title: Robust and efficient biometrics based password authentication scheme for telecare medicine information systems using extended chaotic maps.
abstract: The Telecare Medicine Information Systems (TMISs) provide an efficient communicating platform supporting the patients access health-care delivery services via internet or mobile networks. Authentication becomes an essential need when a remote patient logins into the telecare server. Recently, many extended chaotic maps based authentication schemes using smart cards for TMISs have been proposed. Li et al. proposed a secure smart cards based authentication scheme for TMISs using extended chaotic maps based on Lee's and Jiang et al.'s scheme. In this study, we show that Li et al.'s scheme has still some weaknesses such as violation the session key security, vulnerability to user impersonation attack and lack of local verification. To conquer these flaws, we propose a chaotic maps and smart cards based password authentication scheme by applying biometrics technique and hash function operations. Through the informal and formal security analyses, we demonstrate that our scheme is resilient possible known attacks including the attacks found in Li et al.'s scheme. As compared with the previous authentication schemes, the proposed scheme is more secure and efficient and hence more practical for telemedical environments.
authors.affiliation: Information Security Center, State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing, 100876, China.
authors.forename: Yanrong
authors.initials: Y
authors.lastname: Lu
authors.forename: Lixiang
authors.initials: L
authors.lastname: Li
authors.forename: Haipeng
authors.initials: H
authors.lastname: Peng
authors.forename: Dong
authors.initials: D
authors.lastname: Xie
authors.forename: Yixian
authors.initials: Y
authors.lastname: Yang
mesh_terms: D056667:Biometric Identification / Q000379:methods / Q000592:standards* / Q000639:trends; D016494:Computer Security / Q000295:instrumentation / Q000592:standards*; D003219:Confidentiality / Q000592:standards*; D063005:Health Information Systems / Q000458:organization & administration / Q000592:standards* / Q000639:trends; D000069098:Health Smart Cards / Q000592:standards* / Q000639:trends; D006801:Humans; D033283:Patient Access to Records / Q000592:standards* / Q000639:trends; D017216:Telemedicine / Q000379:methods / Q000592:standards* / Q000639:trends