Lightweight Cryptographic Protocol for Resource-Constrained IoT Devices in Smart Healthcare

PDF (1415KB), PP.182-197

Views: 0 Downloads: 0

Author(s)

Osamah Tahseen Rayshan 1,*

1. University of information technology and communications, Baghdad, Iraq

* Corresponding author.

DOI: https://doi.org/10.5815/ijieeb.2026.05.11

Received: 24 Mar. 2026 / Revised: 28 Apr. 2026 / Accepted: 6 Jun. 2026 / Published: 8 Oct. 2026

Index Terms

Lightweight Cryptography, Iot Healthcare Security, Authenticated Encryption, Arm Cortex-m0, Avalanche Effect.

Abstract

IoT healthcare devices often lack resources, and encrypting patient data flows securely is an active area of research. Current cryptographic solutions are typically too computationally and energy intensive to be used on constrained IoT devices. In this work we introduce HealthCrypt: an authenticated encryption scheme for smart IoT deployments in healthcare on highly-constrained microcontrollers. It consists of a novel compact SP-network paired with native authenticated encryption, removing the need to have a separate MAC pass and minimizing total cycle cost. We implement HealthCrypt on an ARM Cortex-M0 running at 48 MHz with the FELICS benchmark suite. Results show HealthCrypt uses only 90 bytes of RAM, only requires 1,620 gate equivalents (under the proposed IoT limit of 2,000 GE) of hardware area, and only uses 5.93 nJ of energy per block encryption. Measurements of its statistical security show it has an almost perfect avalanche of 0.5026, Shannon entropy only 0.0094 bits/byte away from the ideal, and good key sensitivity of 0.4949. Against competitors like PRESENT-80, SPECK-64/128, and SIMON-64/128, HealthCrypt has been rated to have the best overall IoT Healthcare Suitability Score of 79.23.

Cite This Paper

Osamah Tahseen Rayshan, "Lightweight Cryptographic Protocol for Resource-Constrained IoT Devices in Smart Healthcare", International Journal of Information Engineering and Electronic Business(IJIEEB), Vol.18, No.5, pp. 182-197, 2026. DOI:10.5815/ijieeb.2026.05.11

