Department of ICT Engineering, Payame Noor Universtiy(PNU), Tehran of Iran.

---

Abstract—E-health and providing health services is one of the areas of science and technology with an increasingly growth in health - care area in the world. In this system, all health services ranging from the patient’s electronic file, telemedicine, evidence-based medicine, informing the citizens and informing the professionals and virtual medicine teams are provided. However, due to high importance of sending confidential data through communication lines in electronic systems, including telemedicine medical and probable irreparable damage in failure to address security issues and possible attacks, designing the security mechanisms before using such systems seems vital and necessary. Hence, in this paper, a secure and low-risk model for use in telemedicine systems is suggested using cryptography and safe functions. One of its features besides having high security includes using a lightweight asymmetrical cryptographic system rather than conventional methods and heavy encryption systems. To demonstrate the usefulness of the proposed protocol, we needed to design it in such a way to be used with available wireless technologies and Internet. Actually, the proposed protocol comparing with the current authentication systems, which use the public key encryption algorithms with heavy computing, increases the security of mobile health systems without having to do heavy computations meanwhile simplifying the process of mutual authentication. The system provides the security requirements for mobile medical systems by using the lightweight cryptographic functions such as symmetric encryption and hash functions. In this paper, a new protocol for bidirectional authentication and exchange of session keys for use in mobile medical systems was proposed. It has all services of a mobile medical system without increasing the size of calculations with minimal computational requirements and it providing high security.

Index Terms—Telemedicine, authentication, mobile health, security, X.509 certificate.

[PDF]

Cite: Mostafa Akhavansaffar, Ali Nakhaei, Mostafa Mokhtari Ardakan, "A Security Architecture for Use in Mobile Medical and Electronic Health," Journal of Computers vol. 13, no. 7, pp. 794-804, 2018.