An enhanced scheme for mutual authentication for healthcare services

Digital Communications and Networks

卷:8

Chien-Ming Chen¹  Shehzad Ashraf Chaudhry²  Saru Kumari³  Salman Shamshad⁴  Muhammad Faizan Ayub⁴  Khalid Mahmood⁴ 

[1] Department of Mathematics, University of Padua, 35131 Padua, Italy;

[2] Innovation (RSCI), Riphah International University, Lahore Campus, Lahore 55150, Pakistan;

[3] Riphah School of Computing &

[4] Department of Computer Science, COMSATS University Islamabad, Sahiwal Campus, 57000, Pakistan;

关键词: Authentication protocol;    Security protocol;    Anonymous protocol;    Impersonation attack;    TMIS;   

DOI  :  

来源: DOAJ

【 摘 要 】

With the advent of state-of-art technologies, the Telecare Medicine Information System (TMIS) now offers fast and convenient healthcare services to patients at their doorsteps. However, this architecture engenders new risks and challenges to patients' and the server's confidentiality, integrity and security. In order to avoid any resource abuse and malicious attack, employing an authentication scheme is widely considered as the most effective approach for the TMIS to verify the legitimacy of patients and the server. Therefore, several authentication protocols have been proposed to this end. Very recently, Chaudhry et al. identified that there are vulnerabilities of impersonation attacks in Islam et al.'s scheme. Therefore, they introduced an improved protocol to mitigate those security flaws. Later, Qiu et al. proved that these schemes are vulnerable to the man-in-the-middle, impersonation and offline password guessing attacks. Thus, they introduced an improved scheme based on the fuzzy verifier techniques, which overcome all the security flaws of Chaudhry et al.'s scheme. However, there are still some security flaws in Qiu et al.'s protocol. In this article, we prove that Qiu et al.'s protocol has an incorrect notion of perfect user anonymity and is vulnerable to user impersonation attacks. Therefore, we introduce an improved protocol for authentication, which reduces all the security flaws of Qiu et al.'s protocol. We also make a comparison of our protocol with related protocols, which shows that our introduced protocol is more secure and efficient than previous protocols.

【 授权许可】

Unknown