A robust authentication and access control protocol for securing wireless healthcare sensor networks. (June 2020)

• Record Type: Journal Article
• Authors: Ali, Zeeshan; Ghani, Anwar; Khan, Imran; Chaudhry, Shehzad Ashraf; Islam, SK Hafizul; Giri, Debasis
• Is Part Of: Journal of information security and applications. Volume 52(2020)
• Publication Date: 2020-06
• Subjects: Wireless sensor network -- Healthcare system -- Elliptic curve cryptography -- Authentication -- Access and control -- BAN Logic -- AVISPA -- Formal security; Computer security -- Periodicals; Information technology -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.jisa.2020.102502
• Languages: English
• ISSNs: 2214-2126

Abstract

Highlights: In this paper, we cryptanalyze Liu-Chung's, and Challa et al.'s authentication and access control protocol for WSNs. We proposed an enhanced authentication and access control protocol for WSNs. The proposed scheme is formally validated using AVISPA tool and BAN logic model. Our informal security analysis showed that, the proposed scheme is secure. The proposed scheme is efficient compared to other competitive and related protocol. Abstract: Wireless Healthcare Sensor Network (WHSN) has become one of the major research fields over the past decades that play a very prominent role in the medical field. Due to the rapid growth of technology in wireless communication, different security challenges have been raised in WHSN. Authentication protocols are used to secure the information transferred over the public channels by WHSN. For this prospect recently, Liu & Chung proposed an authentication and data transmission mechanism for WHSN. However, Challa et al. identified that Liu-Chung's scheme is vulnerable to stolen smart-card, offline password guessing, privileged insider, and user impersonation attacks. Challa et al. then proposed an enhanced scheme to overcome beforehand stated flaws. This paper denotes out that in accession to before mentioned attacks, Liu-Chung's scheme is also prone to users' private key leakage and user impersonation attacks towards sensors. Moreover, Challa et al.'s scheme suffers from incorrectness, broadcasting problem, lack of authentication between Trusted Authority ( TA ) and sensor nodes, replay attack, Denial of Service (DoS) attack, forgery attack and delay in communication due to the involvement of the TA . Using the elliptic curve cryptography and bilinear paring, an improved scheme is proposed in this paper, to mitigate the weaknesses of Challah et al. and Liu-Chang schemes. The formal security analysis using simulation tool AVISPA and BAN logic demonstrate that the proposed scheme is secure. The rigorous informal security analysis also attests that our scheme is safe against well-known attacks.