Abstract:Background and objective: With the rapid development of wireless communication technologies and the growing prevalence of smart devices, telecare medical information system (TMIS) allows patients to receive medical treatments from the doctors via Internet technology without visiting hospitals in person. By adopting mobile device, cloud-assisted platform and wireless body area network, the patients can collect their physiological conditions and upload them to medical cloud via their mobile devices, enabling caregivers or doctors to provide patients with appropriate treatments at anytime and anywhere. In order to protect the medical privacy of the patient and guarantee reliability of the system, before accessing the TMIS, all system participants must be authenticated. Methods: Mohit et al. recently suggested a lightweight authentication protocol for cloud-based health care system. They claimed their protocol ensures resilience of all well-known security attacks and has several important features such as mutual authentication and patient anonymity. In this paper, we demonstrate that Mohit et al.'s authentication protocol has various security flaws and we further introduce an enhanced version of their protocol for cloud-assisted TMIS, which can ensure patient anonymity and patient unlinkability and prevent the security threats of report revelation and report forgery attacks. Results: The security analysis proves that our enhanced protocol is secure against various known attacks as well as found in Mohit et al.'s protocol. Compared with existing related protocols, our enhanced protocol keeps the merits of all desirable security requirements and also maintains the efficiency in terms of computation costs for cloud-assisted TMIS. Conclusions: We propose a more secure mutual authentication and privacy preservation protocol for cloud-assisted TMIS, which fixes the mentioned security weaknesses found in Mohit et al.'s protocol. According to our analysis, our authentication protocol satisfies most functionality features for privacy preservation and effectively cope with cloud-assisted TMIS with better efficiency.

Secure communication and privacy preserving for medical system

A Dual Privacy-Preservation Scheme for Cloud-Based Ehealth Systems

Efficient Anonymous Certificate-Based Multi- Message and Multi-Receiver Signcryption Scheme for Healthcare Internet of Things.

A Privacy-Preserved ID-Based Secure Communication Scheme in 5G-IoT Telemedicine Systems

An Efficient User Authentication and User Anonymity Scheme with Provably Security for IoT-Based Medical Care System

Collaborative and secure transmission of medical data applied to mobile healthcare

A Security Awareness and Protection System for 5G Smart Healthcare Based on Zero-Trust Architecture

Cloud-assisted mutual authentication and privacy preservation protocol for telecare medical information systems

Seamless healthcare access: An efficient solution to access medical data using Internet of Things based multimedia communication

Internet of medical things: Prospects, challenges and future research directions

PMRSS: Privacy-Preserving Medical Record Searching Scheme for Intelligent Diagnosis in IoT Healthcare

Privacy Protection for Medical Data Sharing in Smart Healthcare

Security Privacy and Policy for Cryptographic Based Electronic Medical Information System

Lightweight and efficient privacy‐preserving mutual authentication scheme to secure Internet of Things‐based smart healthcare

IRS-driven Cybersecurity of Healthcare Cyber Physical Systems

A Smartcard-Based User-Controlled Single Sign-On for Privacy Preservation in 5G-IoT Telemedicine Systems

A Privacy-Preserving Medical Data Sharing Scheme Based on Blockchain

A blockchain-based scheme for privacy-preserving and secure sharing of medical data

Dual blockchain-based data sharing mechanism with privacy protection for medical internet of things

A lightweight security model for ensuring patient privacy and confidentiality in telehealth applications

Healthchain: A Privacy Protection System for Medical Data Based on Blockchain