Provably secure and lightweight blockchain based cross hospital authentication scheme for IoMT-based healthcare

Abstract Portable devices and sensors-based Internet of Medical Things (IoMT) healthcare can remotely detect patients’ physiological data and provide first-class healthcare services. However, the high privacy and sensitivity of medical data make IoMT healthcare systems vulnerable to various attacks....

Full description

Saved in:
Bibliographic Details
Main Authors: Qi Xie, Zixuan Ding
Format: Article
Language:English
Published: Nature Portfolio 2025-02-01
Series:Scientific Reports
Subjects:
Online Access:https://doi.org/10.1038/s41598-025-90219-5
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1850191191363026944
author Qi Xie
Zixuan Ding
author_facet Qi Xie
Zixuan Ding
author_sort Qi Xie
collection DOAJ
description Abstract Portable devices and sensors-based Internet of Medical Things (IoMT) healthcare can remotely detect patients’ physiological data and provide first-class healthcare services. However, the high privacy and sensitivity of medical data make IoMT healthcare systems vulnerable to various attacks. While numerous authentication protocols have been introduced in recent years to guarantee authorized access, these schemes continue to face challenges such as privacy disclosure, untraceability of malicious behavior, insufficient cross-hospital access, and concerns related to single points of failure and trust. To address these issues, we propose a Double Anonymity Strategy to hide identities between doctors and the patients while allowing the authorized party to track their malicious behavior, enhance users’ privacy and track malicious users. Our approach leverages the advantages of blockchain, such as decentralization, and replaces trusted third parties with smart contracts for efficient and automatic identity authentication. Additionally, we introduce a cross-hospital authentication scheme that incorporates three-factor secrecy, ensuring that even if any two of the three factors (device, biometric information and password) are compromised, the security of the proposed scheme will not be affected. The security of our scheme is formally proven under the random oracle model, which formally measures that the probability of an adversary breaking the scheme is negligible. We also provide informal security analysis showing that our scheme prevents privacy breaches, achieves decentralization, and addresses existing various attacks. Furthermore, through simulation of the proposed scheme and comparison with related works, we demonstrate that our scheme achieves 23% to 87% reduction in computational cost while maintaining higher security properties.
format Article
id doaj-art-a9bf331c38d043c793e6e168d664bb02
institution OA Journals
issn 2045-2322
language English
publishDate 2025-02-01
publisher Nature Portfolio
record_format Article
series Scientific Reports
spelling doaj-art-a9bf331c38d043c793e6e168d664bb022025-08-20T02:14:59ZengNature PortfolioScientific Reports2045-23222025-02-0115111910.1038/s41598-025-90219-5Provably secure and lightweight blockchain based cross hospital authentication scheme for IoMT-based healthcareQi Xie0Zixuan Ding1Key Laboratory of Cryptography of Zhejiang Province, Hangzhou Normal UniversityCollege of Cryptology and Cyber Science, Nankai UniversityAbstract Portable devices and sensors-based Internet of Medical Things (IoMT) healthcare can remotely detect patients’ physiological data and provide first-class healthcare services. However, the high privacy and sensitivity of medical data make IoMT healthcare systems vulnerable to various attacks. While numerous authentication protocols have been introduced in recent years to guarantee authorized access, these schemes continue to face challenges such as privacy disclosure, untraceability of malicious behavior, insufficient cross-hospital access, and concerns related to single points of failure and trust. To address these issues, we propose a Double Anonymity Strategy to hide identities between doctors and the patients while allowing the authorized party to track their malicious behavior, enhance users’ privacy and track malicious users. Our approach leverages the advantages of blockchain, such as decentralization, and replaces trusted third parties with smart contracts for efficient and automatic identity authentication. Additionally, we introduce a cross-hospital authentication scheme that incorporates three-factor secrecy, ensuring that even if any two of the three factors (device, biometric information and password) are compromised, the security of the proposed scheme will not be affected. The security of our scheme is formally proven under the random oracle model, which formally measures that the probability of an adversary breaking the scheme is negligible. We also provide informal security analysis showing that our scheme prevents privacy breaches, achieves decentralization, and addresses existing various attacks. Furthermore, through simulation of the proposed scheme and comparison with related works, we demonstrate that our scheme achieves 23% to 87% reduction in computational cost while maintaining higher security properties.https://doi.org/10.1038/s41598-025-90219-5Authentication protocolInternet of Medical ThingsBlockchainHealthcareCross-hospitalDecentralization
spellingShingle Qi Xie
Zixuan Ding
Provably secure and lightweight blockchain based cross hospital authentication scheme for IoMT-based healthcare
Scientific Reports
Authentication protocol
Internet of Medical Things
Blockchain
Healthcare
Cross-hospital
Decentralization
title Provably secure and lightweight blockchain based cross hospital authentication scheme for IoMT-based healthcare
title_full Provably secure and lightweight blockchain based cross hospital authentication scheme for IoMT-based healthcare
title_fullStr Provably secure and lightweight blockchain based cross hospital authentication scheme for IoMT-based healthcare
title_full_unstemmed Provably secure and lightweight blockchain based cross hospital authentication scheme for IoMT-based healthcare
title_short Provably secure and lightweight blockchain based cross hospital authentication scheme for IoMT-based healthcare
title_sort provably secure and lightweight blockchain based cross hospital authentication scheme for iomt based healthcare
topic Authentication protocol
Internet of Medical Things
Blockchain
Healthcare
Cross-hospital
Decentralization
url https://doi.org/10.1038/s41598-025-90219-5
work_keys_str_mv AT qixie provablysecureandlightweightblockchainbasedcrosshospitalauthenticationschemeforiomtbasedhealthcare
AT zixuanding provablysecureandlightweightblockchainbasedcrosshospitalauthenticationschemeforiomtbasedhealthcare