Alruwaili Omar, Tanveer Muhammad, Alotaibi Faisal Mohammed, Abdelfattah Waleed, Armghan Ammar, Alserhani Faeiz M
Department of Computer Engineering and Networks, College of Computer and Information Sciences, Jouf University, Sakaka, 72388, Saudi Arabia.
Department of Computer Science, University of Management and Technology, Lahore, Pakistan.
Heliyon. 2024 Sep 10;10(18):e37577. doi: 10.1016/j.heliyon.2024.e37577. eCollection 2024 Sep 30.
As the Internet of Things (IoT) continues its rapid expansion, cloud computing has become integral to various smart healthcare applications. However, the proliferation of digital health services raises significant concerns regarding security and data privacy, making the protection of sensitive medical information paramount. To effectively tackle these challenges, it is crucial to establish resilient network infrastructure and data storage systems capable of defending against malicious entities and permitting access exclusively to authorized users. This requires the deployment of a robust authentication mechanism, wherein medical IoT devices, users (such as doctors or nurses), and servers undergo registration with a trusted authority. The process entails users retrieving data from the cloud server, while IoT devices collect patient data. Before granting access to data retrieval or storage, the cloud server verifies the authenticity of both the user and the IoT device, ensuring secure and authorized interactions within the system. With millions of interconnected smart medical IoT devices autonomously gathering and analyzing vital patient data, the importance of robust security measures becomes increasingly evident. Standard security protocols are fundamental in fortifying smart healthcare applications against potential threats. To confront these issues, this paper introduces a secure and resource-efficient cloud-enabled authentication mechanism. Through empirical analysis, it is demonstrated that our authentication mechanism effectively reduces computational and communication overheads, thereby improving overall system efficiency. Furthermore, both informal and formal analyses affirm the mechanism's resilience against potential cyberattacks, highlighting its effectiveness in safeguarding smart healthcare applications.
随着物联网（IoT）的持续快速扩张，云计算已成为各种智能医疗应用不可或缺的一部分。然而，数字健康服务的激增引发了对安全和数据隐私的重大担忧，使得保护敏感医疗信息至关重要。为了有效应对这些挑战，建立能够抵御恶意实体并仅允许授权用户访问的弹性网络基础设施和数据存储系统至关重要。这需要部署强大的认证机制，其中医疗物联网设备、用户（如医生或护士）和服务器需向可信机构进行注册。该过程包括用户从云服务器检索数据，而物联网设备收集患者数据。在授予数据检索或存储访问权限之前，云服务器会验证用户和物联网设备的真实性，确保系统内进行安全且经授权的交互。随着数百万相互连接的智能医疗物联网设备自主收集和分析重要的患者数据，强大安全措施的重要性日益凸显。标准安全协议对于加强智能医疗应用抵御潜在威胁至关重要。为应对这些问题，本文引入了一种安全且资源高效的基于云的认证机制。通过实证分析表明，我们的认证机制有效降低了计算和通信开销，从而提高了整体系统效率。此外，非正式和形式化分析均证实该机制对潜在网络攻击具有弹性，突出了其在保护智能医疗应用方面的有效性。
