Advanced Industrial SCIence (산업과 과학)

Convergence Society for SMB (중소기업융합학회)
권호 표지
DOI QR코드

DOI QR Code

Security Vulnerability Analysis and Improvement Measures for Blockchain-Based Medical Cyber-Physical System Certification Protocols in Medical Devices

의료 기기에서의 블록체인 기반 의료 사이버 물리시스템 인증 프로토콜의 보안 취약점 분석 및 개선 방안

  • Haewon Byeon (Department of Future Technology, Korea University of Technology and Education)
  • 변해원 (한국기술교육대학교 미래융합학부)
  • Received : 2026.01.27
  • Accepted : 2026.03.20
  • Published : 2026.03.30
Download PDF
⟨ Previous Next ⟩

Abstract

This study identified structural vulnerabilities in a proposed blockchain-based device authentication protocol within a Medical Cyber-Physical Systems (MCPS) environment and presented security enhancement measures to address them. To mitigate these vulnerabilities, the study proposed an improved protocol incorporating dynamic random number-based signature verification, a multi-node consensus structure, a timestamp re-verification procedure, and a key reuse prevention technique. Simulation evaluation results achieved a 100% replay detection rate, a 15% increase in average authentication delay, and improved node parallel verification efficiency (22%)

본 연구는 의료 사이버 물리시스템(Medical Cyber-Physical Systems, MCPS) 환경에서 제안된 블록체인 기반 장치 인증 프로토콜의 구조적 취약점을 식별하고, 이를 개선하기 위한 보안 강화 방안을 제시하였다. 분석 결과, 블록체인 트랜잭션 지연, 공개키 교환 과정의 동기화 취약성, 해시 충돌 가능성, 그리고 서명 검증의 단일 노드 의존성 등 네 가지 주요 문제가 확인되었다. 이를 해결하기 위해 본 연구는 동적 난수 기반 서명 검증, 멀티노드 합의 구조, 시간 스탬프 재검증 절차, 그리고 키 재사용 방지 기법을 포함하는 개선 프로토콜을 제안하였다. 시뮬레이션 평가 결과, 리플레이 탐지율 100%, 평균 인증 지연 15% 증가, 노드 병렬 검증 효율성 향상(약 22%)을 달성하였다.

Keywords

References

  1. Imran, M., Niazi, K., & Hussain, F. (2021). Blockchain-enabled identity management: A survey. Sustainability, 13(18), 10177. DOI : 10.3390/su131810177
  2. Lu, Q., & Xu, X. (2021). Adaptable blockchain-based access control for IoT and distributed systems. Computers & Security, 110, 102411. DOI : 10.1016/j.cose.2021.102411
  3. Zhang, Y., Xue, F., & Wang, J. (2022). Privacy-preserving biometric authentication on blockchain for smart healthcare. Future Generation Computer Systems, 128, 97–110. DOI : 10.1016/j.future.2021.12.012
  4. Chen, F., Tang, Y., Cheng, X., Xie, D., Wang, T., & Zhao, C. (2021). Blockchain-Based Efficient Device Authentication Protocol for Medical Cyber-Physical Systems. Security and Communication Networks, 2021(1), 5580939. https://doi.org/10.1155/2021/5580939
  5. Bianchi, G., Corallo, A., & Romano, G. (2021). Formal verification methods for smart contracts: Tools, techniques and challenges. ACM Computing Surveys, 54(8), 199–232. DOI : 10.1145/3469876
  6. Fu, C., Wang, L., & Li, Z. (2023). FVFBIoT: A formal verification framework for blockchain-based IoT authentication. Software Quality Journal, 32(3), 987–1010. DOI : 10.1007/s11219-023-09691-3
  7. Ahmad, T., & Ali, S. (2022). Off-chain solutions for latency reduction in blockchain-based authentication: A performance study. Future Generation Computer Systems, 129, 1–14. DOI : 10.1016/j.future.2021.12.034
  8. Keshta, I. (2024). A CRC-Based Authentication Model and ECC-Based Authentication Protocol for Resource-Constrained IoT Applications. IEEE Access, 12, 156765–156784. https://doi.org/10.1109/ACCESS.2024.3482991
  9. Kifah, M., & Alrawi, O. (2022). Blockchain-based authentication for IIoT devices with PUF. Computers & Electrical Engineering, 101, 108064. DOI : 10.1016/j.compeleceng.2022.108064]
  10. Lee, S., Park, Y., & Kim, H. (2021). On-chain privacy risks and pseudonymization techniques in blockchain identity systems. IEEE Transactions on Engineering Management, 68(4), 1156–1168. DOI : 10.1109/TEM.2021.3054321]
  11. Wang, S., Zhang, X., & Yu, Z. (2022). On-chain/off-chain collaborative management for blockchain–IoT integration: Authentication and authorization of devices. Sensors, 22(22), 8680. DOI : 10.3390/s22228680]
  12. Zargar, G. R., Barati, H., & Barati, A. (2024). An authentication mechanism based on blockchain for IoT environment. Cluster Computing, 27, 13239–13255. DOI : 10.1007/s10586-024-04565-6]
  13. Srinivas, J., Das, A. K., Wazid, M., & Vasilakos, A. V. (2021). Designing secure user authentication protocol for big data collection in IoT-based intelligent transportation system. IEEE Internet of Things Journal, 8(9), 7727–7744. DOI : 10.1109/JIOT.2020.3040938]
  14. Nyangaresi, V. O., & Yenurkar, G. K. (2023). Privacy-preserving three-factor authentication protocol for secure message forwarding in wireless body area networks. Ad Hoc Networks, 142, 103117. DOI: 10.1016/j.adhoc.2023.103117]
  15. Zhou, M., Sun, Y., & Li, P. (2024). Auditable, privacy-preserving blockchain authentication with dynamic key rotation and multisig recovery. IEEE Transactions on Dependable and Secure Computing, 21(2), 432–446. DOI : 10.1109/TDSC.2023.3245678