# Vehicular Alarm System Using mHealth Data and Lightweight Security Algorithms
## Security Algorithms with Lightweight Security  
Security is defined as the techniques and procedures required to prevent unauthorized access to the information.  
Previous studies have been conducted regarding research in general issues linked to mHealth security and privacy. The authors in Reference [21] proposed several security and privacy recommendations in terms of a technical perspective for mHealth developers and, as a result, nine aspects of security are considered, which are outlined below.  
* Access control--Mechanisms that help users ought to be able to enable or deny access to patient-centered data at any moment.
* Authentication--Authentication allows users to use data/mechanisms with a unique ID and password (or multi-factor authentication) so that no unauthenticated access can occur in the system. Passwords should reach appropriate levels of security.
* Security and confidentiality--Proper use of encryption mechanisms with appropriate parameter configurations (i.e., key size) so that confidentiality of message transmission will be guaranteed.
* Integrity--Secure and privacy-aware data collection through usage of message authentication codes and digital signatures in Mobile Health Systems.
* Inform patients--Confirmation of privacy policy to users before collection of data that informs about the user rights and specifies the purposes of data collection and processing.
* Data transfer--Transferring of data among entities through the use of secure communication channels (e.g., TLS, VPNs) and inform users about data transfers.
* Data retention--Informing users about their retention policy. Availability of the data should be allowed only for the necessary time in order to accomplish the initial purpose. User should be notified when data is deleted and be able to check the confirmation of data deletion.
* Body Area Network communication--Establishing secure communication channels among devices based on the security mechanisms for authentication and key distribution among sensors and smart-phones.
* Breach notification--Competent authorities and users should be notified in case of data breaches. Entities should help users in order to relieve the consequences and restore possible damages.  
All data must be properly encrypted before transmission to/from the server in order to protect in-transit information in mHealth networks. In addition, the protection mechanisms verify whether the information received came from an authenticated user and prevent unauthorized entities from injecting data into the system's database. However, any conventional mechanisms for establishing secure connections (e.g., TLS/SSL) may not be appropriate for mHealth data delivery because there is a difference in communication infrastructure between heterogeneous networks and WBAN devices, which have limited resources such as battery and computational power. The complexity arises because data temporarily stored in the device needs to be encrypted and, therefore, adds additional overhead from providing an extra security layer. Hence, the aim is to provide a solution that can be independent of secure communication tunnels for data delivery, but also ensures the data that travels between sensors and the mobile device in mHealth networks.  
We propose a trust oriented digital signature-based authentication scheme for secure communication so that nodes in mHealth networks possess all the features of public key encryption. It can also provide several technical advantages such as a less complicated key management system to provide a lightweight security mechanism as well as easily detecting unwanted accidental asynchrony that occurs in nodes based on the justification of trust values.