针对一个基于无线传感器网络的医疗监护系统的实际情况,分析了系统的安全需求.基于通用可组合安全模型,定义了医疗传感器网络认证密钥交换理想函数,该理想函数提供了强安全性和实用性.在传感器节点和基站之间,设计了一个通用可组合安全的认证密钥交换协议NB-AKE.NB-AKE协议使用伪随机函数原语实现.该协议提供匿名认证功能,并且具有前向安全性和并发安全性.新协议结构简单,通信量较低,节点端的计算负载较小. Aiming at the actual situation of a medical monitoring system based on wireless sensor network, the security requirements of the system are analyzed.Based on the universal combinatorial security model, an ideal function of the key network of medical sensor network authentication is defined, which provides a strong security and practical In this paper, NB-AKE, a universal combinable secure authentication key exchange protocol, is designed between sensor node and base station.NB-AKE protocol is implemented using pseudo-random function primitives.The protocol provides anonymous authentication and has forward Security and concurrency security.The new protocol is simple in structure, low in traffic and less computational load on the node side.