An Improved User Authentication Protocol for Healthcare Services via Wireless Medical Sensor Networks

Abstract

Healthcare service sector is one of the major applications of Wireless Sensor Networks (WSNs) acknowledged as Wireless Medical Sensor Network (WMSNs). It deploys tiny medical sensor-nodes (MS-nodes) on the body of the patient to sense crucial physiological signs which can be accessed and analyzed by registered medical professionals. Recently, Khan et al. analyzed Kumar et al. 's scheme proposed for healthcare applications using WMSNs and observed that the scheme is susceptible to many security weaknesses if an adversary extracts the information from the lost smart card of some user. The adversary can access patient's physiological data without knowing actual password, can deceive medical professionals by sending fake information about patients, can guess the password of a user from the corresponding smart card, and so forth. Besides, the scheme fails to resist insider attack, lacks user anonymity and the session key shared between the user and the MS-node is insecure. To overcome these problems, we propose an improved user authentication scheme for healthcare applications using WMSNs. We show that the scheme is free from the identified weaknesses and excels in performance and efficiency scheme.

A Privacy Protection User Authentication and Key Agreement Scheme Tailored for the Internet of Things Environment: PriAuth

“…But as the identity is a fixed value, a user could be tracked by an adversary. Schemes [29][30][31][32] use a similar method, but all these procedures are prone to suffer from tractability attack.…”

“…Thus, only the gateway could learn the identities. As for the shared key between user and sensor, in some schemes, the gateway knows the shared key in schemes [6][7][8][11][12][13][14], while, in some others, the gateway does not know the key, they use Diffie-Hellman (DH) anonymous key agreement protocol to build the shared key [1,2,4,5,9,30]. As we have discussed, the gateway is not allowed to know the shared key in order to prevent a curious gateway from eavesdropping the sensor data.…”

“…Traceability means the adversary can track a user or a sensor according to their identities or masked identities like in the scheme [5,10,[29][30][31][32]. Once some fixed information about the identities is used in a scheme, then this scheme could probably be tracked by an adversary.…”

Authentication Protocol for Healthcare Services over Wireless Body Area Networks

“…If so, terminates the session; otherwise proceeds further. 8) Obtains (CIDu*|| Tg*||M*||Tu*) as in (18), computes Au* as in (19) and compares Au* with Au. If the verification holds, the legitimacy of the GW node is successful and hence of U.…”

A Lightweight ID Based Authentication and Key Agreement Protocol for Multiserver Architecture

“…When we enjoy online shopping, online game, on line documentation, data exchange, and so forth, identity authentication is a basic protection measure to authenticate the identity of remote users [1]. Since Lamport [2] first protocol was shown in 1981, numerous protocols have been proposed and used in many communication systems [3][4][5][6][7]. In 2000, Hwang and Li [8] proposed a new remote user authentication scheme using smart card based on ElGamal's public key cryptosystem.…”