A Secured Biometric-Based Authentication Scheme in IoT-Based Patient Monitoring System

Abstract

In this research work, the biometric-based authentication scheme for IoT-based patient monitoring system has been studied. IoT-based patient monitoring system helps the patients to enjoy the healthcare-related services sitting at remote location in their homes. Patient’s privacy, safety, and security in this case are very much essential. Authentication technique in this regard is the unique selling point for establishing the safe and secure communication between the patient and the medical server. Jiang et al. have proposed and analyzed a biometric-based authentication scheme in 2017. It was seen that Jiang et al.’s scheme fails to protect the communication system against some of the vulnerable attacks like denial-of-service attack, replay attack, man-in-the-middle attack, offline password guessing attack, smart card stolen attack, forward secrecy attack, user anonymity attack, mutual authentication attack, etc. In order to prevent these security attacks, an enhanced biometric-based authentication scheme using biometric hash function and time stamping in the proposed cryptographic algorithm has been proposed. An informal security analysis of the proposed scheme is also done here. The authentication proof using BAN (Burrows-Abadi-Needham) logic is also done in this paper. For hospitals, a close and prompt monitoring might be required for the critical patients who are admitted in respective critical care units. In order to monitor and diagnose the health of the ailing patients more effectively and efficiently, the smart health application using IoT-based infrastructure with biometric-based authentication system would be required. Considering the poor physiological condition of the patients, some wearable wireless sensor devices would be a better option. The system would monitor patient’s condition throughout the day and would send the different health-related parameters of the patients to the relevant doctors through sensors and human interfacing system like mobile app. The doctors sitting at the remote location would see and monitor every data of the patients through their app and can suggest relevant medicines to the patients immediately. The inherent nature of the system would reduce the lead time for the doctors to come and visit physically to the patients and diagnose. The whole architecture of IoT in this case would be requiring some biometric-based authentication scheme in order to maximize the security and safety features of the system. This also in turn will reduce any kind of vulnerabilities or risks in the system. As the patient monitoring system deals with the life and death of a patient and which is very critical and sensitive for the patient, hence a robust and secured system is very much required for this architecture to work. In this thesis, a secured and robust biometric-based authentication system for IoT-based patient monitoring system has been discussed. This scheme is suitable, secure, and effective for healthcare applications.