A Secure Chaotic Maps and Smart Cards Based Password Authentication and Key Agreement Scheme with User Anonymity for Telecare Medicine Information Systems

Abstract

Telecare medicine information system (TMIS) is widely used for providing a convenient and efficient communicating platform between patients at home and physicians at medical centers or home health care (HHC) organizations. To ensure patient privacy, in 2013, Hao et al. proposed a chaotic map based authentication scheme with user anonymity for TMIS. Later, Lee showed that Hao et al.'s scheme is in no provision for providing fairness in session key establishment and gave an efficient user authentication and key agreement scheme using smart cards, in which only few hashing and Chebyshev chaotic map operations are required. In addition, Jiang et al. discussed that Hao et al.'s scheme can not resist stolen smart card attack and they further presented an improved scheme which attempts to repair the security pitfalls found in Hao et al.'s scheme. In this paper, we found that both Lee's and Jiang et al.'s authentication schemes have a serious security problem in that a registered user's secret parameters may be intentionally exposed to many non-registered users and this problem causing the service misuse attack. Therefore, we propose a slight modification on Lee's scheme to prevent the shortcomings. Compared with previous schemes, our improved scheme not only inherits the advantages of Lee's and Jiang et al.'s authentication schemes for TMIS but also remedies the serious security weakness of not being able to withstand service misuse attack.

A Chaotic Maps-Based Authentication Scheme for Wireless Body Area Networks

“…The number of Chebyshev chaotic maps operations used in our scheme equals that in [20], but our scheme does not need symmetric en/decryption operations. Moreover, the proposed scheme needs one more Chebyshev polynomial operation than that in [21], but it can better guarantee the authentication on both communication sides. In addition, the proposed scheme supports the function of session key verification and efficient password changing; however, the schemes [18][19][20][21] do not provide efficient password changing phase and the schemes [18][19][20][21]39] lack the verification of session key.…”

An Efficient and Practical Smart Card Based Anonymity Preserving User Authentication Scheme for TMIS using Elliptic Curve Cryptography

“…Moreover, they put forwarded another user authentication and key agreement scheme for TMIS to fix the above security weaknesses. Recently, Li et al [32] described that Lee et al's chaotic maps based user authentication scheme [30] has two security weaknesses -service misuse attack for non-registered users and lack of user identity in the authentication phase, and then put forwarded an enhanced scheme. In 2015, Wang et al [45] described that Lin's scheme [38] suffer from user anonymity, impersonation attack and also proposed a counter measure to resolve the mentioned security weaknesses.…”

A Secure User Anonymity and Authentication Scheme Using AVISPA for Telecare Medical Information Systems

“…Thus, a strong authentication scheme is necessary to protect confidentiality of EMRs, and to provide availability for the telecare medicine system. Considering the advantages of password and smart card, several passwords and smart card based user authentication schemes are proposed [16,19,20,23,[41][42][43][44]. The smart cards are usually design for achieving a certain level of tamper resistance.…”