Authors:
Basker Palaniswamy
and
Arijit Karati
Affiliation:
Cryptology and Network Security Lab, Department of Computer Science and Engineering, National Sun Yat-sen University, Kaohsiung, Taiwan
Keyword(s):
Authenticated Key Agreement, Privacy, Multi-Factor Authentication, Smart Healthcare, Quantum-Safe Authentication, Post-Quantum Authentication, Attack Detection Logic.
Abstract:
Smart healthcare is ubiquitous to lift the convenience of managing patients’ medical records. Accessibility of patients’ sensitive data stored in medical servers needs source authenticity. To ensure this, (Karati et al., 2023) proposed a three-factor authentication scheme using physical uncolonable functions. However, the scheme is vulnerable to a quantum adversary. To this end, we design a multi-factor authentication scheme called QPTA resistant to quantum adversaries for a healthcare scenario involving a user and a medical server. QPTA enables choice within the same factor in multi-factor authentication. The security of QPTA is formally analyzed using the “Attack Detection Logic.” QPTA is safe from known attacks, including unknown key share and man-in-the-middle attacks. We perform an informal security analysis of QPTA to ensure various security goals and privacy properties, namely anonymity, unlinkability, and conditional traceability. QPTA satisfies comprehensive security feature
s and is suitable for the post-quantum era.
(More)