Advancing Security in Cloud-based Patient Information Systems with Quantum-resistant Encryption for Healthcare Data
Olufisayo Juliana Tiwo
*
University of Lagos, University Road Lagos Mainland Akoka, Yaba, Lagos, Nigeria.
Temilade Oluwatoyin Adesokan-Imran
University of Ibadan, Oduduwa Road, 200132, Ibadan, Oyo, Nigeria.
Damilola Comfort Babarinde
Kyiv Medical University Ukraine, Boryspilska Street, Kyiv-02099, Ukraine.
Seun Michael Oyekunle
Interswitch Group Nigeria, Plot 1648C, Oko-Awo Close, Karimu Kotun St, Victoria Island, Lagos, Nigeria.
Abayomi Titilola Olutimehin
Royal Holloway University of London, Egham, Surrey, United Kingdom.
Oluwaseun Oladeji Olaniyi
University of the Cumberlands, 104 Maple Drive, Williamsburg, KY 40769, United States of America.
*Author to whom correspondence should be addressed.
Abstract
The increasing adoption of cloud-based patient information systems in healthcare enhances efficiency and accessibility but introduces significant cybersecurity risks. Traditional encryption methods, such as RSA and ECC, are becoming vulnerable due to rapid advancements in quantum computing, necessitating the transition to quantum-resistant encryption. This study evaluates the effectiveness of post-quantum cryptographic (PQC) solutions in securing cloud-stored healthcare data. Using publicly available datasets, including HHS breach records, NIST PQC benchmarks, and HIMSS cybersecurity reports, this research identifies trends in healthcare data breaches, encryption adoption, and regulatory penalties. Findings indicate a strong correlation between increased cloud adoption and cybersecurity breaches, highlighting the urgent need for enhanced encryption. Post-quantum cryptographic algorithms, particularly CRYSTALS-Kyber and CRYSTALS-Dilithium, outperform traditional encryption methods in terms of security and computational efficiency, making them viable for healthcare applications. Institutions that have adopted PQC show a marked decline in regulatory fines, reinforcing its role in compliance and risk mitigation. This study underscores the need for early PQC adoption, increased investment in cybersecurity training, and regulatory collaboration to ensure seamless integration of quantum-resistant encryption. The research provides critical insights into the evolving cybersecurity landscape, emphasizing the necessity of transitioning to PQC to safeguard patient data against future quantum threats. These findings serve as a strategic guide for healthcare institutions and policymakers, advocating for proactive encryption strategies that align with regulatory standards and ensure long-term data security.
Keywords: Post-Quantum cryptography, cloud security, healthcare encryption, regulatory compliance, quantum-resistant algorithms