Abstract:In the medical field, a wearable body area network is a wireless network in which wearable sensors are implemented in or on patients' bodies to gather their sensitive health information and send it to the medical servers accordingly. These multi-functional sensors provide all users with optimized and convenient services, such as homecare monitoring of people's health conditions. Ensuring the privacy of users' information during its transfer between users and medical personnel necessitates a secure wireless environment. Mobility and insecure communication channels introduce a substantial threat from unauthorized entities, jeopardizing the privacy of the transferred information within this network. To mitigate this risk, researchers have proposed various authentication and key agreement schemes, aiming to enhance the safety of the communication channel and preserve user privacy. Additionally, the wearable body area network comprises resource-constrained devices, emphasizing the need for lightweight protocols to guarantee the transmitted information's authenticity, confidentiality, and integrity. Ankur Gupta and his colleagues recently proposed a mutual authentication and key agreement protocol and proved its security against well-known attacks. However, after in-depth analysis, we discovered that their proposed protocol is vulnerable to sensor node impersonation and sensor node capture attacks. In this paper, we propose a new lightweight mutual authentication and key agreement scheme in WBAN based on basic symmetric cryptosystems (Exclusive OR and Hash functions) to overcome the security weaknesses in Gupta's protocol and provide indispensable security for communicating data. Unlike Gupta's protocol, our proposed scheme is safe in the CK-adversary threat model. The security of the presented scheme is evaluated using BAN-Logic, the AVISPA tool, and the Real or Random (ROR) model. Overall, the performance comparison of the proposed protocol with the existing related protocols depicts that our new scheme is more efficient than others in terms of communication and computational complexities.

Cost-Effective Scalable and Anonymous Certificateless Remote Authentication Protocol

An Efficient Delegation-Based Anonymous Authentication Protocol

Revocable and Scalable Certificateless Remote Authentication Protocol with Anonymity for Wireless Body Area Networks.

Efficient Anonymous Authentication for Wireless Body Area Networks.

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

Certificateless Remote Anonymous Authentication Schemes for WirelessBody Area Networks

Certificateless Remote Anonymous Authentication Schemes for Wireless Body Area Networks

Cost-Effective and Anonymous Access Control for Wireless Body Area Networks

An enhanced 1-round authentication protocol for wireless body area networks with user anonymity.

An Efficient Remote Authentication Scheme for Wireless Body Area Network

Anonymous Mutual Authentication and Key Agreement Scheme for Wearable Sensors in Wireless Body Area Networks.

Lightweight and Privacy-Preserving Authentication Scheme with the Resilience of Desynchronisation Attacks for WBANs.

Anonymous and Provably Secure Authentication Protocol Using Self-Certified Cryptography for Wireless Sensor Networks.

Efficient Anonymous Authenticated Key Agreement Scheme for Wireless Body Area Networks.

An Anonymous Authentication Scheme with the Enhanced Security for Wireless Communications

An Efficient Anonymous Authentication and Key Agreement Protocol

A new authentication protocol for healthcare applications using wireless medical sensor networks with user anonymity

A lightweight and anonymous mutual authentication and key agreement scheme for WBAN

Efficient and Privacy-Preserving Authentication Scheme for Wireless Body Area Networks

Performance Enhancement in Wireless Body Area Networks with Secure Communication

Robust Anonymous Authentication Protocol for Health-Care Applications Using Wireless Medical Sensor Networks