Department of Computing, Universiti Pendidikan Sultan Idris, Tanjong Malim, Perak, Malaysia.
J Med Syst. 2018 Oct 16;42(12):238. doi: 10.1007/s10916-018-1104-5.
The development of wireless body area sensor networks is imperative for modern telemedicine. However, attackers and cybercriminals are gradually becoming aware in attacking telemedicine systems, and the black market value of protected health information has the highest price nowadays. Security remains a formidable challenge to be resolved. Intelligent home environments make up one of the major application areas of pervasive computing. Security and privacy are the two most important issues in the remote monitoring and control of intelligent home environments for clients and servers in telemedicine architecture. The personal authentication approach that uses the finger vein pattern is a newly investigated biometric technique. This type of biometric has many advantages over other types (explained in detail later on) and is suitable for different human categories and ages. This study aims to establish a secure verification method for real-time monitoring systems to be used for the authentication of patients and other members who are working in telemedicine systems. The process begins with the sensor based on Tiers 1 and 2 (client side) in the telemedicine architecture and ends with patient verification in Tier 3 (server side) via finger vein biometric technology to ensure patient security on both sides. Multilayer taxonomy is conducted in this research to attain the study's goal. In the first layer, real-time remote monitoring studies based on the sensor technology used in telemedicine applications are reviewed and analysed to provide researchers a clear vision of security and privacy based on sensors in telemedicine. An extensive search is conducted to identify articles that deal with security and privacy issues, related applications are reviewed comprehensively and a coherent taxonomy of these articles is established. ScienceDirect, IEEE Xplore and Web of Science databases are checked for articles on mHealth in telemedicine based on sensors. A total of 3064 papers are collected from 2007 to 2017. The retrieved articles are filtered according to the security and privacy of telemedicine applications based on sensors. Nineteen articles are selected and classified into two categories. The first category, which accounts for 57.89% (n = 11/19), includes surveys on telemedicine articles and their applications. The second category, accounting for 42.1% (n = 8/19), includes articles on the three-tiered architecture of telemedicine. The collected studies reveal the essential need to construct another taxonomy layer and review studies on finger vein biometric verification systems. This map-matching for both taxonomies is developed for this study to go deeply into the sensor field and determine novel risks and benefits for patient security and privacy on client and server sides in telemedicine applications. In the second layer of our taxonomy, the literature on finger vein biometric verification systems is analysed and reviewed. In this layer, we obtain a final set of 65 articles classified into four categories. In the first category, 80% (n = 52/65) of the articles focus on development and design. In the second category, 12.30% (n = 8/65) includes evaluation and comparative articles. These articles are not intensively included in our literature analysis. In the third category, 4.61% (n = 3/65) includes articles about analytical studies. In the fourth category, 3.07% (n = 2/65) comprises reviews and surveys. This study aims to provide researchers with an up-to-date overview of studies that have been conducted on (user/patient) authentication to enhance the security level in telemedicine or any information system. In the current study, taxonomy is presented by explaining previous studies. Moreover, this review highlights the motivations, challenges and recommendations related to finger vein biometric verification systems and determines the gaps in this research direction (protection of finger vein templates in real time), which represent a new research direction in this area.
无线体域网传感器的发展对于现代远程医疗至关重要。然而,攻击者和网络犯罪分子逐渐开始攻击远程医疗系统,而受保护健康信息的黑市价值如今是最高的。安全仍然是一个需要解决的艰巨挑战。智能家居环境是普适计算的主要应用领域之一。在远程医疗架构中,客户端和服务器的智能家居环境的远程监控和控制中,安全和隐私是两个最重要的问题。使用静脉模式的个人认证方法是一种新研究的生物识别技术。这种生物识别技术相对于其他类型(后面详细解释)具有许多优势,适用于不同的人类类别和年龄。本研究旨在为远程医疗系统中使用的实时监测系统建立安全验证方法,用于对患者和其他在远程医疗系统中工作的成员进行认证。该过程从远程医疗架构中的第 1 层和第 2 层(客户端)传感器开始,最终通过静脉生物识别技术在第 3 层(服务器端)进行患者验证,以确保双方患者的安全。本研究采用多层分类法来实现研究目标。在第一层,回顾和分析基于远程医疗应用中使用的传感器技术的实时远程监测研究,为研究人员提供基于传感器的远程医疗中的安全和隐私的清晰视图。进行了广泛的搜索,以确定涉及安全和隐私问题的文章,全面审查相关应用,并建立这些文章的连贯分类法。在远程医疗基于传感器的 mHealth 上检查了来自 2007 年至 2017 年的 ScienceDirect、IEEE Xplore 和 Web of Science 数据库中的文章。共收集了 3064 篇论文。根据基于传感器的远程医疗应用的安全性和隐私性,对检索到的文章进行过滤。选择了 19 篇文章,并将其分为两类。第一类占 57.89%(n=11/19),包括远程医疗文章及其应用的调查。第二类占 42.1%(n=8/19),包括远程医疗三层架构的文章。收集的研究表明,需要构建另一个分类层,并回顾静脉生物识别验证系统的研究。为了深入研究传感器领域,并确定远程医疗应用中客户端和服务器侧患者安全和隐私的新风险和收益,为这两个分类法制作了地图匹配。在我们的分类法的第二层,分析和回顾了静脉生物识别验证系统的文献。在这一层,我们得到了最终的 65 篇文章,分为四类。在第一类中,80%(n=52/65)的文章专注于开发和设计。在第二类中,12.30%(n=8/65)包括评估和比较文章。这些文章没有包含在我们的文献分析中。在第三类中,4.61%(n=3/65)包括分析研究文章。在第四类中,3.07%(n=2/65)包括评论和调查。本研究旨在为研究人员提供最新的综述,介绍已经进行的(用户/患者)认证研究,以提高远程医疗或任何信息系统的安全性。在当前的研究中,通过解释以前的研究来呈现分类法。此外,本综述强调了与静脉生物识别验证系统相关的动机、挑战和建议,并确定了该研究方向(实时保护静脉模板)中的差距,这代表了该领域的一个新的研究方向。