{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,21]],"date-time":"2026-01-21T03:41:38Z","timestamp":1768966898278,"version":"3.49.0"},"reference-count":30,"publisher":"Springer Science and Business Media LLC","issue":"3","license":[{"start":{"date-parts":[[2021,10,27]],"date-time":"2021-10-27T00:00:00Z","timestamp":1635292800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2021,10,27]],"date-time":"2021-10-27T00:00:00Z","timestamp":1635292800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2022,6]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>The IEEE Std 802.15.6 is the latest international standard for Wireless Body Area Networks. The security of communication in this standard is based upon four elliptic-curve-based key agreement protocols. These protocols have been shown to exhibit serious security vulnerabilities but surprisingly, do not provision any privacy guarantees. To date, no suitable key agreement protocol has been proposed which fulfills all the requisite objectives for IEEE Std 802.15.6. In this paper, two key agreement protocols are presented which, in addition to being efficient and provisioning advance security properties, also offer the essential privacy attributes of anonymity and unlinkability. We develop a formal security and privacy model in an appropriate complexity-theoretic framework and prove the proposed protocols secure in this model.\n<\/jats:p>","DOI":"10.1007\/s10207-021-00570-7","type":"journal-article","created":{"date-parts":[[2021,10,27]],"date-time":"2021-10-27T19:02:17Z","timestamp":1635361337000},"page":"577-595","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Pragmatic authenticated key agreement for IEEE Std 802.15.6"],"prefix":"10.1007","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2948-4964","authenticated-orcid":false,"given":"Haibat","family":"Khan","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Benjamin","family":"Dowling","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Keith M.","family":"Martin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,10,27]]},"reference":[{"key":"570_CR1","unstructured":"Crypto++ 5.6.5 Benchmarks. https:\/\/www.cryptopp.com\/benchmarks.html. Online; accessed 01-November-2018"},{"key":"570_CR2","unstructured":"FBI-Apple encryption dispute. https:\/\/en.wikipedia.org\/wiki\/FBI%E2%80%93Apple_encryption_dispute. Online; accessed 11-March-2019"},{"key":"570_CR3","unstructured":"802.15.6-2012 - IEEE standard for local and metropolitan area networks: part 15.6: Wireless Body Area Networks (2012)"},{"key":"570_CR4","doi-asserted-by":"publisher","unstructured":"Bellare, M., Rogaway, P.: Entity authentication and key distribution. In: D.R. Stinson (ed.) Advances in Cryptology: CRYPTO \u201993, 13th Annual International Cryptology Conference, Santa Barbara, California, USA, August 22-26, 1993, Proceedings, Lecture Notes in Computer Science, vol. 773, pp. 232\u2013249. Springer (1993). https:\/\/doi.org\/10.1007\/3-540-48329-2_21","DOI":"10.1007\/3-540-48329-2_21"},{"key":"570_CR5","doi-asserted-by":"publisher","unstructured":"Boyd, C., Cliff, Y., Nieto, J.M.G., Paterson, K.G.: Efficient one-round key exchange in the standard model. In: Y.\u00a0Mu, W.\u00a0Susilo, J.\u00a0Seberry (eds.) Information Security and Privacy, 13th Australasian Conference, ACISP 2008, Wollongong, Australia, July 7-9, 2008, Proceedings, Lecture Notes in Computer Science, vol. 5107, pp. 69\u201383. Springer (2008). https:\/\/doi.org\/10.1007\/978-3-540-70500-0_6","DOI":"10.1007\/978-3-540-70500-0_6"},{"key":"570_CR6","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-09527-0","author":"C Boyd","year":"2003","unstructured":"Boyd, C., Mathuria, A.: Protocols for authentication and key establishment. Inf. Secur. Cryptograph. (2003). https:\/\/doi.org\/10.1007\/978-3-662-09527-0","journal-title":"Inf. Secur. Cryptograph."