基于雾计算的智能医疗保健系统高效身份认证协议

doi:10.3778/j.issn.1002-8331.2310-0262

摘要/Abstract

摘要： 智能可穿戴设备传感器收集用户的健康数据并通过无线信道传输到云服务器，数据传输过程存在计算延迟与安全攻击。雾计算辅助云计算完成数据分析，提高了云服务器响应效率，但对安全性提出了更高的要求。基于椭圆曲线Diffie-Hellman难题提出了一种安全高效的身份认证与密钥协商（AKA）协议，该协议结合智能卡、口令和生物特征识别技术，使用单向哈希函数与椭圆曲线保护用户的匿名性，使用随机数、时间戳确保传输消息的有效性，实现了相互身份认证并建立了三方会话密钥。非形式化的安全性分析表明，该协议可以抵抗目前所知的各种攻击，随机预言机（ROR）模型和Proverif形式化安全工具证明了协议的安全性。与相关文献对比表明，所提协议的计算开销是其他协议的66%，具有更高的安全性和较好的性能。

关键词: 雾计算, 身份认证, 密钥协商, 智能医疗保健系统

Abstract: Smart wearable device sensors collect health data from the user, and transmit it to the cloud server through the wireless channel. The data transmission process suffers from computational delays and security attacks. Fog computing assists cloud computing to complete data analysis and improves the efficiency of cloud server response, but puts higher requirements on security. A secure and efficient authentication and key agreement (AKA) protocol is proposed based on the elliptic curve Diffie-Hellman (ECDH) problem. The protocol combines smart cards, passwords with biometrics to realize mutual authentication and establish three-party session keys. User anonymity is protected using one-way hash functions with elliptic curves. The validity of transmitted messages is ensured using random numbers and timestamps. The informal security analysis shows that the proposed protocol can resist various known attacks. The real-oracle random (ROR) model and the Proverif prove the security of the protocol. Comparison with related literature shows that the computational overhead of the proposed protocol represents 66% of that of the protocols proposed in other literature. This comparison result provides higher security and better performance.

Key words: fog computing, identity authentication, key agreement, smart healthcare systems

何明祥, 付青松, 李冠. 基于雾计算的智能医疗保健系统高效身份认证协议[J]. 计算机工程与应用, 2025, 61(5): 289-297.

HE Mingxiang, FU Qingsong, LI Guan. Efficient Authentication Protocol for Smart Healthcare Systems Based on Fog Computing[J]. Computer Engineering and Applications, 2025, 61(5): 289-297.

