An enhanced biometric-based authentication scheme for telecare medicine information systems using elliptic curve...

Area of Science:

• Medical Informatics
• Cybersecurity
• Cryptography

Background:

• Telecare Medical Information Systems (TMISs) offer convenient home healthcare but face privacy risks due to open communication.
• Remote authentication is crucial for secure patient-server interactions in TMISs.
• Previous schemes, including Arshad et al.'s, have security vulnerabilities, such as susceptibility to off-line password attacks.

Purpose of the Study:

• To propose an enhanced biometric and smart card-based remote authentication scheme for TMISs.
• To address and mitigate security weaknesses identified in Arshad et al.'s three-factor authenticated key exchange scheme.
• To improve the overall security and efficiency of remote authentication in telecare environments.

Main Methods:

• Identification of security flaws in Arshad et al.'s scheme, specifically vulnerability to off-line password attacks.
• Development of an enhanced remote authentication scheme integrating biometrics and smart cards.
• Application of BAN logic to formally verify the security completeness of the proposed scheme.
• Conducting security and performance analyses to compare the enhanced scheme with existing ones.

Main Results:

• The proposed enhanced scheme effectively thwarts off-line password attacks, preventing user impersonation.
• BAN logic verification confirms the enhanced scheme's security completeness.
• Security analysis demonstrates that the enhanced scheme satisfies more security properties compared to prior schemes.
• Performance analysis indicates a reduced computational cost.

Conclusions:

• The enhanced biometric and smart card-based remote authentication scheme offers superior security and efficiency for TMISs.
• The proposed scheme provides a more robust solution for protecting patient privacy in telecare settings.
• This work contributes to the secure development of remote authentication protocols in the evolving field of digital health.