Context-Aware Authorization and Anonymous Authentication in Wireless Body Area Networks

Context-aware anonymous authentication protocols in the internet of things dedicated to e-health applications

The recent advancement in wireless body area networks (WBAN) plays an important role in remote health care systems. However, these networks are suffering from data security and privacy threats. Lack of anonymous authentication and secure data communication leads to operation failure in WBAN. Computational cost and privacy preservation are the two major hindrances for anonymous authentication in many existing schemes. Therefore, a secure and efficient privacy-preserving anonymous authentication scheme is proposed to provide data security and privacy to the users with low computational and communication cost. The performance analysis and experimental simulation results ensure that our proposed anonymous authentication method outperforms the existing systems in terms of providing data security and privacy with less computational overhead.

Wireless body area networks (WBANs) are expected to play an important role in monitoring the health information and creating a smart, reliable, and ubiquitous healthcare system. Only authorized users can access the network since the collected data by the WBANs are used to diagnosed and treated. However, it is still a challenging task to design a cost-effective and secure access control scheme because of inherent characteristics of the WBANs, such as open medium channel, limited resources of sensor nodes, and the absence of fixed infrastructure. In this paper, we first propose a novel certificateless signcryption scheme, and then, design a cost-effective and anonymous access control scheme for the WBANs using the novel signcryption. The proposed access control scheme achieves anonymity, confidentiality, authentication, integrity, and nonrepudiation. Compared with existing three access control schemes for the WBANs, our proposed scheme has the least computational cost and total energy consumption for the controller.

Security in wireless body area networks via anonymous authentication: Comprehensive literature review, scheme classification, and future challenges

Wireless medical sensor networks improve patients’ value of care without upsetting their comfort. The Wireless Body Area Network (WBAN) is an application that is used to watch a patient’s physiological parameters such as temperature, blood pressure level, and electrocardiography. To enhance security of WBAN-based healthcare systems, an anonymous authentication scheme based on secret identity key provided to the users is used in this paper. The data and the secret identity are encrypted so that eavesdropping and other active attacks are prevented. In order to prevent data from being discovered, bilinear pairing has been applied in this research work. To ensure privacy of health data and to thwart the security attacks launched over private health data, an effective validation based on total number of bytes has been followed. The system proposed in this paper also includes an efficient access control scheme to retrieve the data in a secured manner by the stakeholders of the system.

As a major building block of Healthcare 4.0, wireless body area networks (WBANs) play an important role in collecting patient’s real-time physical phenomena through small wearable or implantable intelligent medical devices and communicating with remote medical experts using short-range wireless communication techniques. However, the challenges of securing information access are partly evidenced by the difficulty in designing secure and efficient security protocols. For example, existing authentication and key agreement schemes have either potential security vulnerabilities or high communication and computation overhead. In this article, we propose a lightweight and anonymous authentication and key agreement protocol, also called liteAuth, for WBANs. In our approach, mutual authentication and session key agreement are achieved using the Tinkerbell map-based random shuffling, physical unclonable function, one-way hash function, and bitwise exclusive OR operation. The security of liteAuth is first verified using the AVISPA tool, and then its cyber resilience is analyzed. In addition, we develop a real-world testbed, implement liteAuth and two existing schemes (i.e., PSLAP and HARCI), and conduct experiments for performance evaluation and analysis. Experimental results indicate that liteAuth can improve the performance of communication overhead and computation time as well as reduce energy consumption, while meeting all security requirements.

Recent advancements in ubiquitous technologies, such as an intelligible sensor, wireless communication, internet of things, and cloud computing have enabled the wearable devices to integrate with the wireless body area network (WBAN) for improving the patient's health remotely. Due to the resource-constraint nature of the WBAN, it provides limited services to the patients. Cloud technology has strengthened the WBAN potential by facilitating the storage and computation. However, due to the open nature of the cloud technology and wireless communication, these type of systems encounter several security issues. In this article, we propose an identity-based anonymous authentication and key agreement (IBAAKA) protocol for WBAN in the cloud-assisted environment, which achieves mutual authentication and user anonymity. In the security analysis, we show that under the well-known computational diffie-hellman assumption and random oracle model, the proposed IBAAKA scheme is provably secure, as well as achieves the required security properties. Further, it requires the least computational cost and comparable communication cost with the existing schemes.

