{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T05:04:01Z","timestamp":1750309441910,"version":"3.41.0"},"reference-count":46,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2025,1,8]],"date-time":"2025-01-08T00:00:00Z","timestamp":1736294400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Swedish Foundation for Strategic Research","award":["RIT17-0035"],"award-info":[{"award-number":["RIT17-0035"]}]},{"name":"Swedish Research Council for Health, Working Life and Welfare Life","award":["2018\u221201399"],"award-info":[{"award-number":["2018\u221201399"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Comput. Healthcare"],"published-print":{"date-parts":[[2025,1,31]]},"abstract":"<jats:p>The landscape of healthcare is experiencing a digitalization shift, transferring many medical activities to the patients\u2019 homes, a phenomenon commonly referred to as Hospital-at-Home. While Internet of Things (IoT) devices facilitate the building of such systems, there is a need for powerful middleware that encapsulates device-to-device communication and enables the construction of user-friendly, secure, and robust Hospital-at-Home systems. A key challenge for such middleware is to build a trustworthy and lightweight key management system allowing different devices in the system to exchange messages securely. In this article, we present a simple, easily manageable and scalable such architecture which, in addition, supports long-term data protection using post-quantum cryptographic primitives. Our proposed solution utilizes a Merkle tree to enable the IoT devices to establish trust between each other automatically, even in the absence of an Internet connection. We have implemented the architecture and present performance figures as well as a security analysis of our approach.<\/jats:p>","DOI":"10.1145\/3700144","type":"journal-article","created":{"date-parts":[[2024,10,14]],"date-time":"2024-10-14T15:56:43Z","timestamp":1728921403000},"page":"1-28","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["A Trust Establishment and Key Management Architecture for Hospital-at-Home"],"prefix":"10.1145","volume":"6","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8022-3700","authenticated-orcid":false,"given":"Alfred","family":"\u00c5kesson","sequence":"first","affiliation":[{"name":"Lund University, Lund, Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8003-200X","authenticated-orcid":false,"given":"Christian","family":"Gehrmann","sequence":"additional","affiliation":[{"name":"Lund University, Lund, Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3003-2623","authenticated-orcid":false,"given":"G\u00f6rel","family":"Hedin","sequence":"additional","affiliation":[{"name":"Lund University, Lund, Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2442-1286","authenticated-orcid":false,"given":"Bj\u00f6rn A.","family":"Johnsson","sequence":"additional","affiliation":[{"name":"Lund University, Lund, Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3932-7970","authenticated-orcid":false,"given":"Boris","family":"Magnusson","sequence":"additional","affiliation":[{"name":"Lund University, Lund, Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-2942-3912","authenticated-orcid":false,"given":"Mattias","family":"Nordahl","sequence":"additional","affiliation":[{"name":"Lund University, Lund, Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5526-0817","authenticated-orcid":false,"given":"Sara","family":"Ramezanian","sequence":"additional","affiliation":[{"name":"Lund University, Lund, Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2002-4240","authenticated-orcid":false,"given":"Paul","family":"Stankovski Wagner","sequence":"additional","affiliation":[{"name":"Lund University, Lund, Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,1,8]]},"reference":[{"key":"e_1_3_2_2_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-021-03243-1"},{"key":"e_1_3_2_3_2","doi-asserted-by":"publisher","DOI":"10.1145\/3623506.3623577"},{"key":"e_1_3_2_4_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2017.2736446"},{"key":"e_1_3_2_5_2","first-page":"198","volume-title":"Proceedings of the International Conference on Computational Science and Computational Intelligence (CSCI \u201916)","author":"Alasmari Sultan","year":"2016","unstructured":"Sultan Alasmari and Mohd Anwar. 2016. Security & privacy challenges in IoT-based health cloud. In Proceedings of the International Conference on Computational Science and Computational Intelligence (CSCI \u201916). IEEE, 198\u2013201."},{"key":"e_1_3_2_6_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3047960"},{"key":"e_1_3_2_7_2","first-page":"2s","article-title":"A security and privacy validation methodology for e-health systems","volume":"17","author":"Amato Flora","year":"2021","unstructured":"Flora Amato, Valentina Casola, Giovanni Cozzolino, Alessandra De Benedictis, Nicola Mazzocca, and Francesco Moscato. 