World Academy of Science, Engineering and Technology

International Journal of Computer and Information Engineering

Vol:11, No:5, 2017

Improving the Security of Internet of Things Using

Encryption Algorithms
Amirhossein Safi

1
can play an effective role in reducing the security risks. This
Abstract—Internet of things (IOT) is a kind of advanced kind of encryption can be a public key cryptography where
information technology which has drawn societies’ attention. Sensors high speed in encryption security and less memory
and stimulators are usually recognized as smart devices of our requirement are its specifications [7], [8].
environment. Simultaneously, IOT security brings up new issues.
Internet connection and possibility of interaction with smart devices II. RELATED WORKS
cause those devices to involve more in human life. Therefore, safety
is a fundamental requirement in designing IOT. IOT has three In 2015 [9], a security model is presented based on SDN
Open Science Index, Computer and Information Engineering Vol:11, No:5, 2017 publications.waset.org/10007094/pdf

remarkable features: overall perception, reliable transmission, and architecture. In the suggested model, both substructures, wired
intelligent processing. Because of IOT span, security of conveying and wireless networks, have been used to provide safety. The
data is an essential factor for system security. Hybrid encryption proposed architecture is to create Ad-Hoc network and
technique is a new model that can be used in IOT. This type of
reticular objects such as sensors, tablet, smart phone, etc. One
encryption generates strong security and low computation. In this
paper, we have proposed a hybrid encryption algorithm which has of the important features of SDN architecture is its ability to
been conducted in order to reduce safety risks and enhancing extend their security area to access the network.
encryption's speed and less computational complexity. The purpose In 2015, authors [10] provided a hybrid algorithm which
of this hybrid algorithm is information integrity, confidentiality, non- has combined AES and ECC algorithms and has been applied
repudiation in data exchange for IOT. Eventually, the suggested in security of IOT.
encryption algorithm has been simulated by MATLAB software, and
In 2014 [11], a standard IP-based security framework has
its speed and safety efficiency were evaluated in comparison with
conventional encryption algorithm. been offered for security solution in order to optimize IOT.
This secure connection is based on the combination of end-to-
Keywords—Internet of things, security, hybrid algorithm, end connection and public key cryptography.
privacy. In 2014 [12], a method is presented to resolve security
challenges in IOT. In this method, first of all, the owner
I. INTRODUCTION exports token related issues to access to the devices and

I OT is a new network that is being used by wireless sensor connects to the token with oval ECDSA elliptically algorithm
connections and radio frequency identification (RFID) in order to prevent of exporter’s security flaws.
through wireless network and technology to achieve overall In 2013 [13], a security framework is provided for IOT by
perception of information, reliable transmission, and SM2 encryption algorithm and resolving security problems
intelligent processing. Hence, protecting privacy and safety between client and receptor in the information transmission
are the essential features of IOT [1]. This security is related to process. That algorithm is carried out by using a wide range of
tag information (RFID), wireless communications information IOT based on elliptically graph of ECC. This method is an
security, network transmission of information security, innovative way to research on the security of IOT.
privacy, and information processing security. Therefore, it is In 2013, authors [14] presented a systematic approach with
vital to have thorough study and research on design and four nodes containing individual node, process node,
improvement of security problems in IOT [2], [3]. IOT ecosystem technological node and smart thing node. In this
consists of three layers: sensing layer, transport layer and method, security process needs responding required standards,
application layer. IOT has created a huge change in the strategies, policies, trends, and other documentations.
medicine, household, business, industry, agriculture, and even In 2012 [15], according to the security challenge of IOT, a
nuclear reactors. The rapid development of security and security framework is presented based on 4G connection. This
privacy in large scale are the determinant factors of IOT. The framework enhances the communication speed of IOT.
main purpose of network security and information protection Through this method, 4G client can access to wireless network
is to achieve confidentiality and integrity. Security issues are resources.
of great importance in enlarging the scale of network and A suggested method [16] in 2011 is presented for safe
devices [4], [5]. embedded security framework in IOT. This security
There are some security risks in both consumers and framework is divided into hardware, software, and with highly
business in IOT, so data encryption can be used to reduce light weight protocols in MAC layer and physical layer.
security risks [6]. Providing a suitable encryption algorithm In 2014, authors [17] presented blowfish algorithm on
FPGA by the use of VHDL programming language which had
Amirhossein Safi is with the Department of Computer Engineering, Novin supervision on some of FPGA resources. Blowfish algorithm
Hi-Tech Solutions,Tehran, Iran (e-mail: [email protected]).

