A secure WebRTC/WoT-based health-care architecture enhanced with access control

In this paper, we present an e-health architecture that provides secure remote medical services using WebRTC (Web Real-Time Communication). The goal is to allow patients (injured, elderly, disabled, etc.) to benefit from a medical assistance just by calling a remote medical support (doctors, nurses, hospitals, etc.) using a real-time multimedia communication technology such as WebRTC. The advancement of the medical devices, on one side, and the emergence of the Web of Things (WoT) frameworks, on the other side, make this approach possible. Hence, granting the users both the ability of monitoring their own health status and having an awareness of their health condition. However, most of the current architectures do not take into account the security issues, even thought its a fundamental requirement. In this paper, we introduce a security layer encompassing the fundamental security properties (authentication, data confidentiality, integrity and access control). We give particular attention to the access control, since a guarantee that only authorized users are allowed to access the medical resources, is a critical requirement of e-health systems. We adopt a Role-Based Access Control (RBAC) model in order to provide this capability. A proof of concept is implemented in order to test the feasibility of our solution.