臺灣博碩士論文加值系統

隨著全球人口快速老化，慢性疾病在老年人口的好發率躍升，進而使健康照護(Healthcare)的需求劇增。為了降低照護的人力資源成本，以及提升照護的效率和便利性，現行的機構（醫療院所或照護中心）照護系統都應用了無線感測網路技術的輔助（稱為無線醫用感測網路，簡稱WMSN），利用感測網路中的感測設備與閘道器，能即時監測患者的健康資訊並傳送至遠端的監測中心。但我們發現，目前無線感測網路所使用的通訊安全機制並不完全適用於機構照護的系統架構；在現實情況中，整個照護過程還會衍伸出許多過去研究尚未滿足之的情境以及需求，在這些情境需求下所產生的通訊過程也都需要受到通訊安全的保護。所以，本研究設計出一套具可移動性的照護系統，使感測設備隨病患在醫院內移動的過程中，能有效率地在閘道器間切換連線、接續監測任務，避免因設備的移動而造成服務中斷。甚至當病患跨網域移動時（例如從照護機構轉移至醫院），我們的系統也能確保感測設備可以快速地完成身分驗證協定，安全地連結上新的閘道器，繼續健康監測服務。並且，在綜合相關WMSN領域的文獻和美國健康保險可攜性及責任法案(HIPAA)在安全與隱私方面之保護規範後，本研究也為該系統提供了我們認為必要的六項安全性及兩項隱私性的保護需求。

There are many literatures presenting various care systems using Wireless Medical Sensors Network (WMSN) technology in healthcare institutions, it is used to automatically collect and monitor the patient's physiological signals and health status. However, we have found that there are still many situations in the field of medical care that are not satisfied by these systems, for example, the movement of doctors and patients will cause the WMSN devices (gateways or sensors) to be mobile. Therefore, this study designed a healthcare system with mobility, it allowing the gateway in the WMSN can transfer (or temporarily share) access to the sensors to another new gateway safely and it can let the sensors and the new gateway to continue the monitoring task and avoid monitoring service interruption due to devices movement. And in the field, after we comprehensive related WMSN literature and protection of privacy and privacy regulations of HIPAA regulations, we also provides appropriate security protocols for this system to meet the eight security and privacy protection needs.

致謝 i
摘要 ii
Abstract iii
目錄 iv
圖目錄 vii
表目錄 viii
第一章、緒論 1
第一節、研究背景 1
第二節、研究動機 5
1.2.1情境一：典型健康監測情境 5
1.2.2情境二：WMSN設備的移動情境 6
1.2.3情境三：WMSN設備的跨網域移動情境 8
第三節、研究目的 9
1.3.1情境一：典型健康監測情境 9
1.3.2情境二：WMSN設備的移動情境 10
1.3.3情境三：WMSN設備的跨網域移動情境 11
1.3.4 WMSN 健康監測的安全議題 11
第四節、研究貢獻 13
第五節、論文架構 14
第二章、文獻探討 15
第一節、無線感測網路（Wireless Sensor Network，WSN） 15
第二節、無線醫療感測網路的安全與隱私議題 17
2.2.1 WMSN的安全議題相關文獻 18
2.2.2健康保險可攜性與責任法(HIPAA) 19
第三節、NFC之RFCA與SDD機制 22
2.3.1磁場碰撞迴避機制(Radio Field Collision Avoidance，RFCA) 22
2.3.2單一裝置偵測機制(Single Device Detection，SDD) 23
第三章、應用WMSN的醫療照護系統之系統架構與安全需求 24
第一節、研究環境與系統架構 24
3.1.1研究環境 24
3.1.2系統架構 26
3.1.3環境假設 31
第二節、需求分析 33
3.2.1安全需求 34
3.2.2隱私需求 37
第四章、WMSN應用於醫療照護系統之協定設計 40
第一節、照護系統與快速身分認證協定之運作流程 40
4.1.1典型健康監測情境 41
4.1.2 Sensor和GWguest有換手需求之情境 42
4.1.3 Sensor和GWguest有漫遊需求之情境 43
第二節、符號定義 44
第三節、協定設計細節 46
4.3.1協定（一）Sensor與 GWhost之註冊協定 46
4.3.2協定（二）GWhost與Monitoring Server之認證協定 48
4.3.3協定（三）GWhost傳送生理訊號協定 52
4.3.4協定（四）Sensor與GWhost之金鑰更新協定 54
4.3.5協定（五）GWguest於GWhost間之換手協定 55
4.3.6協定（六）GWguest傳送生理訊號協定 56
4.3.7協定（七）Sensor於GWhost間之換手認證協定 57
4.3.8協定（八）Sensor於GWhost間之漫遊認證協定 60
4.3.9協定（九）GWguest於GWhost間之漫遊協定 62
第五章、照護系統與安全協定分析 65
第一節、WMSN設備的移動性分析 65
第二節、安全性與隱私分析 66
5.2.1身分認證性 67
5.2.2資料隱密性 68
5.2.3金鑰交換 69
5.2.4資料完整性 71
5.2.5資料可用性 71
5.2.6資料新鮮性 72
5.2.7身分隱私 74
5.2.8位置隱私 74
5.2.9匿名資訊的還原 75
第六章、結論 77
參考文獻 78

[1] 鄭凱仁，「全球高齡化社會人口結構趨勢，強化智慧照護需求」，科技政策觀點，2016年引用。<https://portal.stpi.narl.org.tw/index/article/10250>
