This paper examines security vulnerabilities in current authentication methods for remote patient monitoring in Wireless Medical Sensor Networks (WMSNs), including offline password guessing and man-in-the-middle attacks. We propose a novel three-factor authentication protocol using fuzzy extractors and lightweight cryptography. Formal analysis via the Real-or-Random (ROR) model and Tamarin Prover confirms its robustness, perfect forward/backward secrecy, mutual authentication, anonymity, and untraceability. Performance comparisons demonstrate reduced overhead and enhanced security, offering a promising framework for IoMT development.

Abstract
1. Introduction
2. Related Work
3. Proposed Protocol
    3.1 Setup Phase
    3.2 Registration Phase
    3.3 Login Phase
4. Security Vulnerabilities in the Protocol
    4.1 Limitations of Mathematical Assumptions
    4.2 Computational Complexity of Secret KeyGeneration
    4.3 Conflict Between Anonymity and TrackingFunctions
5. Countermeasures for Vulnerabilities
    5.1 Countermeasures for Each Vulnerability
6. Conclusion
References

• Haewon Byeon(Dept. of Future Technology, Korea University of Technology and Education, South Korea) | 변해원 Corresponding author