Advancing Security in Cloud-based Patient Information Systems with Quantum-resistant Encryption for Healthcare Data

Abstract

The increasing adoption of cloud-based patient information systems in healthcare enhances efficiency and accessibility but introduces significant cybersecurity risks. Traditional encryption methods, such as RSA and ECC, are becoming vulnerable due to rapid advancements in quantum computing, necessitating the transition to quantum-resistant encryption. This study evaluates the effectiveness of post-quantum cryptographic (PQC) solutions in securing cloud-stored healthcare data. Using publicly available datasets, including HHS breach records, NIST PQC benchmarks, and HIMSS cybersecurity reports, this research identifies trends in healthcare data breaches, encryption adoption, and regulatory penalties. Findings indicate a strong correlation between increased cloud adoption and cybersecurity breaches, highlighting the urgent need for enhanced encryption. Post-quantum cryptographic algorithms, particularly CRYSTALS-Kyber and CRYSTALS-Dilithium, outperform traditional encryption methods in terms of security and computational efficiency, making them viable for healthcare applications. Institutions that have adopted PQC show a marked decline in regulatory fines, reinforcing its role in compliance and risk mitigation. This study underscores the need for early PQC adoption, increased investment in cybersecurity training, and regulatory collaboration to ensure seamless integration of quantum-resistant encryption. The research provides critical insights into the evolving cybersecurity landscape, emphasizing the necessity of transitioning to PQC to safeguard patient data against future quantum threats. These findings serve as a strategic guide for healthcare institutions and policymakers, advocating for proactive encryption strategies that align with regulatory standards and ensure long-term data security.