@article {Majdoubi2022,
	title = {A Decentralized Trust Establishment Protocol for Smart IoT Systems},
	journal = {Internet of Things (Netherlands)},
	volume = {20},
	year = {2022},
	note = {cited By 0},
	abstract = {The Internet of Things (IoT) is a widely deployed technology to provide innovative services in many several fields such as industry, logistics, healthcare, and energy management. The integration of artificial intelligence, machine learning, edge/cloud computing, 5G networks, big data analytics, and other emerging technologies in IoT systems is leading to the emergence of Smart Systems that support devices to make autonomous decisions in order to improve and facilitate people{\textquoteright}s lives. These smart IoT devices produce a huge amount of sensitive data. Thus, establishing Trust between these devices is vital to ensure the security of the sensed data and for the normal functionality of smart systems. To address these challenges, several Trust establishment protocols have been proposed, but they have some limitations such as centralization, the need for human intervention, and the lack of adaptability to smart devices with computation and storage constraints. In this paper, a decentralized trust establishment protocol is proposed for smart IoT devices and is applicable for different scenarios. The protocol provides decentralized identity management, mutual authentication, access control, and secure communication by combining Blockchain technology with PV-SAS-MCA message cross-authentication protocol based on Short Authenticated Strings (SAS). To the best of our knowledge, this research is the first to propose a new approach that uses Blockchain as an extra distributed and authenticated channel to exchange Short Authenticated Strings without physical interaction. This helps to allow entities in the Smart IoT environment not only to identify each other but also to exchange their public keys in a secure manner. Moreover, the proposed protocol uses Elliptic Curve Cryptography (ECC) to secure communications with significantly smaller key sizes and lower computation overhead. Experimental results reveal that the time required to complete the authentication process is less than 90 ms which is a superior performance when compared to state-of-the-art decentralized authentication mechanisms. {\textcopyright} 2022 Elsevier B.V.},
	doi = {10.1016/j.iot.2022.100634},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85141956819\&doi=10.1016\%2fj.iot.2022.100634\&partnerID=40\&md5=09f4ee511269a6c179ffb6176350529b},
	author = {Majdoubi, D.E. and Bakkali, H.E. and Bensaih, M. and Sadki, S.}
}
@article {ElMajdoubi2022,
	title = {The Systematic Literature Review of Privacy-Preserving Solutions in Smart Healthcare Environment},
	journal = {Security and Communication Networks},
	volume = {2022},
	year = {2022},
	note = {cited By 0},
	abstract = {The rapid development of the Internet of Medical Things (IoMT) technology has resulted in various advances in the smart healthcare field; it improves healthcare systems to offer more complicated real-time services and provides an efficient patient motioning system. However, despite the brilliant side of IoMT, several concerns continue to undercut its adoption. In fact, collecting, transmitting, storing, and using data in IoMT applications raises issues regarding privacy and data protection, especially with the multitude of stakeholders involved during the whole data life cycle. Motivated from these facts, this article is devoted to perform a Systematic Literature Review (SLR) of privacy-preserving solutions used in the smart healthcare ecosystem. The recent research papers disseminated between 2017 and 2021 are selected from multiple databases and a standardized SLR method is conducted. A total of 100 papers were reviewed and a critical analysis was conducted on the selected papers. Moreover, this review study attempts to highlight the limitation of the current approaches and aims to find possible solutions to them. Thus, a detailed analysis was carried out on the selected papers in terms of the privacy techniques they deployed, the data life cycle phase they addressed, the stakeholders needs they met, and the privacy principles they covered according to privacy laws and regulations. Finally, we summarize our results showing privacy-preserving trends and identifying recommendations to involve privacy principles coverage in smart healthcare applications. {\textcopyright} 2022 Driss El Majdoubi et al.},
	keywords = {Critical analysis, Data life cycle, Health care, Healthcare environments, Healthcare systems, Information services, Laws and legislation, Life cycle, Paper, Privacy preserving solutions, Privacy principle, Privacy-preserving techniques, Real time service, Real time systems, Recent researches, Research papers, Systematic literature review},
