A Password-Based User Authentication Scheme for the Integrated EPR Information System

Abstract

With the rapid development of the Internet, digitization and electronic orientation are required in various applications of our daily life. For e-medicine, establishing Electronic patient records (EPRs) for all the patients has become the top issue during the last decade. Simultaneously, constructing an integrated EPR information system of all the patients is beneficial because it can provide medical institutions and the academia with most of the patients' information in details for them to make correct decisions and clinical decisions, to maintain and analyze patients' health. Also beneficial to doctors and scholars, the EPR system can give them record linkage for researches, payment audits, or other services bound to be developed and integrated into medicine. To tackle the illegal access and to prevent the information from theft during transmission over the insecure Internet, we propose a password-based user authentication scheme suitable for information integration.

An Improved and Secure Anonymous Biometric-Based User Authentication with Key Agreement Scheme for the Integrated EPR Information System

“…In 2012, Wu et al [33] first presented an efficient user authentication technique for an integrated EPR information system. They used lightweight operations in their protocol including one-way hash operations and bitwise XOR operations in order to enhance efficiency.…”

“…They used lightweight operations in their protocol including one-way hash operations and bitwise XOR operations in order to enhance efficiency. However, Lee et al [34] pointed out that Wu et al [33] overlooked the possibility of stolen smart card attack through power consumption analysis [35]. Lee et al [34] then suggested an improved version that addressed the issue of Wu et al’s [33] technique.…”

“…However, Lee et al [34] pointed out that Wu et al [33] overlooked the possibility of stolen smart card attack through power consumption analysis [35]. Lee et al [34] then suggested an improved version that addressed the issue of Wu et al’s [33] technique. However, Wen [36] demonstrated that Lee et al’s scheme [34] still had some weaknesses, such as off-line password guessing attacks and user impersonation attacks, and proposed an enhanced new strategy.…”

An Efficient Key-Management Scheme for Hierarchical Access Control in E-Medicine System

“…Most hospitals or medical institutes have well developed Electronic patient records (EPRs) for e-medicine during the last decade and the technology for EPRs remains as one of the most popular researches in e-medicine. The ultimate aim of EPRs is to allow the sharing of patients' medical histories scattered among medical institutions through the Internet [1]. However, data-sharing brings the problem of data being eavesdropped, stolen or destroyed.…”

A Reliable User Authentication and Key Agreement Scheme for Web-Based Hospital-Acquired Infection Surveillance Information System

“…In order to prevent illegal users from visiting the remote server, secure strategies over an insecure network are concerned. Several relevant user authentication schemes and secret-key distribution protocols have been proposed [7][8][9][10][11], in which the password-based authentication mechanism is employed mostly because of its efficiency [12][13][14]. Under such mechanism, each user is allowed to select personal password and keep in mind without any additional assistant device for further authentication processes.…”