Post-Quantum Authentication for Internet of Medical Things Devices: Sutradhar and Venkatesh's Lattice-Signature Prototype of 3 October 2026 and the Gap to NIST FIPS 204
Quentir Medicine Monitor
Evidence-based insights for quantum medicine. Published by Quentir Systems LLC · October 6, 2026.
A heart-rate reading from a wearable patch or a bedside monitor only helps a clinician if it really came from that patient's device and arrived unchanged. Hospitals already depend on digital signatures for that assurance, and most of those signatures rest on mathematics that a large quantum computer is expected to break.
Two computer scientists in India have posted a prototype that addresses this problem for the Internet of Medical Things, the growing population of connected wearables, bedside monitors and telemedicine devices. Kartick Sutradhar of the Indian Institute of Information Technology Sri City and Ranjitha Venkatesh of GITAM University Bengaluru describe a scheme for post-quantum authentication of medical device reports in arXiv preprint 2610.04661, posted on 3 October 2026. Its most practical feature is batch verification: a hospital gateway checks the signatures of many incoming reports in one vectorized step instead of one by one.
For a chief information security officer, a biomedical engineering lead or a procurement team writing device requirements, the paper gives a clear picture of what a quantum-resistant telemetry chain has to do, and it shows how much work remains between a laboratory prototype and a device a hospital could buy.
What Sutradhar and Venkatesh built: signed device reports, a gateway and a hash-chained ledger
The design has three parts. First, each patient device packages its readings, such as heart rate, blood oxygen saturation (SpO2) and temperature, into a medical report in canonical JSON, a fixed text layout that always produces the same bytes for the same content. The report carries a timestamp, and the device signs it with a private key using what the authors call an ISIS-like lattice construction, a signature built on a hard problem over mathematical lattices.
Second, a hospital gateway receives the reports, looks up each patient's public key and checks every signature. Because the timestamp is inside the signed content, a captured report cannot simply be sent again later without detection, provided the gateway enforces a time window or rejects duplicates, which the authors list as an implementation requirement.
Third, a small blockchain-style ledger keeps a hash-chained log of patient registrations and of every accept or reject decision, together with a trust score for each registered patient. Changing an earlier entry breaks every hash that follows it, so tampering with the log becomes visible. Names, ages and contact details stay off the ledger; only identifiers, public keys, trust scores and hashes go into it. That choice matters for hospitals, because personal health data written into an append-only log cannot later be erased.
The prototype is written in Python 3 with NumPy for the lattice arithmetic and Streamlit for a demonstration interface that walks through patient registration, signing, verification, ledger auditing and timing.
Quantum pillar: post-quantum cryptography. Technology readiness: TRL 3 of 9. This is working software exercised on simulated device reports in a demonstration application; no real wearable, bedside monitor or hospital network has run it, and the authors themselves write that the signature cannot yet be considered an established protocol.
How the gateway checked 100 device reports in 26 milliseconds, and what that number compares against
The headline result is a timing table. With 10 devices, the authors report 6.00 milliseconds for batch verification against 12.5 milliseconds for checking each report in turn. With 100 devices, batch verification takes 26.00 milliseconds against 125.0 milliseconds, close to a fivefold difference. The authors conclude that batch checking scales more slowly than linearly as devices are added, which is what a busy ward gateway needs when dozens of monitors report at the same moment.
The comparison column deserves a careful reading. The paper labels it "Simulated Standard (linear)", and its values rise by exactly 1.25 milliseconds per device, from 12.5 at 10 devices to 125.0 at 100. The baseline is therefore modeled; the paper reports no measured run of a standardized signature scheme such as ECDSA or ML-DSA, and it does not state the hardware used for the timings. The fivefold figure shows that vectorized checking in NumPy is faster than a Python loop over the same prototype. It does not yet show how the scheme compares with signatures a device maker would actually ship.
Why quantum-resistant signatures matter for medical device data that must stay trustworthy for decades
The authors point out that RSA and elliptic-curve signatures, used in most device and hospital protocols today, rest on number-theory problems that Shor's algorithm would solve on a sufficiently large quantum computer. Medical devices often stay in service for many years, and clinical data has to remain verifiable long after it was produced. The Monitor discussed the same lifetime problem in its reading of SEALSQ's QS7001 chip and the fifteen-to-twenty-year life of medical devices.
Standardized answers already exist. The U.S. National Institute of Standards and Technology published FIPS 204, the Module-Lattice-Based Digital Signature Standard (ML-DSA), on 13 August 2024, a lattice signature that NIST describes as believed to be secure against adversaries with a large-scale quantum computer. On 12 November 2024 NIST followed with the initial public draft of NIST IR 8547, which sets out how products should move from quantum-vulnerable algorithms to the new standards. Confidence in lattice problems has also held up under scrutiny, as the Monitor's sister lane described when cryptographers from MIT and Google refuted a claimed quantum attack on the lattices behind ML-KEM.
The prototype's signature is its own ISIS-inspired construction. In their security analysis the authors write that it is meant purely as a prototype showing a post-quantum direction and cannot be considered an established signature protocol. A hospital should read the paper with that sentence in mind.
What the arXiv 2610.04661 prototype leaves open for hospitals and device makers
Several questions remain before a design like this could protect patients. The paper offers an informal security analysis and no formal proof, and the scheme is not one of the NIST-standardized algorithms. Key protection on the device is not addressed beyond the observation that a stolen key allows forged reports until the key is revoked. The trust score has no stated clinical meaning, so it is unclear what a gateway should do when a patient's score falls. The paper also still contains editorial placeholders in its comparison table, a sign of an early preprint that has not yet been through peer review.
In the United States, connected devices that reach the market must also satisfy section 524B of the Federal Food, Drug, and Cosmetic Act for cyber devices. The Food and Drug Administration explains what manufacturers should submit in its February 2026 final guidance on cybersecurity in medical devices, which supersedes the version issued on 27 June 2025. Any post-quantum signature in a cleared device would have to fit that premarket documentation.
What a hospital security or procurement team can take from this paper in 2026
The architecture is a sensible checklist. Signed reports in a fixed byte format, timestamps inside the signature, a gateway that can verify reports in bulk, and an audit log that keeps personal data out of the immutable chain are all reasonable requirements to put to device suppliers today. The cryptography itself should come from the standards. A practical question for vendors is whether their devices and gateways can move to ML-DSA signatures, and how much processing time batch checking would save on their own hardware.
The useful next step for this line of work is a measured comparison: the same batch approach applied to ML-DSA, run on the processors found in real wearables and gateways, with realistic network traffic. Until then, arXiv 2610.04661 is an early, openly described prototype that frames the right requirements for quantum-resistant medical telemetry.
Sources
Primary source: Kartick Sutradhar (Indian Institute of Information Technology Sri City) and Ranjitha Venkatesh (GITAM University Bengaluru), Post-Quantum Authentication Protocol for Internet of Medical Things, arXiv 2610.04661v1, 3 October 2026. Also drawn on: NIST FIPS 204 and the initial public draft of NIST IR 8547, and the FDA's February 2026 final guidance on cybersecurity in medical devices. Readiness and implications are the Monitor's editorial assessments.