Cryptanalysis and Improvement of RSA-based Authentication Scheme for Telecare Medical Information Systems

• Published in: 한국컴퓨터정보학회논문지 Vol. 25; no. 2; pp. 93 - 103
• Main Author: Keewon Kim(김기원)
• Format: Journal Article
• Language: English
• Published: 한국컴퓨터정보학회 01.02.2020
• Subjects: 컴퓨터학; Biometric; 패스워드 기반 인증; 스마트 카드; 보안; 생체정보; 원격 의료 정보 시스템; Smart Card; Telecare Medical Information System; Security; Password Based Authentication
• ISSN: 1598-849X; 2383-9945
• DOI: 10.9708/jksci.2020.25.02.093

The telecare medical information system (TMIS) supports convenient and rapid health-care services. A secure and efficient authentication and key agreement scheme for TMIS provides safeguarding electronic patient records (EPRs) and helps health care workers and medical personnel to rapidly making correct clinical decisions. Giri et al. proposed an RSA-based remote user authentication scheme using smart cards for TMIS and claimed that their scheme could resist various malicious attacks. In this paper, we point out that their scheme is still vulnerable to lost smart card attacks and replay attacks and propose an improved scheme to prevent the shortcomings. As compared with the previous authentication schemes for TMIS, the proposed scheme is more secure and practical. KCI Citation Count: 0