title: Secure and Efficient Two-Factor User Authentication Scheme with User Anonymity for Network Based E-Health Care Applications.
abstract: Benefited from the development of network and communication technologies, E-health care systems and telemedicine have got the fast development. By using the E-health care systems, patient can enjoy the remote medical service provided by the medical server. Medical data are important privacy information for patient, so it is an important issue to ensure the secure of transmitted medical data through public network. Authentication scheme can thwart unauthorized users from accessing services via insecure network environments, so user authentication with privacy protection is an important mechanism for the security of E-health care systems. Recently, based on three factors (password, biometric and smart card), an user authentication scheme for E-health care systems was been proposed by Amin et al., and they claimed that their scheme can withstand most of common attacks. Unfortunate, we find that their scheme cannot achieve the untraceability feature of the patient. Besides, their scheme lacks a password check mechanism such that it is inefficient to find the unauthorized login by the mistake of input a wrong password. Due to the same reason, their scheme is vulnerable to Denial of Service (DoS) attack if the patient updates the password mistakenly by using a wrong password. In order improve the security level of authentication scheme for E-health care application, a robust user authentication scheme with privacy protection is proposed for E-health care systems. Then, security prove of our scheme are analysed. Security and performance analyses show that our scheme is more powerful and secure for E-health care systems when compared with other related schemes.
authors.affiliation: State Key Laboratory of Virtual Reality Technology and Systems, School of Computer Science and Engineering, Beihang University, Beijing, 100191, China.|School of Computer Science and Engineering, Hunan University of Science and Technology, Xiangtan, 411201, China.
authors.forename: Xiong
authors.initials: X
authors.lastname: Li
authors.affiliation: State Key Laboratory of Virtual Reality Technology and Systems, School of Computer Science and Engineering, Beihang University, Beijing, 100191, China. niujianwei@buaa.edu.cn.
authors.forename: Jianwei
authors.initials: J
authors.lastname: Niu
authors.affiliation: School of Computing Science and Engineering, VIT University, Vellore, Tamilnadu, 632014, India.
authors.forename: Marimuthu
authors.initials: M
authors.lastname: Karuppiah
authors.affiliation: Department of Mathematics, Ch. Charan Singh University, Meerut, Uttar Pradesh, 250005, India.
authors.forename: Saru
authors.initials: S
authors.lastname: Kumari
authors.affiliation: Department of Computer Science and Engineering, Xiamen Institute of Technology, Xiamen, 361021, China.
authors.forename: Fan
authors.initials: F
authors.lastname: Wu
mesh_terms: D000465:Algorithms; D016494:Computer Security / Q000295:instrumentation*; D003219:Confidentiality; D066275:Health Information Exchange; D006801:Humans; D017216:Telemedicine
keywords: Authentication; Dynamic identity; E-health care systems; Privacy protection