An Integrated Two-Stage Medical Pre-Checkup and Subsequent Validation Key Agreement Authentication Mechanism
Source abstract
Abstract
In the global village era, several competitions require pre-checkups for the participants who are qualified to participate that must be passed before the competition, so the accuracy of the checkup data must be confirmed and must not be leaked or tampered with. This is a new challenge to the accuracy of medical checkups data in the information and communication era. How to protect the rights of participants and the non-repudiation of participants are the main issues of this study. We have designed a two-phase user identity embedding and authentication scheme for pre-checkups and subsequent validations. A participant’s private key is added to the physical examination data, and the identity of the examinations data is confirmed by the contestant before the competitions. Our work integrates lightweight Exclusive-OR (XOR) operations, fuzzy extractor biometric personal passwords, and a fixed-length hash operation accords with post-quantum operations to solve the problem of two-stage medical pre-checkup and subsequent validation key agreement authentication. The random oracle authentication mechanism proves the security of the protocols, and the security analysis proves that the protocols can resist the vulnerability attacks.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: User Authentication and Security Systems · Biometric Identification and Security
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Computer Science and Information Engineering, National Chin-Yi University of Technology, Taichung 41170, Taiwan
References (26)
Show source-provided references
1. Cloud computing: State-of-the-art and research challenges10.1007/s13174-010-0007-6 ↗
2. A view of cloud computing10.1145/1721654.1721672 ↗
3. PSMPA: Patient Self-Controllable and Multi-Level Privacy-Preserving Cooperative Authentication in Distributedm-Healthcare Cloud Computing System10.1109/TPDS.2014.2314119 ↗
4. 4S: A secure and privacy-preserving key management scheme for cloud-assisted wireless body area network in m-healthcare social networks10.1016/j.ins.2014.09.003 ↗
5. Data Privacy in Cloud-assisted Healthcare Systems: State of the Art and Future Challenges10.1007/s10916-016-0509-2 ↗
6. A comparison between traditional public key infrastructures and identity-based cryptography10.1016/S1363-4127(03)00308-X ↗
7. Wang, P., Lin, J., Jing, J., and Xie, Y. (2010, January 2–4). Mediated Hierarchical Identity-Based Combined Public Key Schemes. Proceedings of the 2010 Third International Symposium on Intelligent Information Technology and Security Informatics, Jinggangshan, China.10.1109/IITSI.2010.20 ↗
8. Tseng, Y.-M., and Jan, J.-K. (1998, January 7–11). ID-based cryptographic schemes using a non-interactive public-key distribution system. Proceedings of the 14th Annual Computer Security Applications Conference, Scottsdale, AZ, USA.
9. Noh, J., Kim, J., Kwon, G., and Cho, S. (2016, January 26–28). Secure key exchange scheme for WPA/WPA2-PSK using public key cryptography. Proceedings of the 2016 IEEE International Conference on Consumer Electronics-Asia (ICCE-Asia), Seoul, Korea.10.1109/ICCE-Asia.2016.7804782 ↗
10. Block Design-Based Key Agreement for Group Data Sharing in Cloud Computing10.1109/TDSC.2017.2725953 ↗
11. Enhancing dynamic identity-based authentication and key agreement using extended chaotic maps for telecare medicine information systems
12. Lee, T.F., Diao, Y.-Y., and Chen, F.M. (2019). An Improved Authenticated Key Agreement Protocol with Privacy Protection for Mobile Healthcare Systems with Wearable Sensors. Int. J. Bus. Syst. Res., Accepted.10.1504/IJBSR.2020.110758 ↗
13. Gao, A., Wei, W., and Shi, W. (2010, January 6–10). Efficient Password-Proven Key Exchange Protocol against Relay Attack on Ad Hoc Networks. Proceedings of the 2010 IEEE Asia-Pacific Services Computing Conference, Hangzhou, China.10.1109/APSCC.2010.32 ↗
14. Song, I.-A., and Lee, Y.-S. (2016, January 5–8). Improvement of Key Exchange protocol to prevent Man-in-the-middle attack in the satellite environment. Proceedings of the 2016 Eighth International Conference on Ubiquitous and Future Networks (ICUFN), Vienna, Australia.
15. Kulkarni, G., Patel, B., and Laxkar, P. (2013, January 18–19). Time stamp based cross layer MANET security protocol. Proceedings of the Third International Conference on Computational Intelligence and Information Technology (CIIT 2013), Mumbai, India.10.1049/cp.2013.2591 ↗
16. Robust Biometrics-Based Authentication Scheme for Multiserver Environment10.1109/JSYST.2014.2301517 ↗
17. Efficient biometric authenticated key agreements based on extended chaotic maps for telecare medicine information systems10.1007/s10916-015-0240-4 ↗
18. Secure Verifier-Based Three-Party Authentication Schemes without Server Public Keys for Data Exchange in Telecare Medicine Information Systems10.1007/s10916-014-0030-4 ↗
19. Fuzzy Extractors: How to Generate Strong Keys from Biometrics and Other Noisy Data10.1137/060651380 ↗
20. Aswin, V., and Deepak, S. (2012, January 17–18). Medical Diagnostics Using Cloud Computing with Fuzzy Logic and Uncertainty Factors. Proceedings of the 2012 International Symposium on Cloud and Services Computing, Mangalore, India.10.1109/ISCOS.2012.29 ↗
21. Robust Fuzzy Extractors and Helper Data Manipulation Attacks Revisited: Theory versus Practice10.1109/TDSC.2017.2762675 ↗
22. Baruni, K., Helberg, A., Nair, K., and Helberg, A.S. (2016, January 15–17). Fingerprint Matching on Smart Card: A Review. Proceedings of the 2016 International Conference on Computational Science and Computational Intelligence (CSCI), Las Vegas, NV, USA.10.1109/CSCI.2016.0157 ↗
23. Bellare, M., and Rogaway, P. (1993, January 3–5). Random oracles are practical. Proceedings of the CM Conference on Computer and Communications Security, Fairfax, VA, USA.10.1145/168588.168596 ↗
24. Lin, C.-J. (2019). A Secure Examination and Check-In System for Athletes. [Master’s Thesis, National Chin-Yi University of Technology].
25. A secure user authentication and key-agreement scheme using wireless sensor networks for agriculture monitoring10.1016/j.future.2017.06.018 ↗
26. Chen, M., Lee, T.-F., and Pan, J.-I. (2019). An Enhanced Lightweight Dynamic PseudonymIdentity Based Authentication and Key AgreementScheme Using Wireless Sensor Networks forAgriculture Monitoring. Sensors, 19.10.3390/s19051146 ↗