Zero-Trust Architecture for Smart Hospitals: A Virtual Blueprint for Cyber-resilient Healthcare Infrastructure
Emonena Patrick Obrik-Uloho
Prairie View A&M University, 100 University Dr, Prairie View, TX77446, United States of America.
Valerie Ojinika Ejiofor
University of Tampa, 401 W Kennedy Blvd, Tampa, FL 33606, United States of America.
Chukwudalu Henry Egonwanne
Toronto Metropolitan University, 350 Victoria Street, Toronto, Ontario, M5B 2K3, Canada.
Faith Hauwa Oluwapamilerin Kolo
Fairleigh Dickinson University, 1000 River Road, Teaneck, NJ, 07666, United States of America.
Rukayat Oluwabukola Olasege
Ottawa University, 1001 South Cedar Street, Ottawa, KS 66067, United States of America.
*Author to whom correspondence should be addressed.
Abstract
The rapid digital transformation of healthcare through smart hospitals driven by AI, IoMT, cloud computing, and telemedicine has heightened cyber vulnerabilities, with 276 million records breached globally in 2024. This study developed a Zero Trust Architecture (ZTA) blueprint to strengthen cybersecurity in smart hospitals, addressing the challenges of diverse device ecosystems and regulatory compliance. Drawing on a comprehensive literature review, the research established ZTA’s theoretical foundation, emphasizing continuous verification rather than traditional perimeter defenses. The study is broadly applicable and applied a Design Science Research approach and mixed-methods analysis, combining risk models, maturity assessments, and machine learning for IoMT threat detection. Results showed significant improvements: a two-thirds reduction in cyber risks, over 95% accuracy in detecting IoMT threats, strong compliance with HIPAA requirements, and a threefold return on investment. The blueprint proved scalable across different hospital types, though limitations include reliance on simulated datasets. Recommendations highlight the need for tailored IoMT datasets, integration of explainable AI, real-world deployment, standardized metrics through collaboration, and adaptive algorithms for evolving threats. Overall, this research provides a practical and evidence-based framework to enhance the resilience of smart hospitals, safeguard patient safety and ensure operational continuity.
Keywords: Zero trust architecture, smart hospitals, IoMT vulnerabilities, cybersecurity framework, risk assessment