Search Results (8)

Wireless sensor networks comprise many resource-constrained nodes that must protect both local readings and routing metadata. The sensors collect data from the environment or from the individual to whom they are attached and transmit it to the nearest gateway node via a wireless network for further delivery to external users. Due to wireless communication, the transmitted messages may be intercepted, rerouted, or even modified by an attacker. Consequently, security and privacy issues are of utmost importance, and the nodes must be protected against unauthorized access during transmission over a public wireless channel. To address these issues, we propose the Probabilistic Bit-Similarity-Based Key Agreement Protocol (PBS-KAP). This novel method enables two nodes to iteratively converge on a shared secret key without transmitting it or relying on pre-installed keys. PBS-KAP enables two nodes to agree on a symmetric session key using probabilistic similarity alignment with explicit key confirmation (MAC). Optimized Garbled Circuits facilitate secure computation with minimal computational and communication overhead, while Secure Sketches combined with Fuzzy Extractors correct residual errors and amplify entropy, producing reliable and uniformly random session keys. The resulting protocol provides a balance between security, privacy, and usability, standing as a practical solution for real-world WSN and IoT applications without imposing excessive computational or communication burdens. Security relies on standard computational assumptions via a one-time elliptic–curve–based base Oblivious Transfer, followed by an IKNP Oblivious Transfer extension and a small garbled threshold circuit. No pre-deployed long-term keys are required. After the bootstrap, only symmetric operations are used. We analyze confidentiality in the semi-honest model. However, entity authentication, though feasible, requires an additional Authenticated Key Exchange step or malicious-secure OT/GC. Under the semi-honest OT/GC assumption, we prove session-key secrecy/indistinguishability; full entity authentication requires an additional AKE binding step or malicious-secure OT/GC. Full article

Wireless Medical Sensor Networks (WMSNs) collect and transmit patients’ physiological data in real time through various sensors, playing an increasingly important role in intelligent healthcare. Authentication protocols in WMSNs ensure that users can securely access real-time data from sensor nodes. Although many researchers have proposed authentication schemes to resist common attacks, insufficient attention has been paid to insider attacks and ephemeral secret leakage (ESL) attacks. Moreover, existing adversary models still have limitations in accurately characterizing an attacker’s capabilities. To address these issues, this paper extends the traditional adversary model to better reflect practical deployment scenarios, assuming a semi-trusted server and allowing adversaries to obtain users’ temporary secrets. Based on this enhanced model, we design an efficient ECC-based authentication and key agreement protocol that ensures the confidentiality of users’ passwords, biometric data, and long-term private keys during the registration phase, thereby mitigating insider threats. The proposed protocol combines anonymous authentication and elliptic curve cryptography (ECC) key exchange to satisfy security requirements. Performance analysis demonstrates that the proposed protocol achieves lower computational and communication costs compared with existing schemes. Furthermore, the protocol’s security is formally proven under the Random Oracle (ROR) model and verified using the ProVerif tool, confirming its security and reliability. Therefore, the proposed protocol can be effectively applied to secure data transmission and user authentication in wireless medical sensor networks and other IoT environments. Full article

Background: Transitions from hospital to long-term care (LTC) facilities are critical periods for older adults living with dementia, often involving complex medical, cognitive, and psychosocial needs. Virtual team-based care has emerged as a promising strategy to improve communication, coordination, and continuity of care during these transitions. However, there is limited evidence on how such approaches are implemented in practice, particularly with respect to inclusion, equity, and engagement of older adults and families. Objective: This study aimed to identify the enablers and barriers to delivering virtual team-based care to support older adults with dementia in transitioning from hospital to LTC. Methods: We conducted a qualitative study using semi-structured interviews, focus groups, and a policy review. Data were collected from 60 participants, including healthcare providers, older adults, and family care partners across hospital and LTC settings in British Columbia, Canada. Thematic analysis was conducted using a hybrid inductive and deductive approach. Eighteen institutional policies and guidelines on virtual care and dementia transitions were reviewed to contextualize findings. Results: Four themes were identified: (1) enhancing communication and collaboration, (2) engaging families in care planning, (3) digital access and literacy, and (4) organizational readiness and infrastructure. While virtual huddles and secure messaging platforms supported timely coordination, implementation was inconsistent due to infrastructure limitations, unclear protocols, and staffing pressures. Institutional policies emphasized privacy and security but lacked guidance for inclusive engagement of older adults and families. Many participants described limited access to reliable technology, a lack of training, and the absence of tools tailored for individuals with cognitive impairment. Conclusions: Virtual care has the potential to support more coordinated and inclusive transitions for people with dementia, but its success depends on more than technology. Structured protocols, inclusive policies, and leadership commitment are essential to ensure equitable access and meaningful engagement. The proposed VIRTUAL framework offers practical tips for strengthening virtual team-based care by embedding ethical, relational, and infrastructural readiness across settings. Full article

