The Internet of Drones (IoD) has become a vital infrastructure to provide surveillance, transportation, and combat support, and therefore a compact, secure solution. This article introduces a new Bio-authenticated Elliptic Curve Cryptography Framework (ECC) that integrates biometric fuzzy extractors with ECC. The protocol removes the dependence on fixed credentials by binding authentication to unique biological features, thereby strengthening identity assurance and resistance to replay, impersonation, and stolen-verifier attacks. The process supports both sides achieving mutual authentication. Ephemeral session keys are generated without any Ground Control Station (GCS), thus providing some relief, although not enough as yet. Informal security analysis indicates that it can withstand commonly known threat vectors. Performance assessment reveals that the cost of communication and computation has been reduced by more than 28%, compared with existing ECC-based schemes. Cryptographic-biometric fusion substantially reduces storage overhead and raises resilience against insider threats as well. This privacy-preserving, lightweight protocol provides a secure solution scalable for real-world operations environments where computing resources are still very much lacking.