A New PUF-Based Protocol for Mutual Authentication and Key Agreement Between Three Layers of Entities in Cloud-Based IoMT Networks

• Published in: IEEE access Vol. 12; p. 1
• Main Authors: Modarres, Amir Masoud Aminian, Anzabi-Nezhad, Nima S., Zare, Maryam
• Format: Journal Article
• Language: English
• Published: Piscataway IEEE 01.01.2024; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Authentication; Authentication protocol; Cloud computing; Computer architecture; Computer networks; Computing costs; Cryptography; Cybersecurity; Internet of Medical Things; Internet of Medical Things (IoMT); Internet of Things; Lightweight; Medical services; Network security; Networks; Physical attacks; Physical unclonable function; Physically Unclonable Function (PUF); Protocol; Protocols; Security; Servers; Smart sensors
• ISSN: 2169-3536; 2169-3536
• DOI: 10.1109/ACCESS.2024.3361921

The Internet of Medical Things (IoMT) is a promising framework for expanding and improving telemedicine services. A common cloud-based IoMT architecture consists of three layers of entities, the first layer (such as smart sensors and devices), the second layer (such as gateways), and the third layer (such as cloud servers). Obviously, in these networks, the protection of sensitive information against security threats as well as authentication between the entities is a key issue. On the other hand, the devices involved in the first and second layers usually suffer from poor computational capabilities as well as a lack of physical protection, which should be considered in the design of security protocols. Recently, Alladi et al. have proposed a lightweight authentication protocol for the cloud-based IoMT that addresses these challenges, using Physically Unclonable Function (PUF). In this paper, we first provide thorough cryptanalysis of their scheme and clarify its important vulnerabilities that lead to protocol collapse. Then, we propose a new lightweight protocol based on PUF to perform strong mutual authentication and key agreement between parties in the IoMT networks. The formal (using BAN logic) and informal security analysis demonstrate that our scheme is resistant to several well-known attacks, including physical attacks. Also, our evaluation of computational cost and security features clearly shows that the proposed scheme outperforms similar schemes in security and efficiency. Another important advantage of our protocol is that it performs the authentication and key agreement process separately for each pair of layers in the three-layer cloud-based IoMT architecture.