An efficient and secure mutual authentication protocol in wireless body area network

Manoj Kumar; S.Z. Hussain

doi:10.4108/eetpht.9.3114

Authors

Manoj Kumar Jamia Millia Islamia
S.Z. Hussain Jamia Millia Islamia

DOI:

https://doi.org/10.4108/eetpht.9.3114

Keywords:

wireless body area networks (wban), mutual authentication, wearable bio-sensors, key agreement, formal verification, BAN logic, Scyther tool, XOR operations, cryptographic hash functions

Abstract

Wireless Body Area Network (WBAN) is an emerging field which is gaining a lot of attention in healthcare sector. It facilitates remote monitoring by gathering health related data using wearable bio-sensors based on IOT. This technological advancement would significantly improve the tracking of fitness, health care delivery, medical diagnostics, early disease prediction, and associated medical dealings of any individual. Several challenges persist in WBAN due to its openness and mobility. The medical data is extremely sensitive and personal in nature therefore it must be protected at any cost while being communicated between nodes. Highly resource constrained tiny sized bio-sensors restrict the usage of energy seeking traditional cryptographic techniques and hence require new methods to be evolved to secure the communication. The current study proposes a lightweight mutual authentication based key agreement scheme which is dependent on XOR operations and cryptographic hash functions. BAN logic is used for formal verification and automatic security verification tool Scyther is used for the analysis of security protocol. Proposed scheme is compared with other related works on 15 key security parameters which are identified on the basis of literature survey. The results indicate that the proposed scheme follows all the security parameters and performs better in terms of computation cost, energy consumption, communication cost and storage requirement as compared with other schemes.

Downloads

Download data is not yet available.

References

S. M. Riazul Islam, D. Kwak, M. H. Kabir, M. Hossain, A. Kyung- Sup Kwak, “The Internet of Things for Health Care: A Comprehensive Survey”, IEEE Access, Vol. 3, pp. 678-708, 2015. DOI: https://doi.org/10.1109/ACCESS.2015.2437951

K. Wu, R. A. Laghari, M. Ali, A. A. Khan, “A Review and State of Art of Internet of things(IoT)”, Archives of Computational Methods in Engineering, Vol 29, no. 3, pp. 1395-1413, 2022. DOI: https://doi.org/10.1007/s11831-021-09622-6

I. S. Huang, Y.H. Lu, M. Shafiq, A. A. Laghari, R. Yadav “A Generative Adversarial Network Model Based on Intelligent Data Analytics for Music Emotion Recognition under IoT”, Mobile Information Systems, Vol. 2021, Article ID 3561829, 8 pages, 2021. DOI: https://doi.org/10.1155/2021/3561829

M. Kumar, "Security Issues and Privacy Concerns in the Implementation of Wireless Body Area Network", 2014 International Conference on Information Technology, Bhubaneswar, India, pp. 58-62, 2014. DOI: https://doi.org/10.1109/ICIT.2014.73

M. Kompara, M. Hölbl, “Survey on Security in Intra-body Area Network Communication”, Ad Hoc Networks, Vol. 70, pp. 23-43, 2018. DOI: https://doi.org/10.1016/j.adhoc.2017.11.006

R. Gravina and G. Fortino, "Wearable Body Sensor Networks: State-of-the-Art and Research Directions," IEEE Sensors Journal, Vol. 21, no. 11, pp. 12511-12522, 2021. DOI: https://doi.org/10.1109/JSEN.2020.3044447

K. A. Delgado-Vargas, G. Gallegos- Garcia, P. J. Escamilla-Ambrosio, “Cryptographic Protocol with Keyless Sensors Authentication for WBAN in Healthcare Applications”, Applied Sciences. Vol. 13, no. 3, p. 1675, 2023. DOI: https://doi.org/10.3390/app13031675

S. Izza, M. Benssalah, K. Drouiche, “An enhanced scalable and secure RFID authentication protocol for WBAN within an IoT environment”, Journal of Information Security and Applications, Vol. 58, p. 102705, 2021. DOI: https://doi.org/10.1016/j.jisa.2020.102705

M. Waqas, K. Kumar, A. A. Laghari, U. Saeed, M. M. Rind, A. A. Shaikh, F. Hussain, A. Rai, A. Q. Qazi “Botnet attack detection in Internet of Things devices over cloud environment via machine learning”, Concurrency and Computation Practice and Experience Vol. 34, no. 4, p. e6662, 2022. DOI: https://doi.org/10.1002/cpe.6662

