title: A uniqueness-and-anonymity-preserving remote user authentication scheme for connected health care.
abstract: Connected health care provides new opportunities for improving financial and clinical performance. Many connected health care applications such as telecare medicine information system, personally controlled health records system, and patient monitoring have been proposed. Correct and quality care is the goal of connected heath care, and user authentication can ensure the legality of patients. After reviewing authentication schemes for connected health care applications, we find that many of them cannot protect patient privacy such that others can trace users/patients by the transmitted data. And the verification tokens used by these authentication schemes to authenticate users or servers are only password, smart card and RFID tag. Actually, these verification tokens are not unique and easy to copy. On the other hand, biometric characteristics, such as iris, face, voiceprint, fingerprint and so on, are unique, easy to be verified, and hard to be copied. In this paper, a biometrics-based user authentication scheme will be proposed to ensure uniqueness and anonymity at the same time. With the proposed scheme, only the legal user/patient himself/herself can access the remote server, and no one can trace him/her according to transmitted data.
authors: Department of Computer Science and Information Engineering, National Taichung University of Science and Technology, Taichung, Taiwan, cyf@cs.ccu.edu.tw.
authors: Ya-Fen
authors: YF
authors: Chang
authors: Shih-Hui
authors: SH
authors: Yu
authors: Ding-Rui
authors: DR
authors: Shiao
mesh_terms: D022126:Access to Information; D056667:Biometric Identification; D016494:Computer Security; D003219:Confidentiality; D063005:Health Information Systems; D006801:Humans