An Efficient Three-Party Authentication Scheme for Data Exchange in Medical Environment

Abstract

Compared with traditional paper medical records, electronic medical records have many advantages such as easy transmission, high efficiency, better accuracy, and easier storage. The further development and penetration of electronic medical records will raise increasingly critical transmitted-data accuracy and security issues. Previous studies have proposed a verifier-based three-party authentication scheme and to provide high efficiency and security, with low computation and transmission costs. However, this protocol fails to achieve anonymity, is vulnerable to tracking attacks, and is inefficient. In this paper, we propose a new authentication scheme which provides patient anonymity and resistance to tracking attacks, while reducing computation and communication costs. The proposed system is easier to implement and is more suitable for use in remote electronic medical record exchange systems.

A secure and privacy preserved data aggregation scheme in IoMT

“…Haseeb et al introduce an LSDAR scheme that provides secure and energy-efficient data forwarding [ 17 ]. The authentication method is presented for medical systems to protect the data from different security threats [ 18 ]. Fatemeh et al introduce a cryptographic accumulator method that provides secure data collection and also provides data analysis in the encrypted state to preserve the data integrity of critical patient medical data [ 19 ].…”

An Efficient Three-Party Authentication and Key Agreement Protocol for Privacy-Preserving of IoT Devices in Mobile Edge Computing

“…The three-party mutual authentication protocol can be applied to a variety of different scenarios. Chiou et al [18] applied the three-party mutual authentication protocol into the medical environment and it satisfied more security requirements than above two. Jia et al [19] applied the threeparty mutual authentication protocol to the IoT healthcare system.…”

Improved anonymity preserving three-party mutual authentication key exchange protocol based on chaotic maps

“…Lin et al [12] proposed verifier-based 3PAKE with low computational cost and transfer cost based on password and modulator exponential operation. However, Chiou [13] pointed out that Lin's scheme does not provide anonymity and untraceability and is not computationally efficient, and proposed 3PAKE that provides anonymity and untraceability by implementing message encryption with long term key. However, since his scheme also performs key exchange [45] based on modular exponential operation, the computation is still not efficient.…”

“…Typical encryption methods used for key exchange include secret-key encryption [26][27][28][29][30][31][32][33][34][35][36][37][38][39][40][41][42][43] and public-key encryption. Public-key encryption methods include in detail modular exponential operation -based schemes [6][7][8][9][10][11][12][13], elliptic curve encryption-based schemes [14,15,[30][31][32][33]34], chaotic maps-based schemes [16][17][18][19][20][21][22][23][24][25] and bilinear pairing-based schemes [34,36]. User authentication is a key issue in authentication key exchange as a process of verifying whether a user is legal or not, where it is important to use authentication factor.…”