Secure Protocol With Mutual Authentication For Telecare Medical Information System Using ECC For IOT Enabled WBAN Devices

Telecare Medical Information System (TMIS) is a technology that has been on rise in the recent times with the onset of the COVID-19 pandemic. TMIS can be implemented in wireless body area networks (WBAN) in the form of devices worn by the patient and is convenient and time saving for both patients and doctors. The data that is generated is transferred through an insecure channel and thus, there is a need to protect confidential patient data. There is a necessity to provide secure authentication and access control to ensure only authorized users can access the data even in a device with limited storage and computational power. In this paper, Elliptic Curve Cryptography and the three-factor authentication method are combined to propose an enhanced protocol that is immune to the flaws in previously proposed ones. It uses a trusted party that helps in the registration process, ensuring that only authorized parties can read the data. A cloud-assisted TMIS is implemented by using the cloud as a storage medium and securing it, as well as the transfer of data. The Automated Validation of Internet Security Protocols and Applications (AVISPA) tool is used to validate the proposed protocol and prove its security.