title: Cryptanalysis and improvement of a user authentication scheme preserving uniqueness and anonymity for connected health care.
abstract: Nowadays, connected health care applications are used more and more in the world. Service through the applications can save the patients' time and expense, such as telecare medical information system (TMIS) and integrated electronic patient record (EPR) information system. In the applications, preserving patients' privacy, transmitting messages securely and keeping mutual authentication should all be paid attention. Many authentication schemes have been proposed to make a secure communicating environment. Recently Xie et al. showed that Wen's scheme was insecure because it was under the off-line password guessing attack and without user anonymity and forward security. They gave a new three-factor authentication scheme and claimed that it was secure. However, we find that Xie et al's scheme is vulnerable to the De-synchronization attack and the server has too much storage burden in the scheme. Then we present an improved scheme which overcomes the usual weaknesses and keeps ordinary security characters. Compared with recent schemes of the same kind, our scheme is secure and practical.
authors: School of Information Science and Technology, Xiamen University, Xiamen, 361005, China.
authors: Lili
authors: L
authors: Xu
authors: Fan
authors: F
authors: Wu
mesh_terms: D000465:Algorithms; D016494:Computer Security / Q000295:instrumentation*; D003219:Confidentiality; D057286:Electronic Health Records / Q000458:organization & administration*; D066275:Health Information Exchange; D006801:Humans; D014584:User-Computer Interface
references: J Med Syst. 2014 May;38(5):26
references: 24781814
references: J Med Syst. 2014 May;38(5):17
references: 24777588
references: J Med Syst. 2013 Aug;37(4):9952
references: 23689993
references: J Med Syst. 2013 Apr;37(2):9911
references: 23321972
references: J Med Syst. 2014 Nov;38(11):139
references: 25298362
references: J Med Syst. 2013 Apr;37(2):9929
references: 23345092
references: J Med Syst. 2013 Dec;37(6):9980
references: 24146334
references: J Med Syst. 2013 Aug;37(4):9958
references: 23818249
references: J Med Syst. 2014 Dec;38(12):136
references: 25352490
references: J Med Syst. 2013 Feb;37(1):9897
references: 23321959
references: J Med Syst. 2013 Jun;37(3):9948
references: 23660745
references: J Med Syst. 2013 Aug;37(4):9954
references: 23828650
references: J Med Syst. 2014 Sep;38(9):91
references: 24994512
references: J Med Syst. 2014 Mar;38(3):16
references: 24643750
references: Biomed Res Int. 2013;2013:491289
references: 24350272
references: J Med Syst. 2012 Dec;36(6):3907-15
references: 22673892
references: J Med Syst. 2013 Apr;37(2):9912
references: 23345091