title: A Robust and Anonymous Two Factor Authentication and Key Agreement Protocol for Telecare Medicine Information Systems.
abstract: Nowadays people can get many services including health-care services from distributed information systems remotely via public network. By considering that these systems are built on public network, they are vulnerable to many malicious attacks. Hence it is necessary to introduce an effective mechanism to protect both users and severs. Recently many two-factor authentication schemes have been proposed to achieve this goal. In 2016, Li et al. demonstrated that Lee et al.'s scheme was not satisfactory to be deployed in practice because of its security weaknesses and then proposed a security enhanced scheme to overcome these drawbacks. In this paper, we analyze Li et al.'s scheme is still not satisfactory to be applied in telecare medicine information systems (TMIS) because it fails to withstand off-line dictionary attack and known session-specific temporary information attack. Moreover, their scheme cannot provide card revocation services for lost smart card. In order to solve these security problems, we propose an improved scheme. Then we analyze our scheme by using BAN-logic model and compare the improved scheme with related schemes to prove that our scheme is advantageous to be applied in practice.
authors.affiliation: School of Information and Software Engineering, University of Electronic Science and Technology of China & State Key Laboratory of Cryptology, P.O. Box 5159, Beijing, 100878, China. xionghu.uestc@gmail.com.
authors.forename: Hu
authors.identifier: http://orcid.org/0000-0001-6137-6667
authors.initials: H
authors.lastname: Xiong
authors.affiliation: School of Information and Software Engineering, University of Electronic Science and Technology of China, P.O. Box 5159, Beijing, 100878, China.
authors.forename: Junyi
authors.initials: J
authors.lastname: Tao
authors.affiliation: The MOE key Laboratory for Transportation Complex Systems Theory and Technology School of Traffic and Transportation, Beijing Jiaotong University, Beijing, 100044, People's Republic of China.
authors.forename: Yanan
authors.initials: Y
authors.lastname: Chen
mesh_terms: D016494:Computer Security / Q000295:instrumentation*; D003219:Confidentiality; D066275:Health Information Exchange / Q000592:standards; D000069098:Health Smart Cards; D006801:Humans; D007256:Information Systems / Q000295:instrumentation*; D017711:Nonlinear Dynamics; D017216:Telemedicine / Q000295:instrumentation*
keywords: Authentication; Extended chaotic maps; Multi-server environment; Session key agreement; Smart card; TMIS