An Improved Two-Factor Authentication Scheme for Healthcare System

Abstract

Patients can communicate with their doctors from the comfort of their own homes. The Telecare Medicine Information Service is one of the most efficient, secure, and protective forms of communication. It maintains and provides patients' Electronic Medical Records (EMR), allowing doctors to track their patients and ensure they receive correct healthcare services. Therefore, the key concerns to stop unauthorised users from obtaining health information are security and privacy. There are several authentication methods in use today, but they are all susceptible to different kinds of attacks. We enhanced a two-factor-based authentication technique to increase security and privacy while addressing earlier shortcomings. We simulate our proposed scheme using the Automated Validation of Internet Security Protocols and Applications tool (AVISPA) tool that confirms that scheme is secure against active and passive attacks including replay and man-in-the-middle attacks. Our proposed protocol provides high security and better complexity based on communication, computation costs and execution time.