U-Prove Based Security Framework for Mobile Device Authentication in eHealth Networks

Zeb, Khan; Saleem, Kashif; Al Muhtadi, Jalal; Thuemmler, Christoph

Abstract

Cybersecurity in the health care domain is one of the most important and critical issues of this era. In fact, it was reported in 2014 that on the black market medical records are worth 10 times more than credit card details [1]. Datasets experience a particularly high risk when shifted to a different domain for the documentation of therapeutic or diagnostic procedures. U-Prove is a token based security concept whereby a user may disclose safely and securely a limited amount of information for authentication and verification purposes. In this paper, a U-Prove based security mechanism is proposed for mobile device authentication and authorization in the eHealthcare environment. The complete architecture of the proposed security mechanism and its detailed methodology with process flow is presented. In addition, a generic security analysis is performed to show the strength of the proposed security mechanism.

• Presentation Conference Type: Conference Paper (Published)
• Conference Name: 2016 IEEE 18th International Conference on e-Health Networking, Applications and Services (Healthcom)
• Start Date: Sep 14, 2016
• End Date: Sep 16, 2016
• Acceptance Date: Jun 8, 2016
• Online Publication Date: Nov 21, 2016
• Publication Date: Nov 21, 2016
• Deposit Date: Apr 29, 2017
• Print ISSN: 1350-2344
• Publisher: Institution of Engineering and Technology (IET)
• Peer Reviewed: Peer Reviewed
• Pages: 562-567
• Book Title: 2016 IEEE 18th International Conference on e-Health Networking, Applications and Services (Healthcom)
• ISBN: 9781509033706
• DOI: https://doi.org/10.1109/HealthCom.2016.7749518
• Keywords: client; cybersecurity; cyber-physical systems; eHealthcare; encryption; Health 40; mHealth; mobile application; server; U-Prove
• Public URL: http://researchrepository.napier.ac.uk/Output/835315