A privacy and session key based authentication scheme for medical IoT networks

• Published in: Computer communications Vol. 166; pp. 154 - 164
• Main Authors: Kumar, Pankaj, Chouhan, Lokesh
• Format: Journal Article
• Language: English
• Published: Elsevier B.V 15.01.2021
• Subjects: Extended unique identifier; Interface identifier; Medical cloud server; Medical internet of things; Extended unique identifier; Medical cloud server; Interface identifier; Medical internet of things
• ISSN: 0140-3664; 1873-703X
• DOI: 10.1016/j.comcom.2020.11.017

Due to rapid increase rate of smart medical devices, the existing security internet of things (IoT) protocols cannot guaranty to perform better in-term of various threats. In this paper, the Secure Addressing and Mutual Authentication protocol (SAMA) scheme is proposed to protect the network from multiple attacks. The SAMA scheme uses the unique addressing and identification method to authenticates the smart medical monitoring devices, so that they can uniquely identifies in medical IoT network. Additionally, the proposed scheme also preserves anonymity with the help of session key establishment to secure communication between the user and medical server. The performance of SAMA scheme has been evaluated in-term of functionality, computation and communication cost, and results are compared with existing schemes. Finally for security, the proposed scheme is also analyzed formally and informally using AVISPA tool and widely-accepted BAN logic model. The security analysis shows that the SAMA scheme ensures security against, such as, impersonation, password guessing, man-in-the-middle attack replay, etc.