Page 76 - IJEEE-2022-Vol18-ISSUE-1

72 |
were compromised, according to the Protenus Breach
Barometer [1, 3-5].
As a result, security and privacy concerns must be addressed
in order to prevent e-health data intrusions. To adequately
research how to protect e-healthcare systems, security
challenges, and solutions must be recognized as referred to
previously. In more details, Electronic healthcare records
(EHRs) are a developing technology that plays an important
role in patient care. This is a medical service that allows
patients to have medical appointments outside of hospitals,
follow their health cases, review their medical tests, and do block cipher. Here we provide a self-contained description.
other medical tasks using their EHR system. Despite these
benefits, studies in the literature highlight drawbacks
associated with EHRs, which include disruptions to
protecting patient privacy and security. Supporting a system
to authenticate patients in an electronic health record (EHR) ????h ciphertext block, and the ???? is transmitted as part of the
is a critical step for preventing various security risks from ciphertext once more. It's worth repeating that ?? doesn't have
gaining access to patients' identities and data. Existing
authentication schemes continue to have security flaws.
Exchanging medical-related information or data between
clients and servers exposes them to intrusion by attackers
since they can be transmitted across an unstable network [6-
17].
In this paper, we present a secure scheme for
authenticating EHR patients and the Healthcare Center
Server based on genuine member identities and verification
codes. To provide robust security while maintaining
satisfactory speed, the proposed work employs a lightweight
crypto-hash function for the generation of One-Time
Passwords (OTP) and symmetric key encryption (Counter
mode (CTR mode)). As a result, the major purpose of this
study is to conduct a strong authentication scheme to
overcome issues in the previous works. Because current e-
healthcare systems often comprise of numerous components
(e.g., e-health data, medical devices, medical components
(Ex. patients, doctors, employees), and cloud-health
computing), there are several security risks faced these
components, and our solutions are focused on authentication
and privacy of patients represented the heart of healthcare
system. In addition, OTP-based authentication appears to be
one of the fastest-growing authentication technologies to
prevents several malicious attacks such as MITM, Reply,
Insider. The study demonstrate that the majority scheme of
OTP-based authentication and key management solves the
problems associated with dynamic ID and password
schemes, especially in healthcare systems. The proposed
scheme has good metrics like mutual authentication, user’s
anomaly, un-linkability. In practical side, the Scyther
security proof was used to demonstrate our scheme's high
security and resist malicious attacks. The proposed scheme
has a good balances between the complexity of security and
performance, can applied in healthcare system, and deals
with real world data associated with the patient part.
The remainder of the article is arranged as follows:
Section 2 describes the primitive tools. Section 3 shows the
related work. Section 4 focused on the proposed scheme.
Section 5 includes formal analysis utilizing the Scyther tool lengthy as the plaintext message and comprised of really
Hamed & Yassin
as well as security analysis. Section 6 describes the
performance results. Finally, section 7 denotes to the
conclusion.
II. PRIMITIVE TOOLS
A. Counter mode (CTR mode)
Counter mode is also known as unsynchronized stream
cipher mode, because the stream cipher is built from the
To encrypt using CTR mode, first, choose a uniform value
?????? ? {0,1}??. Then, by computing y?? := ????(ctr + i), where
?????? and ?? are integers and addition is modulo 2?? , a
pseudorandom stream is formed. So, ???? ? ???? ? ???? is the
to be invertible or even a permutation to be decrypted. The
created stream may be trimmed to exactly the plaintext
length. Preprocessing can be used to generate the
pseudorandom stream before the message is known, and the
stateful variation of ?????? mode is secure, just like ??????
mode, another "streamcipher" method. In contrast to the other
safe modes covered so far, the ?????? mode has the benefit of
being able to fully parallelize encryption and decryption
since all blocks of the pseudorandom stream may be
calculated independently of one another. In contrast to ??????,
it is also possible to decipher the cipher text's ????h block using
just one ?? evaluation. If F is a pseudorandom function, then
?????? mode is secure. ?????? mode is appealing because of
these qualities [18].
B. Crypto Hash Function
The process of turning a string of characters into a fixed-
length value or key that represents the original string is
referred to as hashing. The hash function indexes the original
value or key and then accesses the data associated with that
value or key. These which are used in cryptography should
be called "one-way hash functions" can use to figure out the
hash value for a given input. In the opposite way, it must be
impossible to find an input for a given value that has the same
hash value as that value (this is referred to as a one-way
characteristic). The SHA-2 hash algorithm is used to encrypt
data such as passwords. SHA-2 is a fantastic technique to
ensure the security of your data, but it takes a long time to
complete [19, 20].
C.The One-Time Pad
In 1917, Vernam invented the one-time pad, a totally
private encryption technique. There was no indication that
the proposal was absolutely hidden at the time Vernam
presented it; in fact, no one knew what perfect secrecy meant.
Shannon introduced the notion of complete secrecy and
proved that the one-time pad delivers that degree of security
some 25 years later. Use of the pad just once The assumption
behind the OTP is that the encryption key must be at least as
random digits. Each letter of the plaintext is "added" to one
element from the OTP using modulo-addition. When the key