Security Analysis and Improvement of ‘a More Secure Anonymous User Authentication Scheme for the Integrated EPR Information System’

摘要: Over the past few years, secure and privacy-preserving user authentication scheme has become an integral part of applications healthcare systems. Recently, Wen designed improved system over Lee et al.’s for integrated electronic patient record (EPR) information system, which been analyzed in this study. We have found that Wen’s still following inefficiencies: (1) correctness identity password are not verified during login change phases; (2) it is vulnerable to impersonation attack privileged-insider attack; (3) without revocation lost/stolen smart card; (4) explicit key confirmation no control properties absent, (5) cannot update his/her help server channel. Then we aimed propose enhanced two-factor based on intractable assumption quadratic residue problem (QRP) multiplicative group. Our bears more securities functionalities than other schemes literature.