A Fully Anonymous Authentication Scheme Based on Medical Environment

Abstract

The RFID (Radio Frequency IDentification) technology have been widely applied in the medical environment. Meanwhile, the demand of protecting the patients’ identity information and private medical data is becoming more and more urgent. In addition, many existing schemes only preserve privacy against the external attackers but without considering the threats from servers and readers. In this paper, we propose a fully anonymous medical mutual authentication scheme, which allows identifiers to authenticate to servers without revealing the identity. The proposed scheme applies the anonymous credential and ECC (Elliptic Curve Cryptography) to achieve anonymousness and mutual authentication. Moreover, through the security analysis, our scheme can provide privacy preserving against both the outsider and insider attackers during the authentication compared with typical ECC-based schemes. And the experimental results indicate that the cost on our novel scheme is affordable.