返回
ZTS-CIoHT-PPRF: Zero Trust Security-Based Mutual Authentication Scheme for Cloud-Assisted IoHT Using Puncturable Pseudorandom Function
DOI:10.1109/JIOT.2025.3640270.png)
摘要
En 中文
The incorporation of cloud to Internet of Health Things (IoHT) referred to as cloud-assisted IoHT (CIoHT) assures efficient storage of the sensitive health data with better flexibility and scalability. However, owing to the open nature of the CIoHT infrastructure, it is often susceptible to several security threats. On the contrary, security is an essential aspect of the CIoHT infrastructure. Thus, to address these security concerns, it is a common practice to establish a mutual authentication scheme among the communicating cloud entities that ensures to satisfy all the essential security requirements. In line with this, establishing trust among these entities is also a significant prerequisite. However, after a rigorous literature survey, it is found that all the existing authentication schemes are either vulnerable to various security threats or bear higher computation and/or communication overheads. Above all, these schemes have either taken the security or the trust aspect into consideration, but not both. Thus, we have proposed a zero trust security (ZTS)-based mutual authentication scheme for the CIoHT infrastructure using a puncturable pseudorandom function (PPRF) in this article. The detailed security analysis using informal and formal security analysis, and formal security verification using the AVISPA tool ensures that the proposed scheme is highly robust against various known attacks needed in a CIoHT infrastructure. Moreover, the comprehensive comparative analysis exhibits that in comparison to the related literature, our scheme provides higher computation and communication efficiency. Thus, unlike the existing schemes, the proposed scheme satisfies the vital security–trust–efficiency traid, ensuring its feasibility for implementation in real-world CIoHT infrastructure.
Keyword:
Authentication
cloud-assisted Internet of Health Things
elliptic curve cryptography (ECC)
Internet of Health Things (IoHT)
pseudorandom puncturable function
security
trust

