Abstract:In the medical field, a wearable body area network is a wireless network in which wearable sensors are implemented in or on patients' bodies to gather their sensitive health information and send it to the medical servers accordingly. These multi-functional sensors provide all users with optimized and convenient services, such as homecare monitoring of people's health conditions. Ensuring the privacy of users' information during its transfer between users and medical personnel necessitates a secure wireless environment. Mobility and insecure communication channels introduce a substantial threat from unauthorized entities, jeopardizing the privacy of the transferred information within this network. To mitigate this risk, researchers have proposed various authentication and key agreement schemes, aiming to enhance the safety of the communication channel and preserve user privacy. Additionally, the wearable body area network comprises resource-constrained devices, emphasizing the need for lightweight protocols to guarantee the transmitted information's authenticity, confidentiality, and integrity. Ankur Gupta and his colleagues recently proposed a mutual authentication and key agreement protocol and proved its security against well-known attacks. However, after in-depth analysis, we discovered that their proposed protocol is vulnerable to sensor node impersonation and sensor node capture attacks. In this paper, we propose a new lightweight mutual authentication and key agreement scheme in WBAN based on basic symmetric cryptosystems (Exclusive OR and Hash functions) to overcome the security weaknesses in Gupta's protocol and provide indispensable security for communicating data. Unlike Gupta's protocol, our proposed scheme is safe in the CK-adversary threat model. The security of the presented scheme is evaluated using BAN-Logic, the AVISPA tool, and the Real or Random (ROR) model. Overall, the performance comparison of the proposed protocol with the existing related protocols depicts that our new scheme is more efficient than others in terms of communication and computational complexities.

An Authenticated Key Agreement with Rekeying for Secured Body Sensor Networks Based on Hybrid Cryptosystem

Channel information based cryptography and authentication in wireless body area networks

ECG-Cryptography and Authentication in Body Area Networks

BSK-WBSN: Biometric Symmetric Keys to Secure Wireless Body Sensors Networks

Enhanced Privacy and Authentication: an Efficient and Secure Anonymous Communication for Location Based Service Using Asymmetric Cryptography Scheme

A Key-Agreement Protocol Based on Static Parameters and Hash Functions

OPFKA: Secure and Efficient Ordered-Physiological-Feature-based Key Agreement for Wireless Body Area Networks

Flexible and Efficient Authenticated Key Agreement Scheme for BANs Based on Physiological Features

Securing U-Healthcare Sensor Networks using Public Key Based Scheme

Secure and lightweight network admission and transmission protocol for body sensor networks.

A lightweight and anonymous mutual authentication and key agreement scheme for WBAN

Energy-Efficient Key Distribution Using Electrocardiograph Biometric Set for Secure Communications in Wireless Body Healthcare Networks

Certificateless Algorithm for Body Sensor Network and Remote Medical Server Units Authentication over Public Wireless Channels

Energy Efficient Security Architecture for Wireless BioMedical Sensor Networks

An End-to-End Authentication Mechanism for Wireless Body Area Networks

Securing Communications Between External Users and Wireless Body Area Networks

An anonymous mutual authentication and key agreement scheme in WMSN using physiological data

A security suite for wireless body area networks

CBKE: Chord-Based Key Establishment Schemes for Wireless Sensor Networks

Secure Key Management and Mutual Authentication Protocol for Wireless Sensor Network by Linking Edge Devices using Hybrid Approach

Body Sensor Network Security: An Identity-Based Cryptography Approach