参考文献

[1] BANDER A. Secure and efficient cloud-based IoT authenticated key agreement scheme for e-health wireless sensor networks[J]. Arabian Journal for Science and Engineering, 2021, 46（4）: 3017-3032.
[2] LI X H, CHEN T, CHENG Q F, et al. An efficient and authenticated key establishment scheme based on fog computing for healthcare system[J]. Frontiers of Computer Science, 2021, 16（4）: 164815.
[3] WU T Y, YANG L, MENG Q, et al. Fog-driven secure authentication and key exchange scheme for wearable health monitoring system[J]. Security and Communication Networks, 2021, 2021: 8368646.
[4] GUPTA A, TRIPATHI M, SHAIKH T J, et al. A lightweight anonymous user authentication and key establishment scheme for wearable devices[J]. Computer Networks, 2019, 149: 29-42.
[5] ALI Z, HUSSAIN S, REHMAN R H U, et al. ITSSAKA-MS: an improved three-factor symmetric-key based secure AKA scheme for multi-server environments[J]. IEEE Access, 2020, 8: 107993-108003.
[6] 殷秋实, 陈建华. 多服务器环境下基于椭圆曲线密码的改进的身份认证协议[J]. 计算机科学, 2018, 45（6）: 111-116.
YIN Q S, CHEN J H. Improved identity authentication protocol based on elliptic curve cryptography in a multi-server environment[J]. Computer Sciences, 2018, 45（6）: 111-116.
[7] QIU S M, XU G A, AHMAD H, et al. A robust mutual authentication scheme based on elliptic curve cryptography for telecare medical information systems[J]. IEEE Access, 2018, 6: 7452-7463.
[8] KUMARI S, RENUKA K. Design of a password authentication and key agreement scheme to access e-healthcare services[J]. Wireless Personal Communications, 2021, 117（1）: 27-45.
[9] SHAMSHAD S, AYUB M F, MAHMOOD K, et al. An enhanced scheme for mutual authentication for healthcare services[J]. Digital Communications and Networks, 2022, 8（2）: 150-161.
[10] QI M P, CHEN J H. New robust biometrics-based mutual authentication scheme with key agreement using elliptic curve cryptography[J]. Multimedia Tools and Applications, 2018, 77（18）: 23335-23351.
[11] SAHOO S S, MOHANTY S, MAJHI B. Improved biometric-based mutual authentication and key agreement scheme using ECC[J]. Wireless Personal Communications, 2020, 111（2）: 991-1017.
[12] RYU J, OH J, KWON D, et al. Secure ECC-based three-factor mutual authentication protocol for telecare medical information system[J]. IEEE Access, 2022, 10: 11511-11526.
[13] SAHOO S S, MOHANTY S, MAJHI B. A secure three factor based authentication scheme for health care systems using IoT enabled devices[J]. Journal of Ambient Intelligence and Humanized Computing, 2021, 12（1）: 1419-1434.
[14] RADHAKRISHNAN N, KARUPPIAH M. An efficient and secure remote user mutual authentication scheme using smart cards for Telecare medical information systems[J]. Informatics in Medicine Unlocked, 2019, 16: 100092.
[15] DHARMINDER D, MISHRA D, LI X. Construction of RSA-based authentication scheme in authorized access to healthcare services[J]. Journal of Medical Systems, 2019, 44（1）: 6.
[16] 李晓天, 陈建华. 更安全的匿名三因子多服务器身份认证协议研究[J]. 计算机应用研究, 2020, 37（9）: 2781-2788.
LI X T, CHEN J H. Research on security-enhanced three-factor multi-server authentication scheme with anonymity[J]. Application Research of Computers, 2020, 37（9）: 2781-2788.
[17] 李懿, 田玉玲. 远程医疗信息系统中的三因素匿名认证协议[J]. 计算机工程与应用, 2023, 59（10）: 280-287.
LI Y, TIAN Y L. Three-factor anonymous authentication protocol in telecare medicine information system[J]. Computer Engineering and Applications, 2023, 59（10）: 280-287.
[18] WAZID M, DAS A K, KUMAR N, et al. Design of secure key management and user authentication scheme for fog computing services[J]. Future Generation Computer Systems, 2019, 91: 475-492.
[19] ALI Z, CHAUDHRY S A, MAHMOOD K, et al. A clogging resistant secure authentication scheme for fog computing services[J]. Computer Networks, 2021, 185: 107731.
[20] JIA X Y, HE D B, KUMAR N, et al. Authenticated key agreement scheme for fog-driven IoT healthcare system[J]. Wireless Networks, 2019, 25（8）: 4737-4750.
[21] CHEN C M, HUANG Y Y, WANG K H, et al. A secure authenticated and key exchange scheme for fog computing[J]. Enterprise Information Systems, 2021, 15（9）: 1200-1215.
[22] WU T Y, WANG T, LEE Y Q, et al. Improved authenticated key agreement scheme for fog-driven IoT healthcare system[J]. Security and Communication Networks, 2021, 2021: 6658041.
[23] WU T Y, KONG F F, WANG L Y, et al. Toward smart home authentication using PUF and edge-computing paradigm[J]. Sensors, 2022, 22（23）: 9174.
[24] WU T Y, GUO X L, YANG L, et al. A lightweight authenticated key agreement protocol using fog nodes in social internet of vehicles[J]. Mobile Information Systems, 2021, 2021: 3277113.