Towards Secure TMIS Protocols

Ruhul Amin, G. P. Biswas

Ruhul Amin, Gautam Biswas

P.M.T.B Sandirigama

Xuanang Li, Zhiming Zheng, Xiao Li Zhang

Telecare Medicine Information System enables patients to get healthcare services at home expediently and efficiently. Authentication and key agreement protocol suited for TMIS protect patient's privacy via the unsecure network. Recently, numerous protocols have been proposed intend to safeguard the communication between patients and server. However, most of them have high computation overhead and security problems. In this paper, we aim to propose a secure and effective authentication and key agreement protocol using smartcard and password for TMIS. The protocol is based on elliptic curve cryptography. Through security analysis we illustrate that our protocol is secure to resist some known attacks and provide user anonymity. Furthermore, by comparing with other related protocols we show our protocol is superior in security and performance aspects.

Muhammad Tanveer, Abd Ullah Khan, Ahmed Hussein Alkhayyat +3 more

The phenomenal growth of smartphones and wearable devices has begun crowd-sourcing applications for the Internet of Things (IoT). E-healthcare is considered the essential service for crowd-sourcing IoT applications that help remote access or storage medical server (MS) data to the authorized doctors, patients, nurses, etc., via the public Internet. As the public Internet is exposed to various security attacks, remote user authenticated key exchange (AKE) has become a pressing need for the secure and reliable use of these services. This paper proposes a new resource-efficient AKE scheme for telecare medical information systems, called REAS-TMIS. It uses authenticated encryption with associative data (AEAD) and a hash function. AEAD schemes are devised specifically for encrypted communication among resource-constricted IoT devices. These features of AEAD make REAS-TMIS resource-efficient. Moreover, REAS-TMIS dispenses with the elliptic curve point multiplication and chaotic map that are computationally expensive operations. In addition, REAS-TMIS renders the functionality of session key (SK) establishment for future encrypted communication between MS and users after validating the authenticity of the user. The security of SK is corroborated employing the well establish random oracle model. Moreover, Scyther-based security corroboration is implemented to show that REAS-TMIS is secure, and informal security analysis is executed to show the resiliency of REAS-TMIS against various security attacks. Besides, a thorough analysis shows that REAS-TMIS, while accomplishing the authentication phase, requires less computational, communication, and storage resources than the related authentication protocol.

Shaheena Khatoon, Sk. Md. Mizanur Rahman, Majed Alrubaian +1 more

Smart home systems can provide health care services for people with special needs in their own homes. Briefly defined, such a smart home has special electronics to enable the remote control of automated devices specifically designed for remote health care to ensure the safety of the patient at home and the supervision of their health status. These sensors are linked to a local intelligence unit responsible for analyzing sensor data, detecting emergency situations, and interfacing between the patient at home and a set of people involved in their health care, such as doctors, nurses, emergency services, and paramedics. Smart homes can improve the patient's quality of life and safety through the innovative use of advanced technologies. Telemedicine and telecare are driving forces behind the adoption of smart homes. The telecare medicine information system (TMIS) has drawn worldwide attention for the past 20 years, as modern technologies have made remote delivery of healthcare a reality. TMIS using multidisciplinary research and application involves advanced technologies in information processing, telecommunications, bio-sensing, and artificial intelligence including smart technologies. TMIS leverages the latest mobile and wireless communication technologies and widely available internet infrastructure to deliver quality services to home patients enabling them to remotely access information about their health and obtain telemedical services. TMIS delivers capabilities to remotely provide $24\times 7$ health care facilities to patients. Its purpose is to provide patients with convenient and expedited remote health care services, greatly improving the quality and efficiency of health care services. However, the open and insecure nature of the internet poses a number of security threats to patient secrecy and privacy. Security design for TMIS is not trivial. Essential security and privacy are provided by mutual authentication and key agreement protocols. This paper proposes an efficient and secure, bilinear pairing-based, unlink-able, mutual authentication and key agreement protocol for TMIS. The proposed protocol adopts a fuzzy extractor for the identification of patients using the biometric data. The security of the proposed protocol is based on the hardness of the elliptic curve discrete logarithm problem (ECDLP) and elliptic curve computational Diffie-Hellman problem (ECCDHP) to preserve the privacy of the user. The detailed security analysis is discussed, and the results of comparison are provided.