A Lightweight Mutual Authentication and Key Agreement Scheme for Medical Internet of Things

Abstract

Wireless body area networks play an indispensable role in the medical Internet of Things. It is a network of several wearables or implantable devices that use wireless technologies to communicate. These devices usually collect the wearer's physiological data and send it to the server. Some health care providers can access the server over the network and provide medical care to the wearer. Due to the openness and mobility of the wireless network, the adversary can easily steal and forge information, which exchanged in the communication channel that leaks wearer's privacy. Therefore, a secure and reliable authentication scheme is essential. Most of the existing authentication schemes are based on asymmetric encryption. However, since the sensor devices in wireless body area networks are typically resource-constrained devices, their computing resources cannot afford to use asymmetric encryption. In addition, most of the existing lightweight authentication schemes have various security vulnerabilities, especially the lack of forwarding secrecy. Therefore, we propose a secure lightweight authentication scheme for the wireless body area networks. With this scheme, forward secrecy can be guaranteed without using asymmetric encryption. We use the automatic security verification tool ProVerif to verify the security of our scheme and analyze informal security. The experimental results and the theoretical analysis indicate that our scheme significantly reduces the computational cost compared with the schemes using asymmetric encryption and that it has a lower security risk compared with the lightweight schemes. INDEX TERMS Authentication, IoT, security, wireless body area network.

A Lightweight and Secure Anonymity Preserving Protocol for WBAN

“…Our scheme computational cost is better than all other schemes in the sensor side [4], [9], [17], [18] with a 70% reduction by using P-I and 80% reduction by using P-II. Besides, P-I preforms similar to [9], [17], [18] in the hub node side, but better than [4], [25] and P-II performs better than all other schemes with an 80% reduction in the hub node side, as depicted in fig5. Furthermore, we chose a hash function with a 224bit key size to allow the sensor to have a sufficient amount of security more than [9], [17] which take a 160bit key size, and Koya and P. P [18] which takes a 128bit size key, (see Table III Table IV).…”

“…In this paper, we enhanced Li et al [17] scheme that uses a random nonce and complex interconnected parameter system with the least number of hash function. Although [17] has an efficient performance, it lacks perfect forward secrecy, un-traceability, node impersonation protection, key escrow protection, and session key protection according to [4], [9], [18]. Our motivation was to find the best contribution to Li et al [17] scheme and improve it for better security and efficiency.…”

“…All of the above-mentioned schemes had higher computation complexity than [17]. So, Xu et al [4] had improved [17] by employing the complexity of ECC through exoring point on the curve with the master secret key in the initialization phase. Moreover, ECC is public-key cryptography with a key size 256bit to avoid brute force attacks.…”

“…For the computational cost, the calculation was done for the authentication protocol based on, a one-way hash function that takes 0.06 ms based on the metrics in [9]. Our scheme computational cost is better than all other schemes in the sensor side [4], [9], [17], [18] with a 70% reduction by using P-I and 80% reduction by using P-II. Besides, P-I preforms similar to [9], [17], [18] in the hub node side, but better than [4], [25] and P-II performs better than all other schemes with an 80% reduction in the hub node side, as depicted in fig5.…”

“…Internet of Things (IoT) is a platform of connected devices that communicate, share information with each other's and occupy a very wide concept with an increasing number of applications. One of the vital IoT applications that plays a major role in health monitoring is a wearable health monitoring system (WHMS) [1]- [4]. It enables doctors and patients to benefit from WHMS environment services.…”