An Improved and Secure Anonymous Biometric-Based User Authentication with Key Agreement Scheme for the Integrated EPR Information System

Nowadays, many hospitals and medical institutes employ an authentication protocol within electronic patient records (EPR) services in order to provide protected electronic transactions in e-medicine systems. In order to establish efficient and robust health care services, numerous studies have been...

Full description

Saved in:
Bibliographic Details
Published in:PloS one 2017-01, Vol.12 (1), p.e0169414-e0169414
Main Authors: Jung, Jaewook, Kang, Dongwoo, Lee, Donghoon, Won, Dongho
Format: Article
Language:English
Subjects:
Access control
Agreements
Algorithms
Authentication
Authentication (Identity)
Biometric Identification
Biometrics
Communication
Computer and Information Sciences
Computer engineering
Computer Security
Computer Simulation
Confidentiality
Cybersecurity
Efficiency
Electronic Health Records
Electronics
Fuzzy Logic
Health care
Health care industry
Hospitals
Humans
Information Systems
Medical records
Medicine and Health Sciences
Passwords
Physical Sciences
Research and Analysis Methods
Safety and security measures
Security
Sensors
Smart cards
Social Sciences
Software
Spoofing
Technology application
Telemedicine
Upgrading
Wireless networks
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Nowadays, many hospitals and medical institutes employ an authentication protocol within electronic patient records (EPR) services in order to provide protected electronic transactions in e-medicine systems. In order to establish efficient and robust health care services, numerous studies have been carried out on authentication protocols. Recently, Li et al. proposed a user authenticated key agreement scheme according to EPR information systems, arguing that their scheme is able to resist various types of attacks and preserve diverse security properties. However, this scheme possesses critical vulnerabilities. First, the scheme cannot prevent off-line password guessing attacks and server spoofing attack, and cannot preserve user identity. Second, there is no password verification process with the failure to identify the correct password at the beginning of the login phase. Third, the mechanism of password change is incompetent, in that it induces inefficient communication in communicating with the server to change a user password. Therefore, we suggest an upgraded version of the user authenticated key agreement scheme that provides enhanced security. Our security and performance analysis shows that compared to other related schemes, our scheme not only improves the security level, but also ensures efficiency.
ISSN:1932-6203
1932-6203
DOI:10.1371/journal.pone.0169414