The Medical Internet of Things (MIoT) plays a pivotal role in modern healthcare by integrating wireless communication and cloud computing to enhance medical practices. However, this framework presents security vulnerabilities, such as the risk of eavesdroppers exploiting public channels to intercept sensitive patient data or impersonate legitimate devices and services. Consequently, authentication between wearable devices and servers is essential before transmitting confidential information through open channels. While several authentication techniques offer protection against quantum attacks, they often incur high communication and computation costs, underscoring the need for further advancement. This paper introduces a multifactor authentication protocol designed to strengthen the integrity of cloud-assisted MIoT systems by incorporating post-quantum security. The proposed protocol utilizes a post-quantum fuzzy commitment (PQFC) scheme to enhance security and is rigorously analyzed under the random oracle model and ProVerif tool. Its functionality and security are thoroughly assessed, demonstrating adherence to key requirements such as memoryless operation, user anonymity, mutual authentication, and resistance to various threats, including biometric tampering, stolen-verifier attacks, and insider attacks. Additionally, a comprehensive comparison with existing schemes highlights a balanced trade-off between security and efficiency.
The Medical Internet of Things (MIoT) plays a pivotal role in modern healthcare by integrating wireless communication and cloud computing to enhance medical practices. However, this framework presents security vulnerabilities, such as the risk of eavesdroppers exploiting public channels to intercept sensitive patient data or impersonate legitimate devices and services. Consequently, authentication between wearable devices and servers is essential before transmitting confidential information through open channels. While several authentication techniques offer protection against quantum attacks, they often incur high communication and computation costs, underscoring the need for further advancement. This paper introduces a multifactor authentication protocol designed to strengthen the integrity of cloud-assisted MIoT systems by incorporating post-quantum security. The proposed protocol utilizes a post-quantum fuzzy commitment (PQFC) scheme to enhance security and is rigorously analyzed under the random oracle model and ProVerif tool. Its functionality and security are thoroughly assessed, demonstrating adherence to key requirements such as memoryless operation, user anonymity, mutual authentication, and resistance to various threats, including biometric tampering, stolen-verifier attacks, and insider attacks. Additionally, a comprehensive comparison with existing schemes highlights a balanced trade-off between security and efficiency.
The Medical Internet of Things (MIoT) has promoted smart healthcare through the deep integration of wearable devices, wireless communication, and cloud services. However, this framework faces security risks, as attackers may exploit public channels to impersonate legitimate devices or services and steal sensitive data. Therefore, establishing authentication between wearable devices and servers prior to data transmission is crucial. Existing schemes suffer from two critical drawbacks: vulnerability to quantum attacks and excessively high communication overhead, highlighting the need for improved solutions. The authors of this paper present a multi-factor identity authentication protocol to achieve post-quantum security and privacy protection. The scheme integrates lattice-based Kyber key encapsulation and a fuzzy commitment mechanism to secure biological templates and enable post-quantum key agreement. Additionally, hash functions and lightweight error correction codes are employed to reduce terminal communication overhead. The security of the scheme is rigorously proved in the Real-or-Random model, and the analysis confirms that the scheme satisfies common security requirements for wireless networks. The proposed scheme is also compared with existing schemes, and the results demonstrate that it achieves a balance between security and overhead.
The emergence and growth of the Internet of Medical Things (IoMT) have transformed the way healthcare services are delivered, but this growth comes with its own security challenges, especially with the emergence of quantum computing. This paper presents a lightweight, privacy-preserving authentication scheme for edge-based IoMT environments, integrating CRYSTALS-Kyber Key Encapsulation Mechanism (KEM) to securely establish session keys between participating entities and resilience against quantum attacks, while CRYSTALS-Dilithium is utilized as the digital signature scheme to ensure message integrity, authentication, and non-repudiation. These NIST-standardized post-quantum primitives collectively strengthen the system's resistance against quantum adversaries and enhance overall cryptographic robustness. The proposed system comprises two phases: Registration and Authentication. During registration, patients, wearable devices that utilize Physically Unclonable Functions (PUFs), and medical specialists register with a Trusted Authority via edge nodes. The authentication phase encompasses mutual authentication among patients, devices, medical specialists, edge nodes, and cloud servers, ensuring that only authorized entities access sensitive health information. In addition, the proposed scheme employs the formal security properties, such as authenticity and secrecy, are verified using the AVISPA tool under the Dolev-Yao model, with results confirming that all defined goals are achieved and no attacks are found. Performance evaluations indicate that the scheme is computationally efficient and suitable for resource-constrained IoMT devices. Furthermore, BAN logic is employed to formally verify the correctness of the authentication protocol, demonstrating that mutual authentication is securely established among the participating entities under well-defined trust assumptions. By integrating post-quantum cryptographic techniques, this authentication framework addresses emerging security challenges posed by quantum computing, aligning with the objectives of enhancing edge-based consumer electronics devices and Internet of Things (IoT) ecosystems with post-quantum cryptosystems.
