title: An Improved and Secure Anonymous Biometric-Based User Authentication with Key Agreement Scheme for the Integrated EPR Information System.
abstract: Nowadays, many hospitals and medical institutes employ an authentication protocol within electronic patient records (EPR) services in order to provide protected electronic transactions in e-medicine systems. In order to establish efficient and robust health care services, numerous studies have been carried out on authentication protocols. Recently, Li et al. proposed a user authenticated key agreement scheme according to EPR information systems, arguing that their scheme is able to resist various types of attacks and preserve diverse security properties. However, this scheme possesses critical vulnerabilities. First, the scheme cannot prevent off-line password guessing attacks and server spoofing attack, and cannot preserve user identity. Second, there is no password verification process with the failure to identify the correct password at the beginning of the login phase. Third, the mechanism of password change is incompetent, in that it induces inefficient communication in communicating with the server to change a user password. Therefore, we suggest an upgraded version of the user authenticated key agreement scheme that provides enhanced security. Our security and performance analysis shows that compared to other related schemes, our scheme not only improves the security level, but also ensures efficiency.
authors.affiliation: Department of Computer Engineering, Sungkyunkwan University, 2066 Seoburo, Suwon, Gyeonggido 16419, Korea.
authors.forename: Jaewook
authors.identifier: http://orcid.org/0000-0002-2820-7906
authors.initials: J
authors.lastname: Jung
authors.affiliation: Department of Computer Engineering, Sungkyunkwan University, 2066 Seoburo, Suwon, Gyeonggido 16419, Korea.
authors.forename: Dongwoo
authors.initials: D
authors.lastname: Kang
authors.affiliation: Department of Computer Engineering, Sungkyunkwan University, 2066 Seoburo, Suwon, Gyeonggido 16419, Korea.
authors.forename: Donghoon
authors.initials: D
authors.lastname: Lee
authors.affiliation: Department of Computer Engineering, Sungkyunkwan University, 2066 Seoburo, Suwon, Gyeonggido 16419, Korea.
authors.forename: Dongho
authors.initials: D
authors.lastname: Won
mesh_terms: D000465:Algorithms; D056667:Biometric Identification; D003142:Communication; D016494:Computer Security; D003198:Computer Simulation; D003219:Confidentiality; D057286:Electronic Health Records; D004581:Electronics; D017143:Fuzzy Logic; D006761:Hospitals; D006801:Humans; D007256:Information Systems; D012984:Software; D017216:Telemedicine