International Scholarly and Scientific Research & Innovation 11(5) 2017 558 ISNI:0000000091950263
 World Academy of Science, Engineering and Technology
International Journal of Computer and Information Engineering
Vol:11, No:5, 2017

has shown that it has good performance during the FPGA from the state matrix and a key from the key matrix randomly
implementation and also is a good alternative for network and produce public key of H by sender in XOR operation.
security in IOT.
In 2014 [18], Hash encryption is presented with the aim of Message Intern
increasing security that was focusing on a smart home. In fact, encryption by
the main purpose was security in IOT devices that can send asymmetric
algorithm
messages with more security.
 Message decryption by
In 2013 [19], a system is proposed for IOT and security asymmetric algorithm
risks reduction in useful applications to equip management and private key
system which introduces a hybrid encryption algorithm based Use  Private key is in recipient
on DES and DSA encryption algorithms. or in home tool
In 2013 [20], key technologies are presented with IOT such
as RFID technology, electronic technology code identification,  Creating a public key by
and ZigBee technologies. In this regard, key technologies symmetric algorithm
framework and their usage in digital agriculture have been  Sending the first message
analyzed.
Open Science Index, Computer and Information Engineering Vol:11, No:5, 2017 publications.waset.org/10007094/pdf

In 2013, authors [21] presented hybrid encryption algorithm

based on DES and RSA encryptions in Bluetooth connections. Fig. 1 HAN encryption algorithm usage in IOT

III. PROPOSED METHOD The message is

Message encrypted
Hybrid encryption technique is a new model that can be AE encryption
by NTRU
used in IOT. Hybrid encryption technique is for information
integrity, confidentiality, being non-repudiation in data
exchange for IOT. This paper analyzes hybrid encryption
algorithm with the name of HAN. The suggested algorithm Create Message
decryption Received
has special features in encryption and decryption in terms of public key
Sending the message
(h) by NTRU
speed even in building keys and it can also improve internet message
security by several structures during algorithm implementation
and using digital signature. By default, tools and equipment
for a smart home are considered as shown in the following Start First Sending the
Algorithm message private key
flowchart.
Steps of a smart home cryptography are as follows:
 The user or the home resident has a public key that is
generated by the symmetric encryption.
Private key
 Now messages and whatever which are needed to be
encrypted will be sent to the asymmetric algorithm by the
Fig. 2 HAN encryption algorithm steps sending public key
public key.
 Then, the message is encrypted by asymmetric encryption
This step of HAN algorithm has been drawn from AEC
algorithm and will be sent to the receptor in the internet
algorithm. It should be noted that produced key of h is on the
environment.
basis of hexadecimal. Then public key h is produced. The aim
 Receptors (refrigerator, lamp, garage door, etc...) also
is sending a hidden message from sender to receiver in which
own a private key that even the user or sender is unaware
private key is just recognized by the receiver and public key
about it.
by both sender and receiver. So, encryption process must have
 Hackers cannot guess the passwords of tools and smart
a tight security. It means that the encrypted message by the
appliances because of the private key and it can enhance
sender will be sent to the receiver in secret and safety.
IOT system security in a smart home.
Therefore, NTRU asymmetric encryption is used to enhance
 Receptor attempts to decode a message from the sender
the security. When the sent message by the sender is
by the private key and encrypted text. In this paper, we
encrypted, it should not be identifiable by any person other
will present a new hybrid algorithm for secure access and
than intended recipient.
increasing speed of building a key, encryption and
decryption and finally less memory requirements in IOT B. Encryption
by combining two algorithms of AES and NTRU [22]. Assume that a message is sent from the sender to the
A. Creating a Key receiver. This message is in a multinomial called message.
After making a multinomial message, the sender randomly
Key production process in AES is used to create a key. First
chooses a multi nominal like r from the collection like Lr.
of all, two 4 x 4 matrices, which are called stay and key, are
used to produce key for encryption. We can choose a place

International Scholarly and Scientific Research & Innovation 11(5) 2017 559 ISNI:0000000091950263
 World Academy of Science, Engineering and Technology
International Journal of Computer and Information Engineering
Vol:11, No:5, 2017

It should be noted that we can have a message by multi

nominal r. So, it should not be revealed by the sender. Decryption ×h (10)

Encryption pr h message (1)

Message The message
Digital decryption by is encrypted
signature
This message will be transmitted to the receiver as an NTRU
encryption message with security capability.
C. Decryption Delivery of the first
Message encryption
by NTRU
When the message is encrypted, in other way receiver tries public key
(h)
to open the message by its private key or to encrypt the
message. For message decryption in HAN algorithm, NTRU
algorithm will be used partially. The receiver has both private
keys: f and fp. In fact, fp is conversed with multinomial of f, Delivery of the first Sending
so it can be concluded that it will be f  fp  1, and message private key (f) message
receiver multiplies a message on the part of private key that is
Open Science Index, Computer and Information Engineering Vol:11, No:5, 2017 publications.waset.org/10007094/pdf

displayed below with the parameter a:

