## 1 Introduction  
With the efforts of countries around the world, advances in communications and technology are obvious to all. With the development of electronics and mobile technology, communication technology has evolved into a portable ubiquitous generation. Especially driven by Industry 4.0, cloud computing has become one of the best choices for data processing and storage. The sensing and monitoring data of the Internet of Things is also continuously transmitted and stored in the devices of cloud computing. Physical examinations or doctor consultations can use telemedicine in addition to requiring patients to go to the hospital in person. The storage of patient medical records has also changed from manual handwriting to electronic input, and from various hospitals to cloud storage systems. Instant messaging data for telemedicine consultations, or instant messaging data stored and read from cloud servers, may expose private data or be tampered with by malicious people. Therefore, many security technologies with cloud computing as the core issue have been proposed, such as several different protocols provided in the literature [1; 2; 3; 4; 5].  
In such a global village era, several competitions require pre-checkups for the participants, and must be passed prior to being entitled to participate in competitions, so the accuracy of the checkup data must be confirmed and must not be leaked or tampered with. In addition, issues such as the adoption of a specimen related to the law and the ex-post evidence, the process of taking the specimen must be confirmed by the party. However, most of the studies on communication security focus on a one-time conference for symmetric key agreement. Therefore, how to design a mechanism that can be used for two-phase communication to apply to the two phases of specimen acquisition and subsequent validation has become our main research focus. The key design of this two-phase communication is that, before the second meeting, the required messages for the second conference cannot be derived from the information transmitted during the first conference communication. This is similar to the post-quantum era. Even if the computing speed of computers increases, the calculation functions cannot be cracked quickly.  
The purpose of this study is to design an integrated two-phase pre-checkup and subsequent validation key agreement authentication mechanism (TCVK), in the use of regular checkups records server (RCRS) for protecting the security of participants' records and making sure that their data are not lost or tampered with. The process is constructed by three main roles--participants, RCRS, and checkups stations. The records of the participants are collected and processed through these checkup stations, and then encrypted by participants. Finally, each participant could enter the system and check records simply using his own smart card and biometric. With the help of our protocols, the participants' authentication checking process will no longer be as time and effort consuming as before and the cost can be reduced drastically. Besides, our solution may avoid the disputes happening in participant subsequent validation process and dispel the suspicion of unfair judges. The scenario of our TCVK is indicated in Figure 1.  
The study of our integrated two-phase TCVK is organized in the following manner. Section 2 describes the related works. Section 3 shows the proposed schemes and Section 4 shows random oracle model security proof of the proposed protocols. Section 5 makes a security analysis of the proposed scheme. Section 6 states performance comparisons of the proposed scheme. Finally, our conclusion is written in Section 7.