Individuals’ privacy protection when publishing data for research has recently put great attention on data mining and information resources sharing fields. Privacy preservation is an important and challenging problem in micro-data publishing. This paper aimed to find an available directly way protect patient privacy. Processing numeric values which got from body sensor network (BSN). Firstly, we analyze the characteristics of medical data which collected from BSN, and then the records will be grouped according to the Quasi-identifier. The last step is to inspect the diversity of sensitive attributes.

With the pervasiveness of smart phones and the advance of wireless body sensor networks (BSNs), mobile Healthcare (m-Healthcare), which extends the operation of Healthcare provider into a pervasive environment for better health monitoring, has attracted considerable interest recently. However, the flourish of m-Healthcare still faces many challenges including information security and privacy preservation. In this paper, we propose a secure and privacy-preserving opportunistic computing framework, called SPOC, for m-Healthcare emergency. With SPOC, smart phone resources including computing power and energy can be opportunistically gathered to process the computing-intensive personal health information (PHI) during m-Healthcare emergency with minimal privacy disclosure. In specific, to leverage the PHI privacy disclosure and the high reliability of PHI process and transmission in m-Healthcare emergency, we introduce an efficient user-centric privacy access control in SPOC framework, which is based on an attribute-based access control and a new privacy-preserving scalar product computation (PPSPC) technique, and allows a medical user to decide who can participate in the opportunistic computing to assist in processing his overwhelming PHI data. Detailed security analysis shows that the proposed SPOC framework can efficiently achieve user-centric privacy access control in m-Healthcare emergency. In addition, performance evaluations via extensive simulations demonstrate the SPOC's effectiveness in term of providing high-reliable-PHI process and transmission while minimizing the privacy disclosure during m-Healthcare emergency.

Smart mobile medical computing systems (SMDCSes), e.g., mobile medical applications use context information from the environment to provide useful and often critical healthcare services such as continuous monitoring and control of blood glucose levels by infusion of insulin. Given the unsupervised nature of operation of SMDCSes, context changes that are unaccounted for can cause unprecedented faults leading to violation of requirements such as safety, energy sustainability and reliability. Analysis of SMDCSes for testing requirements violations necessitates consideration of context dependent interactions between the SMDCS software, represented by discrete operating modes and its environment, represented by non-linear partial differential equations over space and time. An intractable number of context change sequence and lack of closed form solutions to differential equations makes the requirements analysis of SMDCSes a challenging task. This paper proposes a novel technique to analyze SMDCSes taking into account the dynamic changes in the context and the constant interaction of the computing systems with the physical environment. To show the usage of the technique, Ayushman pervasive health monitoring system is considered as an example SMDCS. Analytical results show that practices considered healthy for a person such as mobility may not be beneficial when an SMDCS is controlling health.

With the development of wireless networks and medical sensors, wireless body area networks are playing more and more important role in the field of healthcare service. The data transmitted in WBANs is very sensitive since it will be used in clinical diagnoses or measurements. Therefore, security and privacy of communication in WBANs derive increasing attentions from the academia and industry. In this paper, we propose an identity (ID)-based efficient anonymous authentication scheme for WBANs using elliptic curve cryptosystem (ECC). Due to the ID-based concept, there is no certificate is needed in the proposed scheme. Moreover, the proposed scheme not only provides mutual authentication between the client and the application provider but also provides client anonymity. Performance analysis shows that improvements of 50.58% and 3.87% in the client side and the application provider side separately. Then the proposed scheme is more suitable for WBANs.