The booming technologies of the Internet of Things (IoT) enable various applications and develop well. E-healthcare system is one of the successful examples, where people manage their healthcare information, diagnosis data, physical examination results, and so on. These types of sensitive information cause crucial security risks, posing threats to the security of the lives and property of the people. Given this concern, safeguard measures, such as authentication and encryption, are necessary. However, due to the openness of the wireless networks, authentication protocols for IoT-enabled e-healthcare systems are usually vulnerable to serious attacks. Furthermore, the quantum era is around the corner, urging authentication protocols to possess post-quantum security properties. In this paper, we propose a multi-factor password authentication scheme, named PAMA, with post-quantum security for the e-healthcare system. The lattice cryptography is adopted for post-quantum security. We formally prove the proposed PAMA scheme to be secure, and also informally verify the security against common attacks. Furthermore, we compare the performance of the communication efficiency of the PAMA scheme with other related works from both theoretical and experimental aspects. The efficiency comparison results demonstrate that our PAMA scheme approximately reduces the computation cost by 37.59% and the energy consumption by 37.5%, compared to the related post-quantum schemes. In summary, the PAMA scheme has a great advantage in secure authentication and agreement on a session key in the e-healthcare system.
The Internet of Medical Things (IoMT) is a compelling networking paradigm integrating wireless communications sensors, connected devices, and embedded computing technologies. The IoMT involves the collection of real-time health data using sophisticated medical sensors. In recent years, the IoMT has become increasingly significant within the broader context of the Internet of Things (IoT). It provides accessibility for health monitoring and poses security obstacles to safeguarding the confidentiality and privacy of patient data. Therefore, this article presents a blockchain-integrated quantum authentication scheme in sensor-assisted IoMT networks. The proposed concept utilizes blockchain technology to achieve efficient patient authentication without the need for third-party entities. In addition, a secure quantum authentication scheme is designed not to require patients to authenticate themselves when communicating with multiple doctors simultaneously. This protocol explicitly addresses how clinicians can misuse their professional roles toward patients in IoMT networks. An evaluation analysis assesses the proposed technique’s efficacy compared to existing authentication schemes. The performance analyses demonstrate that the proposed protocol is resilient against various security attacks. Also, the practical usability of the quantum authentication scheme proved its importance as a significant improvement in communication security for IoMT networks.
Abstract In internet of things (IOT) healthcare systems, sensitive patient information is transmitted over the network to medical professionals. Numerous lightweight authentication protocols have been proposed; however, most of them remain vulnerable to various cyberattacks, allowing attackers to eavesdrop on or manipulate transmitted data. We examine several recently proposed lightweight authentication schemes for healthcare systems. Our security analysis demonstrates that these schemes remain vulnerable to malicious gateway attacks, desynchronization attacks, and key screw attacks. .To address these issues and ensure post- quantum security in healthcare IoT, we propose a post-quantum key establishment protocol based on lattice- based cryptography (LWE). the proposed scheme prevents the gateway from accessing both the secret keys and their parameters, thereby eliminating the possibility of malicious gateway attacks. The proposed protocol ensures user anonymity, forward secrecy, and resistance to impersonation, key screw, and desynchronization attacks.. The proposed protocol ensures secure and efficient establishment of three-round key establishment among entities . Our performance evaluation shows that the proposed scheme achieves lower computation and communication overhead compared to recent related works. The security of the protocol is thoroughly analyzed through informal reasoning, Burrows–Abadi–Needham (BAN) logic, and ProVerif, confirming its robustness and suitability for resource-constrained IoT-based healthcare environments.
Rapid advancement in Internet of Things(IoT) changes the way people work and live deliberately. Medical IoT (MIoT) is a highly significant application in the world of IoT, allowing the user to communicate with smart medical devices with the help of a hospital gateway node. To establish a private communication channel, a three-party authenticated key agreement (AKA) technique using public-key cryptography is used. Currently, the AKA algorithms used in MIoT are based on classical cryptography such as ElGamal, RSA, ECC, etc. All of these techniques have become obsolete in the post-quantum environment as the Shor algorithm can solve these techniques on quantum computers. To overcome the problem stated above, a scheme called Lattice based Three party authenticated key agreement scheme in Medical IoT is proposed to accomplish security and efficiency in a post-quantum environment. Formal and informal security analysis is given to authenticate the protocol’s security. Also, the security analysis is conducted formally with the help of the Random Oracle Model (ROM) and ProVerif tool. The suggested scheme is compared to existing schemes in terms of security features, computing costs, and communication costs to evaluate the system’s performance. It validates that the suggested scheme exceeds the existing schemes.