Communication system and method based on certificateless signcryption in intelligent medical environment

Abstract

The invention discloses a communication system and method based on certificateless signcryption in an intelligent medical environment, and the system comprises: a key generation center which is used for the registration of a user and a medical center, and respectively generating a part of private keys of the user and the medical center; mobile communication equipment which is used for storing theencryption parameters calculated in the offline stage and is also used for carrying out encryption calculation on the plaintext needing to be encrypted; a biometric key, wherein the mobile communication equipment carries out calculation according to a biological recognition template input by a user to generate relevant parameter pairs of the biological recognition key of the user, and the relevantparameter pairs are used for verifying the identity of the user; a user and amedical center which are entities. The biometric identification key is introduced in the user identity authentication stage, so that the problem of deniability of user operation is solved, and various attacks can be resisted; through the signcryption technology, the pre-preparation work is completed in the offline stage,and the communication and calculation expenditure of the online stage is reduced; meanwhile, the invention further provides a key updating record, privacy disclosure is avoided, and the security of the scheme is enhanced.

Description

technical field [0001] The invention relates to the technical field of secure communication, in particular to a communication system and method based on certificateless signcryption in an intelligent medical environment. Background technique [0002] With the rapid development of Internet of Things technology and body area network technology, intelligent medical care based on technology in this field has gradually moved from theory to reality. The intelligent medical environment realizes the communication and interconnection between users and the medical center through wearable smart devices and smart mobile communication devices. Users can use smart mobile communication devices to view or update personal electronic health records at any time. Personal blood pressure, heart rate or other vital signs data can also be displayed in real time. These data are regularly sent to the medical center for medical staff to view and analyze. When these data fluctuate , the medical staff...

AI Technical Summary

Problems solved by technology

[0003] Smart medical care can bring a lot of convenience to people, but the communication content between users and medical centers contains a lot of user privacy information, because the system cannot operate without the Internet, and there are inevitably many security risks

Early intelligent medical systems seldom considered the hidden dangers of user privacy. Once the messages in the communication process were intercepted, the user's privacy would disappear. This kind of intelligent medical system without privacy protection is not suitable for practical applications, and it is difficult to gain popularity

Some experts and scholars have conducted some research on secure communication in the smart medical environment. However, most of the existing secure communication solutions in the smart medical environment are signed first and then encrypted, or first encrypted and then signed. The parameters that need to be sent include at least one signature parameter and an encrypted message parameter, it is difficult to reduce the calculation and communication overhead by using the traditional communication security scheme

In some schemes, users only need to provide a password to retrieve, view and modify personal electronic health records, which is extremely vulnerable to password dictionary attacks and brings security risks to users' personal privacy

Once the user's smart mobile device is lost or stolen, the attacker can directly operate the user's account through the stolen device, causing economic and reputational losses to the user

Some malicious users can falsely claim that they are not their own operations after performing some payment operations, so as to avoid the payment of related service fees. The medical center does not have enough evidence to prove that it is difficult to recover the loss when the operation is performed by the user himself.

At present, some information security solutions for the intelligent medical environment fail to provide the key update process and method. The lack of key update in the privacy protection scheme greatly reduces the practicability and security of the scheme, and brings security to the security of the intelligent medical system. Hidden danger

Images