A privacy preserving secure and efficient authentication scheme for telecare medical information systems

Area of Science:

• Computer Science
• Information Security
• Healthcare Informatics

Background:

• Telecare medical information systems (TMIS) utilize information and communication technologies for healthcare delivery.
• Privacy and security are significant concerns within TMIS, with previous authentication schemes like Chen et al.'s proving vulnerable.
• Existing password-based authentication schemes often lack pre-smart card authentication, leading to inefficient user interactions.

Purpose of the Study:

• To propose an improved anonymous smart card-based authentication scheme for TMIS.
• To address the security vulnerabilities and inefficiencies of prior authentication methods.
• To ensure user anonymity and enhance overall system security.

Main Methods:

• Development of an anonymous smart card-based authentication scheme incorporating pre-smart card authentication.
• Validation of the scheme's security attributes and user anonymity.
• Analysis of login and password change phase efficiency, including error detection and server-assisted operations.
• Formal verification using Burrows, Abadi, and Needham (BAN) logic.
• Comparison of computational overhead with existing schemes.

Main Results:

• The proposed scheme effectively protects user anonymity and meets essential security requirements.
• It offers efficient login and password change processes, allowing for rapid detection of incorrect inputs.
• Users can change passwords independently without requiring server intervention.
• BAN logic confirms the scheme's validity.
• The scheme demonstrates comparable computational overhead to relevant existing solutions.

Conclusions:

• The improved anonymous smart card-based authentication scheme offers enhanced security and efficiency for TMIS.
• It successfully overcomes the limitations of previous authentication protocols.
• The scheme provides a robust solution for protecting sensitive medical information in telecare environments.