LSAC:A Lightweight, Scalable, and Anonymous Cross-Domain Authentication Scheme in IoMT
Lyhour Hak, Somchart Fugkeaw, Hiroyuki Satō · 2024
The Internet of Medical Things (IoMT) has emerged substantial growth within the healthcare sector, spurred by advancements in smart devices that generate and process critical healthcare data. Sharing this data among trusted healthcare entities is vital for efficient patient care but raises substantial security and privacy concerns. Existing solutions have focused on authentication techniques employing Self-Sovereign Identity (SSI) and Zero-Knowledge Proofs (ZKPs), aiming to ensure secure, auditable, and anonymous authentication. These solutions often prioritize either lightweight authentication or robust security, yet a flexible approach that integrates both characteristics is essential for adaptive cross-domain authentication in the IoMT landscape. Furthermore, the importance of lightweight authentication combined with adaptive verification, pivotal for scaling access control in cross-domain environments, has been underexplored in existing frameworks. Addressing this gap, we proposed a scheme called LSAC which is a lightweight, scalable, and anonymous authentication for SSI-based cross-domain authentication for IoMT setting. Our proposed LSAC scheme not only facilitates rapid and robust identity verification across multiple IoMT domains within a consortium blockchain network but also incorporates the advanced ZK-STARK and Plonk ZKP protocols to enable efficient and secure verification processes. By leveraging Hyperledger for generating smart contracts and managing user interactions across domains, our system represents a significant step forward in cross-domain authentication. Our comprehensive functionality and performance analysis confirms the effectiveness of our solution in providing scalable and secure access to IoMT resources, supporting the ongoing evolution of healthcare services.