Cloud‐assisted elliptic curve password authenticated key exchange protocol for wearable healthcare monitoring system
Zhihui Wang, Liheng Gong, Jingjing Yang, Xiao Li Zhang · Concurrency and Computation Practice and Experience · 2020
Summary Wearable devices (WDs) adopting advanced microsensors and IoT technology are facing severe security risks in the process of building wearable healthcare monitoring system. In particular, new requirements are proposed for the security of the identity authentication and key agreement protocol as well as the consumption of computing resources for WDs, such as replay attack, modification attack, server‐spoofing attack, privileged‐insider attack, and denial‐of‐service attack. To satisfy such requirements, cloud‐assisted EC password authenticated key exchange (CEPAK), an identity dynamic authentication and key agreement protocol, is proposed, and it uses a cloud‐assisted authentication service and elliptic curve algorithm. The capability of CEPAK protocol is analyzed to deal with network attack and consumption of computing resources and communication resources. It is shown that on the basis of satisfying the security requirements of the system, the cloud‐assisted authentication server can greatly share the consumption of computing resources of intelligent terminals, effectively save the computing resources of intelligent terminals, and improve the system's ability to deal with attacks caused by consumption of computing resources.