This study evaluates a lightweight authentication protocol for medical IoT systems, identifying vulnerabilities in encryption and key exchange. It proposes enhancements like ECIES and digital signatures, along with improved resource management and insider threat mitigation measures. These aim to strengthen security and protect medical data. Future research should explore quantum-resistant cryptography and AI-driven adaptive security.