Given the critical role of medical information in medical cryptographic processes, it is essential to have rigorous security validation to prevent any vulnerabilities in the authentication process that could lead to unauthorized access and access to clinical information and allow unauthorized treatment decisions to be made.This study introduces a formal security-proof framework to assess the security of authentication, confidentiality, integrity, anonymity and security of session-keys in connected healthcare settings.The proposed protocol uses finite field operations, cryptographic hashes, key derivation functions, random nonces, timestamps and medical professionals and patients.Adversarial games, mutual-authentication proofs, session-key indistinguishability and resistance to replay, impersonation, man-in-the-middle and privileged-insider attacks are discussed in the context of security.The formal reasoning approach has a negligible adversarial advantage, given the computational assumptions.Comparative evaluation shows the overhead of the authentication process is lower, but the protection of the medical devices is still high, even when considering the limited resources of medical devices.The framework provides a mathematically sound basis for designing reliable, private and effective healthcare communication systems in a heterogeneous clinical network and infrastructure.
Given the critical role of medical information in medical cryptographic processes, it is essential to have rigorous security validation to prevent any vulnerabilities in the authentication process that could lead to unauthorized access and access to clinical information and allow unauthorized treatment decisions to be made.This study introduces a formal security-proof framework to assess the security of authentication, confidentiality, integrity, anonymity and security of session-keys in connected healthcare settings.The proposed protocol uses finite field operations, cryptographic hashes, key derivation functions, random nonces, timestamps and medical professionals and patients.Adversarial games, mutual-authentication proofs, session-key indistinguishability and resistance to replay, impersonation, man-in-the-middle and privileged-insider attacks are discussed in the context of security.The formal reasoning approach has a negligible adversarial advantage, given the computational assumptions.Comparative evaluation shows the overhead of the authentication process is lower, but the protection of the medical devices is still high, even when considering the limited resources of medical devices.The framework provides a mathematically sound basis for designing reliable, private and effective healthcare communication systems in a heterogeneous clinical network and infrastructure.
Secure communication and authentication in the Internet of Medical Things (IoMT) are critical for patient safety and healthcare data protection, yet existing protocols face significant vulnerabilities that remain undetected by conventional verification approaches. This paper presents the computational security verification of an IoMT authentication protocol incorporating NTRU lattice-based post-quantum cryptography using CryptoVerif, a formal verification tool that provides concrete probability bounds under standard cryptographic assumptions. Through systematic analysis of a multi-entity healthcare protocol, this study identifies two critical security flaws overlooked by previous symbolic verification methods: device registration authentication failure enabling man-in-the-middle device substitution attacks, and forward secrecy violation through static key encryption that exposes historical medical data upon key compromise. To address these vulnerabilities, we provide an enhanced protocol incorporating Strong Unforgeability under Chosen Message Attacks (SUF-CMA) MAC-based device authentication that cryptographically binds device identity to patient identity, and HMAC-based key derivation function (HKDF)-derived ephemeral session keys that achieve forward secrecy through fresh key derivation for each communication session. Our CryptoVerif implementation successfully proves nine security properties including mutual authentication, data confidentiality, device binding, and forward secrecy, with aggregate security bound for 128-bit quantum-resistant security. Unlike symbolic verification tools that assume perfect cryptography, our computational analysis provides concrete security guarantees essential for safety-critical healthcare systems.
Abstract In internet of things (IOT) healthcare systems, sensitive patient information is transmitted over the network to medical professionals. Numerous lightweight authentication protocols have been proposed; however, most of them remain vulnerable to various cyberattacks, allowing attackers to eavesdrop on or manipulate transmitted data. We examine several recently proposed lightweight authentication schemes for healthcare systems. Our security analysis demonstrates that these schemes remain vulnerable to malicious gateway attacks, desynchronization attacks, and key screw attacks. .To address these issues and ensure post- quantum security in healthcare IoT, we propose a post-quantum key establishment protocol based on lattice- based cryptography (LWE). the proposed scheme prevents the gateway from accessing both the secret keys and their parameters, thereby eliminating the possibility of malicious gateway attacks. The proposed protocol ensures user anonymity, forward secrecy, and resistance to impersonation, key screw, and desynchronization attacks.. The proposed protocol ensures secure and efficient establishment of three-round key establishment among entities . Our performance evaluation shows that the proposed scheme achieves lower computation and communication overhead compared to recent related works. The security of the protocol is thoroughly analyzed through informal reasoning, Burrows–Abadi–Needham (BAN) logic, and ProVerif, confirming its robustness and suitability for resource-constrained IoT-based healthcare environments.
