Page 123 - 2023-Vol19-Issue2

119 |
privacy breaches [10]. In this context, security refers to the
protection of data from illegal use while they are connected,
transferred, processed, and saved. Privacy refers to the ability
to maintain the confidentiality of a patient’s personal infor-
mation, such as his/her name and details about his/her health
[11]. In 2018, Wei et al. [12] proposed a secure authentication
scheme that depended on a low-entropy PIN. Their work can
be more convenient for WBAN to apply on a simple-to-recall
PIN. In 2019, Kompara et al. [13] presented a good authenti-
cation system for a two-hop WBAN with a confirmation on a
pseudonym and nonchase merit. The performance and solidity
of this system were elucidated utilizing an unofficial analysis,
which was then officially confirmed. Koya and Deepthi [14]
supported an authentication scheme based on physiological
signals. The authors’ opinion was that physiological value
assistance was employed in protecting the scheme versus sen-
sor node impersonation attacks. Wang et al. [15] proposed
a swift authentication method for health contingencies; their
work relied on decreasing authentication time to lug contin-
gencies speedily without aiding a physician. Dodangeh et al.
[16] suggested a good authentication scheme depended on
the biometric merits of the human body. The authors offered
two schemes for authentication and key agreement in WBAN.
Their work applied biometric features, secure exchanged data,
and an essay password to supply security. In 2019, Liu et
al. [17] developed a modern authentication scheme that was
distinguished using a dynamic password. The main aim of
this research is to develop secure scheme for patient’s health
cases observation.
Fig. 1. WBAN organization
A. THE RESEARCH CONTRIBUTIONS
The contributions of the proposed scheme can be summarized
in the following points:
• To keep the energy of the sensor, the time at which
the pivotal signals are submitted from a sensor during
Rashid et al.
categorizing the signals into two types, normal and
abnormal, are specified. This classification includes
all types of sensors used in this work, such as body
temperature sensor.
• In the patient’s health care part, an adequate scheme
attached to the patient’s device, which can analyze the
class and type of the sensor’s signal and perform suit-
able actions without demanding a physician, is pro-
posed.
• This work is characterized by strong security and high
confidentiality in terms of exchanging information be-
tween the basic parts of the components of the work
environment.
• This proposed scheme is very important and can be used
by patients, the elderly, athletes, and those interested
in continuously monitoring the functions of their vital
bodies.
• On the security side, the proposed scheme can resist
familiar attacks such as insider attacks, MITM attacks,
and DoS attacks. Moreover, AVISPA prove the security
of the proposed scheme.
B. Organization
This paper is organized as follows: Section 2 presents an
architecture of WBAN’s organization. Section 3 displays the
proposed scheme. Section 4 demonstrates the formal analysis
and the results of the experiment. Section 4 consists of a
comparison with other related schemes. Section 5 presents
the conclusions.
II. ARCHITECTURE OF WBAN
A. System Components of WBAN
The components of the WBAN system are sensors (Si), per-
sonal devices (PDi), and an authentication server (AS). Figure
2 presents the components of the WBAN system. Sensors
(Si): Sensors are considered limited resources, as they have
the ability to collect patients’ health data and send signals
to personal devices via Bluetooth or Wi-Fi. Personal device
(PDi): A personal device is a communication tool that can
connect biometric sensors, users, and an authentication server.
A personal device can interpret the sensor’s signals and send
information to the server or notify the patient about his/her
health condition through an application provided by the health
institution. Authentication server (AS): An authentication
server has many roles, including saving the sensitive informa-
tion of the patients in a secure database, analyzing data, and
processing and distributing data to the relevant people.