Certificateless Remote Anonymous Authentication Schemes for Wireless Body Area Networks
Certificateless Remote Anonymous Authentication Schemes for Wireless Body Area Networks
复制标题
无线体域网无证书远程匿名认证方案
DOI：
10.1109/tpds.2013.145
复制
发表时间：
2014-02-01
影响因子：
5.3
通讯作者：
Kwak, Kyung Sup
中科院分区：
文献类型：
--
作者：
Liu, Jingwei;Zhang, Zonghua;Kwak, Kyung Sup
无线体域网（WBAN）以其能够无缝、连续、真实的实时交换医疗信息的能力，被认为是改善医疗服务的最有前途的无线传感器技术之一。然而，在这种新的网络模式中，缺乏明确的纵深防线会使其潜在用户担心他们的私人信息泄露，特别是那些未经认证甚至恶意的对手。在本文中，我们提出了一对高效和轻量级的认证协议，使远程WBAN用户匿名享受医疗服务。特别是，我们的认证协议植根于一个新的无证书签名（CLS）计划，这是计算，有效的，可证明安全的存在伪造适应性选择消息攻击的随机预言机模型。此外，我们的设计确保应用程序或服务提供商没有特权透露用户的真实的身份。甚至在认证协议中充当私钥生成器的网络管理器也被阻止冒充合法用户。通过理论分析和实验仿真对设计方案的性能进行了评估，对比研究表明，设计方案在安全性和计算开销之间取得了较好的平衡，能够很好地满足WBAN的需求.
Wireless body area network (WBAN) has been recognized as one of the promising wireless sensor technologies for improving healthcare service, thanks to its capability of seamlessly and continuously exchanging medical information in real time. However, the lack of a clear in-depth defense line in such a new networking paradigm would make its potential users worry about the leakage of their private information, especially to those unauthenticated or even malicious adversaries. In this paper, we present a pair of efficient and light-weight authentication protocols to enable remote WBAN users to anonymously enjoy healthcare service. In particular, our authentication protocols are rooted with a novel certificateless signature (CLS) scheme, which is computational, efficient, and provably secure against existential forgery on adaptively chosen message attack in the random oracle model. Also, our designs ensure that application or service providers have no privilege to disclose the real identities of users. Even the network manager, which serves as private key generator in the authentication protocols, is prevented from impersonating legitimate users. The performance of our designs is evaluated through both theoretic analysis and experimental simulations, and the comparative studies demonstrate that they outperform the existing schemes in terms of better trade-off between desirable security properties and computational overhead, nicely meeting the needs of WBANs.