A secure authentication scheme for telecare medical information systems

Abstract

In 2012, Chen et al. proposed an ID based authentication scheme for Telecare Medical Information Systems. However it has some security weaknesses. Later Xie et al. have proposed a new scheme to improve the security so that various attacks can be resisted, such as offline password guessing attacks, user anonymity attacks, impersonation attacks, and perfect forward secrecy. However, Xie et al.’s scheme is vulnerable to the denial of service (Dos) attack when a patient submits a login request to the server. We proposed a secure authentication scheme for telecare medical information systems in out method, we use visual secret sharing which was proposed by Shamir to generate one-time password to overcome the denial of service attack problem.