The Internet of Medical Things (IoMT) has gained significant research focus in both academic and medical institutions. Nevertheless, the sensitive data involved in IoMT raises concerns regarding user validation and data privacy. To address these concerns, certificateless signcryption (CLSC) has emerged as a promising solution, offering authenticity, confidentiality, and unforgeability. Unfortunately, most existing CLSC schemes are impractical for IoMT due to their heavy computational and storage requirements. Additionally, these schemes are vulnerable to quantum computing attacks. Therefore, research focusing on designing an efficient post-quantum CLSC scheme is still far-reaching. In this work, we propose PQ-CLSCL, a novel post-quantum CLSC scheme with linkability for IoMT. Our proposed design facilitates secure transmission of medical data between physicians and patients, effectively validating user legitimacy and minimizing the risk of private information leakage. To achieve this, we leverage lattice sampling algorithms and hash functions to generate the partial secret key, then employ the sign-then-encrypt method and design a link label. We also formalize and prove the security of our design, including indistinguishability against chosen-ciphertext attacks (IND-CCA2), existential unforgeability against chosen-message attacks (EU-CMA), and linkability. Finally, through comprehensive performance evaluation, our computation overhead is just 5% of other existing schemes. The evaluation results demonstrate that our solution is practical and efficient.
The Internet of Medical Things (IoMT) has gained significant research focus in both academic and medical institutions. Nevertheless, the sensitive data involved in IoMT raises concerns regarding user validation and data privacy. To address these concerns, certificateless signcryption (CLSC) has emerged as a promising solution, offering authenticity, confidentiality, and unforgeability. Unfortunately, most existing CLSC schemes are impractical for IoMT due to their heavy computational and storage requirements. Additionally, these schemes are vulnerable to quantum computing attacks. Therefore, research focusing on designing an efficient post-quantum CLSC scheme is still far-reaching. In this work, we propose PQ-CLSCL, a novel post-quantum CLSC scheme with linkability for IoMT. Our proposed design facilitates secure transmission of medical data between physicians and patients, effectively validating user legitimacy and minimizing the risk of private information leakage. To achieve this, we leverage lattice sampling algorithms and hash functions to generate the partial secret key, then employ the sign-then-encrypt method and design a link label. We also formalize and prove the security of our design, including indistinguishability against chosen-ciphertext attacks (IND-CCA2), existential unforgeability against chosen-message attacks (EU-CMA), and linkability. Finally, through comprehensive performance evaluation, our computation overhead is just 5% of other existing schemes. The evaluation results demonstrate that our solution is practical and efficient.
The demand for continuous time-series data sharing in Internet of Things (IoT) scenarios has been increasing. Traditional Certificateless Signcryption (CLSC) schemes based on bilinear pairings or elliptic curves offer limited security under quantum computing threats and incur high computational and communication overheads when repeatedly signcrypting multiple data segments. To address these issues, this paper proposes a post-quantum lightweight certificateless hybrid signcryption scheme tailored for time-series data sharing. First, a bidirectional hash chain-driven symmetric key generation and management mechanism is designed to enable rapid key generation for multiple consecutive data segments while ensuring forward and backward security. Subsequently, a lightweight hybrid signcryption scheme with conditional privacy protection is constructed using a module lattice framework. Combined with an offline/online separation that shifts part of the computation ahead of time, the scheme achieves post-quantum security while significantly reducing the burden on end devices and communication links. The scheme is proven to satisfy IND-CCA confidentiality and EUF-CMA unforgeability in a random oracle model. Prototype implementation and evaluation on resource-constrained terminal devices show that, the proposed scheme achieves significant advantages: on average, the end-side overall latency and transmission volume can be reduced to approximately 40% of those of comparable post-quantum schemes. The advantages of this scheme become even more pronounced in long-duration continuous time-series data scenarios. It effectively balances post-quantum security, lightweight design, and scalability, making it well-suited for time-series data sharing applications in next-generation intelligent IoT.
The convergence of blockchain technology and the Internet of Medical Things (IoMT) significantly enhances data security and interoperability in healthcare systems. However, emerging quantum computing capabilities pose critical threats to conventional cryptographic algorithms underpinning blockchain security. Moreover, as IoMT devices manage sensitive patient data and perform essential healthcare functions, ensuring robust protection against both classical and quantum attacks has become increasingly urgent. To mitigate these risks, this paper introduces a Post-Quantum Cryptography Integration Framework (PQCIF), designed to protect blockchain-enabled IoMT (BIoMT) systems and infrastructures against classical and quantum attacks. PQ-CIF is a hybrid framework leveraging NIST-standardized post-quantum cryptographic (PQC) algorithms combined with conventional public-private key pair cryptography schemes, strategically integrating them within BIoMT architectures for robust long-term security. We provide comprehensive evaluation metrics and present a detailed case study demonstrating the efficacy and minimal overhead of our proposed framework in a simulated healthcare blockchain network.
