Internet of Medical Things (IoMT) system is a collection of devices and software which are applied in medical care domains. In a IoMT system, patients and doctors conduct remote diagnosis and treatment through a health data sharing scheme. These data sharing schemes faces privacy challenges if the medical information gets leaked. However, the existing privacy-preserving data sharing schemes usually use classical encryption/signature algorithm, which will turn to be not secure under the development of quantum computer. In this paper, we propose a privacy-preserving data sharing scheme using lattice-based cryptography, the ring learning with errors (RLWE) cryptography. Our scheme integrates both quantum-resistant encryption and digital signature algorithm based on RLWE, in order to realize the resistance to quantum attack for the whole life cycle of data. In addition, the performance evaluation shows that the proposed scheme gets 75.7% higher efficiency than the existing schemes.
Internet of Medical Things (IoMT) system is a collection of devices and software which are applied in medical care domains. In a IoMT system, patients and doctors conduct remote diagnosis and treatment through a health data sharing scheme. These data sharing schemes faces privacy challenges if the medical information gets leaked. However, the existing privacy-preserving data sharing schemes usually use classical encryption/signature algorithm, which will turn to be not secure under the development of quantum computer. In this paper, we propose a privacy-preserving data sharing scheme using lattice-based cryptography, the ring learning with errors (RLWE) cryptography. Our scheme integrates both quantum-resistant encryption and digital signature algorithm based on RLWE, in order to realize the resistance to quantum attack for the whole life cycle of data. In addition, the performance evaluation shows that the proposed scheme gets 75.7% higher efficiency than the existing schemes.
The rapid adoption of Internet of Medical Things (IoMT) devices enables real-time patient monitoring and remote diagnostics and has revolutionized healthcare delivery. Traditional cryptographic schemes like RSA and ECC, which rely on meaningful mathematical challenges, are under great threat from quantum computing, threatening sensitive medical data confidentiality and integrity. This paper proposes a quantum-resistant healthcare security framework based on lattice-based cryptographic primitives such as Learning With Errors (LWE), Ring-LWE (RLWE), and Short Integer Solution (SIS). To this end, we design a five-phase IoMT-friendly framework—Initialization, Registration, Authentication, Data Exchange, and Treatment—where each phase is backed up by lightweight cryptography primitives that can be easily implemented on the low-resource IoMT devices. Relative to the state-of-the-art lattice- and hash-based constructions, our framework involves 50-75% smaller ciphertext sizes, up to a 50% reduction of the communication overhead, and nearly 60% less in computational cost. Furthermore, the solution relies on zero-knowledge proofs, homomorphic encryption as well and attribute-based access control to guarantee strong security and privacy. Using the AVISPA tool, the framework is formally verified, showing its resistance against classical and quantum adversaries. Focusing on tangible healthcare threats, including data tampering and unlicensed access to patient diagnostics, this research paves the way for scalable, efficient, and quantum-resistant medical data protection. Our results pave the way for future investigations into secure post-quantum healthcare and IoT applications.
Digital Twins (DTs) play a crucial role in context-aware Internet of Things (IoT) applications within the healthcare sector, including the industrial healthcare domain, by facilitating the continuous sharing of sensitive and confidential patient data from physical objects in real time. This shared data is essential for treatment planning and decision-making processes, often being accessed remotely by authorized users. However, traditional security mechanisms, which rely on the integer factorization problem (IFP) and the elliptic curve discrete logarithm problem (ECDLP), are vulnerable to quantum attacks using algorithms like Shor's, posing significant risks to data protection. As a result, the healthcare sector faces several security challenges, including the vulnerability of sensitive patient data to cyberattacks, quantum threats, the risk of unauthorized access to medical devices and IoT systems, and the increasing sophistication of cybercriminals exploiting weak authentication methods. To address these issues, we propose a quantum-resistant protocol that safeguards data privacy in DT-enabled IoT healthcare applications, ensures secure transmission of information, maintains patient trust, supports long-term data confidentiality, and protects medical devices and IoT systems from potential breaches. By employing lattice-based cryptographic techniques, particularly the ring learning with errors (RLWE) problem, the proposed scheme effectively addresses contemporary security challenges, including those posed by quantum computing. Real-time experiments conducted on Raspberry Pi 4 devices, along with computational overhead analysis, demonstrate the protocol's efficiency. Additionally, formal security validation using the Scyther tool and security analysis with the RoR model reinforce the robustness of the proposed protocol. A comprehensive comparative evaluation against existing schemes highlights its lightweight, scalable, and efficient nature. Furthermore, performance evaluations in the context of unknown attacks show that the proposed scheme significantly outperforms current alternatives in terms of effectiveness.
