title: A Secure User Anonymity and Authentication Scheme Using AVISPA for Telecare Medical Information Systems.
abstract: Telecare medicine information systems (TMIS) have been known as an effective mechanism to increase quality and security of healthcare services. In other to the protection of patient privacy, several authentication schemes have been proposed in TMIS, however, most of them have a security problems. Recently, Das proposed a secure and robust password-based remote user authentication scheme for the integrated EPR information system. However, in this paper, we show that his scheme have some security flaws. Then, we shall propose a secure authentication scheme to overcome their weaknesses. We prove the proposed scheme with random oracle and also use the BAN logic to prove the correctness of the proposed scheme. Furthermore, we simulate our scheme for the formal security analysis using the AVISPA (Automated Validation of Internet Security Protocols and Applications) tool.
authors.affiliation: Institute for Computing and Information Sciences, Radboud University Nijmegen, Nijmegen, The Netherlands, omid.mir@imamreza.ac.ir.
authors.forename: Omid
authors.initials: O
authors.lastname: Mir
authors.forename: Theo
authors.initials: T
authors.lastname: van der Weide
authors.forename: Cheng-Chi
authors.initials: CC
authors.lastname: Lee
mesh_terms: D000465:Algorithms; D016494:Computer Security / Q000295:instrumentation*; D003219:Confidentiality; D006801:Humans; D007256:Information Systems / Q000295:instrumentation*; D017216:Telemedicine / Q000295:instrumentation*