基于区块链的远程医疗认证协议  

A Blockchain-based Authentication Protocol for Telemedicine

作　　者：邵晓伟 郭亚军[1] SHAO Xiao-Wei;GUO Ya-Jun(School of Computer,Central China Normal University,Wuhan 430079,China)

机构地区：[1]华中师范大学计算机学院,武汉430079

出　　处：《密码学报》2023年第2期397-414,共18页Journal of Cryptologic Research

基　　金：国家自然科学基金(62102453)。

摘　　要：使用安全可靠的认证协议来保护远程医疗环境中的通信安全是必要的,现有的一些方案还存在单点失效问题.本文引入区块链技术提出了一个既可以保障通信安全又可以解决单点失效的认证协议.在区块链网络中,利用多个网关节点共同维护存储用户以及医疗传感器相关信息的账本,使用户以及传感器可以与不同的网关节点进行相互认证,有效解决了单点失效问题.使用ROR(real-or-random)模型进行了形式化安全分析证明方案是可证明安全的,非形式化安全分析表明提出的协议具有12种安全属性.与已有协议相比,提出的协议在功能、安全和效率等方面具有较大的优势,同时解决了单点失效和可扩展性差等问题.It is necessary to use secure and reliable authentication protocol to ensure the communication security in telemedicine environment.Some existing protocols have the problems of single point failure and poor scalability.A new authentication protocol based on blockchain technology is proposed,which provides the security of communication and solves the problem of single point failure.In the blockchain network,multiple gateway nodes jointly maintain the ledger storing the relevant information of users and medical sensors,so that users and sensors can authenticate with different gateway nodes,which effectively solves the single point failure problem.Formal security analysis using ROR(real-or-random)model shows that the proposed protocol is provably secure.The informal security analysis shows that the proposed protocol has 12 security attributes.Compared with some existing protocols,the proposed protocol has advantages in functionality,security and efficiency,and solves the problems of single point failure and poor scalability.

关 键 词：区块链 认证 密钥协商 无线医疗传感器网络 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]