People nowadays have high acceptance of healthcare self-monitoring and self-management using smart healthcare devices, and medical professionals can access information immediately to know users' health condition. Telemedicine systems, which have become popular among medical institutes because of COVID-19, is a multi-functional remote medical service and provides long distance medical communication and services. Because of services properties, telemedicine systems have to be established in public networks for communication between medical professionals and patients outside, and privacy preservation issues of sensitive and private transmitted information is rising. Moreover, security issues are rising because of rapid development of quantum computing which might endanger systems using current cryptographic mechanisms. User-controlled single sign-on (UCSSO) scheme is one of the means of proving user authentication and secure communication with authenticated session keys, which has ability of resistance to potential cyber-attacks while allowing patients use a single pair of identity and password to access to multiple telemedicine services. In this work, we proposed an approach of privacy-preserved PQCbased UCSSO in telemedicine systems. Proposed remains above merits while achieving privacy preservation and enhancing security properties including resistance of potential attacks from quantum computers.
People nowadays have high acceptance of healthcare self-monitoring and self-management using smart healthcare devices, and medical professionals can access information immediately to know users' health condition. Telemedicine systems, which have become popular among medical institutes because of COVID-19, is a multi-functional remote medical service and provides long distance medical communication and services. Because of services properties, telemedicine systems have to be established in public networks for communication between medical professionals and patients outside, and privacy preservation issues of sensitive and private transmitted information is rising. Moreover, security issues are rising because of rapid development of quantum computing which might endanger systems using current cryptographic mechanisms. User-controlled single sign-on (UCSSO) scheme is one of the means of proving user authentication and secure communication with authenticated session keys, which has ability of resistance to potential cyber-attacks while allowing patients use a single pair of identity and password to access to multiple telemedicine services. In this work, we proposed an approach of privacy-preserved PQCbased UCSSO in telemedicine systems. Proposed remains above merits while achieving privacy preservation and enhancing security properties including resistance of potential attacks from quantum computers.
In the field of smart healthcare, video consultation has become a key way to provide medical services for remote patients. In this process, it is essential to ensure the legal identity of both parties to the communication and to protect patient privacy data from unlawful interception and tampering. Therefore, a controlled quantum authentication confidential communication protocol is proposed by using the entanglement exchange ability and measurement correlation of Bell states. With the assistance of a trusted third party, the protocol first achieves the mutual authentication of the communication parties, so as to prevent malicious users from communicating by pretending to be medical specialists or patients. The trusted party then further assists the communicating parties in generating two implicit shared keys, which they use to encrypt the message and its digest, ensuring that the patient's sensitive data is not intercepted or tampered with. In addition, the quantum sequences are transmitted only once in the channel, reducing the loss and noise effects caused by multiple transmissions. Security analysis shows that the protocol can effectively resist participant attacks and outside attacks. In addition, performance analysis provides computation in terms of qubit efficiency and experimental simulation results of the protocol.
With the rapid development of information technology from one side and the experience of the COVID-19 pandemic from the other side, people presently prefer to access healthcare services remotely. Telecare Medical Information System (TMIS) provides more flexible, faster, and more convenient e-healthcare services available to all people, particularly those who lack access to physicians due to their geographical restrictions. However, due to the sensitivity of medical information, preventing unauthorized access to patient data and preserving patient privacy is crucial. In this paper, we propose an authenticated key agreement scheme for TMIS to preserve the privacy of the patient’s identity from all internal (even the health server and the physician) and external entities. Moreover, the physician’s identity is kept secret from all external entities. Formal and informal security analysis of the proposed scheme indicates that it is secure against all attacks in the context.