},{"issue":"3","key":"570_CR7","doi-asserted-by":"publisher","first-page":"1635","DOI":"10.1109\/SURV.2014.012214.00007","volume":"16","author":"R Cavallari","year":"2014","unstructured":"Cavallari, R., Martelli, F., Rosini, R., Buratti, C., Verdone, R.: A survey on wireless body area networks: technologies and design challenges. IEEE Commun. Surv Tutor. 16(3), 1635\u20131657 (2014). https:\/\/doi.org\/10.1109\/SURV.2014.012214.00007","journal-title":"IEEE Commun. Surv Tutor."},{"key":"570_CR8","doi-asserted-by":"publisher","unstructured":"Chen, L., Kudla, C.: Identity based authenticated key agreement protocols from pairings. In: 16th IEEE Computer security foundations workshop (CSFW-16 2003), 30 June - 2 July 2003, Pacific Grove, CA, USA, pp. 219\u2013233. IEEE Computer Society (2003). https:\/\/doi.org\/10.1109\/CSFW.2003.1212715","DOI":"10.1109\/CSFW.2003.1212715"},{"key":"570_CR9","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1155\/2015\/354586","volume":"2015","author":"H Chien","year":"2015","unstructured":"Chien, H.: Authenticated diffie-hellman key agreement scheme that protects client anonymity and achieves half-forward secrecy. Mobile Inf. Syst. 2015, 1\u20137 (2015). https:\/\/doi.org\/10.1155\/2015\/354586","journal-title":"Mobile Inf. Syst."},{"issue":"5","key":"570_CR10","doi-asserted-by":"publisher","first-page":"1441","DOI":"10.1007\/s11276-015-1041-x","volume":"22","author":"KS Deepak","year":"2016","unstructured":"Deepak, K.S., Babu, A.V.: Energy efficiency analysis of IEEE 802.15.6 based wireless body area networks in scheduled access mode. Wireless Netw. 22(5), 1441\u20131459 (2016). https:\/\/doi.org\/10.1007\/s11276-015-1041-x","journal-title":"Wireless Netw."},{"issue":"2","key":"570_CR11","doi-asserted-by":"publisher","first-page":"107","DOI":"10.1007\/BF00124891","volume":"2","author":"W Diffie","year":"1992","unstructured":"Diffie, W., van Oorschot, P.C., Wiener, M.J.: Authentication and authenticated key exchanges. Des. Codes Cryptography 2(2), 107\u2013125 (1992). https:\/\/doi.org\/10.1007\/BF00124891","journal-title":"Des. Codes Cryptography"},{"issue":"2","key":"570_CR12","doi-asserted-by":"publisher","first-page":"198","DOI":"10.1109\/TIT.1983.1056650","volume":"29","author":"D Dolev","year":"1983","unstructured":"Dolev, D., Yao, A.C.: On the security of public key protocols. IEEE Trans. Inf. Theory 29(2), 198\u2013207 (1983). https:\/\/doi.org\/10.1109\/TIT.1983.1056650","journal-title":"IEEE Trans. Inf. Theory"},{"key":"570_CR13","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1109\/JSYST.2016.2544805","volume":"99","author":"D He","year":"2016","unstructured":"He, D., Zeadally, S., Kumar, N., Lee, J.H.: Anonymous authentication for wireless body area networks with provable security. IEEE Syst. J. 99, 1\u201312 (2016). https:\/\/doi.org\/10.1109\/JSYST.2016.2544805","journal-title":"IEEE Syst. J."},{"issue":"11","key":"570_CR14","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s10916-016-0587-1","volume":"40","author":"Q Jiang","year":"2016","unstructured":"Jiang, Q., Lian, X., Yang, C., Ma, J., Tian, Y., Yang, Y.: A bilinear pairing based anonymous authentication scheme in wireless body area networks for mhealth. J. Med. Syst. 40(11), 1\u201310 (2016). https:\/\/doi.org\/10.1007\/s10916-016-0587-1","journal-title":"J. Med. Syst."