{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,27]],"date-time":"2026-06-27T11:28:15Z","timestamp":1782559695210,"version":"3.54.5"},"reference-count":46,"publisher":"MDPI AG","issue":"12","license":[{"start":{"date-parts":[[2014,11,28]],"date-time":"2014-11-28T00:00:00Z","timestamp":1417132800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100003329","name":"Ministerio de Econom\u00eda y Competitividad","doi-asserted-by":"publisher","award":["TIN2013-46469-R"],"award-info":[{"award-number":["TIN2013-46469-R"]}],"id":[{"id":"10.13039\/501100003329","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Security and privacy issues in medical wireless body area networks (WBANs) constitute a major unsolved concern because of the challenges posed by the scarcity of resources in WBAN devices and the usability restrictions imposed by the healthcare domain. In this paper, we describe a WBAN architecture based on the well-known publish-subscribe paradigm. We present two protocols for publishing data and sending commands to a sensor that guarantee confidentiality and fine-grained access control. Both protocols are based on a recently proposed ciphertext policy attribute-based encryption (CP-ABE) scheme that is lightweight enough to be embedded into wearable sensors. We show how sensors can implement lattice-based access control (LBAC) policies using this scheme, which are highly appropriate for the eHealth domain. We report experimental results with a prototype implementation demonstrating the suitability of our proposed solution.<\/jats:p>","DOI":"10.3390\/s141222619","type":"journal-article","created":{"date-parts":[[2014,11,28]],"date-time":"2014-11-28T14:11:21Z","timestamp":1417183881000},"page":"22619-22642","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":35,"title":["Secure Publish-Subscribe Protocols for Heterogeneous Medical Wireless Body Area Networks"],"prefix":"10.3390","volume":"14","author":[{"given":"Pablo","family":"Picazo-Sanchez","sequence":"first","affiliation":[{"name":"Department of Computer Science, Universidad Carlos III de Madrid, 28911 Leganes, Madrid, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Juan","family":"Tapiador","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Universidad Carlos III de Madrid, 28911 Leganes, Madrid, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6943-0760","authenticated-orcid":false,"given":"Pedro","family":"Peris-Lopez","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Universidad Carlos III de Madrid, 28911 Leganes, Madrid, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Guillermo","family":"Suarez-Tangil","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Universidad Carlos III de Madrid, 28911 Leganes, Madrid, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2014,11,28]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"51","DOI":"10.1109\/MWC.2010.5416350","article-title":"Data security and privacy in wireless body area networks","volume":"17","author":"Li","year":"2010","journal-title":"IEEE Wirel. Commun."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"613","DOI":"10.1109\/TITB.2010.2040085","article-title":"Prognosis\u2013A Wearable Health-Monitoring System for People at Risk: Methodology and Modeling","volume":"14","author":"Pantelopoulos","year":"2010","journal-title":"IEEE Trans. Inf. Technol. Biomed."},{"key":"ref_3","unstructured":"Transparency Market Research (2013). Implantable Medical Devices Market (Reconstructive Joint Replacement, Spinal Implants, Cardiovascular Implants, Dental Implants, Intraocular Lens and Breast Implants)\u2014U.S. Industry Analysis, Size, Share, Trends, Growth And Forecast 2012\u20132018, Transparency Market Research. Technical Report."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"96","DOI":"10.1109\/EMB.2008.915488","article-title":"Emerging Technologies [wireless communication systems for implantable medical devices]","volume":"27","author":"Panescu","year":"2008","journal-title":"IEEE Eng. Med. Biol. Mag."},{"key":"ref_5","first-page":"6910","article-title":"A New Architecture of a Ubiquitous Health Monitoring System: A Prototype of Cloud Mobile Health Monitoring System","volume":"1205","author":"Bourouis","year":"2012","journal-title":"ArXiv E-Prints"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"985","DOI":"10.1109\/TIFS.2013.2255593","article-title":"CAM: Cloud-Assisted Privacy Preserving Mobile Health Monitoring","volume":"8","author":"Lin","year":"2013","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"5561","DOI":"10.3390\/s110605561","article-title":"Wearable and Implantable Wireless Sensor Network Solutions for Healthcare Monitoring","volume":"11","author":"Darwish","year":"2011","journal-title":"Sensors"},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"93","DOI":"10.1007\/s10916-010-9449-4","article-title":"Security and Privacy Issues in Wireless Sensor Networks for Healthcare Applications","volume":"36","author":"Ameen","year":"2012","journal-title":"J. Med. Syst."