Technol Health Care. 2024;32(6):5081-5103. doi: 10.3233/THC-240790.
In the Healthcare (HC) sector, the usage of Wireless Sensor Healthcare Networks (WSHN) is attaining specific importance. The sensor device is implanted into the patient's body, and the sensed health information of patients is transformed via data aggregating devices like mobile devices, cameras, and so on, to the doctors. Thus, the early signs of diseases are identified, and remote monitoring of the patient's health is carried out by the physician on time. This aids in improving the health condition of the people and reduces the severity of disorders. But, the security gap in HC remains unresolved, despite various advantages.
This work proposes secured data communication in WSHN using Exponential Message Digest5 (EXP-MD5) and Diffie Hellman Secret Key-based Elliptic Curve Cryptography (DHSK-ECC) techniques.
Primarily, the patient registers their details in the Hospital Cloud Server (HCS). With hospital ID and patient ID, public and private keys are generated during registration. Afterward, by utilizing the Navie Shuffling (NS) technique, nCr combinations are created and shuffled. After shuffling, any of the randomly selected combinations are encoded utilizing the American Standard Code for Information Interchange (ASCII) code. For patient authentication, the ASCII code is further converted into a Quick Response(QR) code. Upon successful registration, the patient logs in to HCS. The patient can book for doctor's appointment if the login details are verified with those of the registered details. On consulting the doctor at the pre-informed time, the digital signature is created utilizing the Universal Unique Salt-based Digital Signature Algorithm (UUS-DSA) for authenticating the patient details. Further, for providing accessibility to all the authorized patients, the registered patients on HCS are considered as nodes. Then, an authorized path is created using the EXP-MD5 technique to protect each individual patient's details. The patient's IoT data is sensed, followed by authorized path creation. The data is encrypted via the DHSK-ECC algorithm for secure data transmission. Lastly, all the information is stored in HCS, so that the patient's health condition is regularly monitored by the doctor and the needy advice is suggested to the patients in the future. Also, hash matching is carried out when the doctor needs to access data.
The proposed technique's efficacy is validated by the performance analysis in comparison with other conventional techniques.
In this proposed research, the authentication is performed in multiple scenarios to enhance data security and user privacy. The patient details are authenticated during registration and verification to access the online consultation only by the authorized person. Further, the patient health information is encrypted in the proposed work after consultation so that the intrusion of medical records by malicious users and data tampering is prevented. Also, the sensed data gathered from patients are transferred to the HCS by creating the authorized path, which further enhances the security of patient data. Thus, the data communication of the WSHN is well-secured in this work through multi-level authentication and improved cryptography techniques.
在医疗保健（HC）领域，无线传感器医疗网络（WSHN）的使用正变得尤为重要。传感器设备被植入患者体内，患者的健康信息通过移动设备、摄像头等数据聚合设备进行转换，然后传输给医生。这样，就可以识别出疾病的早期迹象，并由医生对患者的健康状况进行远程监测。这有助于改善人们的健康状况，降低疾病的严重程度。但是，尽管存在各种优势，HC 中的安全漏洞仍然没有得到解决。
本研究提出了使用指数消息摘要 5（EXP-MD5）和基于 Diffie-Hellman 秘密密钥的椭圆曲线密码术（DHSK-ECC）技术在 WSHN 中进行安全的数据通信。
首先，患者在医院云服务器（HCS）中注册他们的详细信息。在注册时，使用医院 ID 和患者 ID 生成公钥和私钥。然后，通过利用朴素洗牌（NS）技术，创建 nCr 组合并进行洗牌。洗牌后，利用美国信息交换标准码（ASCII）码对任意随机选择的组合进行编码。为了进行患者认证，将 ASCII 码进一步转换为快速响应（QR）码。成功注册后，患者登录 HCS。如果登录详细信息与注册详细信息匹配，则患者可以预约医生就诊。在预先通知的时间咨询医生后，利用通用唯一盐基数字签名算法（UUS-DSA）为患者详细信息创建数字签名，以进行身份验证。此外，为了向所有授权患者提供访问权限，将 HCS 上注册的患者视为节点。然后，使用 EXP-MD5 技术创建授权路径，以保护每个患者的个人详细信息。感测患者的 IoT 数据，然后创建授权路径。通过 DHSK-ECC 算法对数据进行加密，以实现安全的数据传输。最后，将所有信息存储在 HCS 中，以便医生定期监测患者的健康状况，并在未来向患者提出急需的建议。此外，当医生需要访问数据时，会进行哈希匹配。
通过与其他传统技术的性能分析比较，验证了所提出技术的有效性。
在这项研究中，通过多种场景进行身份验证，以提高数据安全性和用户隐私。在注册和验证期间对患者详细信息进行身份验证，仅允许授权人员访问在线咨询。此外，在咨询后，使用所提出的工作对患者健康信息进行加密，以防止恶意用户入侵医疗记录和篡改数据。此外，通过创建授权路径，将从患者收集的感测数据传输到 HCS，进一步增强了患者数据的安全性。因此，通过多级认证和改进的加密技术，本研究工作可以很好地保护 WSHN 的数据通信安全。