Internet of Things (IoT) user authentication protocols enable secure authentication and session key negotiation between users and IoT devices via an intermediate server, allowing users to access sensor data or control devices remotely. However, the existing IoT user authentication schemes often assume that the servers (registration center and intermediate servers) are fully trusted, overlooking the potential risk of insider attackers. Moreover, most of the existing schemes lack critical security properties, such as resistance to ephemeral secret leakage attacks and offline password guessing attacks, and they are unable to provide perfect forward security. Furthermore, with the rapid growth regarding IoT devices, the servers must manage a large number of users and device connections, making the performance of the authentication scheme heavily reliant on the server’s computational capacity, thereby impacting the system’s scalability and efficiency. The design of security protocols is based on the underlying security model, and the current IoT user authentication models fail to cover crucial threats like insider attacks and ephemeral secret leakage. To overcome these limitations, we propose a new security model, IoT-3eCK, which assumes semi-trusted servers and strengthens the adversary model to better meet the IoT authentication requirements. Based on this model, we design an efficient protocol that ensures user passwords, biometric data, and long-term keys are protected from insider users during registration, mitigating insider attacks. The protocol also integrates dynamic pseudo-identity anonymous authentication and ECC key exchange to satisfy the security properties. The performance analysis shows that, compared to the existing schemes, the new protocol reduces the communication costs by over 23% and the computational overhead by more than 22%, with a particularly significant reduction of over 95% in the computational overhead at the intermediate server. Furthermore, the security of the protocol is rigorously demonstrated using the random oracle model and verified with automated tools, further confirming its security and reliability. Full article

The Bayech basin is located in southwestern Tunisia, a highly prone region to flooding risks. The Bayech basin is characterized by wadis that adopt a wide, sometimes ill-defined bed, often intersected by low-lying areas, resulting in a semi-endoreismo, greatly disrupting the flow regimes. The Bayech basin drains the slopes of the Nementchas and Tebessa mountains in Algeria, collecting water from the Medjen Bel Abbes plain in its middle course before crossing the Gafsa djebls chain at the Gafsa gap. In this basin, flooding is generally caused by high-intensity storms and is often relatively limited in extent. The slope shape and soil type can promote rapid surface runoff during intense rainfall. Therefore, the purpose of creating a web application, labeled ClimInonda, is to respond to a critical need of readily available information on climatic, environmental, and land use data collected in this basin and its morphometric characteristics using recent methods. The application consists of three essential components: the front-end, back-end, and database. The front-end focuses on the user interface, allowing users to interact with the application’s features. It communicates with the back-end through Hypertext Transfer Protocol requests for data processing and retrieval. The back-end handles the server-side operations, processes requests, and provides responses by retrieving data from the database. The database stores and manages the application’s data, ensuring integrity and efficient access. This modular architecture ensures a user-friendly interface, seamless data processing, and reliable data storage. Visualizations can include different types of data, such as satellite imagery, weather data, and terrain data, and can be displayed using various techniques, such as heat maps, contour maps, and 3D models, by providing easy-to-understand visualizations. ClimInonda is an application developed to expand upon existing platforms by providing a suite of exploratory data analysis features, including the ability to calculate the total precipitation depth recorded for any period, interpolate the annual recurrence interval for rainfall events, etc. A simple evaluation of the platform was performed to assess the usefulness and user satisfaction of the tool by professional users, and positive feedback was received. There is clear evidence that ClimInonda would provide the necessary basis for informed decision making by stakeholders and development agencies in arid and semi-arid Tunisia. Full article

