arXiv 1406.39432014-06-16cs.CR

Cryptanalysis of Cryptanalysis and Improvement of Yan et al Biometric-Based Authentication Scheme for TMIS

Mrudula Sarvabhatla, M. Giri, Chandra Sekhar Vorugunti

备注：: arXiv admin note: text overlap with arXiv:1309.4944 by other authors

英文摘要：

Remote user authentication is critical requirement in Telecare Medicine Information System (TMIS) to protect the patient personal details, security and integrity of the critical medical records of the patient as the patient data is transmitted over insecure public communication channel called Internet. In 2013, Yan proposed a biometric based remote user authentication scheme and claimed that his scheme is secure. Recently, Dheerendra et al. demonstrated some drawbacks in Yan et al scheme and proposed an improved scheme to erase the drawbacks of Yan et al scheme. We analyze Dheerendra et al scheme and identify that their scheme is vulnerable to off-line identity guessing attack, and on successfully mounting it, the attacker can perfom all major cryptographic attacks.

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。

阅读原文

阅读 PDF ↗

arXiv 页面 ↗HTML 原文 ↗

本文内容

英文摘要相关论文

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。

继续探索

相关论文

Cryptanalysis and Improvement of Yan et al.'s Biometric-based authentication scheme for Telecare Medicine Information Systems

Remote user authentication is desirable for a Telecare medicine information system (TMIS) to verify the correctness of remote users and server over the insecure channel. We propose an authentication scheme for TMIS.

2014-05-02cs.CR

Cryptanalysis and Improvement of an Improved Two Factor Authentication Scheme for Telecare Medicine Information Systems

Telecare medical information systems (TMIS) aim to provide healthcare services remotely. Efficient and secure mechanism for authentication and key agreement is required in order to guarantee the security and privacy of patients in TMIS.

2016-12-30cs.CR

Security Enhancement of Biometric Authentication Scheme for Telecare Medicine Information Systems with Nonce

Telecare medicine information systems (TMIS) present the platform to deliver clinical service door to door. The technological advances in mobile computing are enhancing the quality of healthcare and a user can access these services using its mobile device. Existing authentication schemes for TMIS are either vulnerable to attacks or they have higher computational cost. We propose a biometric based efficient authentication scheme for TMIS which only requires the computation of the hash and XOR functions.

2014-05-02cs.CR

基于ECC的云辅助TMIS安全双向认证协议的密码分析

Cryptanalysis on Secure ECC based Mutual Authentication Protocol for Cloud-Assisted TMIS

本文对Kumar等人提出的基于ECC的云辅助TMIS双向认证协议进行密码分析，发现其存在健康报告泄露和机密性缺陷。

2023-06-13cs.CRcs.ITmath.IT

Cryptanalysis of Wu and Xu's authentication scheme for Telecare Medicine Information Systems

Remote user authentication is desirable for a Telecare medicine information system (TMIS) to verify the correctness of remote users. In 2013, Jiang et al. proposed privacy preserving authentication scheme for TMIS. Recently, Wu and Xu analyzed Jiang's scheme and identify serious security flaws in their scheme, namely, user impersonation attack, DoS attack and off-line password guessing attack. In this article, we analyze Wu and Xu's scheme and show that their scheme is also vulnerable to off-line password guessing attack and does not protect user anonymity. Moreover, we identify the inefficien…

2013-09-20cs.CR

The Cryptanalysis of Lee's Chaotic Maps-Based Authentication and Key Agreement Scheme using Smart card for Telecare Medicine Information Systems

The Telecare medicine information system (TMIS) is developed to provide Telecare services to the remote user. A user can access remote medical servers using internet without moving from his place. Although remote user and server exchange their messages/data via public networks. An adversary is considered to be enough powerful that he may have full control over the public network. This makes these Telecare services vulnerable to attacks. To ensure secure communication between the user and server many password based authentication schemes have been proposed. In 2013, Hao et al. presented chaotic…

2013-10-22cs.CR

更多相关论文收起更多论文

Cryptanalysis And Further Improvement Of A Biometric-Based Remote User Authentication Scheme Using Smart Cards

Recently, Li et al. proposed a secure biometric-based remote user authentication scheme using smart cards to withstand the security flaws of Li-Hwang's efficient biometric-based remote user authentication scheme using smart cards. Li et al.'s scheme is based on biometrics verification, smart card and one-way hash function, and it also uses the random nonce rather than a synchronized clock, and thus it is efficient in computational cost and more secure than Li-Hwang's scheme. Unfortunately, in this paper we show that Li et al.'s scheme still has some security weaknesses in their design. In orde…

2011-03-16cs.CR

Cryptanalysis and Improvement of Jiang et al.'s Smart Card Based Remote User Authentication Scheme

The smart card based authentication protocols try to ensure secure and authorized communication between remote entities. In 2012, Wei et al. presented an improvement of Wu et al.'s two-factor authentication scheme for TMIS which is proven vulnerable to off-line password guessing attack by Zhu. Zhu also proposed a modified scheme to overcome with weakness of Wei et al.'s scheme, although Lee and Liu showed the failure of his scheme to resist parallel session attacks. Moreover, Lee and Liu introduced an improved scheme. We analyze Wei et al.'s, Zhu's and Lee and Liu's schemes and identify that n…

2013-12-17cs.CR

Cryptanalysis of Multi-Server Authenticated Key Agreement Scheme Based on Trust Computing Using Smart Cards and Biometrics

Advancement in communication technology provides a scalable platform for various services where a remote user can access the server from anywhere without moving from its place. It has provided a unique opportunity for online services, such that the user need not physically present at the service center. These services adopt authentication and key agreement protocols to ensure authorized and secure access to resources. Most of the authentication schemes support single server environment where the user has to register with each server. If a user wishes to access multiple application servers, he …

2014-01-20cs.CR

可撤销生物特征保险库的密码分析

Cryptanalysis of Cancelable Biometrics Vault

Normandie Univ, UNICAEN, ENSICAEN, CNRS, GREYC（诺曼底大学、卡昂大学、卡昂高等工程师学院、法国国家科学研究中心、格雷西研究所）；UCA, CNRS, Mines de Saint-Etienne, Clermont-Auvergne-INP, LIMOS（克莱蒙奥弗涅大学、法国国家科学研究中心、圣艾蒂安矿业学校、克莱蒙奥弗涅国立综合理工学院、利摩日科学与技术研究所）

本文对基于可撤销生物特征的密钥绑定方案 CBV 及其 BioEncoding 变换进行密码分析，提出模板可逆性与可链接性攻击，并在无额外假设下恢复保险库密钥。

2025-01-10cs.CRcs.CV

A Cryptanalysis of Two Cancelable Biometric Schemes based on Index-of-Max Hashing

Université Clermont Auvergne（克莱蒙奥弗涅大学）；ITK Engineering GmbH（ITK工程有限公司）；Florida Atlantic University（佛罗里达大西洋大学）；Normandie Univ（诺曼底大学）；UNICAEN（卡昂大学）；ENSICAEN（卡昂国立高等工程师学院）；CNRS（法国国家科学研究中心）

Cancelable biometric schemes generate secure biometric templates by combining user specific tokens and biometric data. The main objective is to create irreversible, unlinkable, and revocable templates, with high accuracy in matching. In this paper, we cryptanalyze two recent cancelable biometric schemes based on a particular locality sensitive hashing function, index-of-max (IoM): Gaussian Random Projection-IoM (GRP-IoM) and Uniformly Random Permutation-IoM (URP-IoM). As originally proposed, these schemes were claimed to be resistant against reversibility, authentication, and linkability attac…

2020-01-17cs.CRcs.CV