An Improvement of Robust and Efficient Biometrics Based Password Authentication Scheme for Telecare Medicine Information Systems Using Extended Chaotic Maps

Abstract

Recently, numerous extended chaotic map-based password authentication schemes that employ smart card technology were proposed for Telecare Medical Information Systems (TMISs). In 2015, Lu et al. used Li et al.'s scheme as a basis to propose a password authentication scheme for TMISs that is based on biometrics and smart card technology and employs extended chaotic maps. Lu et al. demonstrated that Li et al.'s scheme comprises some weaknesses such as those regarding a violation of the session-key security, a vulnerability to the user impersonation attack, and a lack of local verification. In this paper, however, we show that Lu et al.'s scheme is still insecure with respect to issues such as a violation of the session-key security, and that it is vulnerable to both the outsider attack and the impersonation attack. To overcome these drawbacks, we retain the useful properties of Lu et al.'s scheme to propose a new password authentication scheme that is based on smart card technology and requires the use of chaotic maps. Then, we show that our proposed scheme is more secure and efficient and supports security properties.

A Security Enhanced Lightweight Mobile Payment Scheme Based on Two Gateways

“…After receiving the 10 , the C checks whether the total amount is correct and is true. If it holds, the C computes 11 ={ , , 4 , ℎ 4 ,continue} , and sends it to M in order to express that he/she wants to continue the payment processes, otherwise the customer aborts payment, where ℎ 4 = ( , , , 3 ).…”

Efficient and Security Enhanced Anonymous Authentication with Key Agreement Scheme in Wireless Sensor Networks

“…The biohashing technique is also applied in our scheme, illustrated in Section 5. We use an input value $Bio$ as a combination of the user’s biometric information and a random key for convenience, like other authentication schemes [24,25,26,27] using the biohashing technique.…”

“…That is to say, the identical biometric information creates the identical value of $Hfalse(Biofalse)$, and it is impossible to calculate an input value $Bio$ from the result value of $Hfalse(Biofalse)$. Until now, many authentication studies have been conducted [24,25,26,27] based on the biohashing technique. Our proposed scheme also adopts the user’s biometric information applying a biohashing, and the details are given below in Section 5.…”

Improving an Anonymous and Provably Secure Authentication Protocol for a Mobile User

“…To design a secure authentication scheme, some cryptographic algorithms are also used, such as an RSA cryptosystem [14,15], elliptic curve cryptography [16,17], hash function [18,19], and chaos-based cryptography [20][21][22].…”