A Multiparty Authentication Scheme Based on Aggregate Certificateless Signature for Smart Healthcare

Smart healthcare refers to the innovative medical model that enhances the efficiency and quality of medical services through the use of modern information technology. While smart healthcare brings convenience to both patients and doctors, it also raises issues of medical data security and privacy protection. In smart healthcare, secure identity authentication not only requires the verification of user identities but also ensures that user identity information is not leaked. At the same time, it requires an efficient authentication process to cope with resource-constrained situations. Existing schemes have addressed the issues of identity authentication and the confidentiality of identity information, but they have significant overhead and are not suitable for resource-constrained situations. Additionally, the schemes themselves are vulnerable to attacks. To address these issues, we propose a multi-party authentication scheme for smart healthcare. First, based on certificateless public key cryptography(CLPKC), a certificateless signature scheme(CLS) is introduced, which eliminates the need for complex bilinear pairings and map-to-point hash function computations, enabling batch authentication for multiple users. Second, the scheme incorporates the user’s contextual environment, ensuring secure user identity authentication only under safe access conditions. Finally, blockchain technology is utilized to record access logs, enabling user traceability. Security analysis proves that the proposed scheme can meet security requirements such as conditional privacy protection, unlinkability, resistance to replay attacks, and resistance to collusion attacks. Compared with existing schemes, this scheme has lower computational overhead and communication costs, making it more suitable for lightweight multi-party authentication in smart healthcare scenarios.