面向多服务器智慧医疗环境的后量子口令认证与快速切换密钥协商协议OA

To meet the requirement of doctors'comprehensive diagnosis and treatment across multiple servers in smart healthcare,and to address the lack of efficient switching mechanisms in existing post-quantum authentication schemes,a post-quantum password authentication and fast-switching key agreement protocol for multi-server smart healthcare envi-ronments was proposed.With ML-KEM as the core cryptographic primitive,a mechanism combining initial authentica-tion and fast switching authentication was designed.In the initial authentication phase,full authentication was per-formed,and a master session key and a service session key were established.During multi-server access,fast switching authentication was performed,and a new service session key was independently negotiated with the target server.In terms of security,the session key semantic security of the proposed protocol was proved under the ROR model,and resis-tance to common attacks was analyzed.In terms of performance,when a user continuously accessed five servers,com-pared with the repeated full-authentication approach in Wen's and Chen's post-quantum schemes,the proposed protocol reduced the cumulative computational overhead by more than 70.34％and the cumulative communication overhead by more than 27.53％.The performance gap increases as the number of servers grows,which shows that the proposed proto-col has significant efficiency advantages and good scalability in large-scale deployment scenarios.