title: A Survey of Authentication Schemes in Telecare Medicine Information Systems.
abstract: E-Healthcare is an emerging field that provides mobility to its users. The protected health information of the users are stored at a remote server (Telecare Medical Information System) and can be accessed by the users at anytime. Many authentication protocols have been proposed to ensure the secure authenticated access to the Telecare Medical Information System. These protocols are designed to provide certain properties such as: anonymity, untraceability, unlinkability, privacy, confidentiality, availability and integrity. They also aim to build a key exchange mechanism, which provides security against some attacks such as: identity theft, password guessing, denial of service, impersonation and insider attacks. This paper reviews these proposed authentication protocols and discusses their strengths and weaknesses in terms of ensured security and privacy properties, and computation cost. The schemes are divided in three broad categories of one-factor, two-factor and three-factor authentication schemes. Inter-category and intra-category comparison has been performed for these schemes and based on the derived results we propose future directions and recommendations that can be very helpful to the researchers who work on the design and implementation of authentication protocols.
authors.affiliation: National University of Sciences and Technology, Islamabad, Pakistan.
authors.forename: Muhammad Umair
authors.initials: MU
authors.lastname: Aslam
authors.affiliation: Center of Excellence in Information Assurance (CoEIA), King Saud University, Riyadh, 12372, Kingdom of Saudi Arabia.
authors.forename: Abdelouahid
authors.initials: A
authors.lastname: Derhab
authors.affiliation: Center of Excellence in Information Assurance (CoEIA), King Saud University, Riyadh, 12372, Kingdom of Saudi Arabia.
authors.forename: Kashif
authors.initials: K
authors.lastname: Saleem
authors.affiliation: National University of Sciences and Technology, Islamabad, Pakistan. haidera@kth.se.|Center of Excellence in Information Assurance (CoEIA), King Saud University, Riyadh, 12372, Kingdom of Saudi Arabia. haidera@kth.se.|Department of Computer Sciences, Florida Institute of Technology, 150 W University Blvd, Melbourne, FL, 32901, USA. haidera@kth.se.
authors.forename: Haider
authors.identifier: http://orcid.org/0000-0002-2437-4870
authors.initials: H
authors.lastname: Abbas
authors.affiliation: Department of Computing, Macquarie University, Sydney, NSW, 2109, Australia.|The Faculty of Information Technology, Macau University of Science and Technology, Taipa, Macau, People's Republic of China.
authors.forename: Mehmet
authors.initials: M
authors.lastname: Orgun
authors.affiliation: National University of Sciences and Technology, Islamabad, Pakistan.
authors.forename: Waseem
authors.initials: W
authors.lastname: Iqbal
authors.affiliation: National University of Sciences and Technology, Islamabad, Pakistan.
authors.forename: Baber
authors.initials: B
authors.lastname: Aslam
mesh_terms: D000465:Algorithms; D016494:Computer Security / Q000592:standards*; D003219:Confidentiality; D066275:Health Information Exchange / Q000592:standards*; D006801:Humans; D017216:Telemedicine / Q000379:methods* / Q000592:standards*
keywords: Biometric; Password; Smart card; Telecare medicine information system; User anonymity; User interaction