Abstract:Background and objective: With the rapid development of wireless communication technologies and the growing prevalence of smart devices, telecare medical information system (TMIS) allows patients to receive medical treatments from the doctors via Internet technology without visiting hospitals in person. By adopting mobile device, cloud-assisted platform and wireless body area network, the patients can collect their physiological conditions and upload them to medical cloud via their mobile devices, enabling caregivers or doctors to provide patients with appropriate treatments at anytime and anywhere. In order to protect the medical privacy of the patient and guarantee reliability of the system, before accessing the TMIS, all system participants must be authenticated. Methods: Mohit et al. recently suggested a lightweight authentication protocol for cloud-based health care system. They claimed their protocol ensures resilience of all well-known security attacks and has several important features such as mutual authentication and patient anonymity. In this paper, we demonstrate that Mohit et al.'s authentication protocol has various security flaws and we further introduce an enhanced version of their protocol for cloud-assisted TMIS, which can ensure patient anonymity and patient unlinkability and prevent the security threats of report revelation and report forgery attacks. Results: The security analysis proves that our enhanced protocol is secure against various known attacks as well as found in Mohit et al.'s protocol. Compared with existing related protocols, our enhanced protocol keeps the merits of all desirable security requirements and also maintains the efficiency in terms of computation costs for cloud-assisted TMIS. Conclusions: We propose a more secure mutual authentication and privacy preservation protocol for cloud-assisted TMIS, which fixes the mentioned security weaknesses found in Mohit et al.'s protocol. According to our analysis, our authentication protocol satisfies most functionality features for privacy preservation and effectively cope with cloud-assisted TMIS with better efficiency.

CDAKA: A Provably-Secure Heterogeneous Cross-Domain Authenticated Key Agreement Protocol with Symptoms-Matching in TMIS.

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

A Secure Authentication and Key Agreement Protocol for Telecare Medicine Information System

Efficient Anonymous Certificate-Based Multi- Message and Multi-Receiver Signcryption Scheme for Healthcare Internet of Things.

Authenticated Key Agreement Scheme with Strong Anonymity for Multi-Server Environment in TMIS

An Efficient and Privacy-Preserving Mutual Authentication with Key Agreement Scheme for Telecare Medicine Information System

A Biometrics-Based Mutual Authentication and Key Agreement Protocol for TMIS Using Elliptic Curve Cryptography

Computation-transferable authenticated key agreement protocol for smart healthcare

A Secure Biometrics-Based Authentication Key Exchange Protocol for Multi-Server TMIS Using ECC.

Cloud-assisted mutual authentication and privacy preservation protocol for telecare medical information systems

A Secure Chaotic Map-Based Remote Authentication Scheme for Telecare Medicine Information Systems

A Robust and Anonymous Two Factor Authentication and Key Agreement Protocol for Telecare Medicine Information Systems

Design of an Efficient and Provably Secure Anonymity Preserving Three-Factor User Authentication and Key Agreement Scheme for TMIS.

An Anonymous Authentication Protocol Based on Cloud for Telemedical Systems

RETRACTED: Cloud Enabled Robust Authenticated Key Agreement Scheme for Telecare Medical Information System (retracted Article. See Vol. 33, Pg. 1138, 2021)

AKA and Authorization Scheme for 4G Mobile Networks Based on Trusted Mobile Platform

An efficient and certificateless conditional privacy-preserving authentication and key agreement scheme for smart healthcare

Construction of RSA-Based Authentication Scheme in Authorized Access to Healthcare Services

Cryptanalysis and Enhancement of Anonymity Preserving Remote User Mutual Authentication and Session Key Agreement Scheme for E-Health Care Systems

An efficient and secure dynamic ID-based authentication scheme for telecare medical information systems

PSL-MAAKA: Provably Secure and Lightweight Mutual Authentication and Key Agreement Protocol for Fully Public Channels in Internet of Medical Things.