title: A Provably Secure RFID Authentication Protocol Based on Elliptic Curve for Healthcare Environments.
abstract: To enhance the quality of healthcare in the management of chronic disease, telecare medical information systems have increasingly been used. Very recently, Zhang and Qi (J. Med. Syst. 38(5):47, 32), and Zhao (J. Med. Syst. 38(5):46, 33) separately proposed two authentication schemes for telecare medical information systems using radio frequency identification (RFID) technology. They claimed that their protocols achieve all security requirements including forward secrecy. However, this paper demonstrates that both Zhang and Qi's scheme, and Zhao's scheme could not provide forward secrecy. To augment the security, we propose an efficient RFID authentication scheme using elliptic curves for healthcare environments. The proposed RFID scheme is secure under common random oracle model.
authors.affiliation: Faculty of Mathematics Sciences and Computer, Kharazmi University, Tehran, Iran.
authors.forename: Mohammad Sabzinejad
authors.initials: MS
authors.lastname: Farash
authors.affiliation: Telecommunication Systems, Blekinge Institute of Technology, Karlskrona, Sweden.
authors.forename: Omer
authors.initials: O
authors.lastname: Nawaz
authors.affiliation: Department of Computer Science & Software Engineering, International Islamic University, Islamabad, Pakistan.
authors.forename: Khalid
authors.initials: K
authors.lastname: Mahmood
authors.affiliation: Department of Computer Science & Software Engineering, International Islamic University, Islamabad, Pakistan. shahzad@iiu.edu.pk.
authors.forename: Shehzad Ashraf
authors.initials: SA
authors.lastname: Chaudhry
authors.affiliation: Center of Excellence in Information Assurance, King Saud University, Riyadh, Saudi Arabia.
authors.forename: Muhammad Khurram
authors.initials: MK
authors.lastname: Khan
mesh_terms: D000465:Algorithms; D016494:Computer Security; D003219:Confidentiality; D006801:Humans; D057233:Radio Frequency Identification Device / Q000379:methods* / Q000592:standards; D017216:Telemedicine / Q000379:methods* / Q000592:standards
keywords: Authentication; Elliptic curve; RFID; Random oracle model; Telecare medical information systems; Untraceable privacy