An Enhanced Biometric-Based Authentication Scheme for Telecare Medicine Information Systems Using Elliptic Curve Cryptosystem

Abstract

The telecare medical information systems (TMISs) enable patients to conveniently enjoy telecare services at home. The protection of patient’s privacy is a key issue due to the openness of communication environment. Authentication as a typical approach is adopted to guarantee confidential and authorized interaction between the patient and remote server. In order to achieve the goals, numerous remote authentication schemes based on cryptography have been presented. Recently, Arshad et al.(J Med Syst 38(12): 2014) presented a secure and efficient three-factor authenticated key exchange scheme to remedy the weaknesses of Tan et al.’s scheme (J Med Syst 38(3): 2014). In this paper, we found that once a successful off-line password attack that results in an adversary could impersonate any user of the system in Arshad et al.’s scheme. In order to thwart these security attacks, an enhanced biometric and smart card based remote authentication scheme for TMISs is proposed. In addition, the BAN logic is applied to demonstrate the completeness of the enhanced scheme. Security and performance analyses show that our enhanced scheme satisfies more security properties and less computational cost compared with previously proposed schemes.

An Improved User Authentication and Key Agreement Scheme for Multi-medical Server Usable in TMIS

“…However, our improved scheme can achieve all the security requirements listed in Table 1. From Table 2, we can conclude that our scheme is more efficient than the other two schemes [8,3]. …”

“…In order to evaluate the security performance of our scheme, we compare the two related schemes [8,3] with our scheme in Table 1. The efficiency comparison in terms of computational overhead among the related schemes and our proposed scheme is shown in Table 2.…”

An Improved RSA Based User Authentication and Session Key Agreement Protocol Usable in TMIS

“…Xu and Wu [43] illustrated that Xie et al's [42] suffers from de-synchronization attack and heavy storage burden in server and also proposed an improved scheme. Thereafter, Lu et al [30] also pointed out that the Arshad's [8] scheme cannot achieve complete security requirements and proposed an authentication scheme based on the elliptic curve cryptosystem. Very recently, Zhang-Zhu [45] pointed out that the Islam-Khan's [17] scheme is insecure against several security weaknesses and also proposed a improved scheme to enhance the mentioned security flaws.…”

Security Improvement on Biometric-based Three Factors User Authentication Scheme for Multi-Server Environments

“…The main advantageous property of the biometrics is uniqueness, leading to the proposal of numerous. In the view of fact that several biometric-based remote user authenticati on schemes using smart card [6][7][8] have been proposed.…”