Provably Secure Three-Factor-Based Mutual Authentication Scheme with PUF for Wireless Medical Sensor Networks.

Area of Science:

• Cybersecurity
• Biomedical Engineering
• Network Security

Background:

• Wireless medical sensor networks (WMSNs) enable remote healthcare but face security risks due to data transmission over insecure channels.
• Existing authentication schemes, like Masud et al.'s (2021), have vulnerabilities including offline password guessing and user impersonation.
• Lack of user anonymity and susceptibility to attacks highlight the need for more robust WMSN security.

Purpose of the Study:

• To identify and address security flaws in Masud et al.'s user authentication scheme for WMSNs.
• To propose a novel, secure, and anonymity-preserving authentication scheme for WMSN environments.
• To enhance the security and privacy of patient data in remote healthcare settings.

Main Methods:

• Developed a three-factor-based mutual authentication scheme incorporating physical unclonable functions (PUFs) and biometrics.
• Conducted informal security analysis, Burrows-Abadi-Needham (BAN) logic, Real-or-Random (RoR) model analysis, and AVISPA simulations.
• Evaluated the proposed scheme's security, computational overhead, communication costs, and energy efficiency.

Main Results:

• The proposed scheme effectively mitigates offline password guessing, user impersonation, and insider attacks.
• Demonstrated enhanced security features including anonymity, perfect forward secrecy, and mutual authentication.
• Formal and simulation-based analyses confirmed the scheme's robustness and security guarantees.

Conclusions:

• The proposed three-factor authentication scheme offers superior security and privacy for WMSNs compared to prior methods.
• The integration of PUFs and biometrics provides a strong defense against identified security vulnerabilities.
• The scheme is well-suited for WMSN applications, ensuring reliable and secure remote patient monitoring.