Abstract Over the last few years, Internet of Medical Things (IoMT) has completely transformed the healthcare industry. It is bringing out the most notable, and unprecedented impacts on human health, and has totally changed the way we look at the healthcare industry. The healthcare sector all around the globe are leapfrogging, and adopting the technology, helping in transforming drastically in a very short span of time. However, as more and more number of medical devices are being connected to IoMT, security issues like ensuring authenticity and integrity of the transmitted data are also on the rise. In view of the context, there is a need of an efficient cryptographic primitive that can address these issues in a viable manner. A signature scheme seems to be the natural choice to mitigate the security concerns. But, traditional signature schemes, both public-key-infrastructure-based and Identity-based, have their own disadvantages, which makes them unsuitable for IoMT networks. Thus, to address the security issues and problems like certificate management and key escrow, herein, we put forward the first multivariate-based certificateless signature scheme, namely, Multivariate Certificateless Signature (Mul-CLS), which is built on top of the intractability of multivariate-quadratic (MQ) problem. The fact that multivariate public key cryptosystem provides fast, post-quantum safe and efficient primitives makes it a front-runner candidate among the other post-quantum cryptography candidates. Our scheme Mul-CLS provides existential unforgeability against chosen message and chosen identity Super Type I and Super Type II adversary if solving the MQ problem is NP-hard. In addition to that, our proposed Mul-CLS presents itself as a robust and cost-friendly cryptographic building block for building IoMT networks.
The classic methods of encryption and ciphering techniques have a major threat due to the rapid growth of quantum computing. This is particularly true for the Internet of Medical Things (IoMT) where sensitive patients’ data needs to be protected in terms of confidentiality, integrity, and authenticity. RSA and ECC serve as two examples of public key cryptographic algorithms that are highly vulnerable to quantum attacks especially the Shor’s and Grover’s algorithm. In the context of resource constrained IoMT systems, this thesis proposes a new hash-based hybrid cryptographic algorithm that is resilient to post-quantum cryptographic (PQC) attacks. In order to achieve resistance against quantum threats the proposed method uses hash-based digital signatures such as XMSS, SPHINCS+, or symmetric encryption like AES-256 with higher key sizes. In the Qiskit environment (Python, Anaconda Navigator, and Jupyter Notebook), Grover’s algorithm is modeled to simulate quantum threats. The proposed method is tested through quantum circuit analysis to evaluate their robustness. Our results will prove that the hybrid scheme, while remaining lightweight and suitable for real-time medical applications, significantly lowers the efficiency gains of quantum attacks. The proposed method will bridge the gap between the theoretical world of PQC and the practical world of IoMT networks, improving the long-term security and trust in critical healthcare systems.
The rapid adoption of Internet of Medical Things (IoMT) devices enables real-time patient monitoring and remote diagnostics and has revolutionized healthcare delivery. Traditional cryptographic schemes like RSA and ECC, which rely on meaningful mathematical challenges, are under great threat from quantum computing, threatening sensitive medical data confidentiality and integrity. This paper proposes a quantum-resistant healthcare security framework based on lattice-based cryptographic primitives such as Learning With Errors (LWE), Ring-LWE (RLWE), and Short Integer Solution (SIS). To this end, we design a five-phase IoMT-friendly framework—Initialization, Registration, Authentication, Data Exchange, and Treatment—where each phase is backed up by lightweight cryptography primitives that can be easily implemented on the low-resource IoMT devices. Relative to the state-of-the-art lattice- and hash-based constructions, our framework involves 50-75% smaller ciphertext sizes, up to a 50% reduction of the communication overhead, and nearly 60% less in computational cost. Furthermore, the solution relies on zero-knowledge proofs, homomorphic encryption as well and attribute-based access control to guarantee strong security and privacy. Using the AVISPA tool, the framework is formally verified, showing its resistance against classical and quantum adversaries. Focusing on tangible healthcare threats, including data tampering and unlicensed access to patient diagnostics, this research paves the way for scalable, efficient, and quantum-resistant medical data protection. Our results pave the way for future investigations into secure post-quantum healthcare and IoT applications.
The Internet of Medical Things (IoMT) is a compelling networking paradigm integrating wireless communications sensors, connected devices, and embedded computing technologies. The IoMT involves the collection of real-time health data using sophisticated medical sensors. In recent years, the IoMT has become increasingly significant within the broader context of the Internet of Things (IoT). It provides accessibility for health monitoring and poses security obstacles to safeguarding the confidentiality and privacy of patient data. Therefore, this article presents a blockchain-integrated quantum authentication scheme in sensor-assisted IoMT networks. The proposed concept utilizes blockchain technology to achieve efficient patient authentication without the need for third-party entities. In addition, a secure quantum authentication scheme is designed not to require patients to authenticate themselves when communicating with multiple doctors simultaneously. This protocol explicitly addresses how clinicians can misuse their professional roles toward patients in IoMT networks. An evaluation analysis assesses the proposed technique’s efficacy compared to existing authentication schemes. The performance analyses demonstrate that the proposed protocol is resilient against various security attacks. Also, the practical usability of the quantum authentication scheme proved its importance as a significant improvement in communication security for IoMT networks.