An enhanced biometric authentication scheme for telecare medicine information systems with nonce using chaotic hash...

Area of Science:

• Computer Science
• Information Security
• Biometrics

Background:

• Awasthi and Srivastava proposed a biometric remote user authentication scheme for telecare medicine information systems (TMIS).
• Their scheme utilized chaotic one-way hash functions and XOR operations for efficiency.

Purpose of the Study:

• To analyze the security vulnerabilities of the Awasthi-Srivastava scheme.
• To propose a novel, secure biometric-based remote user authentication scheme.
• To enhance features crucial for secure user authentication in TMIS.

Main Methods:

• Informal and formal security analysis of the proposed scheme.
• Simulation and formal security verification using Automated Validation of Internet Security Protocols and Applications (AVISPA).

Main Results:

• The Awasthi-Srivastava scheme exhibits flaws including incorrect password changes, lack of user anonymity, inability to establish session keys, and vulnerability to replay attacks.
• The proposed scheme effectively addresses these vulnerabilities.
• AVISPA simulation confirms the proposed scheme's security against passive and active attacks, including man-in-the-middle and replay attacks.

Conclusions:

• The proposed biometric-based remote user authentication scheme offers enhanced security and efficiency compared to the Awasthi-Srivastava scheme.
• The scheme provides robust protection for telecare medicine information systems.
• Formal verification confirms the scheme's resilience against known security threats.