With the rapid development of Cloud-Edge-End(CEE)computing,the demand for secure and lightweight communication protocols is increasingly critical,particularly for latency-sensitive applications such as smart manufactu...With the rapid development of Cloud-Edge-End(CEE)computing,the demand for secure and lightweight communication protocols is increasingly critical,particularly for latency-sensitive applications such as smart manufacturing,healthcare,and real-time monitoring.While traditional cryptographic schemes offer robust protection,they often impose excessive computational and energy overhead,rendering them unsuitable for use in resource-constrained edge and end devices.To address these challenges,in this paper,we propose a novel lightweight encryption framework,namely Dynamic Session Key Allocation with Time-Indexed Ascon(DSKA-TIA).Built upon the NIST-endorsed Ascon algorithm,the DSKA-TIA introduces a time-indexed session key generation mechanism that derives unique,ephemeral keys for each communication round.The scheme supports bidirectional key separation to isolate uplink and downlink data,thereby minimizing the risk of key reuse and compromise.Additionally,mutual authentication is integrated through nonce-based validation and one-time token exchanges,ensuring entity legitimacy and protection against impersonation and replay attacks.We validate the performance of DSKA-TIA through implementation on a resource-constrained microcontroller platform.Results show that our scheme achieves significantly lower latency and computational cost compared to baseline schemes such as AES and standard Ascon.Security analysis demonstrates high entropy in key generation,resistance to brute-force and replay attacks,and robustness against eavesdropping and key compromise.The protocol also exhibits resilience to quantum computing threats by relying on symmetric encryption principles and randomized key selection.Given its efficiency,scalability,and temporal security enhancements,DSKA-TIA is well-suited for real-time,secure communication in heterogeneous CEE environments.Future work will explore post-quantum extensions and deployment in domains such as smart agriculture and edge-based healthcare.展开更多
文摘With the rapid development of Cloud-Edge-End(CEE)computing,the demand for secure and lightweight communication protocols is increasingly critical,particularly for latency-sensitive applications such as smart manufacturing,healthcare,and real-time monitoring.While traditional cryptographic schemes offer robust protection,they often impose excessive computational and energy overhead,rendering them unsuitable for use in resource-constrained edge and end devices.To address these challenges,in this paper,we propose a novel lightweight encryption framework,namely Dynamic Session Key Allocation with Time-Indexed Ascon(DSKA-TIA).Built upon the NIST-endorsed Ascon algorithm,the DSKA-TIA introduces a time-indexed session key generation mechanism that derives unique,ephemeral keys for each communication round.The scheme supports bidirectional key separation to isolate uplink and downlink data,thereby minimizing the risk of key reuse and compromise.Additionally,mutual authentication is integrated through nonce-based validation and one-time token exchanges,ensuring entity legitimacy and protection against impersonation and replay attacks.We validate the performance of DSKA-TIA through implementation on a resource-constrained microcontroller platform.Results show that our scheme achieves significantly lower latency and computational cost compared to baseline schemes such as AES and standard Ascon.Security analysis demonstrates high entropy in key generation,resistance to brute-force and replay attacks,and robustness against eavesdropping and key compromise.The protocol also exhibits resilience to quantum computing threats by relying on symmetric encryption principles and randomized key selection.Given its efficiency,scalability,and temporal security enhancements,DSKA-TIA is well-suited for real-time,secure communication in heterogeneous CEE environments.Future work will explore post-quantum extensions and deployment in domains such as smart agriculture and edge-based healthcare.
文摘目的 基于疾病诊断相关分组(DRG)付费模式,分析不同DRG分组患者发生医院感染的医疗资源消耗情况,为优化医院感染防控和资源管理提供依据。方法 回顾性分析四川省某地市级医院2024年1月1日—12月31日出院患者病案资料及DRG相关指标,比较医院感染组(院感组)与非医院感染组(非院感组)患者医疗资源消耗情况,分层分析两组患者平均住院日数及次均住院费用差异。结果 2024年该院纳入DRG管理的出院患者医院感染发病率为1.57%。院感组与非院感组患者在年龄、性别、入院及离院方式方面的差异均有统计学意义(均P<0.05)。医院感染部位主要集中在下呼吸道、手术部位、泌尿道及血液。院感组时间消耗指数(1.63 VS 0.85)、平均住院日数(21.00 VS 5.00 d)、费用消耗指数(1.53 VS 0.92)、次均住院费用(4.47万VS 0.73万)及多项费用均高于非院感组(均P<0.05)。血流感染医疗资源消耗较高。医院感染患者多集中在急性白血病伴严重并发症或合并症(MCC)相关分组,颅内或开颅手术伴MCC相关分组,气管切开伴机械通气96 h相关分组及胃、食道和十二指肠手术相关分组。重点DRG组中院感组患者平均住院日及次均住院费用均高于非院感组,差异均有统计学意义(均P<0.05)。结论 医院感染显著增加医疗资源消耗,基于DRG分组分析可进一步确定感染防控的重点病组,更加准确细化地评价医疗资源消耗情况,进而优化医疗资源配置,提升医院运营效率。