Nazir, Rashid, A.A. Laghari, K. Kumar, S. David, M. Ali. "Survey on Wireless Network Security." Archives of Computational Methods in Engineering Vol. 29, no. 3, pp. 1-20, 2022. DOI: https://doi.org/10.1007/s11831-021-09631-5

S. Z. Hussain, M. Kumar, "Secured Key Agreement Schemes in Wireless Body Area Network-A Review", Indian Journal of Science and Technology Vol. 14 no. 24, pp 2005-2033, 2021. DOI: https://doi.org/10.17485/IJST/v14i24.1708

S. Mandal, “Provably secure certificateless protocol for wireless body area network”, Wireless Networks Vol. 29 no.3, pp. 1421-1438, 2023. DOI: https://doi.org/10.1007/s11276-022-03205-4

A. A. Laghari, A. A. Khan, R. Alkanhel, H. Elmannai, S. Bourouis. "Lightweight-BIoV: Blockchain Distributed Ledger Technology (BDLT) for Internet of Vehicles (IoVs)", Electronics Vol. 12, no. 3, p. 677, 2023. DOI: https://doi.org/10.3390/electronics12030677

A. A. Khan, A. A. Laghari, A. A. Shaikh, Z. A. Shaikh, A. K. Jumani, First Ed., CRC Press, 2022, 8, "Innovation in Multimedia Using IoT Systems", pp. 171-187. DOI: https://doi.org/10.1201/9781003196686-8

G. Mehmood, M. Z. Khan, A. Waheed, M. Zareei, E. M. Mohamed, ‘‘A trust-based energy-efficient and reliable communication scheme (trust-based ERCS) for remote patient monitoring in wireless body area networks,’’ IEEE Access, Vol. 8, pp. 131397–131413, 2020. DOI: https://doi.org/10.1109/ACCESS.2020.3007405

Y. Yao, X. Chang, J. Misic, and V. B. Misic, ‘‘Lightweight batch AKA scheme for user-centric ultra-dense networks,’’ IEEE Trans. Cognit. Commun. Netw., Vol. 6, no. 2, pp. 597–606, 2020. DOI: https://doi.org/10.1109/TCCN.2020.2982141

M. A. Ferrag, L. A. Maglaras, H. Janicke, J. Jiang, “Authentication protocols for internet of things: A comprehensive survey”, Security and Communication Networks Vol. 2017, 2017. DOI: https://doi.org/10.1155/2017/6562953

K. H. M. Wong, Y. Zheng, J. Cao, S. Wang, “A dynamic user authentication scheme for wireless sensor networks”, IEEE International Conference on Sensor Networks, Ubiquitous, and Trustworthy Computing (SUTC’06), Vol. 1, p. 8, 2006.

M. L. Das, “Two-factor user authentication in wireless sensor networks”, IEEE Trans. Wireless Commun. Vol. 8, no. 3, pp. 1086–1090, 2009. DOI: https://doi.org/10.1109/TWC.2008.080128

M. K. Khan, K. Alghathbar, “Cryptanalysis and security improvements of two factor user authentication in wireless sensor networks”, Sensors Vol. 10, no. 3 pp. 2450–2459, 2010. DOI: https://doi.org/10.3390/s100302450

B. Vaidya, D. Makrakis, H.T. Mouftah “Improved two-factor user authentication in wireless sensor networks” 2010 IEEE 6th International Conference on Wireless and Mobile Computing, Networking and Communications, pp. 600–606, 2010. DOI: https://doi.org/10.1109/WIMOB.2010.5645004

I.A. Al. Rassan, N., “Secure & energy efficient key management scheme for WBAN-a hybrid approach”, IJCSNS, Vol. 11, no. 6, p. 169, 2011.

