본문 바로가기
KERD
논문KCI 등재

클라우드 기반 IoT 환경의 원격 헬스케어 시스템에 대한 보안성 분석

Security Analysis of Remote Healthcare System in Cloud-based IoT Environment

최윤성|권재민|홍세웅
(사)디지털산업정보학회 (The Korea Society of Digital Industry and Information Management)|2023.03|(사)디지털산업정보학회 논문지 (Journal of the Korea Society of Digital Industry and Information Management)|제19권 제1호|pp. 31-42

0

조회

0

다운로드

1

인용

0

참고문헌

키워드

Remote User AuthenticationSecurity AnalysisCloud-based IoTAuthetication Protocol

초록

As computer performance is leveled upward, the use of IoT systems is gradually expanding. Although IoT systems are used in many fields, it is true that it is difficult to build a safe system due to performance limitations. To overcome these limitations, many researchers have proposed numerous protocols to improve security issues. Among them, Azrour et al. except. We proposed a new efficient and secure authentication protocol for remote healthcare systems in a cloud-based IoT environment, and claimed that the new protocol could solve the security vulnerabilities of the existing protocols and was more efficient. However, in this paper, through the security analysis of the remote healthcare system in the cloud-based IoT environment proposed by Azrour et al., the protocol of this system was found to be vulnerable to Masquerade attack, Lack of Perfect Forward Secrecy, Off-line password guessing attack, and Replay attack.

Abstract

As computer performance is leveled upward, the use of IoT systems is gradually expanding. Although IoT systems are used in many fields, it is true that it is difficult to build a safe system due to performance limitations. To overcome these limitations, many researchers have proposed numerous protocols to improve security issues. Among them, Azrour et al. except. We proposed a new efficient and secure authentication protocol for remote healthcare systems in a cloud-based IoT environment, and claimed that the new protocol could solve the security vulnerabilities of the existing protocols and was more efficient. However, in this paper, through the security analysis of the remote healthcare system in the cloud-based IoT environment proposed by Azrour et al., the protocol of this system was found to be vulnerable to Masquerade attack, Lack of Perfect Forward Secrecy, Off-line password guessing attack, and Replay attack.

참고문헌 (31)

  1. 김정원, "Zigbee를 이용한 사용자인식기반의 헬스케어 시스템 구현", (사)디지털산업정보학회 논문지, 4(3), pp.1~8 (2008), (사)디지털산업정보학회
  2. 조정원, "홈 헬스케어를 위한 온톨로지 기반 상황인지 플랫폼의 설계 및 구현", (사)디지털산업정보학회 논문지, 5(3), pp.77~86 (2009), (사)디지털산업정보학회
  3. 조익성, "R Wave Detection and Advanced Arrhythmia Classification Method through QRS Pattern Considering Complexity in Smart Healthcare Environments", (사)디지털산업정보학회 논문지, 17(1), pp.7~14 (2021), (사)디지털산업정보학회
  4. 김인환, "사물인터넷(IoT) 전시 서비스품질이 전시수용에 미치는 영향", (사)디지털산업정보학회 논문지, 17(4), pp.13~28 (2021), (사)디지털산업정보학회
  5. 박종순, "IoT 네트워크에서 스토리지와 트랜잭션 보호를 위한 이중 블록체인 구조", (사)디지털산업정보학회 논문지, 17(4), pp.43~52 (2021), (사)디지털산업정보학회
  6. 진병욱, "퍼스널 클라우드 환경에서 사용자 관리를 위한 보안 프레임워크의 설계 및 평가", (사)디지털산업정보학회 논문지, 12(1), pp.81~87 (2016), (사)디지털산업정보학회[DOI]
  7. 송준호, "안전한 클라우드 서비스를 위한 상호의존적 다중세션 인증 기법 설계", (사)디지털산업정보학회 논문지, 10(3), pp.181~196 (2014), (사)디지털산업정보학회
  8. Azrour, M, "New Efficient and Secured Authentication Protocol for Remote Healthcare Systems in Cloud-IoT", Security and Communication Networks, 2021, pp.1~12 (2021)
  9. Watro, R, "TinyPK: securing sensor networks with public key technology", Proceedings Of the 2nd ACM Workshop on Security Of Ad Hoc and Sensor Networks, pp.59~64 (2004)
  10. Wong, K. H, "A dynamic user authentication scheme for wireless sensor networks", Sensor Networks, Ubiquitous, and Trustworthy Computing, 1, pp.8~ (2006)
  11. Das, M. L., "Two-factor user authentication in wireless sensor networks", IEEE Transactions on Wireless Communications, 8(3), pp.1086~1090 (2009)
  12. Xu, Zhu, W. -T., "An improved smart card based password authentication scheme with provable security", Computer Standards & Interfaces, 31(4), pp.723~728 (2009)
  13. Song, R., "Advanced smart card based password authentication protocol", Computer Standards & Interfaces, 32(5-6), pp.321~325 (2010)
  14. Xu, X, "A dynamic ID-based authentication scheme based on ECC for telecare medicine information systems", Applied Mechanics And Materials, 457, pp.861~866 (2014)
  15. Yan, X, "A secure biometrics-based authentication scheme for telecare medicine information systems", Journal of Medical Systems, 37(5), pp.1~6 (2013)
  16. Mishra, D, "Security enhancement of a biometric based authentication scheme for telecare medicine information systems with nonce", Journal of Medical Systems, 38(5), pp.1~11 (2014)
  17. Tan, Z., "A user anonymity preserving three-factor authentication scheme for telecare medicine information systems", Journal of Medical Systems, 38(3), pp.1~9 (2014)
  18. Yoon, E. -J., "Advanced biometric-based user authentication scheme for wireless sensor networks", Sensor Letters, 11(9), pp.1836~1843 (2013)
  19. He, D, "ReTrust: attack-resistant and lightweight trust management for medical sensor networks", IEEE Transactions on Information Technology in Biomedicine, 16(4), pp.623~632 (2012)
  20. Mishra, D, "A secure and efficient chaotic map-based authenticated key agreement scheme for telecare medicine information systems", Journal of Medical Systems, 38(10), pp.120~ (2014)
  21. Jiang, Q, "Improvement of robust smart-card-based password authentication scheme", International Journal of Communication Systems, 8(2), pp.383~393 (2015)
  22. Cheng, Z.-Y, "An improved protocol for password authentication using smart cards", 22(4) (2012)
  23. Azrour, M, "Authentication Protocol for Internet of Things", Studies in Big Data, 53, pp.67~74 (2019)
  24. NYe, N, "An efficient authentication and access control scheme for perception layer of internet of things", Applied Mathematics &Information Sciences, 8(4), pp.1617~1624 (2014)
  25. Cheng, X., "Secure identity authentication of community medical internet of things", IEEE Access, 7, pp.115966~115977 (2019)
  26. Azrour, M, "New enhanced authentication protocol for internet of things", Big Data Mining and Analytics, 4(1), pp.1~9 (2021)
  27. Eisenbarth, T, "On the power of power analysis in the real world: A complete break of the KeeLoq code hopping scheme", Annual International Cryptology Conference, pp.203~220 (2008), Springer
  28. Dolev, D., "On the security of public key protocols", IEEE Transactions on information theory, 29(2), pp.198~208 (1983)
  29. Cao, X., "Breaking a remote user authentication scheme for multi-server architecture", IEEE Communications Letters, 10(8), pp.580~581 (2006)
  30. 최윤성, "퍼지추출 기술을 활용한 스마트 카드 기반 패스워드 인증 스킴", (사)디지털산업정보학회 논문지, 14(4), pp.125~134 (2018), (사)디지털산업정보학회[DOI]
  31. Ma, C. G, "Security flaws in two improved remote user authentication schemes using smart cards", International Journal of Communication Systems, 27(10), pp.2215~2227 (2014)

