Cryptanalysis of Two Privacy-Preserving Authentication Schemes for Smart Healthcare Applications

Feihong Xu (), Junwei Luo and Rahman Ziaur
Additional contact information
Feihong Xu: School of Artificial Intelligence, Wuchang University of Technology, Wuhan 430223, China
Junwei Luo: School of Computing Technologies, RMIT University, Melbourne, VIC 3083, Australia
Rahman Ziaur: School of Computer Science, Queensland University of Technology, Brisbane, QLD 4000, Australia

Mathematics, 2023, vol. 11, issue 15, 1-12

Abstract: Ensuring the secure sharing of privacy-sensitive healthcare data is attracting considerable interest from researchers. Recently, Ogundoyin et al. designed a lightweight privacy-preserving authentication scheme named PAASH for smart health applications. Benil et al. proposed a public verification and auditing scheme named ECACS for securing e-health systems. Ogundoyin et al. and Benil et al. proposed an efficient certificateless aggregate signature (CLAS) scheme as their respective foundation signature schemes. They declared that their constructions were provably secure under the hardness assumption of cryptographic problems. In this work, we disprove their claim by analyzing the correctness and security of their underlying CLAS schemes. We first show that the batch verification process of n signatures for the CLAS scheme in PAASH is incorrect, and any public-key replacement attacker can easily break the scheme. We analyze the reasons for our attack and propose an improved scheme, named PAASH + . We then show that the CLAS scheme in ECACS fails to achieve correctness, an essential property that a cryptographic scheme should provide. As a result, it is impractical to deploy the designed PAASH and ECACS constructions in any real smart health applications.

Keywords: IoT; smart health; electronic health records; privacy-preserving; certificateless signature (search for similar items in EconPapers)
JEL-codes: C (search for similar items in EconPapers)
Date: 2023
References: View complete reference list from CitEc
Citations: View citations in EconPapers (1)

Downloads: (external link)
https://www.mdpi.com/2227-7390/11/15/3314/pdf (application/pdf)
https://www.mdpi.com/2227-7390/11/15/3314/ (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:gam:jmathe:v:11:y:2023:i:15:p:3314-:d:1204864

Access Statistics for this article

Mathematics is currently edited by Ms. Emma He

More articles in Mathematics from MDPI
Bibliographic data for series maintained by MDPI Indexing Manager ().