Three-Factor UCSSO Scheme With Fast Authentication and Privacy Protection for Telecare Medicine Information Systems

Hsu, Chien-Lung; Le, Tuan‐Vinh; Hsieh, Mei-Chen; Tsai, Kuo-Yu; Lu, Chung-Fu; Lin, Tzu‐Hao

doi:10.1109/access.2020.3035076

Cited by 30 publications

(35 citation statements)

References 41 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…• Our work introduces a single sign-on (SSO) solution [39,40,42] for group services in a multi-server environment. This solution allows users to use a single set of credentials stored in their smart cards to obtain services provided by multiple servers.…”

Section: A Rabin Cryptosystemmentioning

confidence: 99%

“…Jiang et al [41] presented a three-factor authentication scheme with privacy protection for e-health clouds. It is observed that Jiang et al [41]'s scheme is not resilient to replay attacks, stolen smart card attacks and desynchronization attacks [39]. Moreover, Liu et at.…”

Section: Introductionmentioning

confidence: 99%

“…Another secure three-factor authentication scheme was proposed by Xu et al [38] with a multi-server architecture. Besides, Hsu et al [39] presented a three-factor fast authentication scheme with user anonymity for TMISs. Liu et at.…”

Section: Introductionmentioning

confidence: 99%

“…[40] introduced their work with a biometric-based authentication scheme and privacy protection. According to Hsu et al [39], Liu et at. [40] does not provide three-factor authentication, user anonymity, and user untraceability.…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

An Anonymous Key Distribution Scheme for Group Healthcare Services in 5G-Enabled Multi-Server Environments

Hsu

2021

IEEE Access

Self Cite

View full text Add to dashboard Cite

Fifth generation (5G) mobile technology enables a new kind of network that provides high peak data rates, ultra-low latency communication and high user density. Electronic healthcare (e-health) allows the data to be stored and shared in a highly efficient and flexible manner. Group e-health services help in improving long-term results of the treatments due to its collaborative characteristic. The services including real-time remote patient monitoring and transmission of large health data files can be facilitated by e-health systems enabled with the 5G network. Since the communication channel is open, security and privacy in the system should be taken into account. Our work proposes a key distribution scheme for group healthcare services in 5G network environments. We construct various healthcare domains and apply the proposed scheme to the group services. The paper also introduces Single Sign-On (SSO), a cost-efficient solution, for multi-server architecture of the constructed system. Security and privacy of the scheme are enforced by a three-factor authentication mechanism (integrating smart card, password and biometrics) and strong user anonymity property. We provide security proof of the proposed scheme using various well-known tools including RoR model, BAN logic and AVISPA simulation. Results of various performance comparisons indicate that our scheme provides most functions and bears rational costs, compared with its related works.

show abstract

Section: A Rabin Cryptosystemmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

An Anonymous Key Distribution Scheme for Group Healthcare Services in 5G-Enabled Multi-Server Environments

Hsu

2021

IEEE Access

Self Cite

View full text Add to dashboard Cite

show abstract

“…of attributes; --: not available. Based on [ 1 , 63 ]:

≈ 0.72036

≈ 0.2622

≈ 0.00069

≈ 0.72036

, and

≈ 0.72036

.…”

Section: Figurementioning

confidence: 99%

An Autonomous Log Storage Management Protocol with Blockchain Mechanism and Access Control for the Internet of Things

Hsu

Wei-xin

2020

Sensors

Self Cite

View full text Add to dashboard Cite

As the Internet of Things (IoT) has become prevalent, a massive number of logs produced by IoT devices are transmitted and processed every day. The logs should contain important contents and private information. Moreover, these logs may be used as evidences for forensic investigations when cyber security incidents occur. However, evidence legality and internal security issues in existing works were not properly addressed. This paper proposes an autonomous log storage management protocol with blockchain mechanism and access control for the IoT. Autonomous model allows sensors to encrypt their logs before sending it to gateway and server, so that the logs are not revealed to the public during communication process. Along with blockchain, we introduce the concept “signature chain”. The integration of blockchain and signature chain provides efficient management functions with valuable security properties for the logs, including robust identity verification, data integrity, non-repudiation, data tamper resistance, and the legality. Our work also employs attribute-based encryption to achieve fine-grained access control and data confidentiality. The results of security analysis using AVSIPA toolset, GNY logic and semantic proof indicate that the proposed protocol meets various security requirements. Providing good performance with elliptic curve small key size, short BLS signature, efficient signcryption method, and single sign-on solution, our work is suitable for the IoT.

show abstract

Design of a secure and privacy preserving authentication protocol for telecare medical information systems

Sumithra

Shashidhara

Mukhopadhyay

2022

Security and Privacy

View full text Add to dashboard Cite

With the advancement of communication technology, Telecare Medicine Information Systems (TMIS) provides convenient healthcare services for patients, doctors, and health organizations over the insecure Internet. As a result, when accessing sensitive medical data over an insecure connection, user privacy, data security, and user authentication is very crucial. A secure authentication protocol plays a crucial role in securing communications over TMIS, these environments are very vulnerable to numerous attacks due to resource constraints and the nature of the communication medium. Recently, an efficient authentication framework has been introduced for TMIS to address various security issues. However, the existing mutual authentication and key agreement protocols are vulnerable to replay attacks, insider attacks, impersonation attacks, and password guessing attacks. Furthermore, the current authentication systems do not guarantee user privacy and the fair key agreement between the patient and the medical server. We propose a more robust authentication approach for healthcare information systems to address these security issues. To assess the authentication protocol's security strength, we employ formal verification tools like Automated Validation of Internet Security Protocols and Applications (AVISPA). Finally, a thorough performance analysis demonstrates that the proposed mutual authentication framework not only ensures privacy but also maintains a low computing overhead. As a result, when compared to other related systems, the proposed authentication protocol is both secure and computationally efficient.

show abstract

Three-Factor UCSSO Scheme With Fast Authentication and Privacy Protection for Telecare Medicine Information Systems

Cited by 30 publications

References 41 publications

An Anonymous Key Distribution Scheme for Group Healthcare Services in 5G-Enabled Multi-Server Environments

An Anonymous Key Distribution Scheme for Group Healthcare Services in 5G-Enabled Multi-Server Environments

An Autonomous Log Storage Management Protocol with Blockchain Mechanism and Access Control for the Internet of Things

Design of a secure and privacy preserving authentication protocol for telecare medical information systems

Contact Info

Product

Resources

About