A light weight mutual authentication and key generation scheme for RFID systems used in Medical IoT

Telemedicine services are internet-based healthcare services that constantly monitors the patient located remotely and provide low-cost medical treatment to them. The privacy of individual data and the reliability of medical equipment connected through IoT is a matter of concern for both service seekers as well as service providers. IoT devices that are being used in Medical applications also known as Medical Internet of Things (MIoT) have many constraints like memory size, processing capacity, and power consumption which make it challenging in terms of cost-effectiveness and energy-efficient security solutions. The recent literatures have much emphasized Radio-Frequency Identification (RFID) based security solutions, RFIDs provide energy-efficient and low-cost mechanisms for data communication between medical sensors and the cloud server. In this paper, we have proposed a privacy-preserving lightweight mutual authentication and session key generation scheme to establish secure communication for RFID enabled MIoT devices. This scheme will enable a secure authentication between a passive RFID tag and an RFID reader connected through a cloud server using light-weight cryptographic primitives such as bitwise XOR, OR, one-way hash function, and pseudo-random number generators (PNG). We have also performed the security analysis of our proposed scheme and have compared the results with pre-existing work in this area.