},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Khan, S., and Khan Pathan, A.S. (2013). Wireless Networks and Security, Springer.","DOI":"10.1007\/978-3-642-36169-2"},{"key":"ref_10","unstructured":"Halperin, D., Heydt-Benjamin, T., Ransford, B., Clark, S., Defend, B., Morgan, W., Fu, K., Kohno, T., and Maisel, W. (, January 18\u201322May). Pacemakers and Implantable Cardiac Defibrillators: Software Radio Attacks and Zero-Power Defenses. Oakland, CA, USA."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"131","DOI":"10.1109\/TPDS.2012.97","article-title":"Scalable and Secure Sharing of Personal Health Records in Cloud Computing Using Attribute-Based Encryption","volume":"24","author":"Li","year":"2013","journal-title":"IEEE Trans. Parallel Distrib.Syst."},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Burleson, W., Clark, S.S., Ransford, B., and Fu, K. (2012, January 3\u20137). Design Challenges for Secure Implantable Medical Devices. San Francisco, CA, USA.","DOI":"10.1145\/2228360.2228364"},{"key":"ref_13","first-page":"1","article-title":"Level based Fault Monitoring and Security for Long Range Transmission in WBAN","volume":"64","author":"Raja","year":"2013","journal-title":"Int. J. Comput. Appl."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"673","DOI":"10.1109\/TPDS.2010.130","article-title":"FDAC: Toward Fine-Grained Distributed Data Access Control in Wireless Sensor Networks","volume":"22","author":"Yu","year":"2011","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Guo, L., Zhang, C., Sun, J., and Fang, Y. (2012, January 18\u201321). PAAS: A Privacy-Preserving Attribute-Based Authentication System for eHealth Networks. Macau, China.","DOI":"10.1109\/ICDCS.2012.45"},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"763","DOI":"10.1109\/TIFS.2014.2309858","article-title":"CP-ABE With Constant-Size Keys for Lightweight Devices","volume":"9","author":"Guo","year":"2014","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"9","DOI":"10.1109\/2.241422","article-title":"Lattice-Based Access Control Models","volume":"26","author":"Sandhu","year":"1993","journal-title":"IEEE Comput."},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Cramer, R. (2005). Advances in Cryptology\u2014 EUROCRYPT 2005, Springer.","DOI":"10.1007\/b136415"},{"key":"ref_19","unstructured":"Goyal, V., Pandey, O., Sahai, A., and Waters, B. (November, January 30). Attribute-Based Encryption for Fine-grained Access Control of Encrypted Data. Alexandria, VA, USA."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Ostrovsky, R., Sahai, A., and Waters, B. Attribute-based Encryption with Non-Monotonic Access Structures. Alexandria, VA, USA, 29 October\u2013 2 November 2007.","DOI":"10.1145\/1315245.1315270"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Bethencourt, J., Sahai, A., and Waters, B. (2007, January 20\u201323). Ciphertext-Policy Attribute-Based Encryption. Berkeley, CA, USA.","DOI":"10.1109\/SP.2007.11"},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Wang, G., Liu, Q., and Wu, J. (2010, January 4\u20138). Hierarchical Attribute-Based Encryption for Fine-grained Access Control in Cloud Storage Services. Chicago, IL, USA.","DOI":"10.1145\/1866307.1866414"},{"key":"ref_23","unstructured":"Waters, B. (2011). Public Key Cryptography\u2014PKC 2011, Springer-Verlag."},{"key":"ref_24","unstructured":"Green, M., Hohenberger, S., and Waters, B. (2011, January 8\u2013). Outsourcing the Decryption of ABE Ciphertexts. San Francisco, CA, USA."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"317","DOI":"10.1007\/978-3-540-85174-5_18","article-title":"Dynamic Threshold Public-Key Encryption","volume":"5157","author":"Wagner","year":"2008","journal-title":"Advances in Cryptology\u2014CRYPTO 2008"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"19","DOI":"10.1007\/978-3-642-13013-7_2","article-title":"Constant Size Ciphertexts in Threshold Attribute-Based Encryption","volume":"6056","author":"Nguyen","year":"2010","journal-title":"Public Key Cryptography\u2014 PKC 2010"},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"180","DOI":"10.1007\/978-3-642-32009-5_12","article-title":"New Proof Methods for Attribute-Based Encryption: Achieving Full Security through Selective Techniques","volume":"7417","author":"Canetti","year":"2012","journal-title":"Advances in Cryptology\u2014CRYPTO 2012"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"114","DOI":"10.1145\/857076.857078","article-title":"The Many Faces of Publish\/Subscribe","volume":"35","author":"Eugster","year":"2003","journal-title":"ACM Comput. Surv."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"1318","DOI":"10.1016\/j.comnet.2012.10.023","article-title":"On reliability in publish\/subscribe services","volume":"57","author":"Esposito","year":"2013","journal-title":"Comput. Netw."