Z. Zhang, H. Wang, A.V. Vasilakos, H. Fang, “ECG-cryptography and authentication in body area networks”, IEEE Trans Inf. Technol. Biomed. Vol. 16, no. 6, pp. 1070-1078, 2012. DOI: https://doi.org/10.1109/TITB.2012.2206115

D. He, C. Chen, S. Chan, J. Bu, P. Zhang, “Secure and lightweight network admission and transmission protocol for body sensor networks”, IEEE J. Biomed. Health Inform. Vol. 17, no. 3, pp. 664-674, 2013. DOI: https://doi.org/10.1109/JBHI.2012.2235180

L. Ma, Y. Ge, Y. Zhu, “Tinyzkp: A lightweight authentication scheme based on zero-knowledge proof for wireless body area networks”, Wirel. Pers. Commun. Vol. 77, no. 2, pp. 1077-1090, 2014. DOI: https://doi.org/10.1007/s11277-013-1555-4

J. Liu, Z. Zhang, X. Chen, K.S. Kwak, “Certificateless remote anonymous authentication schemes for wireless body area networks”, IEEE Trans Parallel Distrib Syst. Vol. 25, no. 2, pp. 332-342, 2014. DOI: https://doi.org/10.1109/TPDS.2013.145

Z. Zhao, “An efficient anonymous authentication scheme for wireless body area networks using elliptic curve cryptosystem”, J Med Syst. Vol. 38, no. 2, p. 13, 2014. DOI: https://doi.org/10.1007/s10916-014-0013-5

C. Wang, Y. Zhang, “New authentication scheme for wireless body area networks using the bilinear pairing”, J Med Syst. Vol. 39 , no. 11 , p. 136 , 2015. DOI: https://doi.org/10.1007/s10916-015-0331-2

L. Wu, Y. Zhang, L. Li, J. Shen, “Efficient and anonymous authentication scheme for wireless body area networks”, J. Med. Systems, Vol. 40 , no. 6 , p. 134 , 2014. DOI: https://doi.org/10.1007/s10916-016-0491-8

P. Gope, T. Hwang, “A realistic lightweight anonymous authentication protocol for securing real-time application data access in wireless sensor networks”, IEEE Trans. Ind. Electron. Vol. 63 , no. 11 , pp. 7124–7132, 2016. DOI: https://doi.org/10.1109/TIE.2016.2585081

A. Adavoudi-Jolfaei, M. Ashouri-Talouki, S.F. Aghili, “Lightweight and anonymous three-factor authentication and access control scheme for real-time applications in wireless sensor networks”, Peer-to-Peer Netw. Appl., Vol. 12, pp. 43-59, 2019. DOI: https://doi.org/10.1007/s12083-017-0627-8

T. Li, Y. Zheng, T. Zhou,”Efficient anonymous authenticated key agreement scheme for wireless body area networks”, Security and Communication Networks, Vol. 4167549, pp. 1-4167549, 2017. DOI: https://doi.org/10.1155/2017/4167549

C. M. Chen, B. Xiang, T. Y. Wu, K. H. Wang, “An anonymous mutual authenticated key agreement scheme for wearable sensors in wireless body area networks”, Appl. Sci. Vol. 8, no. 7, p. 1074, 2018. DOI: https://doi.org/10.3390/app8071074

A.M. Koya, P. P. Deepthi, “Anonymous hybrid mutual authentication and key agreement scheme for wireless body area network”, Comput. Netw. Vol. 140 pp. 138-151, 2018. DOI: https://doi.org/10.1016/j.comnet.2018.05.006

M. Kompara, S. K. H. Islam, M. Holbl, “A robust and efficient mutual authentication and key agreement scheme with untraceability for WBANs”, Computer Networks, Vol. 148, pp. 196-213, 2019. DOI: https://doi.org/10.1016/j.comnet.2018.11.016

A. Gupta, M. Tripathi, T.J. Shaikh, A. Sharma, “A lightweight anonymous user authentication and key establishment scheme for wearable devices”, Comput. Netw., Vol. 149, pp. 29-42, 2019. DOI: https://doi.org/10.1016/j.comnet.2018.11.021

X. Li, M. H. Ibrahim, S. Kumari, A. K. Sangaiah, V. Gupta, and K.K.R. Choo, ‘‘Anonymous mutual authentication and key agreement scheme for wearable sensors in wireless body area networks,’’ Comput. Netw., Vol. 129, pp. 429–443, 2017. DOI: https://doi.org/10.1016/j.comnet.2017.03.013

A. O. Sharif, M. Nikooghadam, D. Abbassinezhad-Mood, “Design of a lightweight and anonymous authenticated key agreement protocol for wireless body area networks, “ Int. J. Commun. Syst., Vol. 32 , no. 12, p. e3974, 2019. DOI: https://doi.org/10.1002/dac.3974

