Where academic tradition
meets the exciting future

You are here: TUCS > PUBLICATIONS > Publication Search > Session Resumption-Based End-t...

Session Resumption-Based End-to-End Security for Healthcare Internet-of-Things

Sanaz Rahimi Moosavi, Tuan Nguyen Gia, Ethiopia Nigussie, Amir M. Rahmani, Seppo Virtanen, Hannu Tenhunen, Jouni Isoaho, Session Resumption-Based End-to-End Security for Healthcare Internet-of-Things. In: Alok N. Choudhary (Ed.), IEEE International Conference on Computer and Information Technolo, 581–588, IEEE, 2015.

Abstract:

In this paper, a session resumption-based end-to-end security scheme for healthcare Internet of things (IoT) is pro-posed. The proposed scheme is realized by employing certificate-based DTLS handshake between end-users and smart gateways as well as utilizing DTLS session resumption technique. Smart gateways enable the sensors to no longer need to authenticate and authorize remote end-users by handing over the necessary security context. Session resumption technique enables end-users and medical sensors to directly communicate without the need for establishing the communication from the initial handshake. Session resumption technique has an abbreviated form of DTLS handshake and neither requires certificate-related nor public-key funtionalities. This alleviates some burden of medical sensors tono longer need to perform expensive operations. The energy-performance evaluations of the proposed scheme are evaluated by developing a remote patient monitoring prototype based on healthcare IoT. The energy-performance evaluation results show that our scheme is about 97% and 10% faster than certificate-based and symmetric key-based DTLS, respectively. Also, the certificate-based DTLS consumes about 2.2X more RAM and 2.9X more ROM resources required by our scheme. While, our scheme and symmetric key-based DTLS have almost similar RAM and ROM requirements. The security analysis reveals that the proposed scheme fulfills the requirements of end-to-end security and provides higher security level than related approaches found in the literature. Thus, the presented scheme is a well-suited solution to provide end-to-end security for healthcare IoT.

BibTeX entry:

@INPROCEEDINGS{inpRaNgNiRaViTeIs15a,
  title = {Session Resumption-Based End-to-End Security for Healthcare Internet-of-Things},
  booktitle = { IEEE International Conference on Computer and Information Technolo},
  author = {Rahimi Moosavi, Sanaz and Nguyen Gia, Tuan and Nigussie, Ethiopia and Rahmani, Amir M. and Virtanen, Seppo and Tenhunen, Hannu and Isoaho, Jouni},
  editor = {Choudhary, Alok N.},
  publisher = {IEEE},
  pages = {581–588},
  year = {2015},
}

Belongs to TUCS Research Unit(s): Communication Systems (ComSys)

Publication Forum rating of this publication: level 1

Edit publication