Post-quantum cryptographic policy frameworks for medical institutions
M. Thorat, Mukesh Parashar, Mourya Murlidher +3 more
With the progress of quantum computing, medical institutions that use classical public-key cryptography to secure the confidentiality of long-lasting and delicate healthcare information are facing great security challenges.This research aims to suggest a policy framework for Post-Quantum Cryptographic Policy (PQCP) to facilitate systematic shift of healthcare infrastructures to quantum resistant infrastructure security.It seamlessly combines cryptographic asset discovery, quantum-risk assessment, asset prioritization, cryptoagility, hybrid cryptographic migration, secure key management, governance, compliance monitoring, and ongoing security evaluation.It covers electronic health records, healthcare platforms in the cloud, medical imaging, telemedicine applications and resource-limited Internet of Medical Things devices.A risk-oriented migration strategy gives institutions the ability to prioritize systems based on the amount of data in a system, the vulnerabilities of the cryptographic functions used, the clinical criticality of the system, and the length of time the information must be kept confidential.There are hybrid (classical and post-quantum) mechanisms for gradual migration and interoperability or clinical continuity.Finally, the suggested framework offers a structured approach to enhance the preparedness of healthcare institutions, adherence to regulations, resilience against cryptographic attacks, and long-term protection of healthcare information from the evolving quantum cybersecurity landscape.
Journal of Information and Optimization Sciences•Oct 31, 2026•0 citations