Revisit of Password-Authenticated Key Exchange Protocol for Healthcare Support Wireless Communication

Abstract

Wireless communication is essential for the infrastructure of a healthcare system. This bidirectional communication is used for data collection and to control message delivery. Wireless communication is applied in industries as well as in our daily lives, e.g., smart cities; however, highly reliable communication may be more difficult in environments with low power consumption, many interferences, or IoT wireless network issues due to resource limitations. In order to solve these problems, we investigated the existing three-party password-authenticated key exchange (3PAKE) and developed an enhanced protocol. Currently, Lu et al. presented a 3PAKE protocol to improve the security flaws found in Farash and Attari’s protocol. This work revisits the protocol proposed by Lu et al. and demonstrates that, in addition to other security weaknesses, the protocol does not provide user anonymity which is an important issue for healthcare environment, and is not secure against insider attacks that may cause impersonation attacks. We propose a secure biometric-based efficient password-authenticated key exchange (SBAKE) protocol in order to remove the incidences of these threats, and present an analysis regarding the security and efficiency of the SBAKE protocol for practical deployment.

Implication of Lightweight and Robust Hash Function to Support Key Exchange in Health Sensor Networks

“…The researchers focused on signatures for the integrity of patient data and did not focus on important security issues in key exchange. In addition, Kim et al [19] revisited the three-party password-authenticated key exchange. Their protocol provides patients' anonymity to prevent privileged insider and impersonation attacks.…”

A Taxonomy on Smart Healthcare Technologies: Security Framework, Case Study, and Future Directions

“…However, forward secrecy is not considered by the scheme. Kim et al [131] proposed a three-party password authentication scheme with a key exchange that preserves user anonymity and prevents impersonation attacks.…”

Electronic Solutions for Artificial Intelligence Healthcare

“…Mijin Kim, et al [4] conducted a review of "Revisit of Password-Authenticated Key Exchange Protocol for Healthcare Support Wireless Communication". The review analyzed the security of the three-party password-authenticated key exchange (3WPAKE) and proposed a secure biometric-based efficient password-authenticated key exchange (SBAKE) protocol that fixes and enhances the security and efficiency of the existing 3PAKE for a healthcare system in the wireless environment.…”

“…There are a total of twenty-five papers, including review papers and research papers. This Special Issue consists of seven review papers [2][3][4][5][6][7][8] and eighteen research papers [9][10][11][12][13][14][15][16][17][18][19][20][21][22][23][24][25][26].…”