},{"key":"570_CR15","doi-asserted-by":"publisher","unstructured":"Khan, H., Dowling, B., Martin, K.M.: Highly efficient privacy-preserving key agreement for wireless body area networks. In: 17th IEEE international conference on trust, security and privacy. In Computing And Communications \/ 12th IEEE International Conference On Big Data Science And Engineering, TrustCom\/BigDataSE 2018, New York, NY, USA, August 1-3, 2018, pp. 1064\u20131069. IEEE (2018). https:\/\/doi.org\/10.1109\/TrustCom\/BigDataSE.2018.00149","DOI":"10.1109\/TrustCom\/BigDataSE.2018.00149"},{"key":"570_CR16","doi-asserted-by":"publisher","first-page":"102537","DOI":"10.1016\/j.jisa.2020.102537","volume":"53","author":"H Khan","year":"2020","unstructured":"Khan, H., Martin, K.M.: A survey of subscription privacy on the 5g radio interface: the past, present and future. J. Inf. Secur. Appl. 53, 102537 (2020). https:\/\/doi.org\/10.1016\/j.jisa.2020.102537","journal-title":"J. Inf. Secur. Appl."},{"key":"570_CR17","doi-asserted-by":"publisher","unstructured":"Krawczyk, H.: HMQV: A high-performance secure diffie-hellman protocol. In: V.\u00a0Shoup (ed.) Advances in Cryptology - CRYPTO 2005: 25th annual international cryptology conference, Santa Barbara, California, USA, August 14-18, 2005, Proceedings, Lecture Notes in Computer Science, vol. 3621, pp. 546\u2013566. Springer (2005). https:\/\/doi.org\/10.1007\/11535218_33","DOI":"10.1007\/11535218_33"},{"key":"570_CR18","doi-asserted-by":"publisher","unstructured":"Lampert, B., Wahby, R.S., Leonard, S., Levis, P.: Robust, low-cost, auditable random number generation for embedded system security. In: P.\u00a0Levis, S.\u00a0Eglash, L.\u00a0Nachman, A.\u00a0Rowe (eds.) Proceedings of the 14th ACM conference on embedded network sensor systems, SenSys 2016, Stanford, CA, USA, November 14-16, 2016, pp. 16\u201327. ACM (2016). https:\/\/doi.org\/10.1145\/2994551.2994568","DOI":"10.1145\/2994551.2994568"},{"issue":"2","key":"570_CR19","doi-asserted-by":"publisher","first-page":"119","DOI":"10.1023\/A:1022595222606","volume":"28","author":"L Law","year":"2003","unstructured":"Law, L., Menezes, A., Qu, M., Solinas, J.A., Vanstone, S.A.: An efficient protocol for authenticated key agreement. Des. Codes Cryptography 28(2), 119\u2013134 (2003)","journal-title":"Des. Codes Cryptography"},{"issue":"1","key":"570_CR20","doi-asserted-by":"publisher","first-page":"51","DOI":"10.1109\/MWC.2010.5416350","volume":"17","author":"M Li","year":"2010","unstructured":"Li, M., Lou, W., Ren, K.: Data security and privacy in wireless body area networks. IEEE Wireless Commun. 17(1), 51\u201358 (2010). https:\/\/doi.org\/10.1109\/MWC.2010.5416350","journal-title":"IEEE Wireless Commun."},{"key":"570_CR21","doi-asserted-by":"publisher","first-page":"429","DOI":"10.1016\/j.comnet.2017.03.013","volume":"129","author":"X Li","year":"2017","unstructured":"Li, X., Ibrahim, M.H., Kumari, S., Sangaiah, A.K., Gupta, V., Choo, K.R.: Anonymous mutual authentication and key agreement scheme for wearable sensors in wireless body area networks. Comput. Netw. 129, 429\u2013443 (2017). https:\/\/doi.org\/10.1016\/j.comnet.2017.03.013","journal-title":"Comput. Netw."},{"key":"570_CR22","unstructured":"Menezes, A., van Oorschot, P.C., Vanstone, S.A.: Handbook of applied cryptography. CRC Press (1996). https:\/\/www.crcpress.com\/Handbook-of-Applied-Cryptography\/Menezes-van-Oorschot-Vanstone\/p\/book\/9780849385230"},{"issue":"3","key":"570_CR23","doi-asserted-by":"publisher","first-page":"1658","DOI":"10.1109\/SURV.2013.121313.00064","volume":"16","author":"S Movassaghi","year":"2014","unstructured":"Movassaghi, S., Abolhasan, M., Lipman, J., Smith, D.B., Jamalipour, A.: Wireless body area networks: a survey. IEEE Commun. Surv. Tutor. 16(3), 1658\u20131686 (2014). https:\/\/doi.org\/10.1109\/SURV.2013.121313.00064","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"570_CR24","doi-asserted-by":"publisher","unstructured":"Park, D., Boyd, C., Moon, S.: Forward secrecy and its application to future mobile communications security. In: H.\u00a0Imai, Y.