Cryptanalysis and security enhancement of Zhu's authentication scheme for Telecare medicine information system

Security and Communication Networks

Volumn 8, Issue 2, 2015, Pages 149-158

  Bin Muhaya, Fahad T ^a  

^a KING SAUD UNIVERSITY   (Saudi Arabia)

Author keywords

Authentication; Impersonation attack; Medical server; Telecare medicine information system; User anonymity

Indexed keywords

DENIAL-OF-SERVICE ATTACK; INFORMATION USE; MEDICAL COMPUTING; MEDICAL INFORMATION SYSTEMS; SMART CARDS;

AUTHENTICATION SCHEME; COMPLEX OPERATIONS; IMPERSONATION ATTACK; OFFLINE PASSWORD GUESSING ATTACK; PASSWORD GUESSING ATTACK; SECURITY ENHANCEMENTS; TELECARE; USER ANONYMITY;

AUTHENTICATION;

EID: 84919343487     PISSN: 19390114     EISSN: 19390122     Source Type: Journal    
DOI: 10.1002/sec.967     Document Type: Article

References (33)

1. Lambrinoudakis C, Gritzalis S. Managing medical and insurance information through a smart-card-based information system. Journal of Medical Systems 2000; 24(4):213-234.
2. Lee WB, Lee CD. A cryptographic key management solution for HIPAA privacy/security regulations. IEEE Transactions on Information Technology in Biomedicine 2008; 12(1):34-41.
3. Khan MK, Kim SK, Alghathbar K. Cryptanalysis and security enhancement of a more efficient & secure dynamic ID-based remote user authentication scheme. Computer Communications 2010; 34(3):305-309.
4. Li X, Niu J, Ma J, Wang W, Liu C. Cryptanalysis and improvement of a biometrics-based remote user authentication scheme using smart cards. Journal of Network and Computer Applications 2011; 34(1):73-79.
5. He D, Chen J, Hu J. Further improvement of Juang et al.'s password-authenticated key agreement scheme using smart cards. Kuwait Journal of Science & Engineering 2011; 38(2A):55-68.
6. Kumari S, Gupta MK, Kumar M. Cryptanalysis and security enhancement of Chen et al.'s remote user authentication scheme using smart card. Central European Journal of Computer Science 2012; 2(1):60-75.
7. He D, Chen J, Hu J. Improvement on a smart card based password authentication scheme. Journal of Internet Technology 2012; 13(3):405-410.
8. He D, Chen Y, Chen J. Cryptanalysis and improvement of an extended chaotic maps-based key agreement protocol. Nonlinear Dynamics 2012; 69(3):1149-1157.
9. He D, Wang D, Wu S. Cryptanalysis and improvement of a password-based remote user authentication scheme without smart cards. Information Technology and Control 2013; 42(2):170-177.
10. Li X, Niu J, Khan MK, Wang Z. Applying LU decomposition of matrices to design anonymity bilateral remote user authentication scheme. Mathematical Problems in Engineering 2013; Article ID 910409, 10 pages: DOI:10.1155/2013/910409.
11. Li X, Niu J, Khan MK, Liao J. An enhanced smart card based remote user password authentication scheme. Journal of Network and Computer Applications 2013; 36(5):1365-1371.
12. Li X, Niu J, Wang Z, Chen C. Applying biometrics to design three-factor remote user authentication scheme with key agreement. Security and Communication Networks 2013. doi:10.1002/Sec.767.
13. Li X, Niu J, Liao J, Liang W. Cryptanalysis of a dynamic identity based remote user authentication scheme with verifiable password update. International Journal of Communication Systems 2013. doi:10.1002/dac.2676.
14. Khan MK, Kumari S, Gupta MK. More efficient key-hash based fingerprint remote authentication scheme using mobile device. Computing 2013. doi:10.1007/s00607-013-0308-2.
15. Kumari S, Khan MK. More secure smart card based remote user password authentication scheme with user anonymity. Security and Communication Networks 2013. doi:10.1002/Sec.916.
16. Kumari S, Gupta MK, Khan MK, Li X. An improved timestamp-based password authentication scheme: comments, cryptanalysis and improvement. Security and Communication Networks 2013. doi:10.1002/Sec.906.
17. Kumari S, Khan MK. Cryptanalysis and improvement of 'a robust smart-card-based remote user password authentication scheme'. International Journal of Communication Systems 2013. doi:10.1002/dac.2590.
18. Li X, Ma J, Wang W, Xiong Y, Zhang J. A novel smart card and dynamic ID based remote user authentication scheme for multi-server environment. Mathematical and Computer Modelling 2013; 58(1-2):85-95.
19. Li X, Xiong Y, Ma J, Wang W. An efficient and security dynamic identity based authentication protocol for multi-server architecture using smart cards. Journal of Network and Computer Applications 2012; 35(2):763-769.
20. He D, Chen J, Hu J. An ID-based client authentication with key agreement protocol for mobile client-server environment on ECC with provable security. Information Fusion 2012; 13(3):223-230.
21. He D. An efficient remote user authentication and key exchange protocol for mobile client-server environment from pairings. Ad Hoc Networks 2012; 10(6):1009-1016.
22. Yang CC, Wang RC, Liu WT. Secure authentication scheme for session initiation protocol. Computers & Security 2005; 24:381-386.
23. He D, Chen J, Chen Y. A secure mutual authentication scheme for session initiation protocol using elliptic curve cryptography. Security and Communication Networks 2012; 5(12): 1423-1429.
24. Diffie W, Hellman M. New directions in cryptology. IEEE Transactions on Information Theory 1976; 22(6):644-654.
25. Wu ZY, Lee YC, Lai F, Lee HC, Chung Y. A secure authentication scheme for telecare medicine information systems. Journal of Medical Systems 2010. doi:10.1007/s10916-010-9614-9.
26. He DB, Chen JH, Zhang R. A more secure authentication scheme for Telecare medicine information systems. Journal of Medical Systems 2011. doi:10.1007/s10916-011-9658-5.
27. Wei J, Hu X, Liu W. An improved authentication scheme for Telecare medicine information systems. Journal of Medical Systems 2012. doi:10.1007/s10916-012-9835-1.
28. Zhu Z. An efficient authentication scheme for Telecare medicine information systems. Journal of Medical Systems 2012. doi:10.1007/s10916-012-9856-9.
29. Khan MK, Kumari S. An authentication scheme for secure access to healthcare services. Journal of Medical Systems 2013. doi:10.1007/s10916-013-9954-3.
30. Kocher P, Jaffe J, Jun B. Differential power analysis. Proceedings of Advances in Cryptology, Santa Barbara, CA, U.S.A., 1999; 388-397.
31. Messerges TS, Dabbish EA, Sloan RH. Examining smart-card security under the threat of power analysis attacks. IEEE Transactions on Computers 2002; 51(5):541-552.
32. Chen HM, Lo JW, Yeh CK. An efficient and secure dynamic id-based authentication scheme for Telecare medical information systems. Journal of Medical Systems 2012. doi:10.1007/s10916-012-9862-y.
33. Pu Q, Wang J, Zhao R. Strong authentication scheme for Telecare medicine information systems. Journal of Medical Systems 2011. doi:10.1007/s10916-011-9735-9.