An Anonymous Mutual Authentication and Key Agreement Scheme in WBAN

The Wireless Body Area Network (WBAN) is a network system that attaches sensors to the body for collecting and transmitting important physiological data. The anonymity and untraceability of WBAN is quite significant. In this paper, an existing lightweight anonymous mutual authentication and key agreement scheme for centralized two-hop WBANs is analyzed. It is found that the protocol has some drawbacks in its untraceability and forward secrecy of session keys. This paper proposes a new anonymous mutual authentication and key agreement scheme, with untraceability and session key forward secrecy. The scheme uses as few hash functions and XOR operations as possible for authentication and key agreement. It is officially proven to be correct through BAN logic, and its security has been verified by using the Automated Validation of Internet Security Protocols and Applications (AVISPA) as well.