원격 건강정보 모니터링 시스템을 위한 개선된 익명인증 기법
An Improved Anonymous Authentication Scheme for Remote Health Monitoring System
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
스마트 헬스케어 기술의 발전과 웨어러블 디바이스의 증가로 인해 최근 WBN을 활용한 원격지 건강정보 모니터링시스템이 제시되고 있다. 그러나 네트워크를 통해 전송되는 환자 개인의 건강기록에 대한 보호가 필요하며, 허가되지않은 정보의 수집으로 인한 환자의 개인 식별정보나 건강기록이 노출되지 않도록 환자의 프라이버시도 반드시 보호되어야 한다. 이를 위해 Yang 등은 암호기술의 키 격리 기법을 적용한 원격 건강정보 모니터링 시스템의 익명 인증기법을제안하였다. 그러나 이들의 기법은 키 격리 기법을 잘못 구성하여 다른 사용자의 개인키 위조 가능성 문제를 가지고 있으며, 헬스케어 서비스 제공자에게 사용자의 식별정보가 그대로 노출되어 익명성을 보장하지 못한다. 이에 본 논문은Yang 등의 기법의 보안상의 문제점을 지적하고, 이를 개선한 건강정보 모니터링 시스템의 익명인증 기법을 제안한다.
Abstract
With the advancement of wearable devices and wireless body are networks, smart healthcare systems based on such technologies have been emerging to effectively monitor patient health and disease progression. In order to implement viable smart healthcare systems, the security and privacy of patient’s personal health information must be considered. Yang et al. proposed a privacy-preserving authentication scheme using key-insulation technique for remote health monitoring system, however, key-insulation technique is not properly adapted to their scheme which in turn causes a security pitfall contrary to their assertions. Besides, Yang et al.’s scheme does not guarantee user anonymity against healthcare service provider. Therefore, in this paper, we discuss the security concerns for Yang et al.‘s scheme and present an improved anonymous authentication scheme.
참고문헌 (17)
- C. -T. Li, "Secure user authentication and user anonymity scheme based on quadratic residues for the integrated EPRIS", Procedia Computer Science, 52, pp.21~28 (2015)
- F. Wen, "A more secure anonymous user authentication scheme for the integrated EPR information system", Journal of Medical Systems, 38(5), pp.1~7 (2014)
- Q. Jiang, "A privacy enhanced authentication scheme for telecare medical information systems", Journal of Medical Systems, 37(1), pp.1~8 (2013)
- H. M. Chen, "An efficient and secure dynamic id-based authentication scheme for telecare medical information systems", Journal of Medical Systems, 36(6), pp.3907~3915 (2012)
- X. Lin, "SAGE : A strong privacy-preserving scheme against global eavesdropping for eHealth systems", IEEE Journal on Selected Areas in Communications, 27(4), pp.365~378 (2009)
- X. Liang, "Privacy-preserving wireless data transmission for e-healthcare applications", IEEE COMSOC MMTC E-Letter, 6(11), pp.39~41 (2011)
- L. Guo, "PAAS : A Privacy-preserving attribute-based authentication System for eHealth Networks", IEEE International Conference on Distributed Computing Systems, pp.224~233 (2012)
- H. Yang, "An efficient privacy-preserving authentication scheme with adaptive key evolution in remote health monitoring system", Peer-to-Peer Networking and Applications, 8(6), pp.1059~1069 (2014)
- D. Boneh, "Identitybased encryption from the Weil pairing", Annual International Cryptology Conference — CRYPTO 2001, pp.213~229 (2001)
- N. P. Smart, "An identity-based key agreement protocol based on Weil pairing", Electronic Letters, 38(13), pp.630~632 (2002)
- Y. Dodis, "Strong key-insulated signature schemes", International Conference on Theory and Practice in Public Key Cryptography-PKC 2003, pp.130~144 (2003)
- J. Weng, "Identity-based key-insulated signature with secure key-updates", International Conference on Information Security and Cryptology-Inscrypt 2006, pp.13~26 (2006)
- P. V. S. S. N. Gopal, "Efficient id-based key-insulated signature scheme with batch verifications using bilinear pairings over elliptic curve", Journal of Discrete Mathematical Sciences and Cryptography, 18(4), pp.385~402 (2015)
- R. Dupont, "Provably secure non-interactive key distribution based on pairings", Discrete Applied Mathematics, 154(2), pp.270~276 (2006)
- J. Cha, "An identity-based signature from gap Diffie-Hellman groups", International Conference on Theory and Practice in Public Key Cryptography-PKC 2003, pp.18~30 (2003)
- C. Gentry, "Hierarchical id-based cryptography", International Conference on the Theory and Application of Cryptology and Information Security-ASIACRYPT 2002, pp.548~566 (2002)
- A. De Caro, "jPBC : Java pairing based cryptography", Proceedings of the 16th IEEE Symposium on Computers and Communications, pp.850~855 (2011)