Cryptanalysis and Improvement of RSA-based Authentication Scheme for Telecare Medical Information Systems
0
조회
0
다운로드
4
인용
0
참고문헌
키워드
초록
The telecare medical information system (TMIS) supports convenient and rapid health-care services. A secure and efficient authentication and key agreement scheme for TMIS provides safeguarding electronic patient records (EPRs) and helps health care workers and medical personnel to rapidly making correct clinical decisions. Giri et al. proposed an RSA-based remote user authentication scheme using smart cards for TMIS and claimed that their scheme could resist various malicious attacks. In this paper, we point out that their scheme is still vulnerable to lost smart card attacks and replay attacks and propose an improved scheme to prevent the shortcomings. As compared with the previous authentication schemes for TMIS, the proposed scheme is more secure and practical.
Abstract
The telecare medical information system (TMIS) supports convenient and rapid health-care services. A secure and efficient authentication and key agreement scheme for TMIS provides safeguarding electronic patient records (EPRs) and helps health care workers and medical personnel to rapidly making correct clinical decisions. Giri et al. proposed an RSA-based remote user authentication scheme using smart cards for TMIS and claimed that their scheme could resist various malicious attacks. In this paper, we point out that their scheme is still vulnerable to lost smart card attacks and replay attacks and propose an improved scheme to prevent the shortcomings. As compared with the previous authentication schemes for TMIS, the proposed scheme is more secure and practical.
참고문헌 (17)
- C. Lambrinoudakis, "Managing Medical and Insurance Information Through a Smart-card-based Information System", Journal of Medical Systems, 24(4), pp.213~234 (2000), Springer Science and Business Media LLC[DOI]
- Leslie Lamport, "Password authentication with insecure communication", Communications of the ACM, 24(11), pp.770~772 (1981), Association for Computing Machinery (ACM)[DOI]
- Min-Shiang Hwang, "A new remote user authentication scheme using smart cards", IEEE Transactions on Consumer Electronics, 46(1), pp.28~30 (2000), Institute of Electrical and Electronics Engineers (IEEE)[DOI]
- Ya-Fen Chang, "A secure one-time password authentication scheme using smart cards without limiting login times", ACM SIGOPS Operating Systems Review, 38(4), pp.80~90 (2004), Association for Computing Machinery (ACM)[DOI]
- Zhen-Yu Wu, "A Secure Authentication Scheme for Telecare Medicine Information Systems", Journal of Medical Systems, 36(3), pp.1529~1535 (2012), Springer Science and Business Media LLC[DOI]
- He Debiao, "A More Secure Authentication Scheme for Telecare Medicine Information Systems", Journal of Medical Systems, 36(3), pp.1989~1995 (2012), Springer Science and Business Media LLC[DOI]
- Jianghong Wei, "An Improved Authentication Scheme for Telecare Medicine Information Systems", Journal of Medical Systems, 36(6), pp.3597~3604 (2012), Springer Science and Business Media LLC[DOI]
- Zhian Zhu, "An Efficient Authentication Scheme for Telecare Medicine Information Systems", Journal of Medical Systems, 36(6), pp.3833~3838 (2012), Springer Science and Business Media LLC[DOI]
- R. L. Rivest, "A method for obtaining digital signatures and public-key cryptosystems", Communications of the ACM, 21(2), pp.120~126 (1978), Association for Computing Machinery (ACM)[DOI]
- Muhammad Khurram Khan, "An Authentication Scheme for Secure Access to Healthcare Services", Journal of Medical Systems, 37(4), pp.9954~ (2013), Springer Science and Business Media LLC[DOI]
- Debasis Giri, "An Efficient and Robust RSA-Based Remote User Authentication for Telecare Medical Information Systems", Journal of Medical Systems, 39(1), pp.145~ (2015), Springer Science and Business Media LLC[DOI]
- P. Kocher, "Differential Power Analysis", CRYPTO 99, LNCS, 1666, pp.388~397 (1999)
- T.S. Messerges, "Examining smart-card security under the threat of power analysis attacks", IEEE Transactions on Computers, 51(5), pp.541~552 (2002), Institute of Electrical and Electronics Engineers (IEEE)[DOI]
- E. Brier, "Correlation Power Analysis with a Leakage Model", CHES 2004, LNCS, 3156, pp.16~29 (2004)
- T. Eisenbarth, "On the Power of Power Analysis in the Real World : A Complete Break of the Keeloq Code Hopping Scheme", CRYPTO 08, LNCS, 5157, pp.203~220 (2008)
- C. Boyd, "Protocols for Authentication and Key Establishment" (2003), Springer
- Chou-Chen Yang, "Cryptanalysis of security enhancement for the timestamp-based password authentication scheme using smart cards", IEEE Transactions on Consumer Electronics, 50(2), pp.578~579 (2004), Institute of Electrical and Electronics Engineers (IEEE)[DOI]