Design a Secure Post-Quantum Cryptography-Based Medical Information System

Abstract

Medical and healthcare sectors have been doing digital transformation recently, and COVID-19 accelerated the progress. Digital transformation helps medical and healthcare institutes improve quality of services. However, cyber security threats follow because of vulnerabilities of information systems, such as data tempering, invasion, etc., and not only privacy but life of patient will be in danger. Moreover, modern cryptosystems nowadays may not be able to resist attacks from quantum computers in the future. Proposed scheme applies lattice-based cryptography, one of the post-quantum cryptography mechanisms, to achieve identity authentication and key exchange mechanism. Proposed scheme generates public and private key using identifier and password of users, and users do not have to store private key to reduce risk of key stolen. Proposed scheme achieves security features, such as confidentiality, session key confirmation, mutual authentication, key storing-free, periodically mutual authentication of devices of Internet of Healthcare Things, and resisting attacks from quantum computers.