title: A secure and efficient password-based user authentication scheme using smart cards for the integrated EPR information system.
abstract: The integrated EPR information system supports convenient and rapid e-medicine services. A secure and efficient authentication scheme for the integrated EPR information system provides safeguarding patients' electronic patient records (EPRs) and helps health care workers and medical personnel to rapidly making correct clinical decisions. Recently, Wu et al. proposed an efficient password-based user authentication scheme using smart cards for the integrated EPR information system, and claimed that the proposed scheme could resist various malicious attacks. However, their scheme is still vulnerable to lost smart card and stolen verifier attacks. This investigation discusses these weaknesses and proposes a secure and efficient authentication scheme for the integrated EPR information system as alternative. Compared with related approaches, the proposed scheme not only retains a lower computational cost and does not require verifier tables for storing users' secrets, but also solves the security problems in previous schemes and withstands possible attacks.
authors.affiliation: Department of Medical Informatics, Tzu Chi University, No. 701, Zhongyang Road, Sec. 3, Hualien, 97004, Taiwan, Republic of China, jackytflee@mail.tcu.edu.tw.
authors.forename: Tian-Fu
authors.initials: TF
authors.lastname: Lee
authors.forename: I-Pin
authors.initials: IP
authors.lastname: Chang
authors.forename: Tsung-Hung
authors.initials: TH
authors.lastname: Lin
authors.forename: Ching-Cheng
authors.initials: CC
authors.lastname: Wang
mesh_terms: D016494:Computer Security; D003219:Confidentiality; D057286:Electronic Health Records; D000069098:Health Smart Cards; D006801:Humans; D007256:Information Systems; D017216:Telemedicine
references.citation: J Med Syst. 2012 Jun;36(3):1345-57
references.pmid: 20857325
references.citation: J Med Syst. 2012 Jun;36(3):1529-35
references.pmid: 20978928
references.citation: J Med Syst. 2012 Dec;36(6):3597-604
references.pmid: 22374237
references.citation: J Med Syst. 2012 Apr;36(2):631-8
references.pmid: 20703670
references.citation: J Med Syst. 2012 Dec;36(6):3833-8
references.pmid: 22527784
references.citation: Int J Med Inform. 2000 Nov;60(2):161-7
references.pmid: 11154967
references.citation: J Med Syst. 2012 Jun;36(3):1989-95
references.pmid: 21360017
references.citation: J Med Syst. 2012 Aug;36(4):2547-55
references.pmid: 21556897