A4 Refereed article in a conference publication

Federated Temporal RAG for Privacy-Preserving Real-Time Threat Intelligence in Distributed Remote Patient Monitoring




AuthorsAlam, Mohammad Zahangir; Ayath, Elahan

EditorsAlawadi, Sadi; Giampaolo, Fabio

Conference nameInternational Conference on Federated Learning and Intelligent Computing Systems

Publication year2026

Book title 2026 2nd International Conference on Federated Learning and Intelligent Computing Systems (FLICS)

First page 29

Last page38

ISBN979-8-3315-6336-3

eISBN979-8-3315-6335-6

DOIhttps://doi.org/10.1109/FLICS70075.2026.11621910

Publication's open availability at the time of reportingNo Open Access

Publication channel's open availability No Open Access publication channel

Web address https://ieeexplore.ieee.org/document/11621910


Abstract

The rapid expansion of distributed Remote Patient Monitoring (RPM) infrastructures introduces significant cybersecurity vulnerabilities, as Internet of Medical Things (IoMT) devices continuously stream sensitive physiological data across organizational boundaries. Existing centralized threat detection paradigms are poorly suited to this environment, often failing to capture the temporal evolution of attacks while violating data sovereignty requirements under Health Insurance Portability and Accountability Act of 1996 (HIPAA) and General Data Protection Regulation (GDPR). To address these challenges, we propose Federated Temporal Retrieval-Augmented Generation (FedTempRAG), a novel framework for privacy-preserving, real-time threat intelligence in distributed RPM ecosystems. FedTempRAG integrates a decentralized vector database for cross-institutional retrieval, a dynamic temporal knowledge graph to model attack progression, and a secure aggregation protocol that enables privacy-preserving collaborative learning. Our implementation adopts homomorphic encryption for secure query processing and Byzantine-resilient aggregation to defend against adversarial participants. We evaluated FedTempRAG on a simulated multi-hospital RPM network using real-world medical threat datasets and high-fidelity emulated IoMT environments derived from public RPM repositories. Experimental results demonstrate that FedTempRAG achieves 94.3% detection accuracy, 91.7% recall, and a 0.930 F1-score, while maintaining an average inference latency of 847 -ms and a 9.8% computation overhead, enabling practical real-time deployment in RPM systems. The temporal reasoning component successfully reconstructed many multi-stage attack lifecycles, highlighting the effectiveness of integrating temporal context into federated threat intelligence. These findings establish FedTempRAG as a robust foundation for next-generation RPM security, achieving a practical balance between collaborative intelligence, temporal awareness, system efficiency, and strict privacy preservation.


Funding information in the publication
The authors gratefully acknowledge the providers of the PhysioNet, MIMIC-IV, and Open mHealth repositories for access to Remote Patient Monitoring datasets, as well as the developers of the IoMT simulation frameworks used in this study. The authors also acknowledge the computational resources and experimental infrastructure provided by the
University of Turku and Xiamen University Malaysia (Project code: XMUMRF/2022‐C10/IECE/0043).


Last updated on 30/07/2026 07:19:33 AM