I need 13 slides of ppt including references with list of contents with images and easily understandable format.
Layout 1 IEEE Wireless Communications • February 2010 51 INTRODUCTION Recently, with the rapid development in wear- able medical sensors and wireless communica- tion, wireless body area networks (WBANs) have emerged as a promising technique that will revolutionalize the way of seeking healthcare [1–3], which is often termed e-healthcare. Instead of being measured face-to-face, with WBANs patients’ health-related parameters can be moni- tored remotely, continuously, and in real time, and then processed and transferred to medical databases. This medical information is shared among and accessed by various users such as healthcare staff, researchers, government agen- cies, and insurance companies. In this way healthcare processes, such as clinical diagnosis and emergency medical response, will be facili- tated and expedited, thereby greatly increase the efficiency of healthcare. Based on the WBAN, a wide range of novel applications are enabled, such as ubiquitous health monitoring (UHM), computer-assisted rehabilitation, emergency medical response sys- tem (EMRS), and even promoting healthy living styles. Specifically, in UHM the WBAN frees people from visiting the hospital frequently, and eases the heavy dependence on a specialized workforce in healthcare. Thus, it is a desirable technique to quickly build cost-effective health- care systems, especially for countries that are short of medical infrastructure and well trained staff. In addition, in an EMRS temporary WBANs can be rapidly deployed with minimum human effort at a disaster scene so that the vital signs of injured patients can be monitored and reported to the remote health center in time, which is potentially capable of saving the lives of numerous people. Next, we show the general architecture of a WBAN in Fig. 1. The WBAN mainly consists of tiny wireless sensor nodes that are placed in, on, or around a patient’s body. These sensors con- sistently monitor the patient’s vital signs, such as electrocardiogram (ECG), pulse, and blood pressure; or important environmental parame- ters like temperature and humidity. The sensor monitor readings, patient profile, and so on together are called patient-related data. The sensors collect and transmit the patient-related data to one or more local servers (or gateways), which may perform further data processing, aggregation, or distributed storage. The patient- related data from all WBANs may ultimately be sent to a centralized healthcare database for permanent records. Thus, the users of patient- related data can either remotely access the data from the database or query information locally from the WBAN, depending on the application scenario. Since the patient-related data stored in the WBAN plays a critical role in medical diagnosis and treatment, it is essential to ensure the secu- rity of these data. Failure to obtain authentic and correct medical data will possibly prevent a patient from being treated effectively, or even lead to wrong treatments. In reality, patient- 1536-1284/10/$25.00 © 2010 IEEE Wearable sensors Patient D Ward/house Be WIRELESS TE C H N O L O G I E S F O R E-HE A LT H C A R E MING LI AND WENJING LOU, WORCESTER POLYTECHNIC INSTITUTE KUI REN, ILLINOIS INSTITUTE OF TECHNOLOGY ABSTRACT The wireless body area network has emerged as a new technology for e-healthcare that allows the data of a patient’s vital body parameters and movements to be collected by small wearable or implantable sensors and communicated using short-range wireless communication techniques. WBAN has shown great potential in improving healthcare quality, and thus has found a wide range of applications from ubiquitous health monitoring and computer assisted rehabilitation to emergency medical response systems. The security and privacy protection of the data col- lected from a WBAN, either while stored inside the WBAN or during their transmission outside of the WBAN, is a major unsolved concern, with challenges coming from stringent resource con- straints of WBAN devices, and the high demand for both security/privacy and practicality/usabili- ty. In this article we look into two important data security issues: secure and dependable dis- tributed data storage, and fine-grained distribut- ed data access control for sensitive and private patient medical data. We discuss various practi- cal issues that need to be taken into account while fulfilling the security and privacy require- ments. Relevant solutions in sensor networks and WBANs are surveyed, and their applicability is analyzed. DATA SECURITY AND PRIVACY IN WIRELESS BODY AREA NETWORKS The authors look into two important data security issues, namely secure and dependable distributed data storage and fine- grained distributed data access control for the sensitive and private patient medical data. LOU LAYOUT 2/9/10 2:42 PM Page 51 Authorized licensed use limited to: Worcester Polytechnic Institute. Downloaded on February 19,2010 at 15:04:25 EST from IEEE Xplore. Restrictions apply. IEEE Wireless Communications • February 201052 related data is often stored in a distributive man- ner; the open and dynamic nature of the WBAN makes the data prone to being lost. Therefore, it is equally important to protect patient-related data against malicious modification and to ensure its dependability (i.e., having it readily retrievable even under node failure). Meanwhile, we must address various privacy concerns that may hinder wide public acceptance of WBAN technology. Especially access to patient-related data must be strictly limited only to authorized users; otherwise, the patients’ pri- vacy could be abused. As a governmental initia- tive, the Health Insurance Portability and Accountability Act of 1996 (HIPAA) [4] has