Internet of Medical Things (IoMT) is an advanced ecosystem made with the help of Internet of Things technology, smart sensors, medical equipment, and connected end users. Internet of Medical Things is very helpful to enhance efficiency, accuracy, and qualities traditional healthcare system. A smart IoMT contains end users, heterogeneous network, and private data is transferred through public channel. Therefore, it becomes hard to achieve both security and privacy in the IoMT system. In this article, we have focused on designing privacy preserving authenticated key mechanism between two parties. We have proposed a blockchain assisted authenticated key exchange mechanism for IoMT systems supporting fog computing paradigm. The proposed privacy preserving authenticated key exchange protocol is based post quantum assumption “ring learning with errors” and physical unclonable function (PUF), respectively. A detailed security analysis ensures that proposed protocol is secure against most of the existing attacks. This protocol is also secure against quantum attacks based on the assumption.
The emergence and growth of the Internet of Medical Things (IoMT) have transformed the way healthcare services are delivered, but this growth comes with its own security challenges, especially with the emergence of quantum computing. This paper presents a lightweight, privacy-preserving authentication scheme for edge-based IoMT environments, integrating CRYSTALS-Kyber Key Encapsulation Mechanism (KEM) to securely establish session keys between participating entities and resilience against quantum attacks, while CRYSTALS-Dilithium is utilized as the digital signature scheme to ensure message integrity, authentication, and non-repudiation. These NIST-standardized post-quantum primitives collectively strengthen the system's resistance against quantum adversaries and enhance overall cryptographic robustness. The proposed system comprises two phases: Registration and Authentication. During registration, patients, wearable devices that utilize Physically Unclonable Functions (PUFs), and medical specialists register with a Trusted Authority via edge nodes. The authentication phase encompasses mutual authentication among patients, devices, medical specialists, edge nodes, and cloud servers, ensuring that only authorized entities access sensitive health information. In addition, the proposed scheme employs the formal security properties, such as authenticity and secrecy, are verified using the AVISPA tool under the Dolev-Yao model, with results confirming that all defined goals are achieved and no attacks are found. Performance evaluations indicate that the scheme is computationally efficient and suitable for resource-constrained IoMT devices. Furthermore, BAN logic is employed to formally verify the correctness of the authentication protocol, demonstrating that mutual authentication is securely established among the participating entities under well-defined trust assumptions. By integrating post-quantum cryptographic techniques, this authentication framework addresses emerging security challenges posed by quantum computing, aligning with the objectives of enhancing edge-based consumer electronics devices and Internet of Things (IoT) ecosystems with post-quantum cryptosystems.
The rapid expansion of Internet of Medical Things (IoMT) networks has enabled continuous data collection from diverse medical sensors and devices, supporting real-time monitoring, diagnostics, and decision-making. However, the resource limitations of IoT nodes and the open nature of communication channels make healthcare data vulnerable to security and privacy breaches. To address these challenges, this paper presents a blockchain-assisted, privacy-preserving signature scheme leveraging Quantum Key Distribution (QKD) to ensure secure and trustworthy data sharing in Healthcare Internet of Things (H-IoT) environments. The proposed scheme integrates a quantum-designated verifier signature mechanism with a private blockchain infrastructure, where peer nodes validate and store healthcare data securely. Formal (software-based) and informal security analyses demonstrate the scheme's resistance to forgery, replay, and quantum attacks. Simulation experiments conducted in Python show that the proposed protocol achieves strong cryptographic performance, with a computational cost of 42.1ms and a communication overhead of 834 bits. Additionally, a blockchain-based prototype implementation quantifies the time required to append various numbers of blocks and process multiple healthcare transactions, confirming the scalability and practicality of the proposed solution. The results affirm that the scheme offers a reliable, efficient, and quantum-resilient framework for securing sensitive medical data across distributed IoMT healthcare systems.
The Internet of Medical Things (IoMT) has gained significant research focus in both academic and medical institutions. Nevertheless, the sensitive data involved in IoMT raises concerns regarding user validation and data privacy. To address these concerns, certificateless signcryption (CLSC) has emerged as a promising solution, offering authenticity, confidentiality, and unforgeability. Unfortunately, most existing CLSC schemes are impractical for IoMT due to their heavy computational and storage requirements. Additionally, these schemes are vulnerable to quantum computing attacks. Therefore, research focusing on designing an efficient post-quantum CLSC scheme is still far-reaching. In this work, we propose PQ-CLSCL, a novel post-quantum CLSC scheme with linkability for IoMT. Our proposed design facilitates secure transmission of medical data between physicians and patients, effectively validating user legitimacy and minimizing the risk of private information leakage. To achieve this, we leverage lattice sampling algorithms and hash functions to generate the partial secret key, then employ the sign-then-encrypt method and design a link label. We also formalize and prove the security of our design, including indistinguishability against chosen-ciphertext attacks (IND-CCA2), existential unforgeability against chosen-message attacks (EU-CMA), and linkability. Finally, through comprehensive performance evaluation, our computation overhead is just 5% of other existing schemes. The evaluation results demonstrate that our solution is practical and efficient.