Open Access

ARTICLE

A Lightweight and Robust User Authentication Protocol with User Anonymity for IoT-Based Healthcare

Chien-Ming Chen^1,*, Shuangshuang Liu¹, Shehzad Ashraf Chaudhry², Yeh-Cheng Chen³, Muhammad Asghar khan⁴
1 College of Computer Science and Engineering, Shandong University of Science and Technology, Qingdao, 266590, China
2 Department of Computer Engineering, Istanbul Gelisim University, Istanbul, 34310, Turkey
3 Department of Computer Science, University of California, Davis, CA, 95616, USA
4 Department of Electrical Engineering, Hamdard University, Islamabad, 44000, Pakistan
* Corresponding Author: Chien-Ming Chen. Email:
(This article belongs to this Special Issue: Internet of Things in Healthcare and Health: Security and Privacy)

Computer Modeling in Engineering & Sciences 2022, 131(1), 307-329. https://doi.org/10.32604/cmes.2022.018749

Received 14 August 2021; Accepted 09 October 2021; Issue published 24 January 2022

Abstract

With the rise of the Internet of Things (IoT), the word “intelligent medical care” has increasingly become a major vision. Intelligent medicine adopts the most advanced IoT technology to realize the interaction between patients and people, medical institutions, and medical equipment. However, with the openness of network transmission, the security and privacy of information transmission have become a major problem. Recently, Masud et al. proposed a lightweight anonymous user authentication protocol for IoT medical treatment, claiming that their method can resist various attacks. However, through analysis of the protocol, we observed that their protocol cannot effectively resist privileged internal attacks, sensor node capture attacks, and stolen authentication attacks, and their protocol does not have perfect forward security. Therefore, we propose a new protocol to resolve the security vulnerabilities in Masud’s protocol and remove some redundant parameters, so as to make the protocol more compact and secure. In addition, we evaluate the security and performance of the new protocol and prove that the overall performance of the new protocol is better than that of other related protocols.

---

Keywords

IoT; intelligent medical; user authentication

---

Citations