Privacy-preserved PQC-based UCSSO in Telemedicine Systems

People nowadays have high acceptance of healthcare self-monitoring and self-management using smart healthcare devices, and medical professionals can access information immediately to know users' health condition. Telemedicine systems, which have become popular among medical institutes because of COVID-19, is a multi-functional remote medical service and provides long distance medical communication and services. Because of services properties, telemedicine systems have to be established in public networks for communication between medical professionals and patients outside, and privacy preservation issues of sensitive and private transmitted information is rising. Moreover, security issues are rising because of rapid development of quantum computing which might endanger systems using current cryptographic mechanisms. User-controlled single sign-on (UCSSO) scheme is one of the means of proving user authentication and secure communication with authenticated session keys, which has ability of resistance to potential cyber-attacks while allowing patients use a single pair of identity and password to access to multiple telemedicine services. In this work, we proposed an approach of privacy-preserved PQCbased UCSSO in telemedicine systems. Proposed remains above merits while achieving privacy preservation and enhancing security properties including resistance of potential attacks from quantum computers.