Lightweight Two-Factor-Based User Authentication Protocol for IoT-Enabled Healthcare Ecosystem in Quantum Computing

Abstract

The healthcare ecosystem is migrating from legacy systems to the Internet of Things (IoT), resulting in a digital environment. This transformation has increased importance on demanding both secure and usable user authentication methods. Recently, a post-quantum fuzzy commitment scheme (PQFC) has been constructed as a reliable and efficient method of biometric template protection. This paper presents a new two-factor-based user authentication protocol for the IoT-enabled healthcare ecosystem in post-quantum computing environments using the PQFC scheme. The proposed protocol is proved to be secure using random oracle model. Furthermore, the functionality and security of the proposed protocol are analyzed, showing that memoryless-effortless, user anonymity, mutual authentication, and resistance to biometric templates tampering and stolen attacks, stolen smart card attack, privileged interior attack are fulfilled. The costs of storage requirement, computation, communication and storage are estimated. The results demonstrate that the proposed protocol is more efficient than Mukherjee et al., Chaudhary et al., and Gupta et al. protocols.

A Survey on Key Agreement and Authentication Protocol for Internet of Things Application

“…The security has been validated by utilizing the random oracle model (ROM). Its performance has been found to be more efficient than other related protocols [5]. In paper [23], a novel pairing-free authentication and aggregation mechanism based on elliptic curve cryptography is proposed to protect data privacy and security in healthcare systems.…”

“…Its public key is calculated in Eqn. (5), where G is the base point on the elliptic curve. Elliptic Curve Diffie-Hellman is a variant of the Diffie-Hellman protocol that uses ECC to generate a shared secret between two parties, as shown in Figure 6.…”

“…State of the art for authentication in recent research includes but is not limited to: Lightweight Authentication Protocols. Due to the limited resources of IoT devices, various fields such as medical IoT [4], [5], [6], 5G-enabled IoT [7], 6G-based cellular networks [8], and industrial IoT [9] need lightweight authentication and key agreement (AKA) protocols. Current AKA protocols provide lightweight authentication by minimizing the computational and communication overhead [10], [11], [12].…”

Enhancing the Security: A Lightweight Authentication and Key Agreement Protocol for Smart Medical Services in the IoHT

“…Agrahari et al [37] devised an AKA protocol for healthcare monitoring systems, ensuring the security of patient data during transmission. Al-Saggaf et al [38] proposed a two-factor AKA protocol based on IoHT, utilizing quantum computing for enhanced security.…”