Security and privacy-preserving in e-health: A new framework for patient

Abstract The Internet of Things (IoT) concept forms the real digital world in which all objects and things are connected. This new concept has undergone major changes to almost all existing applications. The smart health (e-health) domain is one of the most widely used IoT subcategories that Introduces and presents new medical and healthcare facilities and services. Like other subcategories of Internet of Things, the most important challenges that smart health facing with are providing the security and privacy of patients and their health records. In recent years, a lot of research has been presented in the field of security and privacy of smart health, and many security/privacy-preserving schemes and protocols have been proposed in this regard. However, most of these schemes and protocols address some of the security and privacy features, not all of them. The lack of a security and privacy framework in smart health is also strongly felt. In addition, many of the proposed schemes and protocols have a not so lightweight computational complexity, and this is at odds with the nature of the Internet of Things, which deals with devices with constrained power supply, low computing power and limited memory. In this paper, we provide a new framework for ensuring patient security and privacy in e-health. The proposed framework preserves the privacy of the patient’s identity and the content of his/her healthcare records. Moreover, we present a new authentication scheme with the patient’s identity privacy-preserving feature. The proposed authentication scheme is an efficient-lightweight scheme and satisfies all the security features.