A biometrics-based robust and secure user authentication protocol for e-healthcare service

摘要

In e-healthcare services like Telecare Medicine Information Systems (TMIS), proper user authentication is necessary for a secured access of medical server data by authorized doctors or patients. As key size Chebyshev chaotic maps is smaller, it has been noted that chaotic maps based user authentication schemes have more efficiency than ECC or RSA based schemes. Unfortunately, literature study reveals that most of the available chaotic map based user authentication schemes in TMIS suffer from some common serious security weakness like parallel session and reflection attack, ephemeral secret key leakage attack etc. In this paper, we propose a provably secure and efficient new user authentication scheme based on extended chaotic map for TMIS. The scheme ingeniously uses smart card, password and user biometrics to achieve three-factor authentication. To prove the security of the proposed scheme, we provide both informal security analysis as well as formal security verification using BAN (Burrows, Abadi and Needham) logic. Further, performance analysis shows that the scheme is quite efficient and light-weight. Chebyshev chaotic maps Remote user authentication Telecare Medicine information system (TMIS) User biometrics BAN Logic.