	doi = {10.1155/2022/5642026},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85127472073\&doi=10.1155\%2f2022\%2f5642026\&partnerID=40\&md5=8fdf8807c5263ec2fe00933f24b13e2a},
	author = {El Majdoubi, D. and El Bakkali, H. and Sadki, S. and Maqour, Z. and Leghmid, A.}
}
@book {ElOuazzani20211503,
	title = {Privacy Preserving in Digital Health: Main Issues, Technologies, and Solutions},
	series = {Research Anthology on Privatizing and Securing Data},
	year = {2021},
	note = {cited By 1},
	pages = {1503-1526},
	abstract = {Recently, digital health solutions are taking advantage of recent advances in information and communication technologies. In this context, patients{\textquoteright} health data are shared with other stakeholders. Moreover, it{\textquoteright}s now easier to collect massive health data due to the rising use of connected sensors in the health sector. However, the sensitivity of this shared healthcare data related to patients may increase the risks of privacy violation. Therefore, healthcare-related data need robust security measurements to prevent its disclosure and preserve patients{\textquoteright} privacy. However, in order to make well-informed decisions, it is often necessary to allow more permissive security policies for healthcare organizations even without the consent of patients or against their preferences. The authors of this chapter concentrate on highlighting these challenging issues related to patient privacy and presenting some of the most significant privacy preserving approaches in the context of digital health. {\textcopyright} 2021, IGI Global.},
	doi = {10.4018/978-1-7998-8954-0.ch072},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85127530934\&doi=10.4018\%2f978-1-7998-8954-0.ch072\&partnerID=40\&md5=79d0013c567793bf90816fc766b5c8c2},
	author = {El Ouazzani, Z. and El Bakkali, H. and Sadki, S.}
}
@article {Majdoubi2021,
	title = {SmartMedChain: A Blockchain-Based Privacy-Preserving Smart Healthcare Framework},
	journal = {Journal of Healthcare Engineering},
	volume = {2021},
	year = {2021},
	note = {cited By 6},
	abstract = {Nowadays, the adoption of Internet of Things (IoT) technology worldwide is accelerating the digital transformation of healthcare industry. In this context, smart healthcare (s-healthcare) solutions are ensuring better and innovative opportunities for healthcare providers to improve patients{\textquoteright} care. However, these solutions raise also new challenges in terms of security and privacy due to the diversity of stakeholders, the centralized data management, and the resulting lack of trustworthiness, accountability, and control. In this paper, we propose an end-to-end Blockchain-based and privacy-preserving framework called SmartMedChain for data sharing in s-healthcare environment. The Blockchain is built on Hyperledger Fabric and stores encrypted health data by using the InterPlanetary File System (IPFS), a distributed data storage solution with high resiliency and scalability. Indeed, compared to other propositions and based on the concept of smart contracts, our solution combines both data access control and data usage auditing measures for both Medical IoT data and Electronic Health Records (EHRs) generated by s-healthcare services. In addition, s-healthcare stakeholders can be held accountable by introducing an innovative Privacy Agreement Management scheme that monitors the execution of the service in respect of patient preferences and in accordance with relevant privacy laws. Security analysis and experimental results show that the proposed SmartMedChain is feasible and efficient for s-healthcare environments. Copyright {\textcopyright} 2021 Driss El Majdoubi et al. This is an open access article distributed under the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.},
	keywords = {Access control, adult, Article, Block-chain, Blockchain, Centralised, controlled study, Data Management, Delivery of Health Care, Digital storage, Digital transformation, Distributed ledger, electronic health record, Electronic Health Records, Health care, health care delivery, Health care providers, Healthcare environments, Healthcare industry, human, Humans, Information management, information processing, information storage, Internet of things, Internet of things technologies, Network security, patient care, patient preference, Privacy, Privacy preserving, Privacy-preserving techniques, Security and privacy, Smart contract},
	doi = {10.1155/2021/4145512},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85121960725\&doi=10.1155\%2f2021\%2f4145512\&partnerID=40\&md5=0f8afcea0c53e46d9f3863d4ed04b5b8},
	author = {Majdoubi, D.E. and Bakkali, H.E. and Sadki, S.}
}
@book {Ouazzani2020253,
	title = {Privacy preserving in digital health: Main issues, technologies, and solutions},
