Design of a lightweight and anonymous authenticated key agreement protocol for wireless body area networks

Abstract

SummaryWireless body area networks (WBANs) are a network designed to gather critical information about the physical conditions of patients and to exchange this information. WBANs are prone to attacks, more than other networks, because of their mobility and the public channel they use. Therefore, mutual authentication and privacy protection are critical for WBANs to prevent attackers from accessing confidential information of patients and executing undetectable physical attacks. In addition, in the authentication and key agreement process, messages should be transferred anonymously such that they are not linkable. In this paper, we first indicate that one of the most recently introduced authentication protocol is vulnerable to the wrong session key agreement attack and desynchronization attack. Second, we propose a lightweight authentication and key agreement protocol, which can withstand the well‐known attacks and provide the anonymity feature. Eventually, we analyze the security of our proposed protocol using both Automated Validation of Internet Security Protocols and Applications (AVISPA) and random oracle model and compare its performance with the related works. The results demonstrate the superiority of our proposed protocol in comparison with the other protocols.

A secure and efficient remote patient‐monitoring authentication protocol for cloud‐IoT

“… ROM‐based verification proof This formal security analysis verifies that an adversary may not be able to retrieve crucial secret parameters such as ID i , PW i , V 1 , and session key SK. We adopted the similar procedure to for this analysis as given in previous studies 23,36,37 . The random oracle is defined as follows:…”

“…We adopted the similar procedure to for this analysis as given in previous studies. 23,36,37 The random oracle is defined as follows:…”

“…Chandraker and Om 36 put forward another authentication scheme for TMIS‐based patient health care; however, it was vulnerable to offline‐password guessing and impersonation attack. Sharif et al 37 demonstrated an improved authentication scheme for WBAN; however, it is prone to session‐specific temporary information attack as well as key‐compromise impersonation attack. Later, Kumar et al 38 scheme was presented for patient monitoring for cloud‐based environment; however, it suffers anonymity issues and vulnerable to impersonation and session key attacks.…”

An Improved Lightweight Authentication Protocol for Wireless Body Area Networks

“…the attacker should not be able to compute earlier sessions keys in case the long term secret or current session key is revealed to the former. Nonetheless, many AKA schemes for WBAN network including few recent schemes [4], [31], [35]- [37], [44] do not comply with the stipulated objectives, since these are prone to many issues such as lacking anonymity, susceptible to impersonation, replay and forgery attacks [50].…”

“…The reviewed schemes above although claim to be lightweight, however these are not suitable for perfect WBAN environment due to limited power constraints, and were also bearing many security loopholes. Recently, we came across another efficient WBAN-based authentication protocol [37], nonetheless, we examine that the scheme is susceptible to session-specific ephemeral information attack, key compromise impersonation attack, and master secret compromise leading to session key recovery attack. In this study, we propose an efficient, secure and anonymous WBAN authenticated key agreement scheme which overcomes the pointed limitations in [37].…”