2021. A security and privacy validation methodology for e-health systems. ACM Transactions on Multimedia Computing, Communications, and Applications 17, 2s (2021), 1\u201322.","journal-title":"ACM Transactions on Multimedia Computing, Communications, and Applications"},{"key":"e_1_3_2_8_2","doi-asserted-by":"publisher","DOI":"10.5121\/ijcses.2011.2307"},{"key":"e_1_3_2_9_2","doi-asserted-by":"publisher","DOI":"10.1177\/1049732306293664"},{"key":"e_1_3_2_10_2","volume-title":"Proceedings of the 3rd USENIX Workshop on Health Security and Privacy (HealthSec \u201912)","author":"Cornelius Cory","year":"2012","unstructured":"Cory Cornelius, Jacob Sorber, Ronald A. Peterson, Joe Skinner, Ryan J. Halter, and David Kotz. 2012. Who wears me? Bioimpedance as a passive biometric. In Proceedings of the 3rd USENIX Workshop on Health Security and Privacy (HealthSec \u201912). USENIX Association."},{"key":"e_1_3_2_11_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICPS48405.2020.9274764"},{"key":"e_1_3_2_12_2","doi-asserted-by":"publisher","DOI":"10.1186\/s12887-023-04340-3"},{"key":"e_1_3_2_13_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1983.1056650"},{"key":"e_1_3_2_14_2","first-page":"1","volume-title":"Proceedings of the International Conference on Innovation and Intelligence for Informatics, Computing and Technologies (3ICT \u201920)","author":"Sayed Ammar Ibrahim El","year":"2020","unstructured":"Ammar Ibrahim El Sayed, Mahmoud Abdel Aziz, and Mohamed Hassan Abdel Azeem. 2020. Blockchain decentralized IoT trust management. In Proceedings of the International Conference on Innovation and Intelligence for Informatics, Computing and Technologies (3ICT \u201920). IEEE, 1\u20136."},{"key":"e_1_3_2_15_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2958788"},{"key":"e_1_3_2_16_2","doi-asserted-by":"publisher","DOI":"10.1145\/1568199.1568213"},{"key":"e_1_3_2_17_2","doi-asserted-by":"publisher","DOI":"10.1145\/1297105.1297033"},{"key":"e_1_3_2_18_2","doi-asserted-by":"publisher","DOI":"10.1109\/JSEN.2021.3052009"},{"key":"e_1_3_2_19_2","first-page":"148","article-title":"Current research on internet of things (IoT) security: A survey","author":"Hassan Wan Haslina","year":"2019","unstructured":"Wan Haslina Hassan. 2019. Current research on internet of things (IoT) security: A survey. Computer Networks 148 (2019), 283\u2013294.","journal-title":"Computer Networks"},{"issue":"1","key":"e_1_3_2_20_2","doi-asserted-by":"crossref","first-page":"1008","DOI":"10.1186\/s12913-022-08398-0","article-title":"Access to health care perceived by parents caring for their child at home supported by eHealth\u2014A directed approach introducing aperture","volume":"22","author":"Hyl\u00e9n Mia","year":"2022","unstructured":"Mia Hyl\u00e9n, Stefan Nilsson, Inger Kristensson-Hallstr\u00f6m, Gudr\u00fan Kristj\u00e1nsd\u00f3ttir, Pernilla Stenstr\u00f6m, and R\u00fanar Vilhj\u00e1lmsson. 2022. Access to health care perceived by parents caring for their child at home supported by eHealth\u2014A directed approach introducing aperture. BMC Health Services Research 22, 1 (2022), 1008.","journal-title":"BMC Health Services Research"},{"key":"e_1_3_2_21_2","first-page":"679","volume-title":"Proceedings of the 2nd International Conference on Computing, Communications, and Cyber-Security (IC4S \u201920)","author":"Jha Gourav","year":"2021","unstructured":"Gourav Jha, Lavanya Sharma, and Shailja Gupta. 2021. E-health in internet of things (IoT) in real-time scenario. In Proceedings of the 2nd International Conference on Computing, Communications, and Cyber-Security (IC4S \u201920). Springer, 679\u2013690."},{"key":"e_1_3_2_22_2","volume-title":"Inverted GUI Development for IoT with Applications in E-Health","author":"Johnsson Bj\u00f6rn A.","year":"2017","unstructured":"Bj\u00f6rn A. Johnsson. 2017. Inverted GUI Development for IoT with Applications in E-Health. Ph. D. Dissertation. Department of Computer Science, Lund University. ISBN 978-91-7753-238-5."},{"key":"e_1_3_2_23_2","first-page":"1","volume-title":"Proceedings of the IEEE International Conference on Pervasive Computing and Communication Workshops (PerCom Workshops \u201916)","author":"Johnsson Bj\u00f6rn A.","year":"2016","unstructured":"Bj\u00f6rn A. Johnsson and Boris Magnusson. 2016. Supporting collaborative healthcare using PalCom\u2014The itACiH system. In Proceedings of the IEEE International Conference on Pervasive Computing and Communication Workshops (PerCom Workshops \u201916). IEEE, 1\u20136."},{"key":"e_1_3_2_24_2","doi-asserted-by":"publisher","DOI":"10.29102\/clinhp.23002"},{"key":"e_1_3_2_25_2","doi-asserted-by":"publisher","DOI":"10.17487\/RFC9162"},{"key":"e_1_3_2_26_2","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102129"},{"key":"e_1_3_2_27_2","doi-asserted-by":"publisher","DOI":"10.1109\/IOTSMS.2018.8554393"},{"key":"e_1_3_2_28_2","doi-asserted-by":"crossref","first-page":"183","DOI":"10.1109\/SERVICES48979.2020.00047","volume-title":"Proceedings of the IEEE World Congress on Services (SERVICES \u201920)","author":"Mathas Christos-Minas","year":"2020","unstructured":"Christos-Minas Mathas, Costas Vassilakis, and Nicholas Kolokotronis. 