IEEE J Biomed Health Inform. 2014 Mar;18(2):440-8. doi: 10.1109/JBHI.2013.2293620.
As a special sensor network, a wireless body area network (WBAN) provides an economical solution to real-time monitoring and reporting of patients' physiological data. After a WBAN is deployed, it is sometimes necessary to disseminate data into the network through wireless links to adjust configuration parameters of body sensors or distribute management commands and queries to sensors. A number of such protocols have been proposed recently, but they all focus on how to ensure reliability and overlook security vulnerabilities. Taking into account the unique features and application requirements of a WBAN, this paper presents the design, implementation, and evaluation of a secure, lightweight, confidential, and denial-of-service-resistant data discovery and dissemination protocol for WBANs to ensure the data items disseminated are not altered or tampered. Based on multiple one-way key hash chains, our protocol provides instantaneous authentication and can tolerate node compromise. Besides the theoretical analysis that demonstrates the security and performance of the proposed protocol, this paper also reports the experimental evaluation of our protocol in a network of resource-limited sensor nodes, which shows its efficiency in practice. In particular, extensive security analysis shows that our protocol is provably secure.
作为一种特殊的传感器网络,无线体域网 (WBAN) 为实时监测和报告患者的生理数据提供了一种经济的解决方案。WBAN 部署后,有时需要通过无线链路将数据传播到网络中,以调整体传感器的配置参数或向传感器分发管理命令和查询。最近已经提出了许多此类协议,但它们都侧重于如何确保可靠性,而忽略了安全漏洞。考虑到 WBAN 的独特功能和应用要求,本文提出了一种安全、轻量级、机密且抗拒绝服务的数据发现和分发协议的设计、实现和评估,以确保传播的数据项不被更改或篡改。基于多个单向密钥哈希链,我们的协议提供即时认证,并能容忍节点妥协。除了理论分析证明了所提出协议的安全性和性能外,本文还报告了在资源受限的传感器节点网络中对我们协议的实验评估,这表明了它在实践中的效率。特别是,广泛的安全分析表明,我们的协议是可证明安全的。