title: Understanding security failures of two authentication and key agreement schemes for telecare medicine information systems.
abstract: Smart card based authentication and key agreement schemes for telecare medicine information systems (TMIS) enable doctors, nurses, patients and health visitors to use smart cards for secure login to medical information systems. In recent years, several authentication and key agreement schemes have been proposed to present secure and efficient solution for TMIS. Most of the existing authentication schemes for TMIS have either higher computation overhead or are vulnerable to attacks. To reduce the computational overhead and enhance the security, Lee recently proposed an authentication and key agreement scheme using chaotic maps for TMIS. Xu et al. also proposed a password based authentication and key agreement scheme for TMIS using elliptic curve cryptography. Both the schemes provide better efficiency from the conventional public key cryptography based schemes. These schemes are important as they present an efficient solution for TMIS. We analyze the security of both Lee's scheme and Xu et al.'s schemes. Unfortunately, we identify that both the schemes are vulnerable to denial of service attack. To understand the security failures of these cryptographic schemes which are the key of patching existing schemes and designing future schemes, we demonstrate the security loopholes of Lee's scheme and Xu et al.'s scheme in this paper.
authors: Department of Mathematics, Indian Institute of Technology, Kharagpur, India, dheerendra@maths.iitkgp.ernet.in.
authors: Dheerendra
authors: D
authors: Mishra
mesh_terms: D000465:Algorithms; D016494:Computer Security / Q000295:instrumentation*; D003219:Confidentiality; D006801:Humans; D007256:Information Systems / Q000458:organization & administration* / Q000592:standards; D017711:Nonlinear Dynamics; D017216:Telemedicine / Q000458:organization & administration* / Q000592:standards
references: J Med Syst. 2014 Feb;38(2):12
references: 24493073
references: J Med Syst. 2014 May;38(5):41
references: 24771484
references: J Med Syst. 2014 Jun;38(6):24
references: 24880932
references: J Med Syst. 2012 Dec;36(6):3833-8
references: 22527784
references: J Med Syst. 2012 Jun;36(3):1529-35
references: 20978928
references: J Med Syst. 2012 Dec;36(6):3597-604
references: 22374237
references: J Med Syst. 2013 Jun;37(3):9941
references: 23553734
references: J Med Syst. 2013 Dec;37(6):9985
references: 24141492
references: J Med Syst. 2013 Apr;37(2):9911
references: 23321972
references: J Med Syst. 2014 Oct;38(10):120
references: 25123455
references: J Med Syst. 2013 Apr;37(2):9929
references: 23345092
references: J Med Syst. 2013 Apr;37(2):9919
references: 23334801
references: J Med Syst. 2013 Feb;37(1):9897
references: 23321959
references: J Med Syst. 2012 Jun;36(3):1989-95
references: 21360017
references: J Med Syst. 2014 Jan;38(1):9994
references: 24346928
references: J Med Syst. 2012 Jun;36(3):1629-50
references: 21120592
references: J Med Syst. 2012 Dec;36(6):3907-15
references: 22673892
references: J Med Syst. 2014 Oct;38(10):116
references: 25096968
references: J Med Syst. 2013 Apr;37(2):9912
references: 23345091