Objective: The authors propose and evaluate a novel cybersecurity architecture for telehealth that is resilient against future quantum computing cyber threats. By integrating post-quantum cryptography (PQC) with quantum key distribution (QKD) and privacy-preserving mechanisms, data confidentiality and immutability for patient records in a post-quantum era are ensured. Methods: A multi-layered design approach was adopted. The PQC algorithms (e.g. CRYSTALS-Dilithium) were integrated at the blockchain consensus layer to resist quantum attacks. A directed acyclic graph (DAG)-based ledger managed high transaction throughput and latency constraints typical of telehealth. A QKD-enhanced key management protocol leveraged quantum channels for secure exchanges. Zero-knowledge proofs (ZKPs) and secure multiparty computation (MPC) verified transactions without exposing sensitive patient data. A granular access control model used attribute-based encryption and smart contracts to govern which participants could view or modify encrypted medical records. Results: The prototype was developed within a simulated telehealth network comprising hospitals, clinics, and patient devices. The PQC signatures at the consensus layer provided effective resistance to both classical and anticipated quantum attacks. The QKD facilitated secure key distribution, while ZKPs and MPC enabled validation of healthcare transactions without compromising patient privacy. Despite increased computational overhead, the DAG approach efficiently handled parallel transactions, indicating improved scalability compared to traditional linear blockchains. Conclusion: A QKD-enhanced, PQC-driven framework successfully addresses critical security and privacy requirements, safeguarding medical data from emerging quantum threats. Although overhead and infrastructural costs are significant, sustained cryptographic resilience and robust patient confidentiality underscore its suitability for next-generation healthcare systems. Future studies should explore additional optimizations, homomorphic encryption, and larger-scale pilots under regulatory standards.
With the progress of quantum computing, medical institutions that use classical public-key cryptography to secure the confidentiality of long-lasting and delicate healthcare information are facing great security challenges.This research aims to suggest a policy framework for Post-Quantum Cryptographic Policy (PQCP) to facilitate systematic shift of healthcare infrastructures to quantum resistant infrastructure security.It seamlessly combines cryptographic asset discovery, quantum-risk assessment, asset prioritization, cryptoagility, hybrid cryptographic migration, secure key management, governance, compliance monitoring, and ongoing security evaluation.It covers electronic health records, healthcare platforms in the cloud, medical imaging, telemedicine applications and resource-limited Internet of Medical Things devices.A risk-oriented migration strategy gives institutions the ability to prioritize systems based on the amount of data in a system, the vulnerabilities of the cryptographic functions used, the clinical criticality of the system, and the length of time the information must be kept confidential.There are hybrid (classical and post-quantum) mechanisms for gradual migration and interoperability or clinical continuity.Finally, the suggested framework offers a structured approach to enhance the preparedness of healthcare institutions, adherence to regulations, resilience against cryptographic attacks, and long-term protection of healthcare information from the evolving quantum cybersecurity landscape.
With the digitization and networking of medical and health data, intelligent medical devices are widely used to monitor patient health status and provide personalized medical services. However, these devices involve a large amount of personal health data and must ensure data security. The data security and privacy protection in the new complex network environment has become one of the important challenges in the field of healthcare. This study aims to propose a post quantum attribute based authentication key agreement protocol applicable to intelligent healthcare, to address the security risks and risks of medical data communication under traditional cryptographic systems. This new protocol is based on attribute authentication encryption technology without certificates on the grid, which completes mutual authentication and establishes secure communication through attribute and access control policies, and can optimize the deployment of certificate system components in public key infrastructure. Meanwhile, this scheme belongs to the post quantum cryptography protocol and has the ability to resist quantum computing attacks. Based on comprehensive analysis, this scheme can achieve certain advantages in execution efficiency and security, and can provide a more reliable choice for secure communication in the field of intelligent healthcare.
The rapid evolution of quantum computing puts traditional encryption techniques at risk of becoming ineffective, potentially exposing sensitive healthcare information to unprecedented cyber vulnerabilities. This research proposes the implementation of quantum-driven cryptographic framework, which utilizes quantum key distribution, quantum-safe algorithms, and random high entropy quantum number generators to ensure the safety of healthcare data on different health information systems. This framework advocates for the unification of EHRs, telemedicine, and IoT-enabled devices. This incorporation defends not only against current cyber vulnerabilities, but also future sequential cyber risks. This is crucial in protecting patient trust within the healthcare system. The goal is to develop a protected healthcare crypto framework best described as box-quantum safe, scalable and dynamically compliant with respective health laws cryptographically enclosing the sensitive data against relational and quantum attacks. The framework prioritizes patient data accessibility with seamless security with the incorporation of quantum key distribution, quantum safe algorithms, and entropy quantum number generators. The framework also facilitates uninterrupted incorporation with EHRs, telemedicine and connected devices while assuring continuous compliance with prevailing data protection legislations. The quantum driven frameworks to cryptographic systems are highly beneficial in safeguarding sensitive data, as it offers robust protection from current and emerging cyber threats. Integrating qsafe encryption and modern healthcare data management systems enables the proposed system to safeguard the patient's privacy, anger no international security compliance issues, and be resilient to emerging quantum threats.