کنفرانس مهندسی برق ایران

صفحه اصلی / سی و چهارمین کنفرانس بین المللی مهندسی برق

On the Security of a Recent IoMT Authentication Protocol: Formal Verification and Systematic Logical Cryptanalysis

نویسندگان :

Fateme Zahra Khakzad¹ Hosein Naemi² Farzane Sabahi³ Amir Masoud Aminian Modarres⁴ Ghazaleh Sarbishaei⁵

1- دانشگاه سجاد 2- دانشگاه سجاد 3- دانشگاه سجاد 4- عضو هیأت علمی دانشگاه سجاد 5- عضو هیأت علمی دانشگاه سجاد

کلمات کلیدی :

Cryptanalysis،IoMT،Authentication protocols،ProVerif،Key agreement protocols،PUF،Fuzzy-extractor،network security

چکیده :

The Internet of Medical Things (IoMT) has significantly transformed healthcare delivery. However, safeguarding sensitive physiological data remains a critical challenge. In this paper, we present a rigorous security evaluation of a recently proposed authentication and key agreement (AKA) protocol for IoMT environments. Our methodology combines a systematic informal cryptanalysis with formal security verification using ProVerif. The analysis reveals several security weaknesses in the examined protocol, including the lack of Perfect Forward Secrecy and Perfect Backward Secrecy, as well as vulnerabilities to physical capture and desynchronization attacks. The formal verification results further confirm the limitations of the protocol in achieving authentication and key secrecy guarantees under an adversary model. Based on the identified weaknesses, we propose practical countermeasures and improvement strategies to enhance the protocol’s security and make it more suitable for protecting sensitive medical information in IoMT systems.