Start of digital
signature
a f encryption (2)

a f pr h message (3) Fig. 3 Digital signature steps
E. Simulation and Evaluation
a f Pr h f message (4)
HAN algorithm has been simulated by MATLAB software,
To choose a correct parameter, coefficients of the so it is compared with two algorithms of AES and RSA to
polynomial formula between q2 and p2 are selected. So as check high speed of the algorithm in encryption process. The
p  3, then it drastically reduces and does not have any effect results are given in Table I.
on the process, so we can conclude the following relation. TABLE I
THE TOTAL SPEED TIME OF HAN ALGORITHM IN COMPARISON WITH TWO
pr h 0 (5) OTHER ENCRYPTION ALGORITHMS
Algorithm HAN AES RSA
a f message (6) Period of time for implementing the
0.321081 2.718182 2.350752
whole algorithm per second
In the next step, parameter b will be calculated. Just
3
multiply private key f in initial message which has been sent
by the sender.
implementing the whole

2,5
algorithm per second
Period of time for

a b f message (7) 2

1,5
 (8)
1

Whenever Decryption  Message, we will be sure that the 0,5

message will reach security to the recipient without any
disorder. 0
Speed of implementing algorithm
D. Digital Signature HAN AES RSA

It would be better to use digital signature in provided HAN
Fig. 4 Comparing the speed of implementing HAN algorithm with
hybrid encryption algorithm to keep ID credit in this study. It two other encryption algorithms
is just for message validity and proof of identity and security.
It should be noted that for digital signature, we must go from Digital signature is brought up to check security
the sender to the receiver, so the receiver of the former step improvement in this algorithm, and finally, speed of digital
acts as the sender now, and the sender of the former step acts signature has been compared with two other algorithms that
as the receiver. had not applied digital signature. The results show that the
speed of suggested algorithm even with digital signature is

Encryptionsign (9) higher than the two others, and that is why algorithm is
 functional.

International Scholarly and Scientific Research & Innovation 11(5) 2017 560 ISNI:0000000091950263
 World Academy of Science, Engineering and Technology
International Journal of Computer and Information Engineering
Vol:11, No:5, 2017

TABLE II Communication and Networking (IJFGCN), vol.6, NO.6, IEEE, pp 1-10,

IMPLEMENTATION TIME OF DIGITAL SIGNATURE IN SUGGESTED ALGORITHM 2013.
Total time algorithm [7] R. Weber, “Internet of Things New security and privacy challenges”,
ALGORITHM Computer and Low Security Review, vol.26, issue1, Science Direct, p.p.
implementation (sec)
HAN by digital sign 0.58 23-30, 2010.
[8] A. Riahi, Y. Challal, E. Natalizio, Z. Chtourou, A. Bouabdallah” A
AES without digital sign 2.718182 systemic approach for IoT security’, International Conference on
RSA without digital sign 2.350752 Distributed Computing in Sensor Systems (DCOSS), Cambridge, MA,
IEEE, p.p.351-355, 2013.
[9] F. Olivier, G. Carlos, N. Florent “New Security Architecture for IoT
3
Network”, Procedia Computer Science, vol.52, Science Direct, p.p1028-
Period of time for implementing

1033, 2015.
digital signature in suggested

2,5 [10] M. Xin, H. China “A Mixed Encryption Algorithm Used in Internet of

algorithm per second

Things Security Transmission System”, International Conference on

2 Cyber-Enabled Disributed Computing and Knowledge Discovery, Xian,
IEEE, p.p.62-65, 2015.
1,5 [11] H. Shafagh, A. Hithnawi” Poster Abstract: Security Comes First, A
Publickey Cryptography Framework for the Internet of Things’,
1 International Conference on Distributed Computing In Sensor Systems
(DCOSS), Marina Del Rey, CA, IEEE, p.p.135-136, 2014
Open Science Index, Computer and Information Engineering Vol:11, No:5, 2017 publications.waset.org/10007094/pdf

