With the development of the Internet of Things (IoT), mobile medical systems based on wireless body area networks (WBAN) have aroused extensive attention. Wearable wireless medical devices have emerged to meet the demand for high-quality medical services that brought great convenience to people’s lives. However, attackers pose a latent threat to users’ medical information privacy, and identity is easy to leak due to wireless networks’ openness. It can be seen that the authentication phase is a vital part. In this paper, we proposed a lightweight continuous authentication protocol in medical WBAN environments. Our protocol overcomes the shortcomings of sensor node impersonation attack by using physiological signals, cutting energy consumption by using lightweight technology, saving time and energy by reducing computation complexity, and ensuring the current sensor node is the original one through continuous authentication. Finally, our performance analysis has shown that our protocol is provided with the superiority of lightweight, mutuality, low cost. It has a considerable application prospect in medical WBAN.

随着物联网（IoT）的发展，基于无线体域网（WBAN）的移动医疗系统引起了广泛关注。可穿戴无线医疗设备应运而生，满足了人们对高质量医疗服务的需求，给人们的生活带来了极大的便利。然而，攻击者对用户的医疗信息隐私构成了潜在威胁，并且由于无线网络的开放性，身份很容易泄露。可以看出，认证阶段是一个至关重要的环节。在本文中，我们提出了一种在医疗 WBAN 环境中的轻量级连续认证协议。我们的协议通过使用生理信号克服了传感器节点模拟攻击的缺点，通过使用轻量级技术降低能耗，通过降低计算复杂度节省时间和能源，并通过持续认证确保当前传感器节点为原始节点。最后，我们的性能分析表明，我们的协议具有轻量级、互通性、低成本的优势。在医疗WBAN中具有可观的应用前景。