Authenticated Key Agreement Scheme with Strong Anonymity for Multi-Server Environment in TMIS

Area of Science:

• Computer Science
• Information Security
• Telemedicine

Background:

• The Internet of Things (IoT) enables advanced applications like telecare medicine information systems (TMIS).
• Existing smart card-based key agreement schemes in TMIS often lack robust security and anonymity for multi-server architectures.
• Previous protocols fail to protect identity information, leading to vulnerabilities like password guessing attacks.

Purpose of the Study:

• To propose an enhanced authenticated key agreement scheme (AKAS) ensuring strong anonymity for TMIS in multi-server settings.
• To address the security and privacy vulnerabilities in current TMIS authentication protocols.
• To improve the efficiency and security of key agreement in telecare systems.

Main Methods:

• Development of an extended authenticated key agreement scheme (AKAS) using enhanced security for smart card data.
• Implementation of dynamic patient identity calculation to bolster anonymity.
• Formal security proof using Burrows-Abadi-Needham (BAN) logic and informal security analysis.

Main Results:

• The proposed AKAS scheme provides strong anonymity and enhances security by protecting correlation parameters and using dynamic identities.
• The scheme effectively resists various security attacks prevalent in TMIS.
• A 21% efficiency improvement was demonstrated compared to previous schemes by Lee et al. and Shu.

Conclusions:

• The AKAS scheme offers a secure and anonymous solution for multi-server TMIS environments.
• The chaotic map-based approach ensures privacy protection.
• The proposed scheme is a significant advancement in securing telecare information systems.