An improved anonymous authentication scheme for telecare medical information systems

Area of Science:

• Health Informatics
• Cybersecurity
• Medical Information Systems

Background:

• Telecare medical information systems (TMIS) enable remote healthcare access, necessitating robust privacy protection.
• Existing authentication schemes for TMIS have demonstrated security vulnerabilities.
• A recent enhancement by Wu et al. was found to be susceptible to various attacks.

Purpose of the Study:

• To propose a novel anonymous authentication scheme for telecare medical information systems.
• To address and rectify security deficiencies identified in prior authentication protocols.
• To enhance patient privacy and system security in telecare environments.

Main Methods:

• Analysis of Wu et al.'s authentication scheme to identify security weaknesses.
• Development of a new anonymous authentication scheme.
• Security validation using BAN logic for protocol completeness.
• Formal security proof employing the Bellare and Rogaway model.

Main Results:

• Wu et al.'s scheme was found vulnerable to server spoofing, offline password guessing, and impersonation attacks.
• The proposed scheme successfully preserves patient anonymity.
• The password change phase in the proposed scheme is efficient and user-friendly.
• Formal analysis confirmed the scheme's security and completeness.

Conclusions:

• The novel anonymous authentication scheme offers enhanced security and privacy for telecare medical information systems.
• The proposed scheme effectively mitigates identified vulnerabilities in previous authentication protocols.
• This work contributes to the development of more secure and reliable telecare systems.