Secure ECC-based Three-Factor Mutual Authentication Protocol for Telecare Medical Information System

In the recent COVID-19 situation, Telecare Medical Information System (TMIS) is attracting attention. TMIS is one of the technologies used in Wireless Body Area Network (WBAN) and can provide patients with a variety of remote healthcare services. In TMIS environments, sensitive data of patients are communicated via an open channel. An adversary may attempt various security attacks including impersonation, replay, and forgery attacks. Therefore, numberous authentication schemes have been suggested to provide secure communication for TMIS. Sahoo et al. proposed a mutual authentication scheme based on biometrics and Elliptic Curve Cryptography (ECC) in 2020. However, we find out that Sahoo et al.’s scheme cannot resist insider and privileged insider attacks and cannot guarantee patient anonymity. In this paper, we propose a secure ECC-based three-factor mutual authentication protocol that guarantees the privacy of patients for TMIS. We conduct informal security analysis to prove that our protocol is secure from various security attacks. In addition, we perform formal security analyses using the Automated Validation of Internet Security Protocols and Applications (AVISPA), Burrows-Abadi-Needham (BAN) logic, and the Real-Or-Random (ROR) model. Furthermore, we assess our protocol’s performance and compare it to other protocols. As a result, our protocol has lower communication costs, and better security features compared to related existing protocols. Therefore, our protocol is more appropriate for TMIS environments than other related protocols.

• Publication year

  2022

• Venue

  IEEE Access

• Publication date

  Unknown publication date

• Fields of study

  Medicine, Computer Science

• Identifiers
  DOI 10.1109/access.2022.3145959
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• No references are available for this paper.

• PLRAC: A PUF Characteristic Based Lightweight Remote Attestation for Container

  2026cites this paper
• Probabilistic Bit-Similarity-Based Key Agreement Protocol Employing Fuzzy Extraction for Secure and Lightweight Wireless Sensor Networks

  2026cites this paper
• A Lightweight Authentication Scheme for Securing Patient Information in the Internet of Medical Things Environment

  2026cites this paper
• Efficient Session Key Generation for Securing IoT-Enabled Telecare Medical Systems

  2025cites this paper
• PIA-A secure and efficient identity authentication scheme in telemedicine via the PUF method

  2025influential citation
• An Adaptive Synchronous Lightweight AKA Protocol With Authority Management for Wireless Medical Sensor Networks

  2025cites this paper
• SMFA: Strengthening Multi-Factor Authentication With Steganography for Enhanced Security

  2025cites this paper
• A Novel Privacy Protection Technique of Electronic Health Records using Decentralized Federated Learning with Consortium Blockchain

  2025cites this paper
• MedIoT-LAP: Secure and efficient lightweight AEAD-Based authentication protocol for medical IoT

  2025cites this paper
• Post-Quantum Secure Multi-Factor Authentication Protocol for Multi-Server Architecture

  2025cites this paper
• Group-Based Ultralightweight Authentication Protocol for Telecare Medical Information Systems

  2025cites this paper
• Lightweight RFID-enabled authentication protocol in post-quantum environment

  2025cites this paper
• An Improved and Untraceable Lightweight Authentication and Key Agreement Scheme for Wireless Body Area Networks

  2025cites this paper
• Cloud-Enabled Regression Model for Enhanced Patient Authentication Systems

  2025cites this paper
• A Secure Framework for Authenticating and Controlling Access to IoT Devices Integrated with Blockchain

  2025cites this paper
• A Robust and Efficient Authentication Protocol for Intelligent Systems in Smart Healthcare IoMT

  2025influential citation
• Design and Simulation of Secure Low-Latency Communication Framework for WBAN

  2025cites this paper
• Securing the IoT-enabled smart healthcare system: A PUF-based resource-efficient authentication mechanism

  2024cites this paper
• Elliptic Curve Cryptography (ECC) Based Authentication Scheme on IoT Networks for Health Information Systems

  2024cites this paper
• An Offline Direct Authentication Scheme for the Internet of Medical Things Based on Elliptic Curve Cryptography

  2024influential citation
• A lightweight and secure authentication protocol for visually impaired and handicapped people in the telehealth system

  2024cites this paper
• A Secure Key Exchange and Authentication Scheme for Securing Communications in the Internet of Things Environment

  2024cites this paper
• Novel Light Weight Hardware Authentication Protocol for Resource Constrained IoT Based Devices

  2024cites this paper
• A Software-Based Low-Latency Elliptic Curve Cryptography Design Over Prime Fields

  2024cites this paper
• Secure Protocol With Mutual Authentication For Telecare Medical Information System Using ECC For IOT Enabled WBAN Devices

  2024cites this paper
• PAAF-SHS: PUF and authenticated encryption based authentication framework for the IoT-enabled smart healthcare system

  2024cites this paper
• An enhanced mutual authentication scheme for healthcare systems using Elgamal and ECC

  2024cites this paper
• BioKA-ASVN: Biometric-Based Key Agreement Scheme for Air Smart Vehicular Networks Using Blockchain Service

  2024cites this paper
• Untraceable blockchain-assisted authentication and key exchange in medical consortiums

  2024cites this paper
• Blockchain-Enabled Secure and Interoperable Authentication Scheme for Metaverse Environments

  2024cites this paper
• A secure authentication protocol for remote patient monitoring in an internet‐of‐medical‐things environment