[2] 自由時報電子報，「全球人口老化加速 2050年將高達16億人」，2016年引用。<http://news.ltn.com.tw/news/world/breakingnews/1648522>
[3] 法新社，「Global elderly population exploding – US report」，2016年引用。<https://www.rappler.com/science-nature/life-health/127458-global-elderly-population-report>
[4] 李嘉惠，「老年族群接受遠距照護的影響因素」，國立中山大學高階經營碩士班碩士論文，2017年。
[5] 吳昌政、林玗錚、孫子傑。「老人關懷零距離-社區/居家遠距照護之發展及應用探討」。台灣老年學論壇，(17) (2013)：1-13頁。
[6] A. H. Hussam, G. Amjad, and A. Q. Mahmoud. "Lightweight security protocol for health monitoring in Ambient Assisted Living environment." Communications Workshops (ICC Workshops), 2017 IEEE International Conference on. IEEE, 2017.
[7] Iqbal, A. Muhammad, and B. Magdy. "A Novel Authentication and Key Agreement Protocol for Internet of Things Based Resource-Constrained Body Area Sensors." Future Internet of Things and Cloud Workshops (FiCloudW), IEEE International Conference on. IEEE, 2016.
[8] K. Pardeep, and H. J. Lee. "Security issues in healthcare applications using wireless medical sensor networks: A survey." Sensors 12.1 (2011): 55-91.
[9] M. Majidi, et al. "Energy cost analyses of key management techniques for secure patient monitoring in WSN." Open Systems (ICOS), 2011 IEEE Conference on. IEEE, 2011.
[10] J. Mišić, and V. Mišić. "Enforcing patient privacy in healthcare WSNs through key distribution algorithms." Security and Communication Networks 1.5 (2008): 417-429.
[11] Bruce, Ndibanje, Gi-Hyun Hwang, and Hoon Jae Lee. "A hybrid and fast authentication protocol for handoff support in e-healthcare systems among WSNs." ICT Convergence (ICTC), 2013 International Conference on. IEEE, 2013.
[12] 黎俊豪、楊宗穎、李明怡、程彥輔、吳佩穎、陳彥錚，「無線感測器網路在醫療檢測之應用」，第十七屆資訊管理暨實務研討會，2011年。
[13] K. H. Yeh. "A Secure IoT-Based Healthcare System With Body Sensor Networks." IEEE Access 4 (2016): 10288-10299.
[14] M. Rostami, A. Juels, and F. Koushanfar, “Heart-to-heart (H2H): authentication for implanted medical devices.” Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security. ACM, 2013.
[15] D. Seo, et al. "Wireless recording in the peripheral nervous system with ultrasonic neural dust." Neuron 91.3 (2016): 529-539.
[16] IEEE 802.15.6-2012 - IEEE Standard for Local and metropolitan area networks - Part 15.6: Wireless Body Area Networks. Availabe in 2019 <https://standards.ieee.org/standard/802_15_6-2012.html>
[17] Filipe, Luis, et al. "Wireless body area networks for healthcare applications: Protocol stack review." International Journal of Distributed Sensor Networks 11.10 (2015): 213705.
[18] C. Camara, P. L. Pedro, and E. T. Juan. "Security and privacy issues in implantable medical devices: A comprehensive survey." Journal of biomedical informatics 55 (2015): 272-289.
[19] Mukhopadhyay, Subhas Chandra. "Wearable sensors for human activity monitoring: A review." IEEE sensors journal 15.3 (2015): 1321-1330.
[20] 御園照護機構，2018年引用。<https://www.ul.idv.tw/msg/news-01.html>
[21] Hsueh, Ching-Tsung, Chih-Yu Wen, and Yen-Chieh Ouyang. "A secure scheme against power exhausting attacks in hierarchical wireless sensor networks." IEEE Sensors journal 15.6 (2015): 3590-3602.