The research on aggregate signcryption is mostly based on identity-based encryption to provide confidentiality and authentication,thus improving efficiency.But aggregate signcryption has the problem in certificate management and key escrow.Therefore,it needs to design new aggregate signcryption schemes,which not only solve the problem of certificate management and key escrow,but also guarantee the confidentiality and authentication of the scheme.This paper analyzed the main stream aggregate signcryption schemes and their development.Combined with the scheme of Zhang et al.(ZHANG L,ZHANG F T.A new certificateless aggregate signature scheme.Computer Communications,2009,32(6):1079-1085) and the needs mentioned above,this article designed a certificateless aggregate signcryption scheme,and proved its confidentiality and unforgeability based on the Bilinear Diffie-Hellman(BDH) problem and Computational Diffie-Hellman(CDH) problem.The experimental results show that the proposed scheme is more efficient and the amount of computation is equal or lower in comparison with the other schemes.What's more,the new scheme is publicly verifiable,and it eliminates the use of public key certificate and solves the problem in key escrow.

ABSTRACTWireless body area networks (WBANs) are an important component of Medical 4.0, as they can use sensors to collect real‐time data on a patient's vital signs and transmit this information over the internet to healthcare providers, greatly improving the quality and efficiency of medical care. However, Since WBANs typically collect human physiological information, which involves personal privacy, and the collected data are usually used by medical professionals for medical diagnosis. If the transmitted data are tampered with by attackers, it may lead to errors in medical diagnosis. Therefore, we must ensure the privacy, integrity, and reliability of the data during the transmission process. As a result, identity authentication and session key negotiation become crucial for secure communication in this context. Moreover, due to the constraints of sensors in terms of memory, computation, and battery life, a lightweight and efficient authentication scheme is required. Previously, Narwal et al. proposed a scheme called SAMAKA, which allows for anonymous authentication and session key establishment between sensor nodes and a control node. However, in‐depth analysis has revealed that their scheme is vulnerable to sensor node capture attacks and does not provide session unlinkability or forward secrecy. To address the security flaws in Narwal et al.'s protocol, we have proposed an improved and untraceable mutual authentication and key negotiation scheme. We have also formally verified the security of our scheme using BAN logic and the AVISPA tool. Performance analysis shows that our scheme has significant advantages over other related schemes in terms of computational and communication costs, making it more suitable for the resource‐constrained WBAN environment.

Signcryption is a cryptographic technique that provides both confidentiality and authenticity of data during public transmission in many modern applications like Internet -of -Things (IoT), Wireless Sensor Networks (WSNs) etc. The functionalities of encryption and Signature can achieve simultaneously through the signcryption with lower computational cost and communication overheads than those of traditional sign-then-encrypt approach. Many signcryption schemes have been constructed by various researchers in different cryptographic frameworks. Certificateless cryptography is one of the recent public key cryptography which eliminates the key escrow problem and complex certificate management problemsin identity based cryptography and traditional public key cryptography respectively. Providing the security and efficiency in many modern applications including IoT and WSNs is a crucial task. In this paper, we proposed new signcryption scheme in certificateless cryptography. This scheme supports the property of public verifiability and is secure against various types of adversaries in the random oracle model with the assumption that the Computational Diffie-Hellman Problem (CDHP) and the Elliptic Curve Discrete Logarithmic Problems (ECDLP) are hard. Due to pairing-free environment the proposed scheme is computationally more efficient than the existing public verifiable signcryption schemes.

Boyen [7] gave the first identity-based (ID-based) signcryption scheme that is forward secure, publicly verifiable as well as provably secure. However, his scheme aims at providing ciphertext unlinkability and anonymity which is not a desirable property in applications such as authentication of encrypted messages by firewalls [11], where any third party should be able to verify the origin of the ciphertext without knowing the content of the message and getting any help from the intended recipient. This requirement is referred as public ciphertext authenticity. In this paper, we give another ID-based signcryption scheme that can provide public ciphertext authenticity and is forward and provably secure as well as publicly verifiable. Our scheme is modified from Libert and Quisquater’s ID-based signcryption scheme [16] and the efficiency of our scheme is comparable to other previous ID-based signcryption schemes.KeywordsIdentity-based signcryptionforward securitypublic verifiabilityprovable securitysemantical securitypublic ciphertext authenticitynetwork securityfirewallspublic key cryptosystemselliptic curve cryptosystemscryptographic primitives