This study analyzed security weaknesses in triple-factor authentication for IoT-based healthcare systems and proposed improvements. Examining registration, authentication, and session key setup, we found four main vulnerabilities: offline password guessing, user impersonation, session key exposure, and secret key leakage. Recommendations include multi-factor authentication, visual synchronization improvements, side-channel attack prevention, MAC application, and lightweight cryptography. This research provides a basis for secure medical data protection and reliable IoT healthcare environments.

• 변해원 | Haewon Byeon Corresponding author