Embattle The Security of E-Health System Through A Secure Authentication and Key Agreement Protocol

There has been exponential growth in the field of Internet of Things (IoT)-enabled e-health domain, where several technologies are interconnected with each in order to provide low-cost and efficient services to users. The smart healthcare devices monitor the physiological conditions of a patient and then send data to connected servers (i.e., health server). The smart healthcare devices, servers and associated software applications come under one umbrella to provide live tracking, monitoring and analysis of the the healthcare data to the concerned users. It is also considered as Internet of Medical Things (IoMT) communication environment. All medical records are considered critical and sensitive in nature and therefore any leakage of medical data could potentially turn out to be a the lethal to patients. With the innovation in technology, there is a constant security threat to all smart healthcare devices, which is a main issue in e-health system. Cyber threat actors are actively trying to break into the system or network to gain unauthorized access and privileges to manipulate the data. Therefore, there is a strong urge for cyber security in this domain to secure all computing devices from any computer attack. Proper authentication, authorization, a secure session key exchanges, etc., are required to create a secure channel among the communicating devices. In this paper, an authentication and key agreement scheme to secure the communication of e-health system (named as ASKA-EH, in short) is proposed. The provided security analysis of ASKA-EH proves its security against various attacks. The comparative performance analysis of proposed ASKA-EH and other existing schemes of ehealth system reveals that ASKA-EH is superior than the existing schemes.