Abstract: This study evaluates a three-factor authentication protocol designed for IoT healthcare systems, identifying several key vulnerabilities that could compromise its security. The analysis reveals weaknesses in single-factor authentication, time synchronization, side-channel attacks, and replay attacks. To address these vulnerabilities, the study proposes a series of enhancements, including the implementation of multi-factor authentication (MFA) to strengthen user verification processes and the inclusion of timestamps or nonces in messages to prevent replay attacks. Additionally, the adoption of advanced cryptographic techniques, such as masking and shuffling, can mitigate side-channel attacks by minimizing information leakage during encryption. The use of message authentication codes (MACs) ensures communication integrity by verifying message authenticity. These improvements aim to fortify the protocol's security framework, ensuring the protection of sensitive medical data. Future research directions include exploring adaptive security policies leveraging artificial intelligence and optimizing cryptographic operations to enhance efficiency. These efforts are essential for maintaining the protocol's resilience against evolving threats and ensuring the secure operation of IoT-based healthcare systems.

Haewon Byeon, “Comprehensive Vulnerability Analysis of Three-Factor Authentication Protocols in Internet of Things-Enabled Healthcare Systems” International Journal of Advanced Computer Science and Applications(IJACSA), 16(4), 2025. http://dx.doi.org/10.14569/IJACSA.2025.0160451

@article{Byeon2025,
title = {Comprehensive Vulnerability Analysis of Three-Factor Authentication Protocols in Internet of Things-Enabled Healthcare Systems},
journal = {International Journal of Advanced Computer Science and Applications},
doi = {10.14569/IJACSA.2025.0160451},
url = {http://dx.doi.org/10.14569/IJACSA.2025.0160451},
year = {2025},
publisher = {The Science and Information Organization},
volume = {16},
number = {4},
author = {Haewon Byeon}
}