Zero knowledge proofs based authenticated key agreement protocol for sustainable healthcare. (May 2022)

• Record Type: Journal Article
• Authors: Gaba, Gurjot Singh; Hedabou, Mustapha; Kumar, Pardeep; Braeken, An; Liyanage, Madhusanka; Alazab, Mamoun
• Is Part Of: Sustainable cities and society. Volume 80(2022)
• Publication Date: 2022-05
• Subjects: Sustainable healthcare -- Internet of Things -- Mutual authentication -- Physically unclonable function -- Security -- Zero knowledge proofs; Sustainable urban development -- Periodicals; Sustainable buildings -- Periodicals; Urban ecology (Sociology) -- Periodicals; 307.76
• DOI: 10.1016/j.scs.2022.103766
• Languages: English
• ISSNs: 2210-6707

Abstract

Abstract: Upgradation of technologies for sustainable smart cities has led to rapid growth in Internet of Things (IoT) applications, including e-healthcare services wherein smart devices collect patient data and deliver it remotely to the servers in real-time. Despite its enormous benefits, IoT in healthcare has not received much attention primarily due to the risk of unauthorized access to confidential medical information enabled by the vulnerable wireless channel for communication. Besides, tiny IoT devices have limited computing power and storage capabilities that prevent administrators from using complex and resource-hungry security protocols. The cyber attacks on the Internet of Healthcare applications (IoHA) could result in fatalities, decreased revenue, and reputation loss, hence endangering sustainability. The existing security protocols are unsuitable due to the cost complexities that necessitate developing new security protocols for resource-constrained and heterogeneous IoT networks. We introduce a confidentiality and anonymity-preserving scheme for critical infrastructures of IoT to conquer cyber threats for sustainable healthcare. This paper proposes Zero-Knowledge Proofs (ZKP) based Authenticated Key Agreement (AKA) protocol for IoHA. ZKP-AKA uses zero-knowledge proofs, physically unclonable function, biometrics, symmetric cryptography, message digest, etc., for accomplishing the protocol's objective at minimal computation, storage, and communication expenses. ZKP-AKA retains data integrity, confidentiality, anonymity, and safety from significant cyber threats. Highlights: This article introduces a privacy-preserving mutual authentication and key agreement protocol to protect IoT healthcare networks from unauthorized abuses. The protocol has been implemented using Zero Knowledge Proof (ZKP) and Physically Unclonable Function (PUF) to safeguard confidentiality and prevent physical attacks. The security protocol's robustness against cyber-attacks has been investigated through formal (AVISPA) and informal (logical rules) analysis. The protocol's performance has been analyzed and compared with existing security protocols.