Three Factor Authentication Scheme for Telecare Medical Information System

With advances in technology and mobile computing, the user has access to a platform to get medical services door to door. Patients can now use remote medical services provided by the medical server. But the user and TMIS communicate via public channel which increases the security risk of patient confidential data. Making a convenient and secure connection between the two entities over the insecure channel is a major issue. It becomes necessary to make sure that only the authorized user is interacting with correct server. There are existing systems which provides security but are vulnerable to certain attacks. In this paper, we have proposed a three-factor scheme for user authentication which is secure against various attacks. The results shows that computation cost of our scheme is comparatively less than the related schemes. Also, the communication cost and execution time is reasonable. We have also done the informal security analysis using AVISPA which shows our scheme is secure against various attacks.