Secure Authentication in an IoT-Based Healthcare Environment with Strong Anonymity and Unclonable Device

The Internet of Things is the backbone of cutting-edge intelligent applications such as smart transportation, intelligent healthcare systems, Smart cities, etc. On another side, IoT opens enormous challenges for academia and researcher to resolve threats and security risks. For instance, intelligent healthcare system, where the patient uses a body sensor, the body sensor collects data from the patient's body, such as blood pressure using Sphygmomanometer, heartbeat using Electrocardiogram (ECG), and muscle signaling activity using Electromyography (EMG). The body sensor sends data to the server. The doctors, by the device in their hand, can check the patient's condition remotely based on data from the server. The doctor also can communicate with body sensors in real time with the help of the server after the establishment session key. In addition, the patients may be state officials or artists who must hide their identity by reasoning security. This article proposed a new authentication protocol with strong anonymity that can hide the actual identity and achieves non-traceability and unlinkability; hence our protocol is suitable for IoT-based healthcare systems. We conduct solid reasoning as an informal analysis and use the RoR model as the formal analysis to confirm that our protocol meets security competencies.