Abstract:In the medical field, a wearable body area network is a wireless network in which wearable sensors are implemented in or on patients' bodies to gather their sensitive health information and send it to the medical servers accordingly. These multi-functional sensors provide all users with optimized and convenient services, such as homecare monitoring of people's health conditions. Ensuring the privacy of users' information during its transfer between users and medical personnel necessitates a secure wireless environment. Mobility and insecure communication channels introduce a substantial threat from unauthorized entities, jeopardizing the privacy of the transferred information within this network. To mitigate this risk, researchers have proposed various authentication and key agreement schemes, aiming to enhance the safety of the communication channel and preserve user privacy. Additionally, the wearable body area network comprises resource-constrained devices, emphasizing the need for lightweight protocols to guarantee the transmitted information's authenticity, confidentiality, and integrity. Ankur Gupta and his colleagues recently proposed a mutual authentication and key agreement protocol and proved its security against well-known attacks. However, after in-depth analysis, we discovered that their proposed protocol is vulnerable to sensor node impersonation and sensor node capture attacks. In this paper, we propose a new lightweight mutual authentication and key agreement scheme in WBAN based on basic symmetric cryptosystems (Exclusive OR and Hash functions) to overcome the security weaknesses in Gupta's protocol and provide indispensable security for communicating data. Unlike Gupta's protocol, our proposed scheme is safe in the CK-adversary threat model. The security of the presented scheme is evaluated using BAN-Logic, the AVISPA tool, and the Real or Random (ROR) model. Overall, the performance comparison of the proposed protocol with the existing related protocols depicts that our new scheme is more efficient than others in terms of communication and computational complexities.

OPFKA: Secure and Efficient Ordered-Physiological-Feature-based Key Agreement for Wireless Body Area Networks

Flexible and Efficient Authenticated Key Agreement Scheme for BANs Based on Physiological Features

MBPSKA: Multi-Biometric and Physiological Signal-Based Key Agreement for Body Area Networks.

Channel information based cryptography and authentication in wireless body area networks

BDK: secure and efficient biometric based deterministic key agreement in wireless body area networks

ECG-Cryptography and Authentication in Body Area Networks

Lightweight Mutual Authentication among Sensors in Body Area Networks Through Physical Unclonable Functions

A Biometric Key Establishment Protocol for Body Area Networks

The New Secure and Efficient Data Storage Approaches for Wireless Body Area Networks

Securing Communications Between External Users and Wireless Body Area Networks

Efficient Anonymous Authenticated Key Agreement Scheme for Wireless Body Area Networks.

Secure Ad Hoc Trust Initialization and Key Management in Wireless Body Area Networks

Secure and Efficient Data Communication Protocol for Wireless Body Area Networks.

An ECG-Based Signal Key Establishment Protocol in Body Area Networks

Anonymous Mutual Authentication and Key Agreement Scheme for Wearable Sensors in Wireless Body Area Networks.

Lightweight and Secure Three-Factor Authentication Scheme for Remote Patient Monitoring Using On-Body Wireless Networks.

LAKA: Lightweight Authentication and Key Agreement Protocol for Internet of Things Based Wireless Body Area Network

Group Device Pairing Based Secure Sensor Association and Key Management for Body Area Networks

A lightweight and anonymous mutual authentication and key agreement scheme for WBAN

Energy-Efficient Key Distribution Using Electrocardiograph Biometric Set for Secure Communications in Wireless Body Healthcare Networks

Lightweight Detection of On-Body Sensor Impersonator in Body Area Networks.