Iranian Journal of Information Management 1735-8418 10 1 2024 08 22 Improving the Security of the Three-Tier IoT Cloud Model Using Simon Algorithm and Mutual Authentication Improving the Security of the Three-Tier IoT Cloud Model Using Simon Algorithm and Mutual Authentication 232810 10.22034/aimj.2025.512942.1631 FA Mohammad Shirdel Ph.D. Candidate, Department of Information Technology , Faculty of Management, Science and Research Branch, Islamic Azad University, Tehran, Iran Maghsoud Amiri Prof., Department of Industrial Management, Faculty of Management and Accounting, Allameh Tabataei University, Tehran, Iran 0000-0002-0650-2584 Mohamad Ali Afshar Kazemi Associate Prof., Department of Management, Faculty of Management, Central Tehran Branch, Islamic Azad University, Tehran, Iran 0000-0003-4327-8320 Mohamad Reza Motadel Assistant Prof., Department of Industrial Management, Faculty of Management, Central Tehran Branch, Islamic Azad University, Tehran, Iran 0000-0002-0742-0222 Journal Article 2025 03 17 With the expansion of the number of smart devices and related applications, a significant volume of data is generated, which plays an important role in automating everyday activities. This big data requires fast processing, secure storage, and reliable transmission through secure channels to protect it from malicious threats and attacks. Privacy protection has always been one of the main challenges in cyberspace, and with the emergence of the Internet of Things (IoT), this challenge has gained wider dimensions. In this paper, an evaluation model based on the three-tier architecture of the Internet of Things, including perception, transmission, and application layers, is presented. Specific performance indicators are defined and applied for each layer. In order to evaluate the system performance, expert opinions are collected and the indicators are prioritized using the fuzzy TOPSIS decision-making method. Also, security models such as Simon lightweight encryption and mutual authentication have been added to each layer separately and their impact on the overall system performance has been analyzed. To implement these algorithms, an STM32F4 microcontroller with an ARM Cortex-M4 processor has been used, which provides adequate processing power and the ability to accurately measure security and performance indicators. The final results show that the proposed model leads to improved security levels and reduced vulnerability to cyber attacks. With the expansion of the number of smart devices and related applications, a significant volume of data is generated, which plays an important role in automating everyday activities. This big data requires fast processing, secure storage, and reliable transmission through secure channels to protect it from malicious threats and attacks. Privacy protection has always been one of the main challenges in cyberspace, and with the emergence of the Internet of Things (IoT), this challenge has gained wider dimensions. In this paper, an evaluation model based on the three-tier architecture of the Internet of Things, including perception, transmission, and application layers, is presented. Specific performance indicators are defined and applied for each layer. In order to evaluate the system performance, expert opinions are collected and the indicators are prioritized using the fuzzy TOPSIS decision-making method. Also, security models such as Simon lightweight encryption and mutual authentication have been added to each layer separately and their impact on the overall system performance has been analyzed. To implement these algorithms, an STM32F4 microcontroller with an ARM Cortex-M4 processor has been used, which provides adequate processing power and the ability to accurately measure security and performance indicators. The final results show that the proposed model leads to improved security levels and reduced vulnerability to cyber attacks. https://www.aimj.ir/article_232810_08a829ca89a430a35b7f38d31294d762.pdf