Addressing security in medical sensor networks

ABSTRACT

We identify the security challenges facing a sensor network for wireless health monitoring, and propose an architecture called "SNAP" (Sensor Network for Assessment of Patients) to address these challenges. SNAP protects the privacy, authenticity, and integrity of medical data, with low-cost energy-efficient mechanisms. We have incorporated the following mechanisms in SNAP: (1)an ECC-based secure key exchange protocol to set up shared keys between sensor nodes and base stations; (2)symmetric encryption and decryption for protecting data con?dentiality and integrity; (3) a two-tier authentication scheme for verifying data source. We have developed a prototype on the Tmote Sky platform for evaluating the proposed architecture and mechanisms.

REFERENCES

• 1: Fujitsu MBF200 Solid State Fingerprint Sensor. http://www.fujitsu.com/emea/services/microelectronics/sensors/.
• 2: Certicom Research. Standards for Efficient Cryptography (SEC)1: Elliptic Curve Cryptography. Sept. 2000.
• 3: Certicom Research. Standards for Efficient Cryptography (SEC)2: Recommended Elliptic Curve Domain Parameters. Sept. 2000.
• 4: D. Chaum and E. van Heijst. Group Signatures. In Advances in Cryptology - Eurocrypt '91 pages 257--265, 1991.
• 5: Crossbow Solutions Newsletter. Motes for mobile communication and tele-medicine. 2005.
• 6: Crossbow Technology. MPR/MIB mote hardware users manual. http://www.xbow.com/Support/manuals.htm,Jan. 2006.
• 7: D. Eastlake, 3rd , P. Jones, US Secure Hash Algorithm 1 (SHA1), RFC Editor, 2001
• 8: R. Fischer, L. Ohno-Machado, D. Curtis, R. Greenes, T. Stair, and J. Guttag. SMART: Scalable medical alert response technology. In Smart Medical Technologies Summit (SMT) 2004.
• 9: N. Gura, A. Patel, A. Wander, H. Eberle, and S. C. Shantz. Comparing Elliptic Curve Cryptography and RSA on 8-bit CPUs. In Workshop on Cryptographic Hardware and Embedded Systems Aug. 2004.
• 10: H. Wang and B. Sheng and Q. Li. TelosB implementation of elliptic curve cryptography over primary ?eld. Technical Report WM-CS-2005-12, Dept. of Computer Science, College of William and Mary, Oct. 2005.
• 11: H. G. Hosseini, D. Luo, and K. J. Reynolds. The Comparison of Different Feed Forward Neural Network Architectures for ECG Signal Diagnosis.Medical Engineering and Physics 28:372--378, 2006.
• 12: S. A. Israel, J. M. Irvine, A. Cheng, M. D. Wiederhold, and B. K. Wiederhold. ECG to identify individuals. Pattern Recognition 38:133--142, 2005.
• 13: B. Kaliski, PKCS #5: Password-Based Cryptography Specification Version 2.0, RFC Editor, 2000
• 14: H. Krawczyk , M. Bellare , R. Canetti, HMAC: Keyed-Hashing for Message Authentication, RFC Editor, 1997
• 15: A. Liu, P. Kampanakis, and P. Ning. TinyECC: Elliptic Curve Cryptography for Sensor Networks. http://discovery.csc.ncsu.edu/software/TinyECC/.
• 16: Moteiv Corporation. Tmote Sky. http://www.moteiv.com/products/tmotesky.php,2007.
• 17: C. Park, P. H. Chou,Y. Bai, R. Matthews, and A. Hibbs. An Ultra-Wearable, Wireless, Low Power ECG Monitoring System. Proceedings of IEEE BioCAS Nov. 2006.
• 18: Adrian Perrig , Robert Szewczyk , Victor Wen , David Culler , J. D. Tygar, SPINS: security protocols for sensor networks, Proceedings of the 7th annual international conference on Mobile computing and networking, p.189-199, July 2001, Rome, Italy [doi>10.1145/381677.381696]
• 19: Sheueling Chang Shantz, From Euclid's GCD to Montgomery Multiplication to the Great Divide, Sun Microsystems, Inc., Mountain View, CA, 2001
• 20: V. Shnayder, B.-R. Chen, K. Lorincz, T. R. F. Fulford-Jones, and M. Welsh. Sensor networks for medical care. Technical Report TR-08-05, Harvard University, Apr. 2005.
• 21: Q. Wang, W. Shin, X. Liu, Z. Zeng, C. Oh, B. Al-Shebli, M. Caccamo, C. Gunter, E. Gunter, J. Hou, K. Karahalios, and L. Sha. I-Living: An open system architecture for assisted living. In Proceedings of the IEEE SMC 2006.
• 22: A. Wood, G. Virone, T. Doan, Q. Cao, L. Selavo, Y. Wu, L. Fang, Z. He, S. Lin, and J. Stankovic. ALARM-NET: Wireless Sensor Networks for Assisted-Living and Health Monitoring. Technical Report CS-2006--01, University of Virginia, 2006.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

Additional Classification:
  J. Computer Applications
  J.3 LIFE AND MEDICAL SCIENCES
      Subjects: Medical information systems

General Terms:
Human Factors, Security

Keywords:
Tmote sky, elliptic curve cryptography, medical sensor networks