Cloud Centric Authentication for Wearable Healthcare Monitoring System

Security and privacy are the major concerns in cloud computing as users have limited access on the stored data at the remote locations managed by different service providers. These become more challenging especially for the data generated from the wearable devices as it is highly sensitive and heter...

Full description

Saved in:
Bibliographic Details
Published in:IEEE transactions on dependable and secure computing 2020-09, Vol.17 (5), p.942-956
Main Authors: Jangirala, Srinivas, Das, Ashok Kumar, Kumar, Neeraj, Rodrigues, Joel J. P. C.
Format: Article
Language:English
Subjects:
Authentication
bigdata
Biomedical monitoring
Cloud computing
Cost analysis
healthcare
Medical services
Monitoring
Protocol (computers)
Security
Wearable sensors
Wearable technology
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Security and privacy are the major concerns in cloud computing as users have limited access on the stored data at the remote locations managed by different service providers. These become more challenging especially for the data generated from the wearable devices as it is highly sensitive and heterogeneous in nature. Most of the existing techniques reported in the literature are having high computation and communication costs and are vulnerable to various known attacks, which reduce their importance for applicability in real-world environment. Hence, in this paper, we propose a new cloud based user authentication scheme for secure authentication of medical data. After successful mutual authentication between a user and wearable sensor node, both establish a secret session key that is used for future secure communications. The extensively-used Real-Or-Random (ROR) model based formal security analysis and the broadly-accepted Automated Validation of Internet Security Protocols and Applications (AVISPA) tool based formal security verification show that the proposed scheme provides the session-key security and protects active attacks. The proposed scheme is also informally analyzed to show its resilience against other known attacks. Moreover, we have done a detailed comparative analysis for the communication and computation costs along with security and functionality features which proves its efficiency in comparison to the other existing schemes of its category.
ISSN:1545-5971
1941-0018
DOI:10.1109/TDSC.2018.2828306