관련 논문AI추천

사물 인터넷 기반 헬스케어 원격 환자 모니터링 시스템을 위한 경량 및 견고한 인증 프로토콜의 보안 취약점변해원한국기계기술학회 · 한국기계기술학회지2025 · 제27권 제5호사물 인터넷 기반 상담 및 의료 시스템 환경에서의 경량 인증 프로토콜 보안 취약점 분석 및 개선 방안 연구금창민, 변해원한국기계기술학회 · 한국기계기술학회지2025 · 제27권 제3호Comprehensive Vulnerability Analysis of Lightweight Authentication Protocols in IoT Healthcare Environments변해원중소기업융합학회 · 산업과 과학2025 · 제4권 제6호의료 사물 인터넷 보안: 인증 취약점에 대한 심층 분석 및 전략적 개선 방안변해원한국기계기술학회 · 한국기계기술학회지2025 · 제27권 제5호Comprehensive Analysis of Security Vulnerabilities and Mitigation Strategies in IoT-Based Healthcare Authentication Protocols변해원한국융합학회 · 미래기술융합논문지2025 · 제4권 제5호헬스케어 사이버-물리 시스템을 위한 안전하고 효율적인 사용자 인증 기법박미옥한국컴퓨터정보학회 · 한국컴퓨터정보학회논문지2025 · 제30권 제11호

이 간행물의 다른 논문 (12건)

온라인 글쓰기 콘텐츠가 대학생의 학습전략, 성취동기, 지식공유태도에 미치는 영향: K 대학 사례를 중심으로박혜진, 차승봉pp. 1-12온라인 비교과 프로그램 참여자의 학습전략, 학습태도, 성취동기가 만족도에 미치는 영향권영애, 박혜진pp. 13-21클라우드 환경에서의 가시성 제공 방안 연구김정협, 김태경, 백남균pp. 23-30관리자의 진정성 리더십이 조직 구성원의 직무만족에 미치는 영향에 관한 연구: 동기부여의 매개효과를 중심으로주재성, 이성준, 이재진pp. 43-55컨택센터 중심에서 인공지능 챗봇 중심 고객 서비스로의 사용자 전환의도에 관한 연구안승규, 안현철pp. 57-76
원문 보기