An Efficient and Practical Smart Card Based Anonymity Preserving User Authentication Scheme for TMIS using Elliptic Curve Cryptography

Abstract

In the last few years, numerous remote user authentication and session key agreement schemes have been put forwarded for Telecare Medical Information System, where the patient and medical server exchange medical information using Internet. We have found that most of the schemes are not usable for practical applications due to known security weaknesses. It is also worth to note that unrestricted number of patients login to the single medical server across the globe. Therefore, the computation and maintenance overhead would be high and the server may fail to provide services. In this article, we have designed a medical system architecture and a standard mutual authentication scheme for single medical server, where the patient can securely exchange medical data with the doctor(s) via trusted central medical server over any insecure network. We then explored the security of the scheme with its resilience to attacks. Moreover, we formally validated the proposed scheme through the simulation using Automated Validation of Internet Security Schemes and Applications software whose outcomes confirm that the scheme is protected against active and passive attacks. The performance comparison demonstrated that the proposed scheme has lower communication cost than the existing schemes in literature. In addition, the computation cost of the proposed scheme is nearly equal to the exiting schemes. The proposed scheme not only efficient in terms of different security attacks, but it also provides an efficient login, mutual authentication, session key agreement and verification and password update phases along with password recovery.

Improving an Anonymous and Provably Secure Authentication Protocol for a Mobile User

“…Let ⟨ ⟩ ← Reveal( 2 = ℎ( ‖ )) (12) if ( == ) then (13) Accept ID , ( ) , , as the correct ID , ( ), , , respectively. (14) return 0 (Success) (15) else (16) return 0 (Failure) (17) else (18) return 0 (Failure) (19) else (20) return 0 (Failure) (21) end if roles. The fundamental types available in the HLPSL are [46] as follows:…”

“…To design a secure authentication scheme, some cryptographic algorithms are also used, such as an RSA cryptosystem [14,15], elliptic curve cryptography [16,17], hash function [18,19], and chaos-based cryptography [20][21][22].…”

Design of an efficient and provably secure anonymity preserving three‐factor user authentication and key agreement scheme for TMIS

“…In this section, the proposed scheme is compared with the recently proposed schemes of Xu et al , , Amin‐Biswas , Amin et al , , Lu et al , , and Amin et al , with respect to computational cost, communication cost during login, and authentication and key agreement phases, and also functionality features. The registration is a one‐time process; identity change and password change are not frequently performed operations of the protocol.…”

“…Amin et al , also presented an efficient authentication scheme for TMIS using the elliptic curve cryptographic technique. As in , their scheme is also vulnerable to privileged‐insider attack through the smart card stolen attack because of the following reason.…”

A novel three-factor authentication and key agreement scheme providing anonymity in global mobility networks

“…A host of authentication schemes for all kinds of communications has been proposed, such as signatures and key agreement schemes . Two‐factor mechanism attracts the researchers, such as . In the earlier schemes, besides the password chosen by the user, the mobile device was equipped with a smart card, which was assigned by a server.…”