<p>Radio frequency identification (RFID) is a wireless technology used to identify objects without line-of-sight contact. RFID technology has many applications in the medical field because it ensures security and reliability. Telecare medical information systems (TMIS) have recently received prominent attention in healthcare systems. The combination of an RFID system and TMIS gives various advantages, like reducing administrative costs, improving the quality of services, keeping accurate medical records, etc. Through TMIS, the patient’s medical information is transferred via radio waves in the RFID system. Due to wireless communication, there are many security and privacy issues associated with TMIS systems, such as private data leakage, traceability attacks, replay attacks, man-in-middle attacks, etc. To ensure secure communication in TMIS, we introduce a lightweight mutual authentication protocol by employing LCD code properties. The protocol’s formal security is done using BAN logic and the Scyther tool. We show that tags untraceability and sensitive information protection are preserved using Juels and Weis’s privacy model. In addition, we analyze the performance of the protocol in terms of processing, transmission, and storage costs.</p>