  2024cites this paper
• A three-factor mutual authentication scheme for telecare medical information system based on ECC

  2024cites this paper
• An improved three factor authentication protocol for wireless body area networks

  2024cites this paper
• RLKS-TMS: A Robust and Lightweight Key Agreement Scheme for Telemedicine System

  2024influential citation
• A Robust Subtree-Based Authentication Scheme for TMIS Using Chaotic Hash Function

  2024cites this paper
• Smart Home Security: An Efficient Multi-Factor Authentication Protocol

  2024cites this paper
• SLACPSS: Secure Lightweight Authentication for Cyber-Physical-Social Systems

  2024cites this paper
• A Secure Cross-Domain Access Control Scheme for Internet of Medical Things

  2023cites this paper
• A Provably Secure Lightweight Key Agreement Protocol for Wireless Body Area Networks in Healthcare System

  2023cites this paper
• A key exchange system for secure data coordination in healthcare systems

  2023cites this paper
• Cryptanalysis of Secure ECC-Based Three Factor Mutual Authentication Protocol for Telecare Medical Information System

  2023cites this paper
• Provably Secure Mutual Authentication and Key Agreement Scheme Using PUF in Internet of Drones Deployments

  2023cites this paper
• Digitization of healthcare sector: A study on privacy and security concerns

  2023cites this paper
• A Secure and Anonymous Authentication Protocol Based on Three-Factor Wireless Medical Sensor Networks

  2023cites this paper
• Toward Designing a Secure Authentication Protocol for IoT Environments

  2023cites this paper
• A Secure Authenticated Message Transfer in Healthcare Application

  2023cites this paper
• A Secure and Efficient Scheme for Mutual Authentication for Integrity of Exchanged Data in IoMT

  2023cites this paper
• Formal security analysis of an IoT mutual authentication protocol

  2023cites this paper
• A design of provably secure multi-factor ECC-based authentication protocol in multi-server cloud architecture

  2023influential citation
• Design of Secure and Lightweight Authentication Scheme for UAV-Enabled Intelligent Transportation Systems Using Blockchain and PUF

  2023cites this paper
• An ECC-based mutual data access control protocol for next-generation public cloud

  2023cites this paper
• LAPE2D: Lightweight Authentication Protocol to Secure End and Edge Devices in Iot Framework

  2023influential citation
• Multi-factor Assymetric Key Encryption (MAKE) for Mutual Authentication in IoMT

  2023cites this paper
• A novel and provably secure mutual authentication protocol for cloud environment using elliptic curve cryptography and fuzzy verifier

  2023cites this paper
• BPADTA: Blockchain-based privacy-preserving authentication scheme for digital twin empowered aerospace industry

  2023cites this paper
• A Symmetric Key and Elliptic Curve Cryptography-Based Protocol for Message Encryption in Unmanned Aerial Vehicles

  2023cites this paper
• A Privacy-Preserving Authentication Scheme for a Blockchain-Based Energy Trading System

  2023cites this paper
• An efficient lightweight authentication scheme for dew‐assisted IoT networks

  2023influential citation
• Analysis and Improvement of a Privacy-Preserving Authentication Scheme for Telecare Medical Information System Environment

  2023cites this paper
• Design of Secure Handover Authentication Scheme for Urban Air Mobility Environments

  2022cites this paper
• Toward A Real-Time Elliptic Curve Cryptography-Based Facial Security System

  2022cites this paper
• A Secure Authentication and Key Establishment Scheme using PUF in Vehicular Ad-Hoc Network

  2022cites this paper
• A Secure User Authentication Protocol in Smart Living Environment

  2022cites this paper
• A Secure Data Processing System in Edge Computing-Powered AIoT

  2022cites this paper
• Machine Learning and PUF based Authentication Framework for Internet of Medical Things

  2022cites this paper
• Improvement and Cryptanalysis of a Physically Unclonable Functions Based Authentication Scheme for Smart Grids

  2022cites this paper
• Physical Unclonable Function and Machine Learning Based Group Authentication and Data Masking for In-Hospital Segments

  2022cites this paper
• A Secure Authentication at Remote Real-Time Data Access in IWSN-Based Healthcare Environment

  2022cites this paper
• Insider threat prevention in distributed database as a service cloud environment

  2022cites this paper
• Supervised Machine Learning Tools and PUF Based Internet of Vehicles Authentication Framework

  2022cites this paper
• SF-LAP: Secure M2M Communication in IIoT with a Single-Factor Lightweight Authentication Protocol

  2022cites this paper
• A Secure Lightweight Authentication Scheme in IoT Environment with Perfect Forward and Backward Secrecy

  2022cites this paper
• Internet of Things: Security and Solutions Survey

  2022cites this paper
• Design of Secure Mutual Authentication Scheme for Metaverse Environments Using Blockchain

  2022cites this paper
• Cryptanalysis and improvement of REAS‐TMIS: Resource‐efficient authentication scheme for telecare medical information system

  2022cites this paper
• Attribute Based Pseudonyms: Anonymous and Linkable Scoped Credentials

  2022cites this paper
• CKMIB: Construction of Key Agreement Protocol for Cloud Medical Infrastructure Using Blockchain

  2022cites this paper
• Secure Cloud Authentification Using AES Encryption

  year unknowncites this paper