원격 의료 정보 시스템을 위한 향상된 익명성과 추적 불가능성을 제공하는 사용자 인증 프로토콜
User Authentication Protocol preserving Enhanced Anonymity and Untraceability for TMIS
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
본 논문에서는 2023년에 Chen-Chen이 제안한 ECC와 생체정보를 사용한 TMIS 인증 프로토콜을분석한 결과, 사용자 가장 공격, 중간자 공격, 사용자 익명성 등의 안전성 문제가 있었다. 그러므로 본 논문에서는 이러한 문제를 해결하기 위하여 사용자 익명성을 제공하는 개선된 인증 프로토콜을 제안한다. 본 논문에서 제안한 프로토콜의 안전성 문제를 분석한 결과, 제안한 프로토콜은오프라인 패스워드 추측 공격, 사용자 가장 공격, 스마트카드 분실 공격, 내부자 공격, 전방향 안전성, 재생 공격 등 여러 공격에 안전한 것으로 분석되었다. 또한 TMIS에서 반드시 보장해야 하는 사용자 익명성과 추적 불가능성도 함께 보장하여 사용자의 프라이버시를 보장하는 것으로 나타났다. 게다가 계산 복잡도에서도 크게 증가하지 않아 실행시간의 효율성도 달성하였다. 그러므로 본 논문에서 제안한 프로토콜은 TMIS에 적합한 사용자 인증 프로토콜이다.
Abstract
In this paper, as a result of analyzing the TMIS authentication protocol using ECC and biometric information proposed by Chen-Chen in 2023, there were security problems such as user impersonation attack, man-in-the-middle attack, and user anonymity. Therefore, this paper proposes an improved authentication protocol that provides user anonymity to solve these problems. As a result of analyzing the security of the protocol proposed in this paper, it was analyzed to be secure for various attacks such as offline password guessing attack, user impersonation attack, smart-card loss attack, insider attack, perfect forward attack. It has also been shown to provided user privacy by guaranteeing user anonymity and untraceability, which must be guaranteed in TMIS. In addition, there was no significant increase in computational complexity, so the efficiency of execution time was achieved. Therefore, the proposed protocol in this paper is a suitable user authentication protocol for TMIS.
참고문헌 (13)
- S. A. Chaudhry, "An Improved and Secure Biometric Authentication Scheme for Telecare Medicine Information Systems Based on Elliptic Curve Cryptography", Journal of Medical Systems, 39, pp.1~12 (2015)[DOI]
- Yanrong Lu, "An Enhanced Biometric-Based Authentication Scheme for Telecare Medicine Information Systems Using Elliptic Curve Cryptosystem", Journal of Medical Systems, 39(3) (2015), Springer Science and Business Media LLC[DOI]
- Hamed Arshad, "Three-Factor Anonymous Authentication and Key Agreement Scheme for Telecare Medicine Information Systems", Journal of Medical Systems, 38(12) (2014), Springer Science and Business Media LLC[DOI]
- Shehzad Ashraf Chaudhry, "A Multiserver Biometric Authentication Scheme for TMIS using Elliptic Curve Cryptography", Journal of Medical Systems, 40(11) (2016), Springer Science and Business Media LLC[DOI]
- Ruhul Amin, "An Efficient and Practical Smart Card Based Anonymity Preserving User Authentication Scheme for TMIS using Elliptic Curve Cryptography", Journal of Medical Systems, 39(11) (2015), Springer Science and Business Media LLC[DOI]
- L. Han, "An Improved Biometric Based Authentication Scheme with User Anonymity Using Elliptic Curve Cryptosystem", International Journal of Network Security, 19(3), pp.469~478 (2017)[DOI]
- S. S. Sahoo, "A Lightweight Biometric-based Authentication Scheme for Telecare Medicine Information Systems Using ECC", 2018 9th International Conference on Computing, Communication and Networking Technologies (ICCCNT), pp.1~6 (2018)
- Hamed Arshad, "Design of a Secure Authentication and Key Agreement Scheme Preserving User Privacy Usable in Telecare Medicine Information Systems", Journal of Medical Systems, 40(11), pp.1~19 (2016), Springer Science and Business Media LLC[DOI]
- Arezou Ostad‐Sharif, "An enhanced anonymous and unlinkable user authentication and key agreement protocol for TMIS by utilization of ECC", International Journal of Communication Systems, 32(5), pp.1~23 (2019), Wiley[DOI]
- Niloofar Ravanbakhsh, "An efficient improvement remote user mutual authentication and session key agreement scheme for E-health care systems", Multimedia Tools and Applications, 77(1), pp.55~88 (2016), Springer Science and Business Media LLC[DOI]
- Yulei Chen, "A biometrics-based mutual authentication and key agreement protocol for TMIS using elliptic curve cryptography", Multimedia Tools and Applications, 82(11), pp.16009~16032 (2022), Springer Science and Business Media LLC[DOI]
- Yeongjae Cho, "A Secure and Anonymous User Authentication Scheme for IoT-Enabled Smart Home Environments Using PUF", IEEE Access, 10, pp.101330~101346 (2022), Institute of Electrical and Electronics Engineers (IEEE)[DOI]
- Yeongjae Cho, "A Secure and Anonymous User Authentication Scheme for IoT-Enabled Smart Home Environments Using PUF", IEEE Access, 10, pp.101330~101346 (2022), Institute of Electrical and Electronics Engineers (IEEE)[DOI]