A Novel Session Key Update Scheme for LoRaWAN

Abstract

This paper proposes a novel Long-range Wide Area Network (LoRaWAN) session key updating scheme to enhance the security of LoRaWAN with cost-effective communication that provides a unique key for each communication session. The scheme consists of three sequential stages, initialization, keying material preparation, and key updating, on the basis of the truncated Photon-256 algorithm with updatable keying materials. These stages are structured by a set of novel communication protocols. To prove the uniqueness of the key, we validated its sequence bit randomness using the NIST 800-22 and ENT statistical test suites. The validation results show that the key passes all test parameters. Subsequently, the communication protocols were validated by using Scyther tools. We proved that these protocols ensure the security of the LoRaWAN key update scheme and guarantee that active interception does not occur. The analysis was performed by focusing on the security features of data confidentiality, integrity protection, mutual authentication, perfect forward secrecy, and replay attack resistance. Finally, a formal security analysis using GNY logic indicated that the overall security goals are achieved. The proposed scheme's performance was evaluated in terms of computational cost, communication cost, and storage. The computational cost needed by the scheme is very small, indicating that there is no additional burden on the backend system. The communication cost requires less traffic than previous solutions, yet it offers more robust security for LoRaWAN by producing a new key in every communication session. The scheme needs insignificant additional storage that is considered negligible.INDEX TERMS LoRaWAN security, session key update, key management, secure protocol, truncated Photon-256

A Novel Design of Random Number Generators Using Chaos-Based Extremum Coding

“…According to the test results in Table 7 and evaluation criteria mentioned in Section 3.1, we can draw the following conclusions. The entropy value of our proposed RNG is better than the results of literature [12,13,20]. Also the proposed RNG passes the 𝑥 2 Distribution test and it obtains better performances than literature [13,20] for Arithmetic mean value and Monte Carlo test.…”

“…The entropy value of our proposed RNG is better than the results of literature [12,13,20]. Also the proposed RNG passes the 𝑥 2 Distribution test and it obtains better performances than literature [13,20] for Arithmetic mean value and Monte Carlo test. As for the Serial Correlation coefficients test, the test result is better literature [12,13].…”

“…Next, we use the ENT test standard to analyze and compare the randomness quality of the proposed RNG with the works in the literature [12,13,20], and the test results are shown in Table 7. According to the test results in Table 7 and evaluation criteria mentioned in Section 3.1, we can draw the following conclusions.…”

The Design of Security Framework for LoRaWAN FUOTA

“…Securing the transmission of firmware updates is mandatory in the FUOTA process for LoRaWAN to minimize the possibility of interception and unauthorized access [9]. Secure transmission relies on two primary elements: encryption and the utilization of secure channels.…”