The Internet of Things (IoT) based healthcare system is one of the prominent approaches to overcome the issue of the increasing burden of healthcare costs in India. Wireless Body Area Networks (WBANs) are the key enabler in this scenario. It provides continuous monitoring of the patient’s health condition remotely, by making the real-time health data of the patient available to healthcare professionals through cloud/public channel. On the other side, the practical implementation of this service is not possible if the issue of data security is not considered. Thus, in this paper, we have proposed a secure framework for WBAN using Elliptic Curve Cryptography based Ciphertext-Policy Attribute Based Encryption (CPABE) without bilinear pairing operations. The proposed CPABE is secured under Elliptic Curve Decisional Diffie-Hellman assumption and also has a feature of user/attribute revocation. We have evaluated the lightweight feature of the proposed CPABE by comparing it with other existing ABE schemes for WBAN. The result shows that our scheme outperforms the existing schemes for WBAN in terms of keys-ciphertext size and computation overhead.

基于物联网（IoT）的医疗保健系统是解决印度医疗保健费用负担日益增加的重要方法之一。无线体域网（WBAN）是这种情况下的关键实现因素。通过使患者的实时健康数据通过云/公共渠道可供医护专业人员使用，它可以远程远程监视患者的健康状况。另一方面，如果不考虑数据安全性问题，则无法实际实现此服务。因此，在本文中，我们提出了一种安全的WBAN框架，该框架使用基于椭圆曲线密码术的基于密文-策略属性的加密（CPABE），而无需进行双线性配对操作。建议的CPABE在椭圆曲线决策Diffie-Hellman假设下得到保护，并且还具有用户/属性吊销的功能。通过将其与其他现有的WBAN ABE方案进行比较，我们评估了该CPABE的轻量级功能。结果表明，在密钥密文大小和计算开销方面，我们的方案优于现有的WBAN方案。