Analysis and Improvement of a Privacy-Preserving Authentication Scheme for Telecare Medical Information System Environment  

作　　者：NIU Shufang KANG Baoyuan LI Anqian HUO Yuyan ZUO Xinyu 

机构地区：[1]School of Computer Science and Technology,Tiangong University,Tianjin 300387,China [2]School of Software,Tiangong University,Tianjin 300387,China

出　　处：《Wuhan University Journal of Natural Sciences》2023年第6期531-540,共10页武汉大学学报（自然科学英文版）

摘　　要：Telecare Medical Information System(TMIS) can provide various telemedicine services to patients. However, information is communicated over an open channel. An attacker may intercept, replay, or modify this information. Therefore, many authentication schemes are proposed to provide secure communication for TMIS. Recently, Yu et al proposed a privacy-preserving authentication scheme in the Internet of Medical Things(IoMT)-enabled TMIS environments. They emphasize that their scheme is resistant to various attacks and ensures anonymity. Unfortunately, this paper demonstrates that Yu et al's scheme is vulnerable to impersonation attacks, replay attacks, and tracking attacks and cannot mutually authenticate. To overcome the shortcomings of Yu et al's scheme, we mainly improve the authentication and key agreement process and propose a corresponding improved scheme. We also compare the improved scheme with several existing authentication schemes in terms of security and computational efficiency.

关 键 词：MEDICAL authentication scheme Telecare Medical Information System(TMIS) PRIVACY-PRESERVING 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]