CARE-IoMT: a pairing-free Certificateless Auditable Range-query support searchable Encryption scheme for IoMT

In the modern medical landscape, a quiet revolution is underway where patients and doctors increasingly rely on digital networks to share sensitive health information. This ecosystem, known as the Internet of Medical Things, connects devices like wearable heart monitors and smart insulin pumps to cloud servers, creating a vast, continuous stream of data. While this connectivity offers the promise of faster diagnoses and better care, it introduces a profound dilemma: how can doctors search through this encrypted mountain of private records to find specific details, such as a patient's blood sugar levels over a week, without ever seeing the raw data or compromising the patient's privacy? Traditional encryption acts like a sealed vault; it keeps the contents safe from thieves, but it also prevents the owner from looking inside to find a specific item without breaking the seal. To solve this, scientists have developed a method called searchable encryption, which allows a computer to search for keywords within encrypted files without ever decrypting them. However, existing versions of this technology often require immense computing power, making them too slow for small medical devices, and they sometimes struggle to handle complex questions, like finding all records where a value falls between two numbers.

A team of researchers at Tarbiat Modares University in Iran has addressed these hurdles by designing a new system called CARE-IoMT, which streamlines the process of searching encrypted medical data while ensuring it remains secure and verifiable. Their approach removes the heavy computational burden that has previously slowed down similar systems, making it possible for resource-limited medical sensors to participate in secure data sharing. Instead of relying on complex mathematical operations that drain battery life, their method uses a lighter, more direct cryptographic technique that allows for rapid searching. Furthermore, they have expanded the system's capabilities to handle range queries, meaning a doctor can now ask for all records where a patient's temperature was between 98 and 100 degrees, rather than being limited to searching for exact matches. This flexibility is crucial for real-world medical scenarios where data rarely fits into rigid, single-value categories.

To ensure that the cloud servers storing this data are not tampering with the results or hiding information, the researchers integrated their system with blockchain technology, but with a clever twist to avoid the high costs usually associated with it. Rather than forcing every single search operation to be recorded on the blockchain, which would be slow and expensive, they use the blockchain only as a permanent, unchangeable ledger for checking the integrity of the data. The actual searching happens on the cloud server, which is much faster, while the blockchain acts as a trusted referee that can verify if the server has returned the correct, complete set of results. This design prevents a malicious server from deleting records, reordering them, or injecting fake data without being detected. The system also includes a mechanism to track changes over time, ensuring that if a document is altered, the discrepancy is immediately flagged.

The researchers tested their new framework extensively to see how it performed compared to previous methods. In their simulations, the new system consistently required less time to build the necessary search indexes and significantly less time to perform searches, especially as the amount of data grew. When handling complex searches involving multiple conditions or ranges of values, the proposed method maintained a steady speed, whereas older systems became noticeably slower as the queries became more complicated. They also analyzed the cost of running the necessary verification steps on the blockchain, finding that the financial cost, measured in the digital currency units required to execute the verification code, remained manageable and efficient. These results suggest that the system is not only theoretically sound but also practical for real-world deployment in environments where devices have limited power and processing capabilities.

By combining a lightweight encryption method with a smart use of blockchain verification, this work offers a viable path forward for securing the future of digital health. It demonstrates that it is possible to have a system that is both highly secure and highly efficient, allowing doctors to retrieve the specific information they need to make life-saving decisions without exposing patient privacy or overwhelming the network. The researchers have shown that by carefully balancing the roles of the cloud server and the blockchain, it is possible to create a trusted environment where medical data can be shared, searched, and verified with confidence, paving the way for more advanced and secure e-healthcare services.