An end-to-end secure key management protocol for e-health applications. (May 2015)

• Record Type: Journal Article
• Authors: Abdmeziem, Mohammed Riyadh; Tandjaoui, Djamel
• Is Part Of: Computers & electrical engineering. Volume 44(2015)
• Page Start: 184
• Page End: 197
• Publication Date: 2015-05
• Subjects: E-health -- Internet of Things (IoT) -- Confidentiality -- Security -- Privacy -- Key management; Computer engineering -- Periodicals; Electrical engineering -- Periodicals; Electrical engineering -- Data processing -- Periodicals; Ordinateurs -- Conception et construction -- Périodiques; Électrotechnique -- Périodiques; Électrotechnique -- Informatique -- Périodiques; Computer engineering; Electrical engineering; Electrical engineering -- Data processing; Periodicals; Electronic journals; 621.302854
• DOI: 10.1016/j.compeleceng.2015.03.030
• Languages: English
• ISSNs: 0045-7906

Abstract

Graphical abstract: Highlights: We introduce an energy-aware key management protocol for e-health applications. The protocol guarantees the end-to-end principle. Constrained nodes offload asymmetric cryptographic operations to third parties. We conduct a formal validation regarding the security properties of our protocol. Analysis results highlight energy gains on constrained nodes. Abstract: Key distribution is required to secure e-health applications in the context of Internet of Things (IoT). However, resources constraints in IoT make these applications unable to run existing key management protocols. In this paper, we propose a new lightweight key management protocol. This protocol is based on collaboration to establish a secure end-to-end communication channel between a highly resource constrained node and a remote entity. The secure channel allows the constrained node to transmit captured data while ensuring confidentiality and authentication. To achieve this goal, we propose offloading highly consuming cryptographic primitives to third parties. As a result, the constrained node obtains assistance from powerful entities. To assess our protocol, we conduct a formal validation regarding security properties. In addition, we evaluate both communication and computational costs to highlight energy savings. The results show that our protocol provides a considerable gain in energy while its security properties are ensured.