B. A. Alzahrani, A. Irshad, A. Albeshri, K. Alsubhi, and M. Shafiq, ‘‘An improved lightweight authentication protocol for wireless body area networks’’ IEEE Access, Vol.8, pp. 190855–190872, 2020. DOI: https://doi.org/10.1109/ACCESS.2020.3031484

B. Khadem, A. M. Suteh, M. Ahmad, A. Alkhayyat, M. S. Farash and H. S. Khalifa, "An Improved WBSN Key-Agreement Protocol Based on Static Parameters and Hash Functions," IEEE Access, Vol. 9, pp. 78463-78473, 2021. DOI: https://doi.org/10.1109/ACCESS.2021.3083708

M. S. Akbar, Z. Hussain, M. Sheng, R. Shankaran,“Wireless Body Area Sensor Networks: Survey of MAC and Routing Protocols for Patient Monitoring under IEEE 802.15.4 and IEEE 802.15.6”, Vol. 22, no. 21, p. 8279, 2022. DOI: https://doi.org/10.3390/s22218279

D. Dolev, A. Yao, “On the security of public key protocols,” IEEE Trans. Inf. Theory Vol. 29, no. 2, pp. 198-208, 1983. DOI: https://doi.org/10.1109/TIT.1983.1056650

T. Feng, S.M. Zhao, X. Gong “Formal Security Evaluation and Improvement of BACnet/IP Protocol Based on HCPN Model”, International Journal of Network Security, Vol. 24, no. 2, pp. 193-205, 2022. DOI: https://doi.org/10.1155/2022/8104884

M. Burrows, M. Abadi, and R. Needham, ‘‘A logic of authentication,’’ ACM Trans. Comput. Syst., Vol. 8, no. 1, pp. 18–36, 1990. DOI: https://doi.org/10.1145/77648.77649

A. M. Almuhaideb, H. A. Alghamdi, "Secure and Efficient WBAN Authentication Protocols for Intra-BAN Tier" Journal of Sensor and Actuator Networks Vol. 11, no. 3, p. 44, 2022. DOI: https://doi.org/10.3390/jsan11030044

M. Tanveer, A. H. Zahid, M. Ahmad, A. Baz, H. Alhakami, ‘‘LAKEIoD: Lightweight authenticated key exchange protocol for the Internet of drone environment,’’ IEEE Access, Vol. 8, pp. 155645–155659, 2020. DOI: https://doi.org/10.1109/ACCESS.2020.3019367

C. J. F. Cremers, Scyther: Semantics and Verification of Security Protocols. Eindhoven, The Netherlands: Eindhoven Univ. Technology, 2006.

L. Viganò, ‘‘Automated security protocol analysis with the AVISPA tool,’’ Electron. Notes Theor. Comput. Sci., Vol. 155, pp. 61–86, 2006. DOI: https://doi.org/10.1016/j.entcs.2005.11.052

M. H. Ibrahim, S. Kumari, A. K. Das, M. Wazid, and V. Odelu, ‘‘Secure anonymous mutual authentication for star two-tier wireless body area networks,’’ Comput. Methods Programs Biomed., Vol. 135, pp. 37–50, 2016. DOI: https://doi.org/10.1016/j.cmpb.2016.07.022

H. Khan, B. Dowling, and K. M. Martin, ‘‘Highly efficient privacy-preserving key agreement for wireless body area networks’’ 2018 17th IEEE Int. Conf. Trust, Secur. Privacy Comput. Commun. /12th IEEE Int. Conf. Big Data Sci. Eng. (Trust Com / Big Data SE), pp. 1064–1069, 2018. DOI: https://doi.org/10.1109/TrustCom/BigDataSE.2018.00149

Z. Xu, C. Xu, W. Liang, J. Xu, and H. Chen, ‘‘A lightweight mutual authentication and key agreement scheme for medical Internet of Things,’’ IEEE Access, Vol.7, pp. 53922–53931, 2019. DOI: https://doi.org/10.1109/ACCESS.2019.2912870

A. Gupta, M. Tripathi, and A. Sharma, ‘‘A provably secure and efficient anonymous mutual authentication and key agreement protocol for wearable devices in WBAN,’’ Comput. Commun., vol. 160, pp. 311–325, 2020. DOI: https://doi.org/10.1016/j.comcom.2020.06.010