Ensuring Authenticity and Revocability for Wireless Body Area Network using Certificateless Cryptography (original) (raw)

Recently, with the technical advancements in wearable medical sensors and wireless communication techniques, Wireless Body Area Network (WBAN) has emerged as a new technology for e-health care service. The wearable medical device (WMD) aims at collecting an individual's medical data unobtrusively and ubiquitously. The security of the data collected from a WBAN remains a major unsolved concern. So, a certificateless remote anonymous authentication protocol is used to overcome the above challenges and to prevent the leakage of user's private information from unauthorized users. It eliminates the need for distributing clients account information to the application providers and also it achieves forward security. However the revocation functionality of anonymous remote authentication for the WBANs has not been considered in case the private key of the user has been leaked or the misbehaviour of the user has been detected. To address the demand a certificateless remote authentication protocol with efficient revocation is proposed. KUNodes algorithm is used to achieve the efficient revocation function. The revocation mechanism is highly scalable and it is especially suitable for the large-scale WBANs. The proposed authentication protocol is computationally efficient and it is provably secure against existential forgery compared with the existing one. Several key applications ranging from remote health monitoring to military/fitness training can be enabled by remote authentication in WBANs.