244
K. Djouadi and A. Belkhir
3.3 Security of the E-Health Platform
We introduced security mechanisms to protect the captured user data as it will
be sent to processing equipment and then to storage spaces, which will make
them subject to theft or alteration attempts [3]which represent very high risks
for the functioning of IoT applications.
– Data integrity: Data integrity refers to the state of data that, at the time of
processing, storage or transmission is not intentionally or accidentally altered
or destroyed and maintains a format that allows its use. For this purpose, the
programmed SQL queries will be used, and data will be encrypted using the
RSA asymmetric encryption algorithm, to ensure such data integrity.
– Backup and logging of the cloud database: To preserve the data within
our database, we have opted for the backup strategy which consists of making copies of existing data in order to improve reliability, fault tolerance, or
availability. Every day, our database will be automatically replicated to the
cloud to ensure continuity of service in the event of a local server failure.
– Authentication: The authentication process will allow us to prevent privacy
breaches, unauthorized access to data, identity theft, and password attacks by
limiting authentication and login attempts to the private areas of practitioner
and patient users. This is done by using small gadgets called “smart cards”,
which each user has. These cards have the above-mentioned user ID (NIN)
and a corresponding password [12].
– Data encryption: To prevent human attacks from the middle, the following
encryption mechanisms are applied to the exchanged data in our system.
• Encryption of data within the database, using md5 and DES encryption
protocols.
• Encryption of data circulating in the network, using SSL Sockets with
certificates and Data hash by applying the SH1 protocol [9].
4 Implementation and Results
In this section we present the basic implementation setup, then we introduce
the mobile prototype to validate our solution as well as some simulations and
discussion of results.
The experiments were conducted on an IoT sensor Xiaomi Mi Band3 [11]
is an intelligent IoT-based electronic bracelet that incorporates an HR (Heart
Rate) heart rate sensor. The user interface (UI) was built using an Android
Studio V4.4+. We have used the Google Cloud Platform for the creation of our
local servers and the global server for the data storage.
4.1 Mobile Application Prototype
The mobile application is used to communicate with the IoT device in order to
collect the data. It will be installed at the practitioner and the patient having a
profile for each one of them (see Fig. 2). Both types of users will be entitled to
the following functionalities:
K. Djouadi and A. Belkhir
3.3 Security of the E-Health Platform
We introduced security mechanisms to protect the captured user data as it will
be sent to processing equipment and then to storage spaces, which will make
them subject to theft or alteration attempts [3]which represent very high risks
for the functioning of IoT applications.
– Data integrity: Data integrity refers to the state of data that, at the time of
processing, storage or transmission is not intentionally or accidentally altered
or destroyed and maintains a format that allows its use. For this purpose, the
programmed SQL queries will be used, and data will be encrypted using the
RSA asymmetric encryption algorithm, to ensure such data integrity.
– Backup and logging of the cloud database: To preserve the data within
our database, we have opted for the backup strategy which consists of making copies of existing data in order to improve reliability, fault tolerance, or
availability. Every day, our database will be automatically replicated to the
cloud to ensure continuity of service in the event of a local server failure.
– Authentication: The authentication process will allow us to prevent privacy
breaches, unauthorized access to data, identity theft, and password attacks by
limiting authentication and login attempts to the private areas of practitioner
and patient users. This is done by using small gadgets called “smart cards”,
which each user has. These cards have the above-mentioned user ID (NIN)
and a corresponding password [12].
– Data encryption: To prevent human attacks from the middle, the following
encryption mechanisms are applied to the exchanged data in our system.
• Encryption of data within the database, using md5 and DES encryption
protocols.
• Encryption of data circulating in the network, using SSL Sockets with
certificates and Data hash by applying the SH1 protocol [9].
4 Implementation and Results
In this section we present the basic implementation setup, then we introduce
the mobile prototype to validate our solution as well as some simulations and
discussion of results.
The experiments were conducted on an IoT sensor Xiaomi Mi Band3 [11]
is an intelligent IoT-based electronic bracelet that incorporates an HR (Heart
Rate) heart rate sensor. The user interface (UI) was built using an Android
Studio V4.4+. We have used the Google Cloud Platform for the creation of our
local servers and the global server for the data storage.
4.1 Mobile Application Prototype
The mobile application is used to communicate with the IoT device in order to
collect the data. It will be installed at the practitioner and the patient having a
profile for each one of them (see Fig. 2). Both types of users will be entitled to
the following functionalities: