Efficient and Provably Secure Anonymous User Authentication Scheme for Patient Monitoring Using Wireless Medical Sensor Networks

Guoai Xu,Miao Zhang,Feifei Wang,Junhao Peng

doi:10.1109/access.2020.2978891

Abstract

Wireless medical sensor networks (WMSNs) are playing an increasingly important role in smart healthcare applications. Since the data transmitted in WMSNs is closely related to patient's life and health, and considering the resource-constrain feature of the sensor node, constructing an authentication scheme for WMSNs is a formidable task. Recently, Soni et al. presented an elliptic curve cryptosystem based three-factor authentication scheme for WMSNs. However, we discover that their scheme suffers from serious vulnerabilities, such as sensor node capture attack, no forward secrecy, and the violation of three-factor security. To enhance the security and efficiency, we present a novel scheme using Rabin cryptosystem and chaotic maps. We use several widely-accepted security analysis methods to verify the correctness and security of our scheme. The Burrows-Abadi-Needham logic proof confirms the completeness of our scheme. The heuristic analysis indicates that our scheme is resistant to potential attacks and provides various security attributes like forward secrecy and three-factor security. Furthermore, we demonstrate that our scheme is provably secure in the random oracle model. Finally, the performance comparisons indicate that our scheme is superior to the related schemes both in security and efficiency and is more applicable to WMSNs owing to low overhead of the sensor node.

Highlights

With the fast development of the Internet of things (IoT) technologies, wireless medical sensor networks (WMSNs) are playing an increasingly important role in real-time patient monitoring, telemedicine, and smart healthcare system [1]–[3]
To enhance the security and efficiency, we present an efficient and provably secure biometric-based authentication scheme for WMSNs using Rabin cryptosystem and chaotic maps, in which we establish secure session key at a minimum cost
To enhance the security and efficiency, we propose a novel scheme using Rabin cryptosystem and chaotic maps, in which we establish secure session key at a minimum cost

Summary

INTRODUCTION

With the fast development of the Internet of things (IoT) technologies, wireless medical sensor networks (WMSNs) are playing an increasingly important role in real-time patient monitoring, telemedicine, and smart healthcare system [1]–[3]. 1. We point out that Soni et al.’s scheme [27] has vulnerabilities such as sensor node capture attack, no forward secrecy, and the violation of three-factor security. 2. To enhance the security and efficiency, we present an efficient and provably secure biometric-based authentication scheme for WMSNs using Rabin cryptosystem and chaotic maps, in which we establish secure session key at a minimum cost. Suppose that the adversary compromises the sensor node Sj, and obtains {SIDj, κj}, he can reveal the established session key between Sj and Ui in the following steps. The adversary can reveal the old and future session keys between Sj and Ui. Soni et al.’s scheme is vulnerable to sensor node capture attack

THE PROPOSED SCHEME

SECURITY ANALYSIS

SECURITY AND PERFORMANCE COMPARISON

CONCLUSION