Cryptanalysis and Improvement of Yan et al.’s Biometric-Based Authentication Scheme for Telecare Medicine Information Systems

Abstract

Remote user authentication is desirable for a Telecare Medicine Information System (TMIS) for the safety, security and integrity of transmitted data over the public channel. In 2013, Tan presented a biometric based remote user authentication scheme and claimed that his scheme is secure. Recently, Yan et al. demonstrated some drawbacks in Tan's scheme and proposed an improved scheme to erase the drawbacks of Tan's scheme. We analyze Yan et al.'s scheme and identify that their scheme is vulnerable to off-line password guessing attack, and does not protect anonymity. Moreover, in their scheme, login and password change phases are inefficient to identify the correctness of input where inefficiency in password change phase can cause denial of service attack. Further, we design an improved scheme for TMIS with the aim to eliminate the drawbacks of Yan et al.'s scheme.

A Three Factor Remote User Authentication Scheme Using Collision Resist Fuzzy Extractor in Single Server Environment

“…But, the researchers have considered biometric feature [2] with the password to enhance the security label. Therefore, many researchers have proposed biometric and password based authentication schemes in [17][18][19][20][21][22][23][24][25][26][27][28]. Li and Hwang [17] proposed a biometrics-based remote user authentication scheme in 2010.…”

“…But, Yan et al [23] pointed out that Tan's scheme [22] is vulnerable to the Denial-of-Service (DoS) attack. However, recently, Mishra et al [24] showed that Yan et al's scheme [23] suffers from off-line password guessing attack and has inefficient login and password change phases. Huang et al [29] proposed an authentication scheme based on RSA.…”

“…However, the compared schemes in [17][18][19] and [22][23][24] and [26] are not suitable for practical use because, the schemes cannot resist the possible attacks as shown in Table 2. In the introduction part of this paper, it has been described that is insecure against security attacks.…”

“…Thus, the proposed scheme is more secure than other schemes. Table 3 shows the computational cost, storage cost and communication overhead comparison of schemes in [17][18][19], [22][23][24], and [26] with our proposed scheme. For this purpose, only login and authentications phases have been consider due to maximum use.…”

“…T H , T enc and T dec are the time required for hash operation, symmetric key encryption and decryption respectively. The proposed scheme takes time for 10 hashing operations in two phases which is the lower among related and compared schemes in [18,[22][23][24]26]. It can be reasonably assumed that the length of ID i and pw i are 64 bits each.…”