article · Acta Informatica Pragensia
The Internet of Medical Things enables real-time patient monitoring and health data collection, but sending sensitive medical data over public networks creates severe security vulnerabilities, particularly with quantum computing threatening conventional cryptography. A newly developed framework, termed PQAC-BIoMT, offers decentralised remote user authentication and access control tailored for medical device networks. The architecture incorporates post-quantum cryptography through Kyber Public-Key Encryption embedded within blockchain smart contracts. To support scalability and minimise authentication delays, the model incorporates fog computing nodes. Furthermore, a role-based authorization system restricts access to patient data and device resources based on assigned user functions. Rigorous testing and formal security verification confirm that the system resists standard cyber threats as well as quantum-enabled attacks. Compared with existing schemes, the design lowers both computational workload and energy usage, making it viable for energy-limited connected medical equipment.
Emerging quantum computers will soon be able to break traditional cryptographic protections, putting sensitive medical records and connected healthcare equipment at risk. Providing a quantum-resilient, low-energy security framework ensures that healthcare providers can safely monitor patients remotely without draining device batteries or exposing private medical information to advanced cyberattacks.
The framework is aimed at medical device manufacturers, digital healthcare providers, and hospital networks deploying connected medical sensors. By operating with low computational and energy requirements, it offers an efficient route to upgrade security on resource-constrained devices. Evaluated through formal protocol verification tools and comparative performance analyses, the technology represents applied and tested research designed to support practical real-world deployment.
AI-generated from the published abstract. Always read the original work before citing.
Background: In recent years, the Internet of Medical Things (IoMT) has transformed the healthcare sector through real-time patient monitoring and continuous data collection.However, transmitting sensitive medical information over public networks exposes IoMT systems to significant security threats, while emerging quantum computing technologies challenge the reliability of traditional cryptographic systems.Objective: The objective of this study is to propose PQAC-BIoMT, a secure and robust model for remote user authentication and access control in IoMT environments, capable of withstanding both conventional and quantum attacks.Methods: This article proposes a decentralized authentication framework that integrates post-quantum cryptography using Kyber Public-Key Encryption (Kyber-PKE) into blockchain-based smart contracts.Fog computing nodes are used to reduce the authentication latency and improve the system scalability.A role-based authorization mechanism is integrated to link user identities to functional roles and enforce authorization to medical data and system resource access.Formal security verification is conducted using Burrows-Abadi-Needham (BAN) logic to validate the correctness of authentication, and the Automated Validation of Internet Security Protocols and Applications (AVISPA) tool is used to assess resistance to known attacks.PQAC-BIoMT is further evaluated through a comparative analysis of the computational load, energy consumption and security properties.Results: Our security analysis demonstrates that PQAC-BIoMT effectively resists common attacks while providing quantum-resistant protection against them.The performance evaluation shows that the proposed scheme achieves relatively lower computational and energy overhead compared to existing approaches, making it suitable for resource-constrained IoMT devices.Conclusion: The proposed PQAC-BIoMT scheme delivers a secure, quantum-resilient authentication and authorization mechanism for IoMT systems, enhancing both data protection and operational efficiency, which can support practical deployment in real-world IoMT applications.
This page summarises published work. The authoritative version sits with the publisher.
DOI: 10.18267/j.aip.321
Is something wrong with this record? Report it or request removal.
Discussion
Have you built on this work, tried to replicate it, or seen it applied in practice? Share what you know. Verified researchers and MARATTO™ domain experts can open a discussion, and any member can reply. Contributions are reviewed before they appear.
No discussion yet. Open the first thread.
New to MARATTO™? Create a free account.
