The fog-enabled Internet of Medical Things (IoMT) allows patients wearing healthcare devices to upload and share medical data with doctors via fog nodes with low latency. Given the sensitive nature of this data, ensuring secure communication between users (patients and doctors) and fog nodes is crucial. Existing authentication and key agreement schemes often rely on expensive cryptographic primitives, leading to high computation costs, and many are vulnerable to attacks such as replay attacks or stolen verifier attacks. To address these issues, we propose FogSeCom, a secure and efficient protocol that leverages lightweight operations (hash functions, symmetric encryption) to establish a shared session key while ensuring anonymity and resilience against major attacks. Security validation is conducted using the Scyther tool and BAN logic model, demonstrating FogSeCom’s superiority in minimizing computational and communication overhead, making it ideal for resource-constrained IoMT devices.

Keywords