0,5 [12] A. F. Skarmeta, J. L. Hernandez, M. V. Moreno” A decentralized

approach for Security and Privacy challenges in the Internet of Things”,
0 IEEE Word Forum on Internet of Things (WF-IOT), Seoul, IEEE,
Period of time for implementing algorithm p.p.67-72, 2014.
HAN AES RSA [13] N. Hong, Z. Xuefeng, “A Security Framework for internet of
 thingsbased on SM2 cipher algorithm”, Fifth International Conference
Fig. 5 Comparing period of time for implementing suggested on Computer Science and Network Technology, Shiyang, Hubia, China,
IEEE, p.p13-16, 2013.
algorithm considering digital signature with the other two algorithms [14] R. Arbia, Ya. Challal, E. Natalizio, Z. Chtourou, and A. Bouabdallah. "A
excluding digital signature systemic approach for IoT security." In 2013¬ IEEE International
Conference on Distributed Computing in Sensor Systems, p.p. 351-355.
IV. CONCLUSION IEEE, 2013.
[15] L. Yuan Zeng, “A Security Framework for Internet of Things Based on
In this paper, we have discussed IOT, introduction and its 4G communication,-2nd International Conference On computer Science
usage, models, methods and security frameworks and also And Network Technology, Chanchun, China, IEEE, p.p1715-1718,
2012.
encryption algorithm in connection with IOT that researchers [16] S. Babar, A. Stango, N. Prasad, J. Sen, R. Prasad, “Proposed embeded
have studied before. Also, we have studied the suggested seurity framework for internet of things”, 2nd International Conference
method in hybrid encryption algorithm used in IOT. We have on Information Theory and Aerospace & Elentronic Systems
Technology, Chennai, IEEE, p.p.1-5, 2011.
provided a suggested method that can improve IOT by hybrid [17] K. Nur Prasetyo ST, Y. Purwanto, and D. Darlis. "An implementation of
encryption algorithm. HAN algorithm is considered as a data encryption for Internet of Things using blowfish algorithm on
suggested method that is a combination of AES symmetric FPGA."In Information and Communication Technology (ICoICT), 2014
2nd International Conference, Bandung, p.p. 75-79. IEEE, 2014.
encryption algorithm and NTRU asymmetric encryption [18] SB. Vinayaga, M. Ramnath, M. Prasanth, and V. Sundaram. "Encryption
algorithm for IOT improvement. This algorithm has high and hash based security in Internet of Things." In Signal Processing,
speed to create a key, encryption and decryption, and Communication and Networking (ICSCN), 2015 3rd International
Conference, Chennai, p.p. 1-6. IEEE, 2015.
acceptable security in IOT. Safety of this algorithm is due to [19] P. Xu, Li. Min, and He. Yu-Jie. "A hybrid encryption algorithm in the
multinomial usage in encryption, decryption and digital application of equipment information management based on Internet of
signature to achieve a correct message. This algorithm uses things." In 3rd International Conference on Multimedia Technology
less memory because of less fiscal complexity. This algorithm (ICMT-13). Atlantis Press, 2013.
[20] X. Yi Chen, Zh. Gang Jin, “Research on Key Technology and
makes available the encryption in IOT with deduced attacks Applications for Internet of Things”, Physics Procedia, vol33, Science
and improved security. Direct, p.p 561-566, 2012.
[21] R. Wuling, and Zh. Miao. "A hybrid encryption algorithm based on DES
and RSA in Bluetooth communication.” In Modeling, Simulation and
REFERENCES Visualization Methods (WMSVM), 2010 Second International
[1] W. Bruce D, GR. Milne, Y. G. Andonova, and F M. Hajjat. "Internet of Conference on Sanya, p.p. 221-225. IEEE, 2010.
Things: Convenience vs. privacy and secrecy." Business Horizons 58, [22] R. Jha, A. Kumar saini, ”A Comparative Analysis & Enhancement of
no.6, Science Direct, pp. 615-624, 2015. NTRU Algorithm for Network Security and Performance
[2] R. Davice, ”The Internet of Things Opportunties and challeng”, Improvement”, International Conference on Communication Systems
European, p.p.1-8, 2015. and Network Technologies, Katra, Jammu, IEEE, p.p.80-84, 2011.
[3] G. Price, “The Internet of Things 2015”, State of THE Market: Internet
of Things 2015, Verison wireless company p. p1-24, 2015.
[4] X. Xingmei, Zh. Jing, W. He, “Research on the Basic Characteristics,
the Key Technologies, the Network Architecture and Security Problems
of the Internet of Things”, 3rd International Conference on Computer
Science and Network Technology (ICCSNT), Dalian, China, IEEE,
p.p.825-828, 2013.
[5] Y. Challal, E. Natalizio, S. Sen, and A. Maria Vegni “Internet of Things
security and privacy: Design methods and optimization”, Add Hoc
Network, vol.32, Science Direct, p.p1-2, 2015.
[6] Ch. Qiang, G. Quan, B. Yu, L. Yang, “Research on Security Issues of
the Internet of Things”, International Journal of Future Generation

International Scholarly and Scientific Research & Innovation 11(5) 2017 561 ISNI:0000000091950263