Robust anonymous authentication scheme for telecare medical information systems.

Area of Science:

• Health Informatics
• Cybersecurity
• Cryptography

Background:

• Telecare Medical Information Systems (TMIS) enable remote healthcare services, necessitating robust security for Electronic Medical Records (EMR).
• Previous research by Chen et al. (2012) improved upon Khan et al.'s dynamic ID-based authentication but had inherent vulnerabilities.
• Secure authentication and privacy are critical for patient trust and data integrity in TMIS.

Purpose of the Study:

• To identify and address the security and privacy weaknesses in Chen et al.'s improved dynamic ID-based authentication scheme for TMIS.
• To propose a novel secure anonymity authentication scheme that enhances protection against known and potential attacks.

Main Methods:

• Cryptographic analysis of Chen et al.'s authentication scheme to reveal vulnerabilities.
• Design and proposal of a new secure anonymity authentication scheme.
• Evaluation of the proposed scheme's security properties, including privacy, perfect forward secrecy, and resistance to attacks.

Main Results:

• Chen et al.'s scheme lacks user privacy protection and perfect forward secrecy.
• The scheme is susceptible to off-line password guessing and impersonation attacks if a user's smart card is compromised.
• The proposed secure anonymity authentication scheme effectively overcomes these identified weaknesses.

Conclusions:

• The proposed secure anonymity authentication scheme offers enhanced security and privacy for Telecare Medical Information Systems.
• It provides robust protection even when an adversary has access to sensitive information stored on a user's smart card.
• This contributes to more secure and trustworthy remote healthcare delivery systems.