title: An improved biometrics-based authentication scheme for telecare medical information systems.
abstract: Telecare medical information system (TMIS) offers healthcare delivery services and patients can acquire their desired medical services conveniently through public networks. The protection of patients' privacy and data confidentiality are significant. Very recently, Mishra et al. proposed a biometrics-based authentication scheme for telecare medical information system. Their scheme can protect user privacy and is believed to resist a range of network attacks. In this paper, we analyze Mishra et al.'s scheme and identify that their scheme is insecure to against known session key attack and impersonation attack. Thereby, we present a modified biometrics-based authentication scheme for TMIS to eliminate the aforementioned faults. Besides, we demonstrate the completeness of the proposed scheme through BAN-logic. Compared to the related schemes, our protocol can provide stronger security and it is more practical.
authors: State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing, 100876, China, guodianli@163.com.
authors: Dianli
authors: D
authors: Guo
authors: Qiaoyan
authors: Q
authors: Wen
authors: Wenmin
authors: W
authors: Li
authors: Hua
authors: H
authors: Zhang
authors: Zhengping
authors: Z
authors: Jin
mesh_terms: D000465:Algorithms; D001699:Biometry; D016494:Computer Security / Q000295:instrumentation*; D003219:Confidentiality; D006801:Humans; D007256:Information Systems / Q000458:organization & administration* / Q000592:standards; D017216:Telemedicine / Q000458:organization & administration* / Q000592:standards