Survivorship care that is shared between oncology and primary care providers may be a suitable model to effectively and efficiently care for the growing survivor population, however recommendations supporting implementation are lacking. This qualitative study aimed to explore health care professionals’ (HCPs) perceived facilitators and barriers to the implementation, delivery and sustainability of shared survivorship care. Data were collected via semi-structured focus groups and analysed by inductive thematic analysis. Results identified four overarching themes: (1) considerations for HCPs; (2) considerations regarding patients; (3) considerations for planning and process; and (4) policy implications. For HCPs, subthemes included general practitioner (GP, primary care physician) knowledge and need for further training, having clear protocols for follow-up, and direct communication channels between providers. Patient considerations included identifying patients suitable for shared care, discussing shared care with patients early in their cancer journey, and patients’ relationships with their GPs. Regarding process, subthemes included rapid referral pathways back to hospital, care coordination, and ongoing data collection to inform refinement of a dynamic model. Finally, policy implications included development of policy to support a consistent shared care model, and reliable and sustainable funding mechanisms. Based on study findings, a set of recommendations for practice and policy were developed. Full article

This paper proposes a new communication protocol for output-feedback control through multi-hop Wireless Sensor Network (WSN). The protocol is based on a Hop-by-Hop transport scheme and is especially devised to simultaneously fulfill two conflicting criteria: the network energy consumption and the stability/performance (in terms of ${\mathcal{H}}_{\infty }$ norm) of the closed-loop system. The proposed protocol can be implemented by means of three heuristics, basically using distinct rules to control the maximum number of retransmissions allowed in terms of the voltage level of the batteries of the network nodes. As another contribution, a Markov jump based representation is proposed to model the packet loss in the communication channel, giving rise to a systematic procedure to determine the transition probability matrix and the Markov chain operation modes of a network with multiple information sources. The synthesis of the output-feedback controller is made in two steps (observer filter plus a state-feedback controller) for the Markov model assuming partial availability of the operation modes. The efficiency and applicability of the communication protocol is illustrated by means of a numerical experiment, based on a physical model of a coupled tanks plant. The features of each heuristic of implementation of the proposed protocol are presented in the numerical comparisons. Full article

This paper introduces the design, implementation, and performance analysis of the scalable and mobility-aware hybrid protocol named boarder node medium access control (BN-MAC) for wireless sensor networks (WSNs), which leverages the characteristics of scheduled and contention-based MAC protocols. Like contention-based MAC protocols, BN-MAC achieves high channel utilization, network adaptability under heavy traffic and mobility, and low latency and overhead. Like schedule-based MAC protocols, BN-MAC reduces idle listening time, emissions, and collision handling at low cost at one-hop neighbor nodes and achieves high channel utilization under heavy network loads. BN-MAC is particularly designed for region-wise WSNs. Each region is controlled by a boarder node (BN), which is of paramount importance. The BN coordinates with the remaining nodes within and beyond the region. Unlike other hybrid MAC protocols, BN-MAC incorporates three promising models that further reduce the energy consumption, idle listening time, overhearing, and congestion to improve the throughput and reduce the latency. One of the models used with BN-MAC is automatic active and sleep (AAS), which reduces the ideal listening time. When nodes finish their monitoring process, AAS lets them automatically go into the sleep state to avoid the idle listening state. Another model used in BN-MAC is the intelligent decision-making (IDM) model, which helps the nodes sense the nature of the environment. Based on the nature of the environment, the nodes decide whether to use the active or passive mode. This decision power of the nodes further reduces energy consumption because the nodes turn off the radio of the transceiver in the passive mode. The third model is the least-distance smart neighboring search (LDSNS), which determines the shortest efficient path to the one-hop neighbor and also provides cross-layering support to handle the mobility of the nodes. The BN-MAC also incorporates a semi-synchronous feature with a low duty cycle, which is advantageous for reducing the latency and energy consumption for several WSN application areas to improve the throughput. BN-MAC uses a unique window slot size to enhance the contention resolution issue for improved throughput. BN-MAC also prefers to communicate within a one-hop destination using Anycast, which maintains load balancing to maintain network reliability. BN-MAC is introduced with the goal of supporting four major application areas: monitoring and behavioral areas, controlling natural disasters, human-centric applications, and tracking mobility and static home automation devices from remote places. These application areas require a congestion-free mobility-supported MAC protocol to guarantee reliable data delivery. BN-MAC was evaluated using network simulator-2 (ns2) and compared with other hybrid MAC protocols, such as Zebra medium access control (Z-MAC), advertisement-based MAC (A-MAC), Speck-MAC, adaptive duty cycle SMAC (ADC-SMAC), and low-power real-time medium access control (LPR-MAC). The simulation results indicate that BN-MAC is a robust and energy-efficient protocol that outperforms other hybrid MAC protocols in the context of quality of service (QoS) parameters, such as energy consumption, latency, throughput, channel access time, successful delivery rate, coverage efficiency, and average duty cycle. Full article