Comments on Light-Weight and Robust Security-Aware D2D-Assist Data Transmission Protocol for Mobile-Health Systems

The mobile-health (M-Health) system, also known as the wireless body area network for remote patient monitoring, is a system which can remotely monitor a real-time human body's health status parameters. Generalized signcryption can realize encryption, signature, and signcryption with only one key pair and one algorithm. To address the communication security requirement for M-Health system, Zhang et al. proposed a lightweight secure data transmission protocol for M-Health system by using a certificateless generalized signcryption (CLGSC) scheme recently. In this paper, we point out that an insider attack exists in Zhang et al.'s CLGSC scheme, which destroys the confidentiality of the scheme. Thus, their light-weight and robust security-aware D2D-assist data transmission protocol for mobile-health system is insecure, too.