Abstract:Benefited from the development of network and communication technologies, E-health care systems and telemedicine have got the fast development. By using the E-health care systems, patient can enjoy the remote medical service provided by the medical server. Medical data are important privacy information for patient, so it is an important issue to ensure the secure of transmitted medical data through public network. Authentication scheme can thwart unauthorized users from accessing services via insecure network environments, so user authentication with privacy protection is an important mechanism for the security of E-health care systems. Recently, based on three factors (password, biometric and smart card), an user authentication scheme for E-health care systems was been proposed by Amin et al., and they claimed that their scheme can withstand most of common attacks. Unfortunate, we find that their scheme cannot achieve the untraceability feature of the patient. Besides, their scheme lacks a password check mechanism such that it is inefficient to find the unauthorized login by the mistake of input a wrong password. Due to the same reason, their scheme is vulnerable to Denial of Service (DoS) attack if the patient updates the password mistakenly by using a wrong password. In order improve the security level of authentication scheme for E-health care application, a robust user authentication scheme with privacy protection is proposed for E-health care systems. Then, security prove of our scheme are analysed. Security and performance analyses show that our scheme is more powerful and secure for E-health care systems when compared with other related schemes.

A Note on "Design of a Password Authentication and Key Agreement Scheme to Access e-Healthcare Services"

An Efficient Delegation-Based Anonymous Authentication Protocol

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

An Improved Anonymous Remote User Authentication Scheme with Key Agreement Based on Dynamic Identity

Cryptanalysis of Sun and Cao's Remote Authentication Scheme with User Anonymity

Design of a User Anonymous Password Authentication Scheme Without Smart Card.

An Novel Anonymous Authenticated and Key Exchange Protocol

Design issues in "a secure and efficient key agreement framework for critical energy infrastructure using mobile device"

Cryptanalysis and improvement of a user authentication scheme preserving uniqueness and anonymity for connected health care

A Note on "An Anonymous and Certificateless Identity Authentication Protocol for Mobile Edge Computing"

Cryptanalysis and Enhancement of Anonymity Preserving Remote User Mutual Authentication and Session Key Agreement Scheme for E-Health Care Systems

An Improved Remote User Authentication Scheme with Key Agreement

A New Authenticated Key Agreement Scheme Based on Smart Cards Providing User Anonymity with Formal Proof.

Security Analysis And Improvement Of 'A More Secure Anonymous User Authentication Scheme For The Integrated Epr Information System'

Secure Remote User Mutual Authentication Scheme with Key Agreement for Cloud Environment

Secure and Efficient Two-Factor User Authentication Scheme with User Anonymity for Network Based E-Health Care Applications

An efficient and certificateless conditional privacy-preserving authentication and key agreement scheme for smart healthcare

An Efficient and Privacy-Preserving Mutual Authentication with Key Agreement Scheme for Telecare Medicine Information System

An Untraceable Ecc-Based Remote User Authentication Scheme

Two-factor Authentication Schemes Based Smart Card and Password with User Anonymity ⋆

A Biometrics-Based Anonymous Authentication and Key Agreement Scheme for Wireless Sensor Networks