ارسل ملاحظاتك

ارسل ملاحظاتك لنا







Cryptanalysis and Improvement of A Password-Based User Authentication Scheme for the Integrated EPR Information System

المصدر: مجلة جامعة الملك سعود - علوم الحاسب والمعلومات
الناشر: جامعة الملك سعود
المؤلف الرئيسي: Islam, SK Hafizul (Author)
مؤلفين آخرين: Biswas, G. P. (Co-Author)
المجلد/العدد: مج27, ع2
محكمة: نعم
الدولة: السعودية
التاريخ الميلادي: 2015
الصفحات: 211 - 221
DOI: 10.33948/0584-027-002-011
ISSN: 1319-1578
رقم MD: 973598
نوع المحتوى: بحوث ومقالات
اللغة: الإنجليزية
قواعد المعلومات: science
مواضيع:
كلمات المؤلف المفتاحية:
EPR Information System | Two Factor User Authentication | Password | Healthcare | Smartcard | Anonymity
رابط المحتوى:
صورة الغلاف QR قانون
حفظ في:
المستخلص: Recently, Wu et al. proposed a password-based remote user authentication scheme for the integrated Electronic Patient Record (EPR) information system to achieve mutual authentication and session key agreement over the Internet. They claimed that the scheme resists various attacks and offers lower computation cost, data integrity, confidentiality and authenticity. However, we observed that the scheme cannot withstand lost smartcard/off-line password guessing, privileged-insider and known session-specific temporary information attacks, and lacks the requirements of lost smartcard revocation and users’ anonymity. Besides, the password change phase is inconvenient to use because a user cannot change his password independently. Thus, we proposed a new password based user authentication scheme for the integrated EPR information system that would be able to resist detected security flaws of Wu et al.’s scheme.

ISSN: 1319-1578