Modification of LAKA Protocol Using Fuzzy Verifier and Honeywords

Wireless body area network (WBAN) is a technology that can support telemedicine. WBAN can run in real time to monitor patient health parameters. However, without strong protection for the data exchange process in the open channel model, it can be an opportunity for adversary to carry out illegal activities. Therefore, it is necessary to fulfill security and privacy factors on a WBAN system using a cryptographic protocol. In 2021, Soni & Singh introduced a secure authentication and key agreement protocol that uses lowcost operations and can be used on WBAN called Lightweight Authentication and Key Agreement (LAKA). In this paper, an offline dictionary attack was tested on the LAKA protocol and resulted that the LAKA protocol was vulnerable to offline dictionary attack. Furthermore, modification of the LAKA protocol was carried out using the method proposed by Ding & Ping by adding fuzzy verifiers and honeywords. Modifications are made in the registration phase and authentication phase. The security analysis of the modified protocol was carried out using the Random-or-Real (ROR) model and applied an offline dictionary attack theoretically. The results of the analysis using the ROR model show that the modified protocol meets semantic security against offline dictionary attack with the assumption of smartcard loss. The results of the analysis of offline dictionary attack theoretically show that the method proposed by Ding & Ping can overcome the vulnerability to offline dictionary attack.