The use of IoT in healthcare has undoubtedly brought many significant adaptations and benefits that changed medical facilities. However, the possibility of unauthorized access to private medical data is a serious issue that requires appropriate attention to protect the user's privacy. Recently, a proposed scheme by Gurjot et al. suggested an authentication mechanism to provide anonymity and other security characteristics. We did the security analysis and informally proved that their scheme is prone to various attacks, such as failure to offer perfect forward secrecy, ephemeral secret leakage, traceability, replay, stolen device attacks, and also face desynchronization issues. These issues make the proposed scheme unsuitable for the healthcare system. Therefore, there is an impelling need to design an authentication mechanism that can restrict the attacker from getting any sensitive information. Considering the above requirements, we present a novel Zero Knowledge Proof based Authenticated Key Agreement (ZKP-AKA) protocol. The security of our proposed authentication mechanism is examined using the informal (non-mathematical) and formal (Scyther tool) security verification to confirm that the proposed protocol offers the prominent security features mentioned above. We also measure the performance to show that our proposed mechanism is suitable for IoT devices in the healthcare intelligent system by doing a comparative analysis with its competitors in terms of communication, computational, message exchange and energy consumption costs.
Kumar, S, Kumar, K, Anand, A, Yadav, AK, Misra, M & Braeken, A 2025, 'iZKP-AKA: A secure and improved ZKP-AKA protocol for sustainable healthcare', Computers and Electrical Engineering, vol. 122, 109886. https://doi.org/10.1016/j.compeleceng.2024.109886
Kumar, S., Kumar, K., Anand, A., Yadav, A. K., Misra, M., & Braeken, A. (2025). iZKP-AKA: A secure and improved ZKP-AKA protocol for sustainable healthcare. Computers and Electrical Engineering, 122, Article 109886. https://doi.org/10.1016/j.compeleceng.2024.109886
@article{cfa82da44cd84c1e882f20c4ec35c5fd,
title = "iZKP-AKA: A secure and improved ZKP-AKA protocol for sustainable healthcare",
abstract = "The use of IoT in healthcare has undoubtedly brought many significant adaptations and benefits that changed medical facilities. However, the possibility of unauthorized access to private medical data is a serious issue that requires appropriate attention to protect the user's privacy. Recently, a proposed scheme by Gurjot et al. suggested an authentication mechanism to provide anonymity and other security characteristics. We did the security analysis and informally proved that their scheme is prone to various attacks, such as failure to offer perfect forward secrecy, ephemeral secret leakage, traceability, replay, stolen device attacks, and also face desynchronization issues. These issues make the proposed scheme unsuitable for the healthcare system. Therefore, there is an impelling need to design an authentication mechanism that can restrict the attacker from getting any sensitive information. Considering the above requirements, we present a novel Zero Knowledge Proof based Authenticated Key Agreement (ZKP-AKA) protocol. The security of our proposed authentication mechanism is examined using the informal (non-mathematical) and formal (Scyther tool) security verification to confirm that the proposed protocol offers the prominent security features mentioned above. We also measure the performance to show that our proposed mechanism is suitable for IoT devices in the healthcare intelligent system by doing a comparative analysis with its competitors in terms of communication, computational, message exchange and energy consumption costs.",
keywords = "Authentication, Network security, Protocol, Scyther tool, Sustainable healthcare, Zero-knowledge proofs",
author = "Shubham Kumar and Kanhaiya Kumar and Abhishek Anand and Yadav, {Awaneesh Kumar} and Manoj Misra and An Braeken",
note = "Publisher Copyright: {\textcopyright} 2024",
year = "2025",
month = mar,
doi = "10.1016/j.compeleceng.2024.109886",
language = "English",
volume = "122",
journal = "Computers and Electrical Engineering",
issn = "0045-7906",
publisher = "Elsevier",
}