An Improved Biometric Based Authentication Scheme with User Anonymity Using Elliptic Curve Cryptosystem

Telecare medical information systems (TMIS) provides convenient health care services for patients in order to save the patients’ time and expense. The protection of user’s privacy and data security is significant over public communication. Recently, Lu et al. presented a threefactor based authentication protocol using elliptic curve cryptography. In this paper, we analyze the security of Lu et al.’s scheme. We demonstrate that Lu et al’s scheme can’t protect user anonymity and insecure against impersonation attack. To remedy the mentioned security weakness, we propose a new authentication scheme to improve on Lu et al.’s scheme. In comparison with recent schemes, our scheme can provide stronger security and more efficiency in implementation.