	series = {Social, Legal, and Ethical Implications of IoT, Cloud, and Edge Computing Technologies},
	year = {2020},
	note = {cited By 2},
	pages = {253-276},
	abstract = {Recently, digital health solutions are taking advantage of recent advances in information and communication technologies. In this context, patients{\textquoteright} health data are shared with other stakeholders. Moreover, it{\textquoteright}s now easier to collect massive health data due to the rising use of connected sensors in the health sector. However, the sensitivity of this shared healthcare data related to patients may increase the risks of privacy violation. Therefore, healthcare-related data need robust security measurements to prevent its disclosure and preserve patients{\textquoteright} privacy. However, in order to make well-informed decisions, it is often necessary to allow more permissive security policies for healthcare organizations even without the consent of patients or against their preferences. The authors of this chapter concentrate on highlighting these challenging issues related to patient privacy and presenting some of the most significant privacy preserving approaches in the context of digital health. {\textcopyright} 2021, IGI Global.},
	doi = {10.4018/978-1-7998-3817-3.ch012},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85104245384\&doi=10.4018\%2f978-1-7998-3817-3.ch012\&partnerID=40\&md5=7b83c4da1344fd81d525a9eacdca6034},
	author = {Ouazzani, Z.E. and Bakkali, H.E. and Sadki, S.}
}
@article {Sadki2016207,
	title = {Resolving conflicting privacy policies in M-health based on prioritization},
	journal = {Scalable Computing},
	volume = {17},
	number = {3},
	year = {2016},
	note = {cited By 1},
	pages = {207-226},
	abstract = {Mobile health has recently gained a lot of attention. Biological, environmental and behavioral data collected from mobile devices can be analyzed and transmitted directly to the person, family or health professionals for immediate and individualized care. However, due to multiplicity of mobile applications and the heterogeneity of actors involved in patient{\textquoteright}s care, conflicts among the privacy policies defined by the different actors can take place. Thus, we present in this paper an approach to resolve the problem of conflicting privacy policies in e-health/m-health environments using AHP (Analytic Hierarchy Process) prioritization technique. Conflicts detection and resolution are facilitated by the adoption of S4P formal privacy policy language used as a standardized language. Finally, a case study is suggested to illustrate how our solution can be applied to resolve such conflicts. {\textcopyright} 2016 SCPE.},
	doi = {10.12694/scpe.v17i3.1181},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84986308427\&doi=10.12694\%2fscpe.v17i3.1181\&partnerID=40\&md5=3bd7feaa7560d5e70202fd7c24907f06},
	author = {Sadki, S. and El Bakkali, H.}
}
@conference {Sadki2015,
	title = {An approach for privacy policies negotiation in mobile health-Cloud environments},
	booktitle = {Proceedings of 2015 International Conference on Cloud Computing Technologies and Applications, CloudTech 2015},
	year = {2015},
	note = {cited By 0},
	abstract = {Mobile technologies continue to improve patients{\textquoteright} quality of care. Particularly, with the emergence of Cloud-based mobile services and applications, patients can easily communicate with their physicians and receive the care they deserve. However, due to the increased number of privacy threats in mobile and Cloud computing environments, maximizing patients{\textquoteright} control over their data becomes a necessity. Thus, formal languages to express their privacy preferences are needed. Besides, because of the diversity of actors involved in patient{\textquoteright}s care, conflict among privacy policies can take place. In this paper, we present an approach that aims to resolve the problem of conflicting privacy policies based on a Security Policy Negotiation Framework. The major particularity of our solution is that it considers the patient to be a crucial actor in the negotiation process. The different steps of our approach are illustrated through an example of three conflicting privacy policies with different privacy languages. {\textcopyright} 2015 IEEE.},
	doi = {10.1109/CloudTech.2015.7336983},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84962886191\&doi=10.1109\%2fCloudTech.2015.7336983\&partnerID=40\&md5=ee5946b2a8e87fa592145c3a5512d21c},
	author = {Sadki, S. and El Bakkali, H.}
}
@conference {Sadki201594,
	title = {Towards negotiable privacy policies in mobile healthcare},
	booktitle = {5th International Conference on Innovative Computing Technology, INTECH 2015},
	year = {2015},
	note = {cited By 0},
	pages = {94-99},
