An Efficient User Authentication and User Anonymity Scheme with Provably Security for IoT-Based Medical Care System

Area of Science:

• Biomedical Engineering
• Computer Science
• Cybersecurity

Background:

• The growing aging population and prevalence of chronic diseases increase demand for remote patient monitoring via Internet of Things (IoT) telemedicine systems.
• Securing sensitive physiological data transmitted over public networks is crucial for patient privacy and requires robust user authentication and data encryption.
• Previous authentication schemes, like Liu-Chung's 2016 proposal, have faced scrutiny for potential security vulnerabilities.

Purpose of the Study:

• To identify and address security weaknesses in the Liu-Chung bilinear pairing-based password authentication scheme for wireless healthcare sensor networks.
• To propose an improved, secure authentication and data encryption scheme for IoT-based medical care systems.
• To enhance user anonymity and protect against replay, password, and sensed data disclosure attacks in telemedicine.

Main Methods:

• Critically analyzed the security of the Liu-Chung authentication scheme.
• Developed a novel secure authentication and data encryption scheme for IoT telemedicine.
• Modified the authentication process to optimize protocol design and reduce redundancy.
• Provided a provable security analysis in the random oracle model under the Computational Diffie-Hellman problem (ECDHP).

Main Results:

• Demonstrated security weaknesses in the Liu-Chung authentication scheme.
• The proposed scheme offers enhanced user anonymity.
• The improved scheme effectively prevents replay and password/sensed data disclosure attacks.
• The new protocol design is more efficient than existing related schemes.

Conclusions:

• The proposed secure authentication and data encryption scheme significantly improves the security and efficiency of IoT-based medical care systems.
• The scheme provides essential user anonymity and robust protection against critical cyber threats in telemedicine.
• This work contributes to the secure advancement of remote patient monitoring technologies for an aging global population.