Quantum Safe Multi-Factor User Authentication Protocol for Cloud-Assisted Medical IoT

The Medical Internet of Things (MIoT) plays a pivotal role in modern healthcare by integrating wireless communication and cloud computing to enhance medical practices. However, this framework presents security vulnerabilities, such as the risk of eavesdroppers exploiting public channels to intercept...

Full description

Saved in:
Bibliographic Details
Main Authors: Arman Ahmad, S. Jagatheswari
Format: Article
Language:English
Published: IEEE 2025-01-01
Series:IEEE Access
Subjects:
Online Access:https://ieeexplore.ieee.org/document/10817601/
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1841554055251361792
author Arman Ahmad
S. Jagatheswari
author_facet Arman Ahmad
S. Jagatheswari
author_sort Arman Ahmad
collection DOAJ
description The Medical Internet of Things (MIoT) plays a pivotal role in modern healthcare by integrating wireless communication and cloud computing to enhance medical practices. However, this framework presents security vulnerabilities, such as the risk of eavesdroppers exploiting public channels to intercept sensitive patient data or impersonate legitimate devices and services. Consequently, authentication between wearable devices and servers is essential before transmitting confidential information through open channels. While several authentication techniques offer protection against quantum attacks, they often incur high communication and computation costs, underscoring the need for further advancement. This paper introduces a multifactor authentication protocol designed to strengthen the integrity of cloud-assisted MIoT systems by incorporating post-quantum security. The proposed protocol utilizes a post-quantum fuzzy commitment (PQFC) scheme to enhance security and is rigorously analyzed under the random oracle model and ProVerif tool. Its functionality and security are thoroughly assessed, demonstrating adherence to key requirements such as memoryless operation, user anonymity, mutual authentication, and resistance to various threats, including biometric tampering, stolen-verifier attacks, and insider attacks. Additionally, a comprehensive comparison with existing schemes highlights a balanced trade-off between security and efficiency.
format Article
id doaj-art-a69a8d38813048d1ada227d651bc4acf
institution Kabale University
issn 2169-3536
language English
publishDate 2025-01-01
publisher IEEE
record_format Article
series IEEE Access
spelling doaj-art-a69a8d38813048d1ada227d651bc4acf2025-01-09T00:01:50ZengIEEEIEEE Access2169-35362025-01-01133532354510.1109/ACCESS.2024.352353010817601Quantum Safe Multi-Factor User Authentication Protocol for Cloud-Assisted Medical IoTArman Ahmad0https://orcid.org/0009-0008-6667-3351S. Jagatheswari1https://orcid.org/0000-0002-9359-413XDepartment of Mathematics, School of Advanced Sciences, Vellore Institute of Technology, Vellore, Tamil Nadu, IndiaDepartment of Mathematics, School of Advanced Sciences, Vellore Institute of Technology, Vellore, Tamil Nadu, IndiaThe Medical Internet of Things (MIoT) plays a pivotal role in modern healthcare by integrating wireless communication and cloud computing to enhance medical practices. However, this framework presents security vulnerabilities, such as the risk of eavesdroppers exploiting public channels to intercept sensitive patient data or impersonate legitimate devices and services. Consequently, authentication between wearable devices and servers is essential before transmitting confidential information through open channels. While several authentication techniques offer protection against quantum attacks, they often incur high communication and computation costs, underscoring the need for further advancement. This paper introduces a multifactor authentication protocol designed to strengthen the integrity of cloud-assisted MIoT systems by incorporating post-quantum security. The proposed protocol utilizes a post-quantum fuzzy commitment (PQFC) scheme to enhance security and is rigorously analyzed under the random oracle model and ProVerif tool. Its functionality and security are thoroughly assessed, demonstrating adherence to key requirements such as memoryless operation, user anonymity, mutual authentication, and resistance to various threats, including biometric tampering, stolen-verifier attacks, and insider attacks. Additionally, a comprehensive comparison with existing schemes highlights a balanced trade-off between security and efficiency.https://ieeexplore.ieee.org/document/10817601/Medical IoTauthenticationlattice-based cryptographypost-quantum securitykey agreement
spellingShingle Arman Ahmad
S. Jagatheswari
Quantum Safe Multi-Factor User Authentication Protocol for Cloud-Assisted Medical IoT
IEEE Access
Medical IoT
authentication
lattice-based cryptography
post-quantum security
key agreement
title Quantum Safe Multi-Factor User Authentication Protocol for Cloud-Assisted Medical IoT
title_full Quantum Safe Multi-Factor User Authentication Protocol for Cloud-Assisted Medical IoT
title_fullStr Quantum Safe Multi-Factor User Authentication Protocol for Cloud-Assisted Medical IoT
title_full_unstemmed Quantum Safe Multi-Factor User Authentication Protocol for Cloud-Assisted Medical IoT
title_short Quantum Safe Multi-Factor User Authentication Protocol for Cloud-Assisted Medical IoT
title_sort quantum safe multi factor user authentication protocol for cloud assisted medical iot
topic Medical IoT
authentication
lattice-based cryptography
post-quantum security
key agreement
url https://ieeexplore.ieee.org/document/10817601/
work_keys_str_mv AT armanahmad quantumsafemultifactoruserauthenticationprotocolforcloudassistedmedicaliot
AT sjagatheswari quantumsafemultifactoruserauthenticationprotocolforcloudassistedmedicaliot