A Lightweight mutual authentication based on Attribute-based Encryption

Abstract

Recently, With the development of Internet of Things, 5G and AI, the term "smart medical" is actually the combination of technology and medical. Our study takes "smart wards" as an example, which lies in the layout of the wards On the above. After pairing all connected sensor devices with the patient, which includes the measurement of the patient’s blood pressure, pulse, ECG... and other related physiological signals. However, some of the data is highly private. If there is no effective encryption and verification mechanism, these data may be leaked out or used improperly.
Our study uses Attribute-based Encryption as the main framework. Users can choose to match the patient’s attribute characteristics to formulate some access policies. Patient data can only be accessed by certain access rules. Access by a specific user. Even if other users steal the data, they cannot obtain the plaintext content through encryption. In complete verification phase, ABE is used as the basis, and in the lightweight verification phase, the patient’s physiological data and timestamp are used as the seed, and the PRNG is used to generate random numbers. In this case, there are only three parties (patients, doctor, hospital server) know to calculate the random number, so that even if the others steal the parameter, they cannot complete the verification because they don't know how to make the random number. In addition, hash function and XOR operations are added to make the overall encryption and verification more complete.