METHODOLOGICAL PRINCIPLES FOR BUILDING A SECURE OPERATING PLATFORM FOR THE INTERNET OF MEDICAL THINGS

Abstract

Processes aimed at the secure digitalisation of Ukraine’s social infrastructure are ongoing. Medical infrastructure is a key area within the context of Industry 4.0 and Ukraine’s Cybersecurity Strategy. One of the key modern tools for the digitalisation of medicine is secure cyber-physical technology, particularly in relation to the secure Internet of Medical Things (IoMT). Effective mechanisms for implementing intelligent diagnosis of a person’s health status include secure processes such as: the collection of biophysical parameters relating to the functioning of a patient’s organs and systems; transmission of medical information via wireless communication channels; processing and analysis of data on the body’s condition; and the making of clinical decisions regarding diagnosis and, on this basis, the prescription of treatment, which form the basis of the functional architecture of the Internet of Medical Things. This paper proposes a methodology for constructing a secure IoT architecture platform based on the ‘sensors – sensor networks – cloud infrastructure – user – privacy and security’ model, which implements the functional algorithm ‘collection – exchange – processing – analysis – decision-making’ in accordance with the ‘object – threat – protection’ concept and potential external accidental and targeted threats. Security systems for IoT components—sensors, sensor networks and cloud infrastructure components—are presented in accordance with the STRIDE threat model and the OSI model. The practical implementation of secure medical data exchange in a Bluetooth sensor network is examined, specifically with regard to the cryptographic protection of information at the level of algorithmic and software-based message encryption using AES-256-GCM and Python.