Slight: A lightweight authentication scheme for smart healthcare services

• Published in: Computers & electrical engineering 2022-04, Vol.99, p.107803, Article 107803
• Main Authors: Amintoosi, Haleh, Nikooghadam, Mahdi, Shojafar, Mohammad, Kumari, Saru, Alazab, Mamoun
• Format: Article
• Language: English
• Subjects: Authentication; Critical Infrastructure; Health care; Health services; Internet of Medical Things; Internet of Things; Key agreement; Lightweight
• ISSN: 0045-7906; 1879-0755
• DOI: 10.1016/j.compeleceng.2022.107803

Critical infrastructures (CIs) include the vital resources for the country’s economic and health systems and should be kept secure. We face improvements in the Internet of Things which brings benefits and, at the same time, dependency for CIs. Internet of Medical Things (IoMT) is among the CI sectors that gather health-related information from patients via sensors and provide healthcare services accordingly. However, research has highlighted that this large-scale system opens the door to the patients’ private data disclosure. Recent work has concentrated on proposing authentication schemes to address this challenge. Motivated by this, in this paper, we introduce a secure and lightweight authentication and key agreement model named Slight. We informally prove Slight’s security and robustness against attacks and formally by using the Scyther tool. We analyze Slight’s performance to show it causes minimal computational overhead (0.0076 ms) and comparable communication overhead (1632 bits), making it suitable for IoMT. [Display omitted] •We propose secure and lightweight authentication and key agreement model named Slight for IoMT environments to provide privacy and security of patients’ health-related data.•The security of the proposed protocol is validated formally through the Scyther tool.•The proposed protocol provides resistance against well-known potential security attacks.•The performance analysis showed that proposed protocol is more efficient than other competing protocols in terms of computational and communication overhead.