With the development of telecare medical information system (TMIS), doctors and patients are able to access useful medical services via 5G wireless communications without visiting the hospital in person. Unfortunately, TMIS should have the essential security properties, such as anonymity, mutual authentication, and privacy, since the patient’s data is transmitted via a public channel. Moreover, the sensing devices deployed in TMIS are resource-limited in terms of communication and computational costs. Thus, we design a physically secure privacy-preserving scheme using physical unclonable functions (PUF) in TMIS, called PUF-PSS to resolve the security requirements and efficiency of the existing related schemes. PUF-PSS prevents the security threats and also guarantees anonymity, key freshness, and authentication. We evaluate the security of PUF-PSS by performing formal and informal security analyses, including AVISPA implementation and ROR oracle model. We perform the test bed experiments utilizing well-known MIRACL based on a Raspberry PI 4 and compare the communication and computational costs of PUF-PSS with the previous schemes for TMIS. Consequently, PUF-PSS guarantees better efficiency and security than previous schemes and can be applied to TMIS environments.

中文翻译：

---

PUF-PSS：一种物理安全的隐私保护方案，将 PUF 用于支持 IoMT 的 TMIS

随着远程医疗信息系统（TMIS）的发展，医生和患者无需亲自到医院就可以通过5G无线通信获得有用的医疗服务。不幸的是，TMIS 应该具有基本的安全属性，例如匿名性、相互身份验证和隐私，因为患者的数据是通过公共渠道传输的。此外，部署在 TMIS 中的传感设备在通信和计算成本方面资源有限。因此，我们利用TMIS中的物理不可克隆函数（PUF）设计了一种物理安全的隐私保护方案，称为PUF-PSS，以解决现有相关方案的安全要求和效率。PUF-PSS 可以防止安全威胁，还可以保证匿名性、密钥新鲜度和身份验证。我们通过执行正式和非正式的安全分析来评估 PUF-PSS 的安全性，包括 AVISPA 实现和 ROR oracle 模型。我们使用基于 Raspberry PI 4 的著名 MIRACL 进行测试台实验，并将 PUF-PSS 的通信和计算成本与之前的 TMIS 方案进行比较。因此，PUF-PSS 比以前的方案保证了更好的效率和安全性，并且可以应用于 TMIS 环境。