2020. A trust management system for the IoT domain. In Proceedings of the IEEE World Congress on Services (SERVICES \u201920). IEEE, 183\u2013188."},{"key":"e_1_3_2_29_2","doi-asserted-by":"publisher","DOI":"10.1503\/cmaj.081891"},{"key":"e_1_3_2_30_2","doi-asserted-by":"publisher","DOI":"10.1145\/3453176"},{"key":"e_1_3_2_31_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2016.2615180"},{"key":"e_1_3_2_32_2","volume-title":"Proceedings of the 11th International Conference on Internet of Things: Systems, Management and Security, (IOTSMS \u201924)","author":"Nordahl Mattias","year":"2024","unstructured":"Mattias Nordahl, Alfred \u00c5kesson, Bj\u00f6rn A. Johnsson, G\u00f6rel Hedin, and Boris Magnusson. 2024. Software component update for IoT systems. In Proceedings of the 11th International Conference on Internet of Things: Systems, Management and Security, (IOTSMS \u201924). IEEE."},{"key":"e_1_3_2_33_2","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2825231"},{"key":"e_1_3_2_34_2","doi-asserted-by":"publisher","DOI":"10.1109\/ITNAC59571.2023.10368540"},{"key":"e_1_3_2_35_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2015.2498900"},{"key":"e_1_3_2_36_2","doi-asserted-by":"crossref","unstructured":"Eric Rescorla. 2018. The Transport Layer Security (TLS) Protocol Version 1.3. Technical Report. Retrieved from https:\/\/www.rfc-editor.org\/rfc\/rfc8446.txt","DOI":"10.17487\/RFC8446"},{"key":"e_1_3_2_37_2","doi-asserted-by":"publisher","DOI":"10.1007\/11559221_1"},{"key":"e_1_3_2_38_2","doi-asserted-by":"crossref","first-page":"1099","DOI":"10.1145\/2508859.2516658","volume-title":"Proceedings of the 2013 ACM SIGSAC Conference on Computer & Communications Security","author":"Rostami Masoud","year":"2013","unstructured":"Masoud Rostami, Ari Juels, and Farinaz Koushanfar. 2013. Heart-to-heart (H2H) authentication for implanted medical devices. In Proceedings of the 2013 ACM SIGSAC Conference on Computer & Communications Security, 1099\u20131112."},{"key":"e_1_3_2_39_2","first-page":"88","volume-title":"Proceedings of the IEEE International Congress on Internet of Things (ICIOT \u201918)","author":"Samaniego Mayra","year":"2018","unstructured":"Mayra Samaniego and Ralph Deters. 2018. Zero-trust hierarchical management in IoT. In Proceedings of the IEEE International Congress on Internet of Things (ICIOT \u201918). IEEE, 88\u201395."},{"key":"e_1_3_2_40_2","doi-asserted-by":"publisher","DOI":"10.1007\/s11277-020-07108-5"},{"key":"e_1_3_2_41_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2960617"},{"key":"e_1_3_2_42_2","first-page":"12","article-title":"IoT privacy and security: Challenges and solutions","volume":"10","author":"Tawalbeh Lo\u2019ai","year":"2020","unstructured":"Lo\u2019ai Tawalbeh, Fadi Muheidat, Mais Tawalbeh, and Muhannad Quwaider. 2020. IoT privacy and security: Challenges and solutions. Applied Sciences 10, 12 (2020), 4102.","journal-title":"Applied Sciences"},{"key":"e_1_3_2_43_2","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2015.11"},{"key":"e_1_3_2_44_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.pmcj.2021.101330"},{"key":"e_1_3_2_45_2","doi-asserted-by":"publisher","DOI":"10.3390\/s21062036"},{"key":"e_1_3_2_46_2","doi-asserted-by":"publisher","DOI":"10.1109\/SOCA.2014.58"},{"key":"e_1_3_2_47_2","first-page":"139","volume-title":"Proceedings of the 21st International Symposium on Communications and Information Technologies (ISCIT \u201922)","author":"Zhao Yaxin","year":"2022","unstructured":"Yaxin Zhao and Chunzi Chen. 2022. A data trusted transmission mechanism for IOT based on merkle tree. In Proceedings of the 21st International Symposium on Communications and Information Technologies (ISCIT \u201922). IEEE, 139\u2013147."}],"container-title":["ACM Transactions on Computing for Healthcare"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3700144","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3700144","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T01:09:49Z","timestamp":1750295389000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3700144"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,1,8]]},"references-count":46,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2025,1,31]]}},"alternative-id":["10.1145\/3700144"],"URL":"https:\/\/doi.org\/10.1145\/3700144","relation":{},"ISSN":["2637-8051"],"issn-type":[{"type":"electronic","value":"2637-8051"}],"subject":[],"published":{"date-parts":[[2025,1,8]]},"assertion":[{"value":"2024-03-08","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-09-15","order":2,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2025-01-08","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}