Fine-grained Device and Data Access Control of Community Medical Internet of Things

Abstract

In the community medical Internet of things, a large number of IoT devices are applied to the medical field to generate massive personal health information including personal key privacy information, which was transferred and stored in medical IoT systems. However, it is constantly facing a large number of cybercriminal node attack threats in a public network environment, which causes leakage of patient privacy information. To resist the threat of node attacks and ensure the security of patients’ privacy, a secure access control model based on the layered structure of the Internet of Things is proposed in the system. In the model, for the personal health data, under the condition of fine dividing patient health information, users with different roles can access the cloud patient health data according to the health data access permissions. And for the health devices, the health devices node are mapped into virtual object stored in the cloud whose status are remotely controlled by users using right permissions. Theoretical analysis and experimental results show that the scheme is effective, secure and efficient.