Date of Award

3-2026

Document Type

Dissertation

Degree Name

Doctor of Philosophy in Cyber Defense (PhDCD)

First Advisor

Dr. Youssef Harrath

Second Advisor

Varghese Vaidyan

Third Advisor

Dr. Jonathan Lancelot

Abstract

This research will use a Design Science Research (DSR) methodology and show that the results would be feasible, since there will not be any actual validating or testing occurring within or on this research project because this model is a theoretical model. In addition, this proposed theoretical model is based on extensive use of NIST standards and frameworks. This theoretical model will focused on the use of Quantum-Safe Encryption (QSE) within the Vivalink Electrocardiogram (ECG) Patch Monitor Internet of Medical Things (IoMT) device in a Zero Trust Architecture (ZTA). The advancement of quantum computing (QC) is expected to change the landscape of current encryption methods and other mechanisms used to secure networks and systems. Existing encryption standards are anticipated to become obsolete, offering little to no protection. This study determined that IoMT devices and their supporting services have sufficient resources to utilize QSE, and that these devices can function effectively within a ZTA environment. A proposed theoretical model was developed to demonstrate how QSE could be implemented in IoMT within a ZTA framework. This model provided an integrated architecture combining all three technologies; QSE, IoMT, and ZTA, to enhance security posture and mitigate QC attacks.

The demonstration involved using QSE within an IoMT environment and showing that a cloud-based IoMT device using QSE in a ZTA configuration could offer a more robust security posture, effectively limiting or preventing risks associated with QC technologies. This dissertation examined whether the Vivalink ECG Patch Monitor IoMT device and the Vivalink Cloud provided adequate resources to implement QSE within a ZTA, while maintaining operational functionality. It was determined that the Vivalink ECG Patch Monitor and its supporting cloud services possess ample resources and can utilize QSE without compromising performance. Using QSE enhanced the overall security and helped mitigate potential post-quantum cryptography (PQC) vulnerabilities. Additionally, the Vivalink ECG Patch Monitor was found to be operable and manageable within a ZTA framework. The device and cloud environment also supported strict identity authentication and authorization (A&A) protocols and employed QSE to protect data both at rest and in transit.

The primary research questions addressed in this dissertation were:

1. Post-quantum cryptography (PQC) usage within IoMT: Which of the four National Institute of Standards and Technology (NIST) post-quantum encryption (PQE) algorithms is best suited for IoMT devices without significantly affecting performance or energy efficiency?

2. IoMT device usage in ZTA: Which IoMT devices are best suited for implementing QSE within a ZTA?

3. ZTA framework deployment using PQE in IoMT: Which NIST ZTA deployment models and case studies best align with IoMT devices using QSE?

4. PQE challenges within IoMT in ZTA: What are the challenges of implementing QSE in a resource-constrained IoMT environment operating under ZTA?

These questions were addressed through a proposed theoretical model known as QSEIoMTZTA, which was designed using the following NIST standards:

• NIST SP 800-207 – Zero Trust Architecture

• NIST SP 800-213a – IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity Requirement Catalog

• NIST IR 8545 – Post-Quantum Cryptography

These standards were selected due to their widespread national and international recognition and their extensive vetting by NIST. Although other frameworks were available, using NIST standards enabled this project to be completed on a compressed timeline, as the researcher was more familiar with them than with alternative frameworks.

This research developed a theoretical model for utilizing QSE in IoMT within a ZTA and analyzed the application of PQE in this context. Supporting data were drawn from emerging literature and recent research studies to ensure comprehensive responses to the four research questions.

Download

Share

COinS