摘要
随着物联网技术的不断成熟,其开始被频繁地应用于各行各业以提高人们的工作效率和生活水平。物联网在医疗领域的广泛应用,不仅能方便患者获取医疗服务,同时也能让医生更及时、准确地获取患者的身体状况,从而制定更高效的治疗方案。然而,人们在享受医疗物联网便利的同时,如何保证患者的通信安全和个人隐私也是不容忽视的问题。为了实现用户安全访问网络,提出了一个基于同态加密的高效匿名认证与密钥交换协议,医疗设备与远程医疗服务器之间只需要一个低熵的口令就可以实现相互认证,从而协商出一个高熵的会话密钥。在标准模型下证明了方案的安全性,仿真实验结果表明该方案比现有的同类方案具有更高的效率。
As IoT technology continues to mature,it has been frequently used in various industries to improve people's work efficiency and living standards.The widespread application of IoT in the medical field facilitates patients'access to medical services while also allowing doctors to obtain more timely and accurate information about the patient's physical condition,so that they can develop more efficient treatment plans.However,while people are enjoying the convenience of medical IoT,how to ensure the communication security and personal privacy of patients are issues that cannot be ignored.In order to realize users'secure access to the network,this paper proposes an efficient anonymous authentication and key exchange protocol based on homomorphic encryption.Medical devices and telemedicine servers only need a low-entropy password for mutual authentication,thus negotiating a high-entropy session key.In this paper,the security of the scheme is proved under the standard model,and the simulation experimental results show that the scheme is more efficient than existing similar schemes.
作者
刘英军
罗洋
杨钰均
刘媛妮
LIU Yingjun;LUO Yang;YANG Yujun;LIU Yuanni(Industry Development and Promotion Center,Beijing 100846,China;School of Computer Science and Technology,Chongqing University of Posts and Telecommunications,Chongqing 400065,China;School of Cyber Security and Information Law,Chongqing University of Posts and Telecommunications,Chongqing 400065,China)
出处
《计算机科学》
CSCD
北大核心
2023年第8期359-364,共6页
Computer Science
基金
重庆市自然科学基金面上项目(cstc2020jcyj-msxmX1021)
重庆市教委科学技术研究项目(KJZD-K20200602)
网络与交换技术国家重点实验室(北京邮电大学)开放课题资助项目(SKLNST-2021-1-18)
重庆市自然科学基金(cstc2020jcyj-msxmX0343)。
关键词
密码认证
医疗物联网
标准模型
匿名认证
Cryptography authentication
Medical Internet of things
Standard model
Anonymous authentication
