Communication security and privacy in pervasive user-centric e-health systems using Digital Rights Management and side channel attacks defense mechanisms

In this work, communication security and privacy in pervasive user-centric e-health systems is studied. Our proposed security scheme is presented which uses a combination of mechanisms from Digital Rights Management and side channel attacks defense in order to ensure privacy and security for patients´ data. In particular, communication between medical, limited-resource, embedded devices, carried by the patients, and devices in central health installations is both encrypted by means of elliptic curve cryptography and protected against traffic analysis. In addition, a DRM scheme is used in order to ensure authorized-only access to sensitive health data.