Towards Secure TMIS Protocols

Abstract

Telecare Medicine Information Systems (TMIS) protocols aim at authenticating a patient in a telecare context, and permitting information exchange between the patient and a distant server through a verifier. In 2019, Safkhani and Vasilakos [10] showed that several protocols of the litterature were insecure, and proposed a new protocol. In this paper, we show that their proposal is insecure, mainly due to incorrect use of distance bounding countermeasures, and propose a secure version, resistant to distance bounding related threats.