Reference

[1]M. Rana, Q. Mamun, and R. Islam, "Lightweight cryptography in IoT networks: A survey," Future Generation Computer Systems, vol. 129, pp. 77-89, 2022/04/01/ 2022, doi: 10.1016/j.future.2021.11.011.
[2]Amrita, C. P. Ekwueme, I. H. Adam, and A. Dwivedi, "Lightweight Cryptography for Internet of Things: A Review," EAI Endorsed Transactions on Internet of Things, vol. 10, 2024/3// 2024, doi: 10.4108/eetiot.5565.
[3]V. A. Thakor, M. A. Razzaque, and M. R. A. Khandaker, "Lightweight Cryptography Algorithms for Resource-Constrained IoT Devices: A Review, Comparison and Research Opportunities," IEEE Access, vol. 9, pp. 28177-28193, 2021, doi: 10.1109/ACCESS.2021.3052867.
[4]A. Bogdanov et al., "PRESENT: An Ultra-Lightweight Block Cipher," in Cryptographic Hardware and Embedded Systems - CHES 2007, Berlin, Heidelberg, P. Paillier and I. Verbauwhede, Eds., 2007// 2007: Springer Berlin Heidelberg, pp. 450-466. 
[5]T. Chinbat, S. Madanian, D. Airehrour, and F. Hassandoust, "Machine learning cryptography methods for IoT in healthcare," (in eng), BMC Med Inform Decis Mak, vol. 24, no. 1, p. 153, Jun 4 2024, doi: 10.1186/s12911-024-02548-6.
[6]R. Beaulieu, D. Shors, J. Smith, S. Treatman-Clark, B. Weeks, and L. Wingers, "SIMON and SPECK: Block Ciphers for the Internet of Things," Cryptography ePrint Archive, vol. 2015/585, 2015. [Online]. Available: https://eprint.iacr.org/2015/585.
[7]I. W. Damaj, H. Al-Mubasher, and M. Saadeh, "An extended analytical framework for heterogeneous implementations of light cryptographic algorithms," Future Generation Computer Systems, vol. 141, pp. 154-172, 2023/04/01/ 2023, doi: 10.1016/j.future.2022.11.007.
[8]C. Dobraunig, M. Eichlseder, F. Mendel, and M. Schläffer, "Ascon v1.2: Lightweight Authenticated Encryption and Hashing," Journal of Cryptology, vol. 34, no. 3, p. 33, 2021/06/22 2021, doi: 10.1007/s00145-021-09398-9.
[9]S. N. Tran, V. T. Hoang, and D. H. Bui, "A Hardware Architecture of NIST Lightweight Cryptography Applied in IPSec to Secure High-Throughput Low-Latency IoT Networks," IEEE Access, vol. 11, pp. 89240-89248, 2023, doi: 10.1109/ACCESS.2023.3306420.
[10]S. K. Mousavi, A. Ghaffari, S. Besharat, and H. Afshari, "Security of internet of things based on cryptographic algorithms: a survey," Wireless Networks, vol. 27, no. 2, pp. 1515-1555, 2021/02/01 2021, doi: 10.1007/s11276-020-02535-5.
[11]M. S. Turan, K. A. McKay, D. Chang, J. Kang, and J. Kelsey, "Ascon-based lightweight cryptography standards for constrained devices," National Institute of Standards and Technology (NIST), NIST SP 800-232, 2025/8// 2025. [Online]. Available: https://csrc.nist.gov/pubs/sp/800/232/final
[12]M. El-hajj, H. Mousawi, and A. Fadlallah, "Analysis of Lightweight Cryptographic Algorithms on IoT Hardware Platform," Future Internet, vol. 15, no. 2, p. 54, 2023, doi: 10.3390/fi15020054.
[13]M. Rana, Q. Mamun, and R. Islam, "A block cipher for resource-constrained IoT devices," International Scholarly and Scientific Research & Innovation, vol. 17, no. 3, pp. 266–271, 2023.
[14]I. K. Dutta, B. Ghosh, and M. Bayoumi, "Lightweight Cryptography for Internet of Insecure Things: A Survey," in 2019 IEEE 9th Annual Computing and Communication Workshop and Conference (CCWC), 7-9 Jan. 2019 2019, pp. 0475-0481, doi: 10.1109/CCWC.2019.8666557. 
[15]F. Masood et al., "A new color image encryption technique using DNA computing and Chaos-based substitution box," Soft Computing, vol. 26, no. 16, pp. 7461-7477, 2022/08/01 2022, doi: 10.1007/s00500-021-06459-w.
[16]A. Sevin and A. A. O. Mohammed, "A survey on software implementation of lightweight block ciphers for IoT devices," Journal of Ambient Intelligence and Humanized Computing, vol. 14, no. 3, pp. 1801-1815, 2023/03/01 2023, doi: 10.1007/s12652-021-03395-3.
[17] M. Jangra, S. Gupta, and B. Singh, "Critical Evaluation of SIMON and SPECK BLOCK Cipher for Different Modes of Operation," in Advanced Communication and Intelligent Systems, Cham, R. N. Shaw, M. Paprzycki, and A. Ghosh, Eds., 2023// 2023: Springer Nature Switzerland, pp. 205-213. 
[18]F. Dridi, S. El Assad, W. El Hadj Youssef, M. Machhout, and R. Lozi, "The Design and FPGA-Based Implementation of a Stream Cipher Based on a Secure Chaotic Generator," Applied Sciences, vol. 11, no. 2, p. 625, 2021, doi: 10.3390/app11020625.
[19]A. M. Rasheed and R. M. S. Kumar, "Efficient lightweight cryptographic solutions for enhancing data security in healthcare systems based on IoT," (in English), Frontiers in Computer Science, Original Research vol. Volume 7 - 2025, 2025-April-04 2025, doi: 10.3389/fcomp.2025.1522184.
[20]O. Sabri, B. Al-Shargabi, A. Abuarqoub, and T. A. Hakami, "A Lightweight Encryption Method for IoT-Based Healthcare Applications: A Review and Future Prospects," IoT, vol. 6, no. 2, p. 23, 2025, doi: 10.3390/iot6020023.
[21]D. Karunkuzhali, A. A. Shaikh, R. Suguna, and M. Venkatesan, "Hybrid Lightweight Cryptography with Attribute-Based Encryption for Secure Health Monitoring in IOT-Wireless Body Area Sensor Network," Biomedical Materials & Devices, vol. 4, no. 2, pp. 2466-2482, 2026, doi: 10.1007/s44174-025-00402-5.
[22]S. Alharbi, W. Awad, and D. Bell, "HECS4MQTT: A Multi-Layer Security Framework for Lightweight and Robust Encryption in Healthcare IoT Communications," Future Internet, vol. 17, no. 7, p. 298, 2025, doi: 10.3390/fi17070298.