},{"key":"ref_30","unstructured":"Yoon, C., Kim, D., Jung, W., Kang, C., and Cha, H. (2012, January 12\u201315). Appscope: Application energy metering framework for android smartphone using kernel activity monitoring. Boston, MA, USA."},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Jung, W., Kang, C., Yoon, C., Kim, D., and Cha, H. (2012, January 7\u201312). DevScope: A nonintrusive and online power analysis tool for smartphone hardware components. Tampere, Finland.","DOI":"10.1145\/2380445.2380502"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Xu, F., Qin, Z., Tan, C., Wang, B., and Li, Q. (2011, January 10\u201315). IMDGuard: Securing implantable medical devices with the external wearable guardian. Shanghai, China.","DOI":"10.1109\/INFCOM.2011.5934987"},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"2","DOI":"10.1145\/2043164.2018438","article-title":"They Can Hear Your Heartbeats: Non-invasive Security for Implantable Medical Devices","volume":"41","author":"Gollakota","year":"2011","journal-title":"SIGCOMM Comput. Commun. Rev."},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Akinyele, J.A., Pagano, M.W., Green, M.D., Lehmann, C.U., Peterson, Z.N., and Rubin, A.D. (2011, January 17\u201321). Securing Electronic Medical Records Using Attribute-based Encryption on Mobile Devices. Chicago, IL, USA.","DOI":"10.1145\/2046614.2046628"},{"key":"ref_35","unstructured":"Barua, M., Liang, X., Lu, R., and Shen, X. (, January 10\u201315April). PEACE: An efficient and secure patient-centric access control scheme for eHealth care system. Shanghai, China."},{"key":"ref_36","unstructured":"Lounis, A., Hadjidj, A., Bouabdallah, A., and Challal, Y. (August, January 30). Secure and Scalable Cloud-Based Architecture for e-Health Wireless Sensor Networks. Munich, Germany."},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Ragesh, G.K., and Baskaran, K. (2012, January 17\u201319). CRYPE: Towards Cryptographically Enforced and Privacy Enhanced WBANs. Kollam, India.","DOI":"10.1145\/2490428.2490457"},{"key":"ref_38","unstructured":"Yi, X., Willemson, J., and Nait-Abdesselam, F. (, January 16\u201318July). Privacy-Preserving Wireless Medical Sensor Network. Melbourne, VIC, Austrlia."},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"9153","DOI":"10.3390\/s140509153","article-title":"Surveying Wearable Human Assistive Technology for Life and Safety Critical Applications: Standards, Challenges and Opportunities","volume":"14","author":"Alam","year":"2014","journal-title":"Sensors"},{"key":"ref_40","unstructured":"Bourbakis, N., Pantelopoulos, A., Kannavara, R., and Nikita, K. (2014). Handbook of Biomedical Telemetry, Wiley-IEEE."},{"key":"ref_41","doi-asserted-by":"crossref","first-page":"84","DOI":"10.1016\/j.ins.2014.03.081","article-title":"Real-time query processing optimization for cloud-based wireless body area networks","volume":"284","author":"Diallo","year":"2014","journal-title":"Inf. Sci."},{"key":"ref_42","doi-asserted-by":"crossref","unstructured":"Kliem, A., and Kao, O. (2013, January 9\u201312). CoSeMed\u2014Cooperative and secure medical device cloud. Lisbon, Portugal.","DOI":"10.1109\/HealthCom.2013.6720678"},{"key":"ref_43","doi-asserted-by":"crossref","unstructured":"Yang, K., Jia, X., Ren, K., and Zhang, B. (2013, January 14\u201319). DAC-MACS: Effective data access control for multi-authority cloud storage systems. Turin, Italy.","DOI":"10.1109\/INFCOM.2013.6567100"},{"key":"ref_44","doi-asserted-by":"crossref","unstructured":"Hu, C., Zhang, F., Cheng, X., Liao, X., and Chen, D. (2013, January 19). Securing Communications Between External Users and Wireless Body Area Networks. Budapest, Hungary.","DOI":"10.1145\/2463183.2463191"},{"key":"ref_45","doi-asserted-by":"crossref","first-page":"57:23","DOI":"10.1145\/2541228.2555313","article-title":"A SystemArchitecture ProcessorCommunication Protocol for Secure Implants","volume":"10","author":"Strydis","year":"2013","journal-title":"ACM Trans. Archit. Code Optim."},{"key":"ref_46","doi-asserted-by":"crossref","unstructured":"Kannavara, R., Mertoguno, S., and Bourbakis, N. (2011). SCAN secure processor and its biometric capabilities. J. Electron. Imaging, 20.","DOI":"10.1117\/1.3582930"}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/14\/12\/22619\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T21:10:08Z","timestamp":1760217008000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/14\/12\/22619"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,11,28]]},"references-count":46,"journal-issue":{"issue":"12","published-online":{"date-parts":[[2014,12]]}},"alternative-id":["s141222619"],"URL":"https:\/\/doi.org\/10.3390\/s141222619","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014,11,28]]}}}