Abstract
Wireless body area networks (WBANs) enable continuous and remote monitoring of medical information in modern healthcare systems. However, ensuring the security and privacy of WBAN data remains a significant challenge, especially with the rise of algorithm substitution attacks (ASAs) that enable adversaries to perform filtering attacks during data sharing. To address these challenges, we introduce a novel blockchain-based heterogeneous certificateless online/offline signcryption scheme with proxy re-encryption and a cryptographic reverse firewall (BHCOSP-CRF). The scheme establishes secure data exchange between a sender using a certificateless cryptosystem and a receiver operating in an identity-based cryptosystem, with a CRF integrated to protect against ASAs. To reduce the computational overload on WBAN nodes, BHCOSP-CRF divides signcryption into offline and online phases. Most computationally intensive operations are performed in the offline phase without the message, whereas only lightweight computations are executed in the online phase once the message becomes available. Furthermore, a consortium blockchain service center (CBSC) stores the initial ciphertext and re-encrypts it via smart contracts, which avoids single points of failure and improves efficiency compared to traditional proxy servers. Moreover, we prove the security of BHCOSP-CRF in the random oracle model, and performance evaluation shows that BHCOSP-CRF achieves better performance than existing schemes in terms of communication cost, computational efficiency, energy consumption, and latency. Therefore, BHCOSP-CRF is well-suited for WBAN environments.
Funding Information
  • National High-tech Research and Development Program (Y20250135)
  • National Key Research and Development Program of China (2022YFB2701400)
  • Sichuan Provincial Science and Technology Support Program (2024NSFTD0005)