Design and Implementation of Smart Information Security Protection System for Medical Institutions and Accommodation Service Organizations

In recent years, the Internet of Things (IoT) has flourished. Numerous medical institutions and long-term care facilities use IoT devices to build the Internet of Medical Things (IoMT), which includes the collection, analysis, real-time monitoring of physiological data and digitalization of medical system, etc. IoMT mostly uses ZigBee, Wi-Fi, or Bluetooth to transfer data between devices. Among them, Bluetooth versions prior to 5.1 have serious security problems because of BLUR attacks. At present, most IoMT devices use Bluetooth versions prior to 5.1 to communicate. Moreover, websites and servers of medical institutions and long- term care facilities are important information exchange platforms. If a website is paralyzed by an attack or important data is encrypted by ransomware, it will seriously affect the operation of these institutions and service providers. Therefore, this four-year project combines information security, embedded systems, artificial intelligence, and network cross-field professional teams to propose "Design and Implementation of Smart Information Security Protection System,” in co-operation with Chiun Mai Communication systems, Inc. to design and implement an information security protection architecture for medical institutions and long-term care facilities. It also involves in-depth research on topics such as IoMT Bluetooth communication protocol vulnerability detection and protection, machine learning application to slow down distributed denial of service attacks, APT-style ransomware detection and protection, etc. In addition, this project also considers malicious information sharing. Since malicious information sharing focuses on "auditability,” “availability,” and "fairness,” our project will adopt a decentralized blockchain technology to build an information sharing platform. The results of this project will be tested in medical institutions and long- term care facilities to verify their effectiveness. It will also be tested to check whether it can serve as a reference for the application of various information security units in industry, government, and education sectors and can enable the development of security-related technologies.