specified a set of mandatory privacy rules to pro- tect sensitive personal identifiable health infor- mation. However, in WBANs distributively stored private data may easily be leaked due to physical compromise of a node. Therefore, data encryption and cryptographically enforced access control is needed to protect the privacy of patients. To design data security and privacy mecha- nisms for WBANs, there are a number of chal- lenges one must overcome, including how to make tough balances between security, efficien- cy, and practicality. Stringent resource con- straints on devices within a WBAN, especially the sensor nodes, basically require the security mechanisms to be as lightweight as possible. Practical issues, such as conflicts between securi- ty, safety, and usability, also need to be consid- ered carefully. For example, in order to ensure legitimate access to patients’ data under time- sensitive scenarios such as emergency care, the access control mechanisms should be context- aware and flexible. So far, although there are already several prototype implementations of WBANs, studies on data security and privacy issues are few, and existing solutions are far from mature. For exam- ple, in the CodeBlue project [3] a medical moni- toring sensor network is developed for pre-hospital care and emergency response. To cope with the dynamic environment of emergen- cy response, an elliptic curve cryptography (ECC)-based public key encryption scheme is used for authentication. However, there are no further mechanisms to protect the security of the stored data and control access to it. In this article we identify the requirements of data security and privacy in WBAN. In particu- lar, we point out the necessity of secure and dependable distributed data storage, and fine- grained distributed data access control. Then we analyze the challenging practical issues underly- ing these problems. Next, we explore the solu- tion space by surveying related work in both wireless sensor networks and WBANs. We com- pare these solutions and analyze their suitability for WBANs, and suggest potential future direc- tions. REQUIREMENTS FOR DATA SECURITY AND PRIVACY IN WBANS The security and privacy of patient-related data are two indispensable components for the system security of the WBAN. By data security, we mean data is securely stored and transferred; Figure 1. A general architecture of the WBAN, which consists of tier 1 and tier 2. The collected data is either stored in the WBAN for distributed, local access, or transferred from the WBAN to medical databases in tier 3 for centralized, remote access. The users of the patient-related data of the WBAN may include patients, doctors, nurses, support staff, scientists, and insurance companies. Wearable sensors Healthcare staff Central server Local servers Patient Database Distribute d data acc ess Ward/house Users Internet Tier 1: Raw data generation, distributed storage, distributed access Tier 2: Data processing, aggregation and storage Tier 3: Data storage and access Access point or base station Bed The security and pri- vacy of patient-relat- ed data are two indispensable compo- nents for the system security of the WBAN. By data secu- rity, we mean the data is securely stored and trans- ferred; and data pri- vacy means the data can only be accessed by the people who have authorization to view and use it. LOU LAYOUT 2/9/10 2:42 PM Page 52 Authorized licensed use limited to: Worcester Polytechnic Institute. Downloaded on February 19,2010 at 15:04:25 EST from IEEE Xplore. Restrictions apply. IEEE Wireless Communications • February 2010 53 and data privacy means the data can only be accessed by the people who have authorization to view and use it. In the following we show the security requirements. APPLICATION SCENARIO We exemplify the security needs in WBANs by a distributed healthcare application scenario. Suppose Peter is injured when traveling far away from his hometown. At first, the emer- gency paramedic reads Peter’s implanted RFID tag to obtain his profile and medical records, and a WBAN consisting of wearable medical sensors is established and associated with Peter. Later, various healthcare workers can directly access the vital sign readings from the WBAN in real time, in order to provide better medical care. For instance, a nurse inquires on Peter’s health status from his WBAN and uploads an electronic report to the local server in Peter’s room. Peter’s PDA has been configured with an ini- tial access policy (AP) that controls who has access to his medical data within his WBAN. The AP automatically adapts to contexts, such as accommodating the reception staff, doctor, and nurse. Peter can also modify the AP at his own will; for example, his sensitive AIDS record is only allowed to be shared with his nurses but not doctors. Note that medical data is often stored and accessed distributively. Different types of moni- toring data may be stored in different sensor nodes; before Peter arrives at a place with wire- less Internet coverage, those data can only be stored locally in his WBAN. Direct local access to cached data in Peter’s WBAN and local servers allows freshly generated data to be viewed immediately without delay to facilitate in-time diagnosis. Here, a natural question is how to ensure the security of the distributively stored patient-relat- ed data from its storage through transfer to access. Before we discuss the security of dis- tributed data storage and access, we first analyze the threats faced by the distributively stored data in the WBAN. THREATS FACED BY THE DATA STORED WITHIN WBAN The WBAN often operates in environments with open access by various people (e.g., hospital staff), which also accommodates attackers. The open wireless channel makes the data prone to being eavesdropped, modified