Dynamic entropy-based lightweight security architecture integrating ECC signcryption and zero trust for interoperable healthcare systems

Pharande, Rutuja Sanyog; Tiwari, Basant; Bhoite, Sachin

doi:10.47974/JDMSC-2745

Open Access Research Article

Dynamic entropy-based lightweight security architecture integrating ECC signcryption and zero trust for interoperable healthcare systems

^*Rutuja Sanyog PharandeCorresponding author1272251325@mitwpu.edu.inDepartment of Computer Science and ApplicationsDr. Vishwanath Karad MIT World Peace UniversityPune, Maharashtra, 411038, IndiaView full profile → , Basant Tiwaribasant.tiwari@mitwpu.edu.inDepartment of Computer Science and ApplicationsDr. Vishwanath Karad MIT World Peace UniversityPune, Maharashtra, 411038, IndiaView full profile → , Sachin Bhoitesachin.bhoite@mitwpu.edu.inDepartment of Computer Science and ApplicationsDr. Vishwanath Karad MIT World Peace UniversityPune, Maharashtra, 411038, IndiaView full profile →

* Corresponding author · click or hover a name for details

pp. 3177–3195Vol. 29Issue 8August 2026DOI: 10.47974/JDMSC-2745 Crossmark XML

Received:: 01 Jan 2026
Published Online:: 14 Aug 2026
Article type:: Research Article
Language:: EN
Article no.:: JDMSC-2745
Pages:: 3177–3195

Abstract

Interoperable healthcare IT systems are leveraged upon 5G enabled interacted IoMT devices and database servers, yet most existing security frameworks still rely on static keys that cannot cope with array of cyber threats, vulnerabilities, and attack vectors. To address this gap, we presented an environment-aware security framework that fused together with ECC-based mutual authentication and signcryption mechanism. The proposed approach uses environmental values such temperature as a natural, dynamic source of entropy to introduce randomness in the security process, especially in driving session oriented cryptographic keys, allowing each transmission to be securely binds with the device’s operating context. In the proposed work, signcryption process binds the encryption and signing into a single step,

that reduces the packet size and computational cost of resource limited sensing and gateway devices. On the other side, a Zero Trust Data Gateway unsigncrypts, verifies, and forwards messages to a patient-centric ZTA module for granting or rejecting permission based on received request within specific context. The experiment show that proposed approach achieves faster execution, lower overhead, and stronger replay resistance than traditional RSA or Elliptic Curve Cryptography- Elliptic Curve Digital Signature Algorithm (ECCECDSA) alternatives. Overall, proposed work concludes a practical path toward secure, context-aware communication in next-generation healthcare environments.

Keywords

Elliptic curve cryptography signcryption (ECC signcryption)Mutual authentication Zero trust architecture (ZTA)Secure internet of medical things (IoMT) communication Contextaware cryptography Healthcare data security

Subject Classifications

Primary 94A60Secondary 94A62

References

[1] A. K. Alnaim, “Adaptive zero trust policy management framework in 5G networks,” Mathematics, vol. 13, no. 9, Art. no. 1501 (2025), doi: 10.3390/math13091501.

[2] R. Jain, B. Batra, B. Kanwer, L. Raja, and V. Bhatnagar, “Transforming network security through zero trust architecture: Principles, challenges, and future directions,” Journal of Discrete Mathematical Sciences and Cryptography, vol. 29, no. 2-B, pp. 1097–1106 (2026), doi: 10.47974/JDMSC-2649.

[3] A. Noonia, D. Thakral, P. Mathur, F. Sheth, H. Shaikh, and A. K. Gupta, “A discrete mathematical model and cryptography for secure medical image analysis: Encrypted chest X-ray classification,” J. Discrete Math. Sci. Cryptogr., vol. 28, no. 5A, pp. 1473–1486 (2025), doi: 10.47974/JDMSC-2146.

[4] P. Dhiman, N. Saini, Y. Gulzar, S. Turaev, A. Kaur, K. U. Nisa, and Y. Hamid, “A review and comparative analysis of relevant approaches of zero trust network model,” Sensors, vol. 24, no. 4, Art. no. 1328 (2024), doi: 10.3390/s24041328.

[5] N. Kaur, A. Mittal, U. K. Lilhore, S. Simaiya, S. Dalal, K. Saleem, and E. S. Ghith, “Securing fog computing in healthcare with a zero-trust approach and blockchain,” EURASIP J. Wireless Commun. Netw., vol. 2025, no. 1, Art. no. 5 (2025), doi: 10.1186/s13638-025-02431-6.

[6] A. K. Tyagi and R. Seranmadevi, “Blockchain for enhancing security and privacy in the smart healthcare,” in Digital Twin and Blockchain for Smart Cities. Hoboken, NJ, USA: Wiley, pp. 343–370 (2024), doi: 10.1002/9781394303564.ch16.

[7] W. Jin, S. Wu, Y. Feng, H. Wang, and C. Fu, “Zero trust architecture for security and protection system in 5G intelligent healthcare,” International Arab Journal of Information Technology, vol. 22, no. 2, pp. 263–277 (2025), doi: 10.34028/iajit/22/2/5.

[8] M. L. Gambo and A. Almulhem, “Zero Trust Architecture: A systematic literature review,” J. Netw. Syst. Manage., vol. 34, no. 1, Art. no. 25 (2026), doi: 10.1007/s10922-025-09998-x.

[9] H. Nandanwar and R. Katarya, “Secure and privacy-preserving data sharing in 6G-enabled blockchain IoT healthcare systems,” Secur. Privacy, vol. 8, no. 6, Art. no. e70105 (2025), doi: 10.1002/spy2.70105.

