<p>Because of the significant advancements in information technology, patients can now receive real-time medical services over the Internet using the telecare medical information system <InlineEquation ID="IEq1"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="11227_2024_6851_Article_IEq1.gif" Format="GIF" Height="19" Rendition="HTML" Resolution="72" Type="Linedraw" Width="69" /> </InlineMediaObject> <EquationSource Format="TEX">\(\left( {{\mathcal{T}\mathcal{M}}I{\mathcal{S}}} \right)\)</EquationSource> <EquationSource Format="MATHML"><math> <mfenced close=")" open="("> <mrow> <mrow> <mi mathvariant="script">T</mi> <mi mathvariant="script">M</mi> </mrow> <mi>I</mi> <mi mathvariant="script">S</mi> </mrow> </mfenced> </math></EquationSource> </InlineEquation> rather than visiting the hospital. Patients can gather their physiological data and upload it to the cloud using their mobile devices, a wireless body area network, and a cloud-based architecture. This enables medical professionals to give patients the best care possible at any time and wherever. It is possible for attackers to perform malicious actions on patient medical reports sent over open channels. Patient privacy and security during transmission and storage of their medical records on the cloud server are critical aspects of the <InlineEquation ID="IEq2"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="11227_2024_6851_Article_IEq2.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="58" /> </InlineMediaObject> <EquationSource Format="TEX">\({\mathcal{T}\mathcal{M}}I{\mathcal{S}}\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mrow> <mi mathvariant="script">T</mi> <mi mathvariant="script">M</mi> </mrow> <mi>I</mi> <mi mathvariant="script">S</mi> </mrow> </math></EquationSource> </InlineEquation>. In recent years, scholar have introduced many privacy-preserving authentication systems to assure safe transmission and storage of patient medical reports in <InlineEquation ID="IEq3"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="11227_2024_6851_Article_IEq3.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="58" /> </InlineMediaObject> <EquationSource Format="TEX">\({\mathcal{T}\mathcal{M}}I{\mathcal{S}}\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mrow> <mi mathvariant="script">T</mi> <mi mathvariant="script">M</mi> </mrow> <mi>I</mi> <mi mathvariant="script">S</mi> </mrow> </math></EquationSource> </InlineEquation>. However, these techniques are concerned about increased computing complexity and security weaknesses, which reduce their relevance for real-world applications. In order to address the security and performance concerns, we present a lightweight, privacy-preserving mutual authentication technique for cloud-assisted <InlineEquation ID="IEq4"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="11227_2024_6851_Article_IEq4.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="58" /> </InlineMediaObject> <EquationSource Format="TEX">\({\mathcal{T}\mathcal{M}}I{\mathcal{S} }\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mrow> <mi mathvariant="script">T</mi> <mi mathvariant="script">M</mi> </mrow> <mi>I</mi> <mi mathvariant="script">S</mi> </mrow> </math></EquationSource> </InlineEquation> based on ECC. The proposed scheme significantly decreases computational cost while meeting all the security requirements of the <InlineEquation ID="IEq5"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="11227_2024_6851_Article_IEq5.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="58" /> </InlineMediaObject> <EquationSource Format="TEX">\({\mathcal{T}\mathcal{M}}I{\mathcal{S}}\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mrow> <mi mathvariant="script">T</mi> <mi mathvariant="script">M</mi> </mrow> <mi>I</mi> <mi mathvariant="script">S</mi> </mrow> </math></EquationSource> </InlineEquation> domain. The random Oracle model <InlineEquation ID="IEq6"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="11227_2024_6851_Article_IEq6.gif" Format="GIF" Height="19" Rendition="HTML" Resolution="72" Type="Linedraw" Width="63" /> </InlineMediaObject> <EquationSource Format="TEX">\( \left( {{\mathcal{R}\mathcal{O}\mathcal{M}}} \right)\)</EquationSource> <EquationSource Format="MATHML"><math> <mfenced close=")" open="("> <mrow> <mi mathvariant="script">R</mi> <mi mathvariant="script">O</mi> <mi mathvariant="script">M</mi> </mrow> </mfenced> </math></EquationSource> </InlineEquation> and the ProVerif 1.93 tool are used for formal security analysis. Additionally, we present an informal security assessment of the proposed scheme, demonstrating that it is effective in defending against the most common cryptographic attacks. The Big Integer class of Java is used to implement and test the proposed scheme. We also carried out a comprehensive computational and communicational cost analysis through experiments, which clearly demonstrates that our proposed scheme produces more cost-effective results than other existing schemes in its category.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

SLMAS: a secure and lightweight mutual authentication scheme for telecare medical information system based on ECC

  • Khushboo Gupta,
  • Vinod Kumar,
  • Ram Prakash,
  • Om Pal

摘要

Because of the significant advancements in information technology, patients can now receive real-time medical services over the Internet using the telecare medical information system \(\left( {{\mathcal{T}\mathcal{M}}I{\mathcal{S}}} \right)\) T M I S rather than visiting the hospital. Patients can gather their physiological data and upload it to the cloud using their mobile devices, a wireless body area network, and a cloud-based architecture. This enables medical professionals to give patients the best care possible at any time and wherever. It is possible for attackers to perform malicious actions on patient medical reports sent over open channels. Patient privacy and security during transmission and storage of their medical records on the cloud server are critical aspects of the \({\mathcal{T}\mathcal{M}}I{\mathcal{S}}\) T M I S . In recent years, scholar have introduced many privacy-preserving authentication systems to assure safe transmission and storage of patient medical reports in \({\mathcal{T}\mathcal{M}}I{\mathcal{S}}\) T M I S . However, these techniques are concerned about increased computing complexity and security weaknesses, which reduce their relevance for real-world applications. In order to address the security and performance concerns, we present a lightweight, privacy-preserving mutual authentication technique for cloud-assisted \({\mathcal{T}\mathcal{M}}I{\mathcal{S} }\) T M I S based on ECC. The proposed scheme significantly decreases computational cost while meeting all the security requirements of the \({\mathcal{T}\mathcal{M}}I{\mathcal{S}}\) T M I S domain. The random Oracle model \( \left( {{\mathcal{R}\mathcal{O}\mathcal{M}}} \right)\) R O M and the ProVerif 1.93 tool are used for formal security analysis. Additionally, we present an informal security assessment of the proposed scheme, demonstrating that it is effective in defending against the most common cryptographic attacks. The Big Integer class of Java is used to implement and test the proposed scheme. We also carried out a comprehensive computational and communicational cost analysis through experiments, which clearly demonstrates that our proposed scheme produces more cost-effective results than other existing schemes in its category.