With the progress of quantum computing, medical institutions that use classical public-key cryptography to secure the confidentiality of long-lasting and delicate healthcare information are facing great security challenges.This research aims to suggest a policy framework for Post-Quantum Cryptographic Policy (PQCP) to facilitate systematic shift of healthcare infrastructures to quantum resistant infrastructure security.It seamlessly combines cryptographic asset discovery, quantum-risk assessment, asset prioritization, cryptoagility, hybrid cryptographic migration, secure key management, governance, compliance monitoring, and ongoing security evaluation.It covers electronic health records, healthcare platforms in the cloud, medical imaging, telemedicine applications and resource-limited Internet of Medical Things devices.A risk-oriented migration strategy gives institutions the ability to prioritize systems based on the amount of data in a system, the vulnerabilities of the cryptographic functions used, the clinical criticality of the system, and the length of time the information must be kept confidential.There are hybrid (classical and post-quantum) mechanisms for gradual migration and interoperability or clinical continuity.Finally, the suggested framework offers a structured approach to enhance the preparedness of healthcare institutions, adherence to regulations, resilience against cryptographic attacks, and long-term protection of healthcare information from the evolving quantum cybersecurity landscape.
With the digitization and networking of medical and health data, intelligent medical devices are widely used to monitor patient health status and provide personalized medical services. However, these devices involve a large amount of personal health data and must ensure data security. The data security and privacy protection in the new complex network environment has become one of the important challenges in the field of healthcare. This study aims to propose a post quantum attribute based authentication key agreement protocol applicable to intelligent healthcare, to address the security risks and risks of medical data communication under traditional cryptographic systems. This new protocol is based on attribute authentication encryption technology without certificates on the grid, which completes mutual authentication and establishes secure communication through attribute and access control policies, and can optimize the deployment of certificate system components in public key infrastructure. Meanwhile, this scheme belongs to the post quantum cryptography protocol and has the ability to resist quantum computing attacks. Based on comprehensive analysis, this scheme can achieve certain advantages in execution efficiency and security, and can provide a more reliable choice for secure communication in the field of intelligent healthcare.
As health information crosses from one healthcare domain or infrastructure to another, robust confidentiality, authentication, and integrity of the electronic medical records are crucial.This study aims to present a hybrid post-quantum encryption and authentication scheme for secure medical data exchange across the border using lattice-based encryption.The framework integrates a session-key establishment mechanism based on ML-KEM, AES-256-GCM for medical-data encryption, a digital signature scheme based on ML-DSA, integrity check based on hash function and identity-bound transaction metadata.It takes into account the mathematical security model involving key encapsulation, signature verification, adversarial advantage, communication overhead and processing cost.This shows that the proposed framework takes around 0.47ms for key encapsulation, 0.55ms for decapsulation and 0.94ms for digital signing, using simulation-based evaluation.The assumed end-to-end processing time is 83.91ms for a medical record of 50 MB, and the security related communication overhead falls off to about 0.011% when the size of the medical record increases.The results of the analysis show that quantum-resistant protection can be implemented with a moderate computational and communication overhead in crossborder healthcare settings.
Aim/Purpose: Medical images are very sensitive data that can be transferred to medical laboratories, professionals, and specialist for referral cases or consultation. Strict security measures must be utilized to keep these data secured in computer networks when transferred to another party. On a daily basis, unauthorized users derive ways to gain access to sensitive patient medical information. Background: One of the best ways to which medical image could be kept secured is through the use of quantum cryptography Methodology : Applying the principles of quantum mechanics to cryptography has led to a remarkable new dimension in secured network communication infrastructure. This enables two legitimate users to produce a shared secret random bit string, which can be used as a key in cryptographic applications, such as message encryption and authentication. Contribution: This paper can make it possible for the healthcare and medical professions to construct cryptographic communication systems to keep patients’ transferred data safe and secured. Findings: This work has been able to provide a way for two authorized users who are in different locations to securely establish a secret network key and to detect if eavesdropping (a fraudulent or disruption in the network) has occurred Recommendations for Practitioners: This security mechanism is recommended for healthcare providers and practitioners to ensure the privacy of patients’ medical information. Recommendation for Researchers: This paper opens a new chapter in secured medical records Impact on Society Quantum key distribution promises network security based on the fundamental laws of quantum mechanics by solving the problems of secret-key cryptography . Future Research: The use of post-quantum cryptography can be further researched.