A two-factor key verification system focused on remote user for medical applications. (2017)

• Record Type: Journal Article
• Authors: Limbasiya, Trupil; Shivam, Sachit
• Is Part Of: International journal of critical infrastructures. Volume 13:Number 2/3(2017)
• Page Start: 133
• Page End: 151
• Publication Date: 2017
• Subjects: authentication -- key agreement -- session key -- TMIS; Infrastructure (Economics) -- Security measures -- Periodicals; Risk assessment -- Periodicals; Emergency management -- Periodicals; 363.05
• Languages: English
• ISSNs: 1475-3219

Abstract

Doctors can provide healthcare related treatments to users by using telecare medicine information systems (TMISs). To safeguard these systems, an appropriate security scheme for authentication plus key agreement is required conclusively. Recently in 2015, Arshad et al. (2015) revealed some flaws in Bin Muhaya's authentication and key agreement scheme and proposed an enhanced system on the same. However, we demonstrate that Arshad et al.'s (2015) scheme is susceptible to session key disclosure as well as user impersonation attacks. Moreover, in pursuance of better security, we introduce a new two-factor authentication and key agreement scheme.