Abstract:Background and objective: With the rapid development of wireless communication technologies and the growing prevalence of smart devices, telecare medical information system (TMIS) allows patients to receive medical treatments from the doctors via Internet technology without visiting hospitals in person. By adopting mobile device, cloud-assisted platform and wireless body area network, the patients can collect their physiological conditions and upload them to medical cloud via their mobile devices, enabling caregivers or doctors to provide patients with appropriate treatments at anytime and anywhere. In order to protect the medical privacy of the patient and guarantee reliability of the system, before accessing the TMIS, all system participants must be authenticated. Methods: Mohit et al. recently suggested a lightweight authentication protocol for cloud-based health care system. They claimed their protocol ensures resilience of all well-known security attacks and has several important features such as mutual authentication and patient anonymity. In this paper, we demonstrate that Mohit et al.'s authentication protocol has various security flaws and we further introduce an enhanced version of their protocol for cloud-assisted TMIS, which can ensure patient anonymity and patient unlinkability and prevent the security threats of report revelation and report forgery attacks. Results: The security analysis proves that our enhanced protocol is secure against various known attacks as well as found in Mohit et al.'s protocol. Compared with existing related protocols, our enhanced protocol keeps the merits of all desirable security requirements and also maintains the efficiency in terms of computation costs for cloud-assisted TMIS. Conclusions: We propose a more secure mutual authentication and privacy preservation protocol for cloud-assisted TMIS, which fixes the mentioned security weaknesses found in Mohit et al.'s protocol. According to our analysis, our authentication protocol satisfies most functionality features for privacy preservation and effectively cope with cloud-assisted TMIS with better efficiency.

A Scalable Transitive Human-Verifiable Authentication Protocol for Mobile Devices.

Authentication scheme based on biometric encryption for pervasive computing environments

An Efficient Delegation-Based Anonymous Authentication Protocol

A Provable Authenticated Group Key Agreement Protocol for Mobile Environment

Secure and Efficient Mobile RFID Authentication Protocol

A Strong User Authentication Scheme with Smart Cards for Wireless Communications

Instant And Robust Authentication And Key Agreement Among Mobile Devices

Cloud-assisted mutual authentication and privacy preservation protocol for telecare medical information systems

Breaking Three Remote User Authentication Systems for Mobile Devices

Efficient Authentication Schemes for Handover in Mobile WiMAX.

An Efficient and Provably Secure Anonymous User Authentication and Key Agreement for Mobile Cloud Computing.

Lightweight Rfid Mutual Authentication Protocol Against Feasible Problems

Lightweight and provably secure user authentication with anonymity for the global mobility network

An Efficient Authentication Scheme for Access Control in Mobile Pay-Tv Systems

Secure and Efficient Handover Authentication Based on Bilinear Pairing Functions

Bilinear Pairings-Based Threshold Identity Authentication Scheme for Ad Hoc Network.

Mutual Authentication with Anonymity for Roaming Service with Smart Cards in Wireless Communications.

A Secure Distributed Authentication scheme based on CRT-VSS and Trusted Computing in MANET

Secure and anonymous authentication scheme for the Internet of Things with pairing

A Threshold Multi-server Protocol for Password-Based Authentication.

On the Challenges in Designing Identity-Based Privacy-Preserving Authentication Schemes for Mobile Devices