Healthcare in IoT provides many benefits, such as real-time data transfer and decision-making based on the information received from the patient's Body Sensor Nodes (BSNs). Many healthcare centers have adopted IoT-based devices such as heart monitoring implants and Electrocardiograms (ECG) for continuous patient monitoring in and out of hospitals. However, due to open Internet connectivity and lack of authentication, these devices may lead to several life-threatening risks. Recent advancements in Quantum Computing threatened the security of classical cryptographic primitives such as the RSA algorithm. The security and privacy of patient data are of utmost importance and are to be protected from existing vulnerabilities and futuristic Quantum attacks. Motivated by the abovementioned issues, we proposed the QSMAH protocol which ensures secure Key Agreement (KA) and Mutual Authentication (MA) based on Quantum Cryptography. Unlike classical authentication schemes, in our protocol, Quantum Teleportation and Quantum Entanglement are effectively utilized for secure data transfer among entities. The security of the proposed QSMAH protocol relies on a Quantum Key and Greenberger–Horne–Zeilinger (GHZ) states to achieve strong authentication. An extensive formal security analysis using BAN logic is provided to prove the goal of our protocol. The simulation of the proposed protocol is provided using Automated Validation of Internet Security Protocols and Applications (AVISPA). The results reflect that the security of our protocol cannot be tampered with by Quantum Shor's and Grover's algorithms. The security analysis proves that QSMAH is also resistant to classical attacks and futuristic Quantum attacks on cryptographic schemes.
Read full abstract