Key Laboratory of Cryptography of Zhejiang Province, Hangzhou Normal University, Hangzhou 311121, China.
J Healthc Eng. 2023 Feb 13;2023:4845850. doi: 10.1155/2023/4845850. eCollection 2023.
As one of the important applications of Internet of Health Things (IoHT) technology in the field of healthcare, wireless body area network (WBAN) has been widely used in medical therapy, and it can not only monitor and record physiological information but also transmit the data collected by sensor devices to the server in time. However, due to the unreliability and vulnerability of wireless network communication, as well as the limited storage and computing resources of sensor nodes in WBAN, a lot of authentication protocols for WBAN have been devised. In 2021, Alzahrani et al. designed an anonymous medical monitoring protocol, which uses lightweight cryptographic primitives for WBAN. However, we find that their protocol is defenseless to off-line identity guessing attacks, known-key attacks, and stolen-verifier attacks and has no perfect forward secrecy. Therefore, a patient monitoring protocol for WBAN in IoHT is proposed. We use security proof under the random oracle model (ROM) and automatic verification tool ProVerif to demonstrate that our protocol is secure. According to comparisons with related protocols, our protocol can achieve both high computational efficiency and security.
作为物联网 (IoHT) 技术在医疗保健领域的重要应用之一，无线体域网 (WBAN) 已被广泛应用于医疗治疗中，它不仅可以监测和记录生理信息，还可以将传感器设备收集的数据及时传输到服务器。然而，由于无线网络通信的不可靠性和脆弱性，以及 WBAN 中传感器节点的存储和计算资源有限，已经设计了许多针对 WBAN 的认证协议。2021 年，Alzahrani 等人设计了一种用于 WBAN 的匿名医疗监测协议，该协议使用轻量级密码原语。然而，我们发现他们的协议易受到离线身份猜测攻击、已知密钥攻击和被盗验证器攻击，并且没有完善的前向保密性。因此，提出了一种物联网中用于 WBAN 的患者监测协议。我们使用随机 oracle 模型 (ROM) 下的安全证明和自动验证工具 ProVerif 来证明我们的协议是安全的。与相关协议的比较表明，我们的协议可以实现高计算效率和安全性。
