An improved biometric–based remote user authentication scheme for connected healthcare. (1st January 2015)

• Record Type: Journal Article
• Authors: Mishra, Dheerendra; Chaturvedi, Ankita; Mukhopadhyay, Sourav
• Is Part Of: International journal of ad hoc and ubiquitous computing. Volume 18:Number 1/2(2015)
• Page Start: 75
• Page End: 84
• Publication Date: 2015-01-01
• Subjects: e–medicine -- connected healthcare -- network security -- smart cards -- passwords -- login -- biometrics -- cryptanalysis -- cryptography -- remote user authentication -- patient authentication -- user anonymity -- three factor authentication -- e–healthcare -- electronic healthcare -- healthcare technology; Ubiquitous computing -- Periodicals; Embedded computer systems -- Periodicals; Electronic data processing -- Distributed processing -- Periodicals; Wireless communication systems -- Periodicals; Computer architecture -- Periodicals; 004.2
• DOI: 10.1504/IJAHUC.2015.067794
• Languages: English
• ISSNs: 1743-8225

Abstract

The advancements in technology have made the internet an efficient and scalable tool to utilise for various online services; one of them is connected healthcare. The connected healthcare system presents the platform to deliver clinical service door to door. In these online services, it is required to ensure the authenticity of patients to protect medical resources/services. In 2013, Chang et al. presented biometric–based remote user authentication scheme with user anonymity for connected healthcare. They claimed that their biometrics based scheme is secure and efficient to validate the legality of the patient. Recently, Das and Goswami demonstrated that Chang et al.'s scheme is vulnerable to insider attack and man–in–the middle attack. They also showed some flaws in login and password change phases of Chang et al.'s scheme. Furthermore, they presented an improved scheme. However, we observe that Das and Goswami's scheme does not provide three factor authentication and is vulnerable to offline identity guessing attack. Further, we propose an improved biometric–based remote user authentication scheme for connected healthcare, which provides efficient login and password change phases where smart card quickly identifies the incorrect input. Moreover, the proposed scheme satisfies all desirable security attributes and achieves three factor authentication.