A secure authentication scheme with forward secrecy for industrial internet of things using Rabin cryptosystem

et al. 2022

6G technology is now attracting many scientific researchers due to its prominent features including high mobility, high data rate, high operating frequency, and ultra-low end-to-end delay. Compared to the 5G, 6G has certain advantages that can transform smart healthcare to a new advanced intelligent healthcare system, where multiple issues and concerns of the services (e.g., slow ambulance response) are effectively resolved. In such a communication system, patients and service providers communicate with each other via an open internet channel. Since the healthcare data is important and very sensitive, security and privacy in the healthcare network become prominent. In this paper, we introduce a 6G-aided intelligent healthcare environment. Our work also proposes a solution called Centerless User-Controlled Single Sign-On (CL-UCSSO) for achieving a convenient and cost-saving communication in the constructed multi-server system. A threefactor mechanism (combining smart card, password and biometrics) and time bound property are integrated to design the protocol with fast authentication that allows patients and providers to efficiently establish secure communications. Security proof of the proposed protocol is provided using well-known verification tools including RoR model, AVISPA simulation and BAN logic. Results of performance comparisons on various aspects show that our work provides more functionalities and incurs less cost compared with the related works.

Section: A Related Workmentioning

confidence: 99%

“…Our protocol employs Rabin cryptosystem for an efficient computation as its encryption operation (based on modular squaring operation) is much faster than the RSA cryptosystem [21]. 𝑆 0 chooses two arbitrary large primes 𝑝 0 , 𝑞 0 as server's private keys, then compute the corresponding public key 𝑛 0 = 𝑝 0 .…”

Section: A System Initializationmentioning

confidence: 99%

A Novel Three-Factor Authentication Protocol for Multiple Service Providers in 6G-Aided Intelligent Healthcare Systems

et al. 2022

“…Rabin cryptosystem is an asymmetric encryption method, which relies on intractability of the integer factorization problem assumption (IFPA) [50,51]. The cryptosystem consists of three algorithms: key generation, encryption and decryption.…”

Section: A Rabin Cryptosystemmentioning

confidence: 99%

“…Given an arbitrary-length message and a hash function ℎ(. ), some characteristics of the function are described in the following definitions [51]. Definition 2: A fixed-size output = ℎ( ) should be produced.…”

Section: One-way Hash Functionmentioning

confidence: 99%

An Anonymous Key Distribution Scheme for Group Healthcare Services in 5G-Enabled Multi-Server Environments

2021

Fifth generation (5G) mobile technology enables a new kind of network that provides high peak data rates, ultra-low latency communication and high user density. Electronic healthcare (e-health) allows the data to be stored and shared in a highly efficient and flexible manner. Group e-health services help in improving long-term results of the treatments due to its collaborative characteristic. The services including real-time remote patient monitoring and transmission of large health data files can be facilitated by e-health systems enabled with the 5G network. Since the communication channel is open, security and privacy in the system should be taken into account. Our work proposes a key distribution scheme for group healthcare services in 5G network environments. We construct various healthcare domains and apply the proposed scheme to the group services. The paper also introduces Single Sign-On (SSO), a cost-efficient solution, for multi-server architecture of the constructed system. Security and privacy of the scheme are enforced by a three-factor authentication mechanism (integrating smart card, password and biometrics) and strong user anonymity property. We provide security proof of the proposed scheme using various well-known tools including RoR model, BAN logic and AVISPA simulation. Results of various performance comparisons indicate that our scheme provides most functions and bears rational costs, compared with its related works.

“…The proposed scheme is designed with Rabin cryptosystem, which relies on intractability of the integer factorization problem (IFP) [38,39]. The encryption speed is extremely fast since it is computed by modular squaring.…”

Section: ) System Initializationmentioning

confidence: 99%

Three-Factor UCSSO Scheme With Fast Authentication and Privacy Protection for Telecare Medicine Information Systems

Hsieh

et al. 2020

Electronic healthcare (e-health) has gained more and more research attention in recent years, due to its flexibility and convenience. E-health is efficiently enabled by telecare medicine information system (TMIS). TMIS provides seamless transfer and timely sharing of medical information for specific healthcare services. Since communications in TMIS are carried out through unreliable channels, data security and user privacy concerns become prominent. With traditional single-server architecture, users must store massive credentials, which causes inefficient communication and significant overhead. Moreover, user credentials in previously proposed schemes are stored at server side, suffering potential risks. Our work proposes a three-factor user-controlled single sign-on (UCSSO) with fast authentication and privacy protection for TMIS. The contributions of this paper are as follows. Our work integrates three factors including password, smart card and biometrics in authentication procedure, for providing a high-security and privacy-preserved communication. We introduce single sign-on solution that allows users to log in to multiple servers using a single password. User-controlled mechanism is proposed to address insider attacks and the risk that registration center may be compromised. The proposed scheme is designed with fast authentication mechanism that helps to efficiently establishes new session key. Our work is proved secure using BAN logic, ROR model, and AVISPA toolset. The results of performance comparison show that our scheme provides more security properties and bears the least overhead, compared with competitive schemes.