title: A Standard Mutual Authentication Protocol for Cloud Computing Based Health Care System.
abstract: Telecare Medical Information System (TMIS) supports a standard platform to the patient for getting necessary medical treatment from the doctor(s) via Internet communication. Security protection is important for medical records (data) of the patients because of very sensitive information. Besides, patient anonymity is another most important property, which must be protected. Most recently, Chiou et al. suggested an authentication protocol for TMIS by utilizing the concept of cloud environment. They claimed that their protocol is patient anonymous and well security protected. We reviewed their protocol and found that it is completely insecure against patient anonymity. Further, the same protocol is not protected against mobile device stolen attack. In order to improve security level and complexity, we design a light weight authentication protocol for the same environment. Our security analysis ensures resilience of all possible security attacks. The performance of our protocol is relatively standard in comparison with the related previous research.
authors.affiliation: Department of Computer Science and Engineering, Indian Institute of Technology (ISM), Dhanbad, 826004, Jharkhand, India.
authors.forename: Prerna
authors.initials: P
authors.lastname: Mohit
authors.affiliation: Department of Computer Science and Engineering, Thapar University, Patiala, 147004, Punjab, India. amin_ruhul@live.com.
authors.forename: Ruhul
authors.initials: R
authors.lastname: Amin
authors.affiliation: Department of Computer Science and Engineering, Indian Institute of Technology (ISM), Dhanbad, 826004, Jharkhand, India.
authors.forename: Arijit
authors.initials: A
authors.lastname: Karati
authors.affiliation: Department of Computer Science and Engineering, Indian Institute of Technology (ISM), Dhanbad, 826004, Jharkhand, India.
authors.forename: G P
authors.initials: GP
authors.lastname: Biswas
authors.affiliation: Center of Excellence in Information Assurance, King Saud University, Riyadh, Saudi Arabia.
authors.forename: Muhammad Khurram
authors.initials: MK
authors.lastname: Khan
mesh_terms: D000465:Algorithms; D000067917:Cloud Computing; D016494:Computer Security / Q000295:instrumentation*; D003219:Confidentiality; D066275:Health Information Exchange / Q000592:standards*; D006801:Humans; D020407:Internet; D017216:Telemedicine / Q000295:instrumentation*
keywords: Anonymity; Cloud database; Signature; TMIS