Abstract:In the medical field, a wearable body area network is a wireless network in which wearable sensors are implemented in or on patients' bodies to gather their sensitive health information and send it to the medical servers accordingly. These multi-functional sensors provide all users with optimized and convenient services, such as homecare monitoring of people's health conditions. Ensuring the privacy of users' information during its transfer between users and medical personnel necessitates a secure wireless environment. Mobility and insecure communication channels introduce a substantial threat from unauthorized entities, jeopardizing the privacy of the transferred information within this network. To mitigate this risk, researchers have proposed various authentication and key agreement schemes, aiming to enhance the safety of the communication channel and preserve user privacy. Additionally, the wearable body area network comprises resource-constrained devices, emphasizing the need for lightweight protocols to guarantee the transmitted information's authenticity, confidentiality, and integrity. Ankur Gupta and his colleagues recently proposed a mutual authentication and key agreement protocol and proved its security against well-known attacks. However, after in-depth analysis, we discovered that their proposed protocol is vulnerable to sensor node impersonation and sensor node capture attacks. In this paper, we propose a new lightweight mutual authentication and key agreement scheme in WBAN based on basic symmetric cryptosystems (Exclusive OR and Hash functions) to overcome the security weaknesses in Gupta's protocol and provide indispensable security for communicating data. Unlike Gupta's protocol, our proposed scheme is safe in the CK-adversary threat model. The security of the presented scheme is evaluated using BAN-Logic, the AVISPA tool, and the Real or Random (ROR) model. Overall, the performance comparison of the proposed protocol with the existing related protocols depicts that our new scheme is more efficient than others in terms of communication and computational complexities.

A privacy preserving quantum authentication scheme for secure data sharing in wireless body area networks

The New Secure and Efficient Data Storage Approaches for Wireless Body Area Networks

Channel information based cryptography and authentication in wireless body area networks

A Privacy Preserving Mutual Authentication Scheme For WBAN

Efficient and Privacy-Preserving Authentication Scheme for Wireless Body Area Networks

A lightweight and anonymous mutual authentication and key agreement scheme for WBAN

An End-to-End Authentication Mechanism for Wireless Body Area Networks

An Efficient Remote Authentication Scheme for Wireless Body Area Network

Certificateless Remote Anonymous Authentication Schemes for WirelessBody Area Networks

Anonymous Mutual Authentication and Key Agreement Scheme for Wearable Sensors in Wireless Body Area Networks.

Efficient Anonymous Authentication for Wireless Body Area Networks.

A Secure Mutual Batch Authentication Scheme for Patient Data Privacy Preserving in WBAN

Lightweight and Privacy-Preserving Authentication Scheme with the Resilience of Desynchronisation Attacks for WBANs.

Securing Communications Between External Users and Wireless Body Area Networks

ECG-Cryptography and Authentication in Body Area Networks

RC2PAS:Revocable Certificateless Conditional Privacy-Preserving Authentication Scheme in WBANs

LAKA: Lightweight Authentication and Key Agreement Protocol for Internet of Things Based Wireless Body Area Network

A security suite for wireless body area networks

OPFKA: Secure and Efficient Ordered-Physiological-Feature-based Key Agreement for Wireless Body Area Networks

Provably Secure Heterogeneous Access Control Scheme for Wireless Body Area Network

SAMAKA: Secure and Anonymous Mutual Authentication and Key Agreement Scheme for Wireless Body Area Networks