Design And Implementation Of An Authentication Scheme For Telecare Medical System

The traditional medical model requires patients to undergo a series of complex procedures, such as going to hospital, registration and waiting. Therefore, people expect that medical service level can be improved and medical procedure can be optimized by applying new information technologies to medical field, in particular by exploring a new medical system. For example, telecare medical information system can improve medical services and provide convenience for patients. However, the medical data in information system is stored in the form of plaintext, which easily results in the leakage of patient’s privacy. Meanwhile, the authentication scheme between the legitimate users and the storage server is frequently attacked because of the security flaws.In order to solve these problems, some scholars design telecare medical system based on cloud and proposed authentication schemes, which enables patients to obtain telecare medical services and protects the privacy of medical data. However, security issues, such as anonymity, replay attack, man-in-the-middle attack, still exist in these authentication schemes. Moreover, the proposed authentication scheme is not suitable for telecare medical system.This paper aims at addressing the above problems. The main contributions are described as follows:1. A message and identity authentication scheme is proposed by using bilinear pairing.2. The scheme can not only realize the anonymity of the patients, successfully prevent replay attack and man-in-the-middle attack, but also can be applied to the telecare medical system.3. The security of the scheme is proved by using the random oracle model. In addition, the proposed scheme has less computational complexity than other schemes.4. The scheme is simulated and implemented in the Windows and Android platform to prove the feasibility.