Lightweight communication method with user privacy protection function

Abstract

The invention discloses a lightweight communication method with a user privacy protection function. In a registration phase, privacy registration of user identity information is completed through a first long-time private key set by a user and a second long-time private key set by a medical server. In a session phase, a first short-time private key set by a user and a second short-time private keyset by a medical server are combined with identity information stored in respective databases and timestamps for sending messages to complete verification of message communication security, and meanwhile, a session key formed by combining the first short-time private key and the second short-time private key is adopted to ensure secure transmission of medical data in a session stage.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a lightweight communication method with a user privacy protection function. Background technique [0002] In electronic health (e-health) systems, patients can be transferred from the hospital ward to the home, making e-health more and more popular. Electronic health systems have many applications such as home health monitoring, personal health records (PHR), etc., which facilitate the management of chronic diseases and enable patients to self-care. Over the past decade, Internet-enabled terminals with smaller sizes have replaced older desktops and medical devices. With the advancement of IoT technology, various handheld and wearable devices such as tablets, smart watches, and smart bracelets can act as communicators, sensors, and monitors. These devices are deployed on the patient's body or in the surrounding environment, collect real-time data of the patient, transmit it to...

AI Technical Summary

Problems solved by technology

[0007] 2) The generated session key cannot guarantee consistency

The session key generated by the existing scheme is not further verified, and there may be inconsistencies in the information generated by the two parties in the communication, so that the medical data cannot be safely transmitted to the medical server

[0008] 3) The confidentiality of exchanged data is weak

[0009] 4) Leakage of user privacy

In an insecure communication channel, if the user's identity information is transmitted without being encrypted, malicious attackers in the channel may eavesdrop, intercept or tamper with it, and further perform simulated attacks, log in to the medical server, obtain vital medical data, thereby compromising the entire system

Images