Enhancing medical data protection with a resilient ECC and blockchain authentication framework
Samiulla Itoo, Ram Baksh, Lalit Kumar Som, Musheer Ahmad, Faheem Syeed Masoodi · Information Security Journal A Global Perspective · 2025
The exponential growth of the Internet of Medical Things (IoMT) has enabled real-time data exchange and personalized healthcare services. However, this evolution also presents significant security and privacy challenges, especially in safeguarding sensitive medical data transmitted over heterogeneous and resource-constrained networks. In this paper, we propose a robust and lightweight authentication framework that synergistically integrates Elliptic Curve Cryptography (ECC) with blockchain technology to establish a decentralized, tamper-resistant, and energy-efficient solution for Medical Cyber-Physical Systems (MCPS). The protocol guarantees mutual authentication, session key agreement, and data integrity while maintaining low computational overhead, making it ideal for IoMT environments. To formally verify the security of the proposed scheme, we utilize the Random Oracle Model(RoR) model and conduct extensive automated analysis using the Scyther tool. The results confirm that our protocol is secure against a wide range of attacks, including replay, impersonation, and man-in-the-middle attacks, while outperforming existing schemes in terms of computational and communication efficiency.