ENHANCING DYNAMIC IDENTITY BASED AUTHENTICATION AND KEY AGREEMENT USING EXTENDED CHAOTIC MAPS FOR TELECARE MEDICINE INFORMATION SYSTEMS

利用改良混沌映射技術提升適用於遠距醫療資訊系統環境之動態識別碼為基礎的認證金鑰協商機制

陳仙金(Meriske Florentina Chen) ； 李添福(Tian-Fu Lee)

《品質學報》 25卷3期 (2018/06) Pp. 153-165

https://doi.org/10.6220/joq.201806_25(3).0002

摘要

An authentication and key agreement scheme enables participants to agree a common secret key and to establish a secure channel. A secure authentication and key agreement scheme for telecare medicine information systems provides doctors, nurses, patients, etc. with mutual authentication and secure communication. Recently, Z. Wang et al. (2015) proposed an efficient dynamic identity based authentication scheme using chaotic maps for telecare medicine information systems, and also claimed that their scheme can resist possible attacks. However, this investigation shows that Z. Wang et al.'s scheme fails to provide session key security and user anonymity, and suffers from password guessing and impersonation attacks. To overcome the weaknesses, this investigation proposes an improved authentication scheme by using extended chaotic map-based Diffie-Hellman key change. The proposed scheme avoids the weaknesses in previous schemes, and retains low computational cost.

關鍵字

chaotic maps ； key agreement ； authentication ； telecare medicine information system

並列摘要

金鑰協商機制讓參與者協商一共同密鑰並建立一安全通訊管道。一適用於遠距醫療資訊系統環境之安全認證與金鑰協商機制提供醫生、護士、病患等使用者相互認證並安全地通訊。近來，Z. Wang等人(2015)利用渾沌映射技術，提出一適用於遠距醫療資訊系統環境，有效率之動態識別碼為基礎的使用者認證機制，並宣稱其所提機制能抵擋可能安全攻擊。然而，本研究顯示Z. Wang等人無法提供認證金鑰安全和使用者匿名等特性，並且可能遭受字典攻擊與偽冒攻擊。為克服所提之缺點，本研究利用渾沌映射之Diffie-Hellman交換技術，提出一改良的認證與金鑰協商機制。所提之認證與金鑰協商機制不僅可以避免相關研究的缺點外，並且仍維持在低運算成本。

並列關鍵字

混沌映射 ； 金鑰協商 ； 認證 ； 遠距醫療資訊系統

參考文獻

Bergamo, P.,D'Arco, P.,De Santis, A.,Kocarev, L.(2005).Security of public-key cryptosystems based on Chebysev polynomials.IEEE Transactions on Circuits and Systems I: Regular Paper.52(7),1382-1393.

Cheng, Z.-Y.,Liu, Y.,Chang, C.-C.,Chang, S.-C.(2013).Authenticated RFID security mechanism based on chaotic maps.Security and Communication Networks.6,247-256.

Guo, C.,Chang, C.-C.(2013).Chaotic maps-based password authenticated key agreement using smart cards.Communications in Nonlinear Science and Numerical Simulation.18(6),1433-1440.

Hao, X.,Wang, J.,Yang, Q.,Yan, X.,Li, P.(2013).A chaotic map-based authentication scheme for telecare medicine information systems.Journal of Medical Systems.37,9919.

Kocarev, L.,Tasev, Z.(2003).Public-key encryption based on Chebyshev maps.Proceedings of the 2003 International Symposium on Circuits and Systems.(Proceedings of the 2003 International Symposium on Circuits and Systems).: