Cryptanalysis and improvement of an improved two factor authentication protocol for telecare medical information systems.
Telecare medical information systems (TMIS) provides rapid and convenient health care services remotely. Efficient authentication is a prerequisite to guarantee the security and privacy of patients in TMIS. Authentication is used to verify the legality of the patients and TMIS server during remote access. Very recently Islam et al. (J. Med. Syst. 38(10):135, 2014) proposed a two factor authentication protocol for TMIS using elliptic curve cryptography (ECC) to improve Xu et al.'s (J. Med. Syst. 38(1):9994, 2014) protocol. They claimed their improved protocol to be efficient and provides all security requirements. However our analysis reveals that Islam et al.'s protocol suffers from user impersonation and server impersonation attacks. Furthermore we proposed an enhanced protocol. The proposed protocol while delivering all the virtues of Islam et al.'s protocol resists all known attacks.
International Islamic University Islamabad, Islamabad, Pakistan, shahzad@iiu.edu.pk.
Shehzad Ashraf
SA
Chaudhry
Husnain
H
Naqvi
Taeshik
T
Shon
Muhammad
M
Sher
Mohammad Sabzinejad
MS
Farash
D003142:Communication; D016494:Computer Security / Q000592:standards*; D003219:Confidentiality / Q000592:standards*; D063005:Health Information Systems / Q000458:organization & administration / Q000592:standards*; D006801:Humans; D033283:Patient Access to Records / Q000592:standards*; D011369:Professional-Patient Relations; D017216:Telemedicine / Q000379:methods / Q000458:organization & administration / Q000592:standards*; D014584:User-Computer Interface