Lightweight and Fast Authentication Protocol for Digital Healthcare Services

With the rapid expansion of the Internet of Medical Things (IoMT) and cloud computing, ensuring secure communication in e-health systems has become increasingly critical. However, many existing authentication solutions suffer from excessive overhead and security vulnerabilities. To address these challenges, we present a lightweight, high-speed authentication protocol that relies on secure hash functions and XOR operations, facilitating efficient mutual authentication among users, trusted servers, and medical servers while establishing session keys for data exchange. We then rigorously assess our protocol's security against a comprehensive threat model, employing both informal methods and formal analyses, including Real-Or-Random (ROR) model, BAN logic, and automated verification via ProVerif. The results demonstrate that our protocol remains resilient against known attacks and satisfies e-health security standards. Furthermore, a detailed performance comparison reveals that our approach significantly reduces some costs compared to existing schemes, while reinforcing security and privacy protections.