A robust uniqueness-and-anonymity-preserving remote user authentication scheme for connected health care

Area of Science:

• Computer Science
• Cybersecurity
• Health Informatics

Background:

• User authentication is critical for securing resources and services.
• Remote user authentication schemes are vital for connected healthcare systems.
• Existing schemes aim to balance security, anonymity, and efficiency.

Purpose of the Study:

• To analyze the security vulnerabilities of Das et al.'s remote user authentication scheme.
• To propose a new, robust, and secure remote user authentication scheme for connected healthcare.
• To demonstrate the enhanced security and validity of the proposed scheme.

Main Methods:

• Security analysis of Das et al.'s scheme, identifying weaknesses against replay, impersonation, and off-line guessing attacks.
• Development of a novel remote user authentication protocol incorporating a different authentication mechanism.
• Validation of the proposed scheme's security and functionality using BAN logic.

Main Results:

• Das et al.'s scheme was found to be vulnerable to several significant network attacks.
• The proposed scheme effectively resists replay, user impersonation, and off-line guessing attacks.
• BAN logic analysis confirmed the security and robustness of the new authentication protocol.

Conclusions:

• The analyzed scheme by Das et al. does not adequately protect connected healthcare systems.
• The newly proposed uniqueness-and-anonymity-preserving remote user authentication scheme offers superior security.
• The enhanced protocol ensures greater privacy and resilience against sophisticated cyber threats in healthcare.