Abstract:Wireless medical sensor network (WMSN) is an application of the Internet of Things (IoT) that plays a very important role in today's era for the healthcare industry, especially after the COVID-19 pandemic. To maintain the security and privacy of the real-time health information of the users or patients, the proper mutual authentication and key agreement (AKA) is the foremost necessity. In this context, Shadi Nashwan proposed an end-to-end authentication scheme for a healthcare IoT system i.e. WMSN, and claimed that their scheme could resist so many existing possible threats and could maintain a low computational cost too. Unfortunately, during this research, it is found that their scheme can be threatened by eavesdropping and jamming/desynchronization attacks and have many computational flaws, as well. Moreover, they also assumed that the gateway node (GWN) is always trustworthy, but in reality, it is not always feasible, as the GWN may act as a local server. Hence, in this article, a new AKA scheme has been proposed using the user's physiological information like ECG data in order to make the WMSN more secure and reliable. In addition, the proposed scheme can resist many well-known threats like GWN spoofing attack, key escrow problem and can guard against GWN stolen database problem, also. To proof the superiority of the proposed scheme, the informal and formal security analysis have been performed using automated validation of internet security protocols and applications (i.e. AVISPA) and Burrows–Abadi–Needham (BAN) logic, respectively. Based on the comparative study with existing schemes concerning security features, computational and communicational cost, and storage requirement; the proposed scheme can perform better than the existing schemes and well suitable for practical implementations.

A Novel Biometric Algorithm to Body Sensor Networks

ECG-Cryptography and Authentication in Body Area Networks

Energy-Efficient Key Distribution Using Electrocardiograph Biometric Set for Secure Communications in Wireless Body Healthcare Networks

BSK-WBSN: Biometric Symmetric Keys to Secure Wireless Body Sensors Networks

Energy Efficient Security Architecture for Wireless BioMedical Sensor Networks

Channel information based cryptography and authentication in wireless body area networks

Certificateless Algorithm for Body Sensor Network and Remote Medical Server Units Authentication over Public Wireless Channels

Secure and lightweight network admission and transmission protocol for body sensor networks.

OPFKA: Secure and Efficient Ordered-Physiological-Feature-based Key Agreement for Wireless Body Area Networks

Selective encryption on ECG data in body sensor network based on supervised machine learning

A Key to Your Heart: Biometric Authentication Based on ECG Signals

An anonymous mutual authentication and key agreement scheme in WMSN using physiological data

Information Theoretic Key Agreement Protocol based on ECG signals

Efficient and Privacy-Preserving Authentication Scheme for Wireless Body Area Networks

Body Sensor Network Security: An Identity-Based Cryptography Approach

BodySec: synchronized key distribution using biometric slots for wireless body sensor networks

Flexible and Efficient Authenticated Key Agreement Scheme for BANs Based on Physiological Features

Lightweight Mutual Authentication among Sensors in Body Area Networks Through Physical Unclonable Functions

On the Feasibility of Non-contact Cardiac Motion Sensing for Emerging Heart-Based Biometrics

A security suite for wireless body area networks

Analogues of human calcitonin