Privacy-Preserving Mutual Authentication and Key Agreement Scheme for Multi-Server Healthcare System

TL;DR

This paper introduces a new privacy-preserving mutual authentication and key agreement protocol designed for multi-server healthcare systems, aiming to enhance security and reduce computational overhead in remote medical data exchanges.

Contribution

It presents a novel authentication scheme that improves security and efficiency for multi-server healthcare systems, addressing vulnerabilities of existing protocols.

Findings

The proposed scheme resists common security attacks.

It reduces computational resource requirements compared to existing protocols.

Security analysis confirms robustness of the protocol.

Abstract

The usage of different technologies and smart devices helps people to get medical services remotely for multiple benefits. Thus, critical and sensitive data is exchanged between a user and a doctor. When health data is transmitted over a common channel, it becomes essential to preserve various privacy and security properties in the system. Further, the number of users for remote services is increasing day-by-day exponentially, and thus, it is not adequate to deal with all users using the one server due to the verification overhead, server failure, and scalability issues. Thus, researchers proposed various authentication protocols for multi-server architecture, but most of them are vulnerable to different security attacks and require high computational resources during the implementation. To Tackle privacy and security issues using less computational resources, we propose a privacy-preserving mutual authentication and key agreement protocol for a multi-server healthcare system. We discuss the proposed scheme's security analysis and performance results to understand its security strengths and the computational resource requirement, respectively. Further, we do the comparison of security and performance results with recent relevant authentication protocols.