed Government Degree College Razzar, Swabi, Higher Education Department, Peshawar Khyber Pakhtunkhwa, Pakistan.
Sci Rep. 2024 May 28;14(1):12233. doi: 10.1038/s41598-024-62066-3.
The intensification of the Internet of Health Things devices created security concerns due to the limitations of these devices and the nature of the healthcare data. While dealing with the security challenges, several authentication schemes, protocols, processes, and standards have been adopted. Consequently, making the right decision regarding the installation of a secure authentication solution or procedure becomes tricky and challenging due to the large number of security protocols, complexity, and lack of understanding. The major objective of this study is to propose an IoHT-based assessment framework for evaluating and prioritizing authentication schemes in the healthcare domain. Initially, in the proposed work, the security issues related to authentication are collected from the literature and consulting experts' groups. In the second step, features of various authentication schemes are collected under the supervision of an Internet of Things security expert using the Delphi approach. The collected features are used to design suitable criteria for assessment and then Graph Theory and Matrix approach applies for the evaluation of authentication alternatives. Finally, the proposed framework is tested and validated to ensure the results are consistent and accurate by using other multi-criteria decision-making methods. The framework produces promising results such as 93%, 94%, and 95% for precision, accuracy, and recall, respectively in comparison to the existing approaches in this area. The proposed framework can be picked as a guideline by healthcare security experts and stakeholders for the evaluation and decision-making related to authentication issues in IoHT systems.
由于健康物联网设备的局限性以及医疗数据的性质,健康物联网设备的强化引发了安全问题。在应对安全挑战时,已经采用了多种认证方案、协议、流程和标准。因此,由于安全协议数量众多、复杂性高且缺乏了解,在选择安装安全认证解决方案或程序时做出正确决策变得棘手且具有挑战性。本研究的主要目的是提出一个基于健康物联网的评估框架,用于评估医疗领域的认证方案并对其进行优先级排序。最初,在所提出的工作中,从文献和咨询专家组收集与认证相关的安全问题。第二步,在物联网安全专家的监督下,使用德尔菲法收集各种认证方案的特征。收集到的特征用于设计合适的评估标准,然后应用图论和矩阵方法对认证备选方案进行评估。最后,通过使用其他多准则决策方法对所提出的框架进行测试和验证,以确保结果的一致性和准确性。与该领域的现有方法相比,该框架分别产生了93%、94%和95%的精确率、准确率和召回率等令人满意的结果。医疗安全专家和利益相关者可以将所提出的框架作为评估和决策健康物联网系统中认证问题的指导方针。