\u00a0Zheng (eds.) Public key cryptography. Third International workshop on practice and theory in public key cryptography, PKC 2000, Melbourne, Victoria, Australia, January 18-20, 2000, Proceedings, Lecture Notes in Computer Science, vol. 1751, pp. 433\u2013445. Springer (2000). https:\/\/doi.org\/10.1007\/978-3-540-46588-1_29","DOI":"10.1007\/978-3-540-46588-1_29"},{"key":"570_CR25","unstructured":"Pfitzmann, A., Hansen, M.: A terminology for talking about privacy by data minimization: anonymity, unlinkability, undetectability, unobservability, pseudonymity, and identity management (2010). http:\/\/www.maroki.de\/pub\/dphistory\/2010_Anon_Terminology_v0.34.pdf"},{"key":"570_CR26","unstructured":"Tang, Q.: Key establishment protocols and timed-release encryption schemes. Ph.D. thesis, Department of Mathematics, Royal Holloway, University of London, Royal Holloway Research Online (2007). https:\/\/repository.royalholloway.ac.uk\/file\/605ee4f4-4adb-f265-dfc1-d15e12f6919e\/1\/RHUL-MA-2007-9.pdf"},{"key":"570_CR27","doi-asserted-by":"publisher","unstructured":"van Tilborg, H.C.A., Jajodia, S. (eds.): Encyclopedia of cryptography and security, 2nd Ed. Springer (2011). https:\/\/doi.org\/10.1007\/978-1-4419-5906-5","DOI":"10.1007\/978-1-4419-5906-5"},{"key":"570_CR28","doi-asserted-by":"publisher","unstructured":"Toorani, M.: On vulnerabilities of the security association in the IEEE 802.15.6 standard. In: M.\u00a0Brenner, N.\u00a0Christin, B.\u00a0Johnson, K.\u00a0Rohloff (eds.) Financial cryptography and data security - FC 2015 International Workshops, BITCOIN, WAHC, and Wearable, San Juan, Puerto Rico, January 30, 2015, Revised Selected Papers, Lecture notes in computer science, vol. 8976, pp. 245\u2013260. Springer (2015). https:\/\/doi.org\/10.1007\/978-3-662-48051-9_18","DOI":"10.1007\/978-3-662-48051-9_18"},{"issue":"3","key":"570_CR29","doi-asserted-by":"publisher","first-page":"1065","DOI":"10.1007\/s10916-010-9571-3","volume":"36","author":"S Ullah","year":"2012","unstructured":"Ullah, S., Higgins, H., Braem, B., Latr\u00e9, B., Blondia, C., Moerman, I., Saleem, S., Rahman, Z., Kwak, K.S.: A comprehensive survey of wireless body area networks: on phy, mac, and network layers solutions. J. Med. Syst. 36(3), 1065\u20131094 (2012). https:\/\/doi.org\/10.1007\/s10916-010-9571-3","journal-title":"J. Med. Syst."},{"issue":"11","key":"570_CR30","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s10916-015-0331-2","volume":"39","author":"C Wang","year":"2015","unstructured":"Wang, C., Zhang, Y.: New authentication scheme for wireless body area networks using the bilinear pairing. J. Med. Syst. 39(11), 1\u20138 (2015). https:\/\/doi.org\/10.1007\/s10916-015-0331-2","journal-title":"J. Med. Syst."}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-021-00570-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-021-00570-7\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-021-00570-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,27]],"date-time":"2022-05-27T11:12:15Z","timestamp":1653649935000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-021-00570-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,10,27]]},"references-count":30,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2022,6]]}},"alternative-id":["570"],"URL":"https:\/\/doi.org\/10.1007\/s10207-021-00570-7","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,10,27]]},"assertion":[{"value":"27 October 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Haibat Khan and Keith M. Martin declare that they has no conflict of interest. Benjamin Dowling has conflict of interest with IJIS editorial board member Joseph Piperzyk.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"This article does not contain any studies with human participants or animals performed by any of the authors.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical approval"}}]}}