[10] R. Maji, B. Gayen, and S. Saha, “A robust IoT-based approach to enhance cybersecurity and patient trust in the smart health care system: Zero-trust model,” in Design and Forecasting Models for Disease Management. Hoboken, NJ, USA: Wiley, pp. 269–281 (2025), doi: 10.1002/9781394234073.ch12.

[11] S. Batra, B. Narwal, and A. K. Mohapatra, “JLSAIoMT: Justifiable lightweight and secure mutual authentication scheme for Internet of Medical Things,” Journal of Discrete Mathematical Sciences and Cryptography, vol. 28, no. 5, pp. 2113–2142 (2025), doi: 10.47974/JDMSC-2189.

[12] G. A. Thushara and S. M. S. Bhanu, “A blockchain-assisted attribute-based signcryption for secure sharing of medical IoT data in fog environment,” Secur. Privacy, vol. 8, no. 3, Art. no. e70034 (2025), doi: 10.1002/spy2.70034.

[13] S. Goel, M. K. Gupta, and S. Kumari, “An improved attribute-based signature using elliptic curve cryptography,” J. Discrete Math. Sci. Cryptogr., vol. 28, no. 6, pp. 2371–2382 (2025), doi: 10.47974/JDMSC-2302.

[14] K. Al-Hammuri, F. Gebali, and A. Kanan, “ZTCloudGuard: Zero trust context-aware access management framework to avoid medical errors in the era of generative AI and cloud-based health information ecosystems,” AI, vol. 5, no. 3, pp. 1111–1131 (2024), doi: 10.3390/ai5030055.

[15] C. Liu, R. Tan, Y. Wu, Y. Feng, Z. Jin, F. Zhang, Y. Liu, and Q. Liu, “Dissecting zero trust: Research landscape and its implementation in IoT,” Cybersecurity, vol. 7, no. 1, Art. no. 20 (2024), doi: 10.1186/s42400-024-00220-8.

[16] A. Shahzad, W. Chen, Y. Zhang, and R. Kumar, “Zero-trust medical image sharing: A secure and decentralized approach using block chain and the IPFS,” Symmetry, vol. 17, no. 4, Art. no. 551 (2025), doi: 10.3390/sym17040551.

[17] M. Sultana, A. Hossain, F. Laila, K. A. Taher, and M. N. Islam, “Towards developing a secure medical image sharing system based on zero trust principles and blockchain technology,” BMC Med. Inform. Decis. Mak., vol. 20, Art. no. 256 (2020), doi: 10.1186/s12911-020-01275-y.

[18] Z. Wang, X. Yu, P. Xue, Y. Qu, and L. Ju, “Research on medical security system based on zero trust,” Sensors, vol. 23, no. 7, Art. no. 3774 (2023), doi: 10.3390/s23073774.

[19] I. U. Onwuegbuzie and O. A. Alabi, “A review of authentication and authorization mechanisms in zero trust architecture: Evolution and efficiency,” Tech-Sphere J. Pure Appl. Sci., vol. 2, no. 1 (2025), doi: 10.5281/zenodo.15149866.

[20] S. Ahmadi, “Autonomous identity-based threat segmentation for zero trust architecture,” Cyber Secur. Appl., vol. 3, Art. no. 100106 (2025), doi: 10.1016/j.csa.2025.100106.

[21] T. Dou, Z. Zheng, W. Qiu, and C. Ge, “A secure medical data framework integrating blockchain and edge computing: An attribute-based signcryption approach,” Sensors, vol. 25, no. 9, Art. no. 2859 (2025), doi: 10.3390/s25092859.

[22] T. M. Ghazal, M. K. Hasan, S. O. Khairy, U. A. Mokhtar, S. Islam, R. A. Saeed, N. Ahmed, and M. Abdullah, “Lightweight signcryption scheme for securing wearable sensor observed health data sharing in Internet of Medical Things paradigm,” Sci. Rep., vol. 15, no. 1, Art. no. 40989 (2025), doi: 10.1038/s41598-025-24687-0.

[23] W. Long, L. Deng, J. Zeng, Y. Gao, and T. Lu, “An efficient certificateless anonymous signcryption scheme for WBAN,” Sensors, vol. 24, no. 15, Art. no. 4899 (2024), doi: 10.3390/s24154899.

[24] T. Arpitha, D. Chouhan, and J. Shreyas, “Anonymous and robust biometric authentication scheme for secure social IoT healthcare applications,” J. Eng. Appl. Sci., vol. 71, no. 1, Art. no. 15 (2024), doi: 10.1186/s44147-023-00342-1.

[25] A. Ahmad and J. Srirangan, “Quantum-safe mutual authentication scheme for IoHT using blockchain,” Results Eng., vol. 28, Art. no. 106945 (2025), doi: 10.1016/j.rineng.2025.106945.

[26] W. Almuseelem, “Continuous and mutual lightweight authentication for zero-trust architecture-based security framework in Cloud-Edge computing-based Healthcare 4.0,” J. Theor. Appl. Inf. Technol., vol. 102, no. 1, pp. 1–19 (2024).

[27] PyCA Developers, Cryptography. [Online]. Available: https://cryptography.io/. [Accessed: Nov. 20, 2025].

[28] A. Hossain, tinyec: A Tiny Elliptic Curve Library in Python. GitHub. [Online]. Available: https://github.com/alexmgr/tinyec. [Accessed: Nov. 20, 2025].

[29] A. Ronacher, Flask: Web Development Framework for Python. Pallets Projects. [Online]. Available: https://flask.palletsprojects.com/. [Accessed: Nov. 20, 2025].

[30] G. Rodolà, “psutil: Cross-Platform Process and System Utilities,” GitHub Repository. [Accessed: Nov. 20, 2025].

Views: 55Downloads: 33Citations: 0