Privacy Protection for Patient-Family Binding E-health System Three-Factor Authentication Key Agreement

During the context of big data in Internet of Things, the E-health system provides patients with a flexible and convenient medical environment. However, the system still face various chanllenges, including how to protect the security of sensitive privacy information and serve patients better. In order to solve these security problems, scholars have put forward a lot of authentication schemes, but most of them still have security vulnerabilities. Moreover, most of schemes ignore the importance of family members in the E-health system. Family members participating in the system can not only concerned about the patient’s condition in real time, but also assist doctors in treatment and improve efficiency of treatment. To solve these problems, there is an urgent need for a secure, efficient and family friendly scheme for E-health system which also can protect the sensitive data. So we proposed a scheme for patient-family binding the E-health system with three-factor authentication. In our scheme, biometric extraction is used to protect sensitive data in the scheme to further enhance the security of the scheme. Beside, this scheme allow family members to participate in the scheme after binding with the patient for assist the medical server treat the patient. Since the process of authorizing family members in this scheme is performed by the patient, there is no additional burden on the server. In addition, the server authenticates family member and patient through different phase, which facilitates the server to distinguish between patient and family member. Finally, we analyze the security of our scheme through real-or-random model. The performance analysis proves that the patient-family member binding scheme is more secure and efficient for the E-health system.