PHD, Kent State University, 2022, College of Arts and Sciences / Department of Computer Science
Lately, medical data and services interchanges throughout the Internet of Medical Things (IoMT) have become not only possible but essential. Nowadays, interactions involving doctor's tablets, patients' insulin pumps, Heart monitors, etc., are becoming everyday occurrences. In such a scenario, traditional assumptions for establishing and enforcing access control regulations no longer hold. The entities need to authenticate and trust each other to exchange sensitive medical information. Interactions are further complicated because the interacting entities usually belong to different security domains or don't have preexistent relationships. To address such issues; Trust Management can be used. Trust management is essentially the study of access control policies, digital credentials, and building trust relationships for a widely distributed environment where authorization cannot be based on identity authentication. The term trust management was first coined by Blaze, Feigenbaum, and Laze (M. Blaze, 1996) IoMT deals with a patient-data-rich segment, making security and privacy a severe concern to patients. Therefore, access control is a significant issue to ensure trust in the IoMT. However, deploying existing authentication and authorization solutions to the IoMT is not straightforward because of highly dynamic and possibly unprotected environments and resource limitations.
This dissertation proposes Soter, a negotiation-based access control system for constrained devices in the IoMT environment. This dissertation aims to provide new approaches to
automatic, secure, and efficient trust establishment among multiple parties in a constrained environment of
the IoMT. The implementation of an access control system can be divided into three design layers:
• Access Control Policy language,
• Access Control Model, and
• Access Control Mechanisms.
So, in this dissertation, we used these abstraction layers, and we designed Soter, a HIPPA-based access control system for the (open full item for complete abstract)
Committee: Javed Khan (Advisor); Javed Khan (Committee Chair); Hassan Peyravi (Committee Member); Pratim Datta (Committee Member); Kambiz Ghazinour (Committee Member); Elena Novak (Committee Member); Jong-Hoon Kim (Committee Member)
Subjects: Computer Science