[22] U.S. Department of Health and Human Services. ”HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT.” 1996年。<https://aspe.hhs.gov/report/health-insurance-portability-and-accountability-act-1996>
[23] 陳逸凡，「以歐盟被遺忘權為中心：探討網路隱私保護與新聞自由的衡平」，國立臺北科技大學智慧財產權研究所碩士論文，2016年。
[24] P. Kumar, S. G. Lee, and H. J. Lee. "E-SAP: efficient-strong authentication protocol for healthcare applications using wireless medical sensor networks." Sensors 12.2 (2012): 1625-1647.
[25] 楊智傑，「美國醫療資訊保護法規之初探－以 HIPAA/HITECH之隱私規則與資安規則為中心」，軍法專刊，60卷5期，79-116頁，2014年。
[26] G. Prosanta, and T. Hwang. "BSN-Care: A secure IoT-based modern healthcare system using body sensor network." IEEE Sensors Journal 16.5 (2016): 1368-1376.
[27] Internet Engineering Task Force. " The Kerberos Network Authentication Service (V5) .", RFC: 4120, (July.2005). (賴榮樞,民98譯)
[28] Alaiad, Ahmad, and Lina Zhou. "Patients' adoption of WSN-based smart home healthcare systems: An integrated model of facilitators and barriers." IEEE Transactions on Professional Communication 60.1 (2017): 4-23.
[29] Jyoti Kaurav, Kaushik Ghosh. "Applications of WSN in Medical Sciences: A survey." International Conference on Technical and Executive Innovation in Computing and Communication, 2012.
[30] 陳正豪，「NFC 電子錢包之研究」，國立中興大學資訊管理學系碩士學位論文，2014年。
[31] 台灣健康雲整體計畫，「電子病歷交換系統」，中華民國行政院衛生福利部，2013年。<http://healthcloud.mohw.gov.tw/OverView.aspx?FuncCode=OverView>
[32] "Design and evaluation of a telemonitoring concept based on NFC-enabled mobile phones and sensor devices." IEEE Transactions on Information Technology in Biomedicine 16.1 (2012): 17-23.
[33] Pathania, Shikha, and Naveen Bilandi. "Security issues in Wireless Body area network." Int J ComputSci Mobile Comput 3.4 (2014): 1171-1178.
[34] 吳育賢，「基於 LBS 的 O2O 電子商務架構下具有位置隱私與安全性的交易系統之設計」，國立嘉義大學資訊管理學系暨碩士班碩士論文，2017 年。
[35] J. Jia, F. Zhang, and R. Wu. “An encryption-based k-anonymity approach for location privacy protection in LBS.” in Proceedings 2013 International Conference on Mechatronic Sciences, Electric Engineering and Computer (MEC), pp. 1852-1855, 2013.
[36] S. Patil, S. Ramayane, M. Jadhav, and P. Pachorkar. “Hiding User Privacy in Location Base Services through Mobile Collaboration.” in 2015 International Conference on Computational Intelligence and Communication Networks (CICN), pp. 1105-1107, 2015.
[37] Kent S., Seo K. “Security architecture for the internet protocol.” 2005. RFC 4301.
[38] Mukhopadhyay, Subhas Chandra. "Wearable sensors for human activity monitoring: A review." IEEE sensors journal 15.3 (2015): 1321-1330.
[39] W. Y. Toh, Y. K. Tan, W. S. Koh, and L. Siek, “Autonomous wearable sensor nodes with flexible energy harvesting,” IEEE Sensors J., vol. 14, no. 7, pp. 2209–2306, Jul. 2014.
[40] K. W. Lui, O. H. Murphy, and C. Toumazou, “A wearable wideband circularly polarized textile antenna for effective power transmission on a wirelessly-powered sensor platform,” IEEE Trans. Antennas Propag., vol. 61, no. 7, pp. 3873–3876, Jul. 2013.
[41] S. Mandal, L. Turicchia, and R. Sarpeshkar, “A low-power, battery-free tag for body sensor networks,” IEEE Pervasive Comput., vol. 9, no. 1, pp. 71–77, Jan. 2010.
[42] C. W. Lin, Y. T. Yang, J. S. Wang, and Y. C. Yang, “A wearable sensor module with a neural-network-based activity classification algorithm for daily energy expenditure estimation,” IEEE Trans. Inf. Technol. Biomed., vol. 16, no. 5, pp. 991–998, Sep. 2012.