An efficient improvement remote user mutual authentication and session key agreement scheme for E-health care systems

Ravanbakhsh, Niloofar; Nazari, Mahboubeh

doi:10.1007/s11042-016-4208-2

Cited by 45 publications

(37 citation statements)

References 51 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The principal contributions of this paper are the following. Analyzing the security of Ravanbakhsh and Nazari's scheme and showing its vulnerability to the known session‐specific temporary information attack and perfect forward insecurity. Designing an anonymous and unlinkable user authentication and key agreement scheme, which not only is free from the security limitations of previous protocols but also has a proper level of efficiency. Confirming the security of the proposed scheme with the widely accepted and well‐known automated validation of internet security protocols and applications (AVISPA) tool and further discussing it in an informal cryptanalysis manner. Comparing the proposed scheme with several related schemes in terms of functionalities and performance. Achieving low computational and communication costs without sacrificing the desired security properties. …”

Section: Introductionmentioning

confidence: 90%

“…Quite recently, Ravanbakhsh and Nazari have proposed an interesting remote user authentication and key agreement protocol for the TMISs. Although their scheme has several merits, after careful observation, we found that it cannot totally provide the security features.…”

Section: Related Workmentioning

confidence: 99%

“…Although their scheme has several merits, after careful observation, we found that it cannot totally provide the security features. As we will show in the next section, the scheme of Ravanbakhsh and Nazari is susceptible to both known session‐specific temporary information attack and perfect forward insecurity.…”

Section: Related Workmentioning

confidence: 99%

“…Lately, Ravanbakhsh and Nazari have analyzed the security of the scheme of Amin et al and have pointed out that their scheme cannot withstand the privilege insider, replay, and session key disclosure attacks and does not provide backward secrecy and user's untraceability. Accordingly, Ravanbakhsh and Nazari have presented an efficient remote user authentication and key agreement scheme for e‐health care systems and have claimed that their scheme can resist the well‐known attacks. However, in this paper, we demonstrate that their scheme is exposed to known session‐specific temporary information attack and does not provide perfect forward secrecy.…”

Section: Introductionmentioning

confidence: 99%

“…We review the related authentication and key agreement schemes in Section . In Section , the scheme of Ravanbakhsh and Nazari is described, and its security limitations are shown. The improved proposed scheme for TMISs is explained in Section .…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

An enhanced anonymous and unlinkable user authentication and key agreement protocol for TMIS by utilization of ECC

Ostad-Sharif

Abbasinezhad-Mood

Nikooghadam

2019

Int J Communication

View full text Add to dashboard Cite

The telecare medicine information systems (TMISs) not only help patients to receive incessant health care services but also assist the medical staffs to access patients' electronic health records anytime and from anywhere via Internet. Since the online communications are exposed to numerous security threats, the mutual authentication and key agreement between patients and the medical servers are of prime significance. During the recent years, various user authentication schemes have been suggested for the TMISs.Nonetheless, most of them are susceptible to some known attacks or have high computational cost. Newly, an effective remote user authentication and session key agreement protocol has been introduced by Ravanbakhsh and Nazari for health care systems. Besides the nice contributions of their work, we found that it has two security weaknesses, namely, known session-specific temporary information attack and lack of perfect forward secrecy. As a result, to overcome these deficiencies, this paper suggests a novel anonymous and unlinkable user authentication and key agreement scheme for TMISs using the elliptic curve cryptosystem (ECC). We have evaluated the security of the proposed scheme by applying the automated validation of internet security protocols and applications (AVISPA) tool with the intention of indicating that our scheme can satisfy the vital security features. In addition, we have compared the proposed protocol with related schemes to show that it has a proper level of performance. The obtained results demonstrate that the new scheme is more preferable considering both efficiency and security criteria.

show abstract