A lightweight anonymous mutual authentication and key agreement scheme for WBAN

Wireless body area network (WBAN) is a special wireless mobile sensor network, which is mainly applied to the medical field. It can monitor the physical condition of patients and send this vital and sensitive information to a server that provides medical and health services. Because of the openness and mobility of WBAN, it is easier for the adversary to obtain, corrupt, or replace the data transmitted in the channel, or launch various attacks. Therefore, data security and privacy issues are the most challenging problems in WBANs. Moreover, most wearable sensors in WBAN are resource-constrained devices, traditional security schemes may not be suitable for WBAN. Therefore, in this paper, we propose a lightweight anonymous mutual authentication and key agreement scheme for WBAN. This scheme uses only hash function operations and XOR operations. We use the automatic security verification tool ProVerif to verify the security properties of our scheme and informal security analysis is discussed. We also compared the proposed scheme with many related works and the results indicate that our scheme has either more advantages in terms of computation cost, energy consumption, and communication cost or lower security risk.