An Improved and Secure Anonymous Biometric-Based User Authentication with Key Agreement Scheme for the Integrated EPR...

Area of Science:

• Health Informatics
• Cybersecurity
• Information Systems

Background:

• Electronic Patient Record (EPR) systems require robust authentication for secure e-medicine transactions.
• Existing authentication protocols are continuously studied to enhance healthcare service efficiency and security.
• Li et al. proposed a user authenticated key agreement scheme for EPRs, claiming resistance to attacks.

Purpose of the Study:

• To identify and address critical vulnerabilities in Li et al.’s user authenticated key agreement scheme.
• To propose an upgraded scheme offering enhanced security and efficiency for EPR systems.
• To provide a secure and efficient authentication protocol for e-medicine.

Main Methods:

• Analysis of Li et al.’s scheme to identify security flaws, including resistance to off-line password guessing and server spoofing attacks.
• Development of an improved user authenticated key agreement protocol.
• Security and performance evaluation of the proposed scheme through comparative analysis.

Main Results:

• Li et al.’s scheme was found vulnerable to off-line password guessing, server spoofing, and identity preservation issues.
• The proposed upgraded scheme effectively addresses these vulnerabilities, enhancing user identity protection.
• The new scheme demonstrates improved security levels and communication efficiency compared to related protocols.

Conclusions:

• The upgraded user authenticated key agreement scheme provides superior security and efficiency for EPR systems.
• The proposed protocol strengthens the protection of electronic health information in e-medicine environments.
• This research contributes to the development of more secure and reliable healthcare IT infrastructure.