A HYBRID SECURITY FRAMEWORK FOR MEDICAL DATA IN IOT APPLICATIONS

Abstract

When sensitive data stored and transmit over the internet while information is no longer protected based on physical boundaries, security is considered as the significant issue. The secure communication between different entities is ensured by an effective, essential, and efficient component known as cryptography, which transmit unintelligible data and allow the authorized recipient to access the data. A hybrid public key cryptography system is presented in this paper based on the Diffie Helman key exchange algorithm and Elliptic curve cryptography. Elliptic curves are used to generate the private keys at the user end. These private keys are used to compute the public keys which can then be shared between multiple parties forming a group. The proposed modified key generation process helps reducing the key size which helps in effectively exchanging the keys over internet. The proposed algorithm achieves this without compromising the cryptographic efficiency. Advance Encryption Standard (AES) is used for encryption of message based on the shared secret key. The shared secret key is hashed using SHA256 algorithm to provide an additional layer of security. The proposed hybrid model is compared with conventional Elliptic Curve Diffie Helman (ECDH) key exchange based cryptographic algorithm in terms of key length, run time, throughput and avalanche effect. The proposed method produced better results in terms of key length and run time while maintaining good throughput and avalanche effect.