Abstract:In the medical field, a wearable body area network is a wireless network in which wearable sensors are implemented in or on patients' bodies to gather their sensitive health information and send it to the medical servers accordingly. These multi-functional sensors provide all users with optimized and convenient services, such as homecare monitoring of people's health conditions. Ensuring the privacy of users' information during its transfer between users and medical personnel necessitates a secure wireless environment. Mobility and insecure communication channels introduce a substantial threat from unauthorized entities, jeopardizing the privacy of the transferred information within this network. To mitigate this risk, researchers have proposed various authentication and key agreement schemes, aiming to enhance the safety of the communication channel and preserve user privacy. Additionally, the wearable body area network comprises resource-constrained devices, emphasizing the need for lightweight protocols to guarantee the transmitted information's authenticity, confidentiality, and integrity. Ankur Gupta and his colleagues recently proposed a mutual authentication and key agreement protocol and proved its security against well-known attacks. However, after in-depth analysis, we discovered that their proposed protocol is vulnerable to sensor node impersonation and sensor node capture attacks. In this paper, we propose a new lightweight mutual authentication and key agreement scheme in WBAN based on basic symmetric cryptosystems (Exclusive OR and Hash functions) to overcome the security weaknesses in Gupta's protocol and provide indispensable security for communicating data. Unlike Gupta's protocol, our proposed scheme is safe in the CK-adversary threat model. The security of the presented scheme is evaluated using BAN-Logic, the AVISPA tool, and the Real or Random (ROR) model. Overall, the performance comparison of the proposed protocol with the existing related protocols depicts that our new scheme is more efficient than others in terms of communication and computational complexities.

MBPSKA: Multi-Biometric and Physiological Signal-Based Key Agreement for Body Area Networks.

OPFKA: Secure and Efficient Ordered-Physiological-Feature-based Key Agreement for Wireless Body Area Networks

Flexible and Efficient Authenticated Key Agreement Scheme for BANs Based on Physiological Features

ECG-Cryptography and Authentication in Body Area Networks

Channel information based cryptography and authentication in wireless body area networks

Securing Communications Between External Users and Wireless Body Area Networks

Lightweight Mutual Authentication among Sensors in Body Area Networks Through Physical Unclonable Functions

Group Device Pairing Based Secure Sensor Association and Key Management for Body Area Networks

Secure Ad Hoc Trust Initialization and Key Management in Wireless Body Area Networks

SAMAKA: Secure and Anonymous Mutual Authentication and Key Agreement Scheme for Wireless Body Area Networks

An anonymous mutual authentication and key agreement scheme in WMSN using physiological data

An End-to-End Authentication Mechanism for Wireless Body Area Networks

BARI+: A Biometric Based Distributed Key Management Approach for Wireless Body Area Networks

A lightweight and anonymous mutual authentication and key agreement scheme for WBAN

Energy-Efficient Key Distribution Using Electrocardiograph Biometric Set for Secure Communications in Wireless Body Healthcare Networks

Information Theoretic Key Agreement Protocol based on ECG signals

A Combined Approach of PUF and Physiological Data for Mutual Authentication and Key Agreement in WMSN

BSK-WBSN: Biometric Symmetric Keys to Secure Wireless Body Sensors Networks

Secure and lightweight network admission and transmission protocol for body sensor networks.

LAKA: Lightweight Authentication and Key Agreement Protocol for Internet of Things Based Wireless Body Area Network

BodySec: synchronized key distribution using biometric slots for wireless body sensor networks