The Cryptanalysis of Lee's Chaotic Maps-Based Authentication and Key Agreement Scheme using Smart card for Telecare Medicine Information Systems

摘要

The Telecare medicine information system (TMIS) is developed to provideTelecare services to the remote user. A user can access remote medical serversusing internet without moving from his place. Although remote user and serverexchange their messages/data via public networks. An adversary is considered tobe enough powerful that he may have full control over the public network. Thismakes these Telecare services vulnerable to attacks. To ensure securecommunication between the user and server many password based authenticationschemes have been proposed. In 2013, Hao et al. presented chaotic maps-basedpassword authentication scheme for TMIS. Recently, Lee identified that Hao etal.'s scheme fails to satisfy key agreement property, such that a maliciousserver can predetermine the session key. Lee also presented an efficientchaotic map-based password authentication and key agreement scheme using Smartcards for TMIS. In this article, we briefly review Lee's scheme anddemonstrates the weakness of Lee's scheme. The study shows that the Lee'sscheme inefficiency of password change phase causes denial of service attackand login phase results extra computation and communication overhead.