	abstract = {With the increased use of mobile technologies in the health sector, patients are more and more concerned about their privacy protection. Particularly, due to the diversity of actors (physicians, healthcare organizations, Cloud providers. ) and the heterogeneity of privacy policies defined by each actor, conflicts among these policies may occur. We believe that negotiation is one of the best techniques for resolving the issue of conflicting privacy policies. From this perspective, we present an approach and algorithm to negotiate privacy policies based on an extension of the bargaining model. Besides, in order to show how our solution can be applied, we present an example of conflicting privacy policies expressed using S4P, a generic language for specifying privacy preferences and policies. {\textcopyright} 2015 IEEE.},
	doi = {10.1109/INTECH.2015.7173478},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84946615432\&doi=10.1109\%2fINTECH.2015.7173478\&partnerID=40\&md5=958dc49fb138ea35d757ba394c168cef},
	author = {Sadki, S. and Bakkali, H.E.}
}
@conference {Sadki2014245,
	title = {Enhancing privacy on mobile health: An integrated privacy module},
	booktitle = {International Conference on Next Generation Networks and Services, NGNS},
	year = {2014},
	note = {cited By 1},
	pages = {245-250},
	abstract = {The evolution of mobile communication in the health sector has improved patients{\textquoteright} quality of care. Nowadays, doctors can make diagnosis even though the patient is miles away using mobile technologies such as smart phones or tablet PCs. Nevertheless, the exchange of medical information through mobile devices brings on serious threats to patients{\textquoteright} privacy. We believe that privacy must be considered during the development of any mobile healthcare system. In this paper we discuss the efficiency of current privacy and security protection mechanisms used in current mobile systems. The nature and the diversity of medical information shared between different entities (physicians, hospitals, laboratories, pharmacies.) increases privacy and security risks. Thus, we introduce a new conceptual module to preserve privacy in mobile healthcare. By integrating this module into current mobile healthcare systems architecture, we obtain a privacy-preserving system enabling patients to monitor and manage the disclosure of their sensitive health information during a mobile transaction. {\textcopyright} 2014 IEEE.},
	doi = {10.1109/NGNS.2014.6990259},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84920023884\&doi=10.1109\%2fNGNS.2014.6990259\&partnerID=40\&md5=13dfe9d4370bb528ce4cd094030a3819},
	author = {Sadki, S. and Bakkali, H.E.}
}
@conference {Sadki2014674,
	title = {Towards controlled-privacy in e-health: A comparative study},
	booktitle = {International Conference on Multimedia Computing and Systems -Proceedings},
	year = {2014},
	note = {cited By 1},
	pages = {674-679},
	abstract = {Technological advances in electronic services have made it easier than ever before to access and share different kinds of data. In the healthcare sector, the exchange of patients{\textquoteright} information between different actors (hospitals, laboratories, pharmacies...) improves diagnosis and treatment quality and reduces related costs. However, this exchange arise new security concerns and makes patient information subject to privacy breaches. In the literature, several privacy-preserving approaches have been proposed, most of which focus on protecting private data using cryptographic, access control or anonymitization techniques. Thus, the patient becomes a passive actor regarding the disclosure of his personal information. In this paper we consider the following question: should patients only rely on third parties to protect their sensitive data or shall they be granted some kind of control to select the level of privacy and security they want? In this context, we propose a comparative study of some recent work in the area of e-services privacy. The analysis of this study shows that data privacy is not fairly user controlled particularly in the health sector. {\textcopyright} 2014 IEEE.},
	doi = {10.1109/ICMCS.2014.6911323},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84928712879\&doi=10.1109\%2fICMCS.2014.6911323\&partnerID=40\&md5=cbabd84ef94415517785664934541c9f},
	author = {Sadki, S. and El Bakkali, H.}
}
@conference {Sadki2012209,
	title = {PPAMH: A novel privacy-preserving approach for mobile healthcare},
	booktitle = {2014 9th International Conference for Internet Technology and Secured Transactions, ICITST 2014},
	year = {2012},
	note = {cited By 3},
	pages = {209-214},
	doi = {10.1109/ICITST.2014.7038807},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84949922689\&doi=10.1109\%2fICITST.2014.7038807\&partnerID=40\&md5=c460de70ba2020750ed03d73979646c3},
	author = {Sadki, S. and Bakkali, H.E.}
}
