SLMA: Secure and Lightweight Mutual Authentication Scheme for IoT-Based Healthcare

The Internet of Things (IoT) generates enormous amounts of disparate information from divergent applications such as digital health, smart medical facilities, automated pathology laboratories, monitoring equipment, virtual consultations, data analysis, personalized care, disease prevention, medication management, and other medical applications. IoT in the medical field has the potential to cut expenses, improve efficiency, and develop new methods of treating diseases. It can assist practitioners and patients and boost medical facilities, pharmaceutical companies, research organizations, and government agencies. However, because of privacy flaws, an unauthorized person may approach health-relevant data or restraint IoT devices attached to the body of the patient, yielding unprecedented results. The use of the wireless medium as a communication channel poses several threats. To combat these vulnerabilities, this research proposes SLMA. It establishes an encrypted session for the authenticated user and utilizes patient biometrics using a fuzzy extractor, thereby preventing unauthorized people from getting access to the IoT sensor gateways. To reduce the processor burden at the IoT node, the proposed protocol relies heavily on primitives of lightweight cryptography like XOR and hash operations. It has been tested SAFE over AVISPA and it also has lower computational as well as communication costs, making it more efficient than conventional protocols.