Towards second-generation smart card-based authentication in health information systems: the secure server model.

Area of Science:

• Computer Science
• Information Security
• Healthcare Technology

Background:

• Current smart card authentication in healthcare addresses some security concerns but has limitations.
• Existing models do not comprehensively cover all necessary security aspects for healthcare systems.
• There is a need for advanced security measures to protect sensitive patient data.

Purpose of the Study:

• To present an extended model for smart card authentication incorporating a secure server.
• To enable smart cards to verify the integrity of authentication terminals.
• To enhance the protection of sensitive information within healthcare authentication processes.

Main Methods:

• Introduction of a novel 'secure server' entity into the authentication model.
• Development of a method for smart cards to ascertain terminal integrity verification status.
• Implementation of a risk-mitigation strategy where cards restrict data exposure based on terminal status.

Main Results:

• The proposed secure server model facilitates smart card awareness of terminal integrity.
• Smart cards can dynamically restrict sensitive data exposure, minimizing security risks.
• The model highlights vulnerabilities in existing healthcare authentication systems.

Conclusions:

• The secure server model offers a robust extension to conventional smart card authentication.
• This approach significantly enhances the security and privacy of healthcare data.
• The extended model addresses the identified weaknesses and mitigates associated risks.