A Robust and Efficient ECC-based Mutual Authentication and Session Key Generation Scheme for Healthcare Applications

Area of Science:

• Cybersecurity
• Health Informatics
• Network Security

Background:

• Telecare Medicine Information Systems (TMIS) facilitate remote patient-provider communication, necessitating robust security measures.
• Existing user authentication and key agreement protocols in TMIS have demonstrated vulnerabilities, including susceptibility to replay and offline password guessing attacks.
• Previous research highlighted flaws in protocols by Amin and Biswas, and Giri et al., with subsequent schemes by Arshad and Rasoolzadegan also found to be deficient.

Purpose of the Study:

• To identify and address a critical security gap in existing user authentication and key agreement protocols for TMIS.
• To propose a novel, secure, and efficient protocol for user authentication and session key agreement within TMIS environments.
• To enhance the security of communication channels in Telecare Medicine Information Systems.

Main Methods:

• Analysis of existing user authentication and key agreement protocols for TMIS, identifying specific vulnerabilities.
• Development of a new protocol designed to overcome the identified security weaknesses.
• Comparative security analysis and performance evaluation of the proposed protocol against existing schemes.

Main Results:

• Demonstration that existing protocols, including Arshad and Rasoolzadegan's scheme, are vulnerable to a specific, well-known attack.
• The proposed protocol effectively addresses the identified security gap, providing enhanced protection.
• The new scheme maintains low communication and computational overheads, comparable to efficient existing protocols.

Conclusions:

• The proposed user authentication and session key agreement protocol offers a significant improvement in security for TMIS.
• The protocol effectively mitigates known vulnerabilities, ensuring secure communication channels for telehealth.
• The scheme provides a practical solution with comparable efficiency to existing methods, making it suitable for TMIS deployment.