On Vulnerabilities of the Security Association in the IEEE 802.15.6 Standard

TL;DR

This paper analyzes the IEEE 802.15.6 standard for Wireless Body Area Networks, revealing vulnerabilities in its elliptic curve-based key agreement protocols through security analysis and attack demonstrations.

Contribution

It provides the first comprehensive security analysis of the IEEE 802.15.6 key agreement protocols, identifying multiple vulnerabilities and potential attack vectors.

Findings

All four protocols have security flaws.

Protocols are vulnerable to various attacks.

Security issues compromise WBAN confidentiality.

Abstract

Wireless Body Area Networks (WBAN) support a variety of real-time health monitoring and consumer electronics applications. The latest international standard for WBAN is the IEEE 802.15.6. The security association in this standard includes four elliptic curve-based key agreement protocols that are used for generating a master key. In this paper, we challenge the security of the IEEE 802.15.6 standard by showing vulnerabilities of those four protocols to several attacks. We perform a security analysis on the protocols, and show that they all have security problems, and are vulnerable to different attacks.