Cryptanalysis and improvement of REAS‐TMIS: Resource‐efficient authentication scheme for telecare medical information system. Issue 1 (14th September 2022)

• Record Type: Journal Article
• Authors: Kumar, C Madan; Amin, Ruhul; Brindha, M
• Is Part Of: Security and privacy. Volume 6:Issue 1(2023)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2022-09-14
• Subjects: cryptanalysis -- security -- session key disclosure attack; Computer security -- Periodicals; Data protection -- Periodicals; Cyberterrorism -- Periodicals; 005.8
• DOI: 10.1002/spy2.268
• Languages: English
• ISSNs: 2475-6725

Abstract

Abstract: Recently, Tanveer et al. proposed a resource‐efficient authentication scheme for telecare medical information systems employing the authenticated key exchange. Tanveer et al. vehemently claimed that the protocol is safe against smart card stolen attacks, password guessing attacks, anonymity and untraceability, replay attacks, man‐in‐the‐middle attacks, impersonation attacks, and so forth. We have scrutinized the Tanveer et al. protocol. Based on his attack model, we have analyzed that this protocol is not secured against session key disclosure attacks, privileged insider attacks, and medical server impersonation attacks. We have also discussed improvement mechanisms to protect the mentioned security threats.