MedAuth 2.0: A Post-Quantum Fuzzy Commitment Framework for Secure User Authentication in Cloud-Enabled Healthcare Environments

Cloud-based storage of patient health records is both operationally essential and increasingly vulnerable to attack. Protecting Electronic Health Records (EHRs) from unauthorized access is a critical challenge in modern healthcare. This paper presents MedAuth 2.0, a multi-layered authentication framework built on the Post-Quantum Fuzzy Commitment (PQFC) scheme. PQFC resists quantum computing attacks and tolerates natural variation in biometric inputs such as fingerprints or iris scans. The system integrates six role-based modules— Administrator, Hospital, Pharmacy, Physician, Patient, and Cloud Server—each secured through multi-factor authentication and formally verified using ProVerif. Results show notable improvements: 22% lower authentication latency, 38% fewer false rejections, and 43% more blocked unauthorized access attempts. Independent verification under the Dolev-Yao threat model establishes session key secrecy, mutual authentication, and resistance to replay attacks. MedAuth 2.0 is a scalable, quantum-resistant solution for securing next-generation healthcare infrastructure.