Secure Session Key Generation Method for LoRaWAN Servers

Abstract

In recent years, Internet of Things (IoT) as an essential infrastructure for industrial development, environmental protection and human life enhancement has attracted researchers' attention. Currently, there are four hot research topics in IoT fields, including sensor design, communication scheme, secure transmission, and data mining. The LoRaWAN, an unlicensed band based long range wide area network specification, is very suitable for the activities or operations in an IoT environment due to its low power and long range communication. In the LoRaWAN, star-of-stars topology, asynchronous communication, and three communication modes are used to reduce its power consumption. In order to enhance the security of network communication, the LoRaWAN adopts the 128-bit Advanced Encryption Standard (AES-128) and utilizes two session keys: network session key and application session key, for encrypting/decrypting data between end devices and network/application servers. However, according to the LoRaWAN Backend Interfaces 1.0 Specification announced by LoRa Alliance in 2017, the application layer communication securities between two arbitrary servers (including network servers, join server, and application servers) are out of the specification's scope. That is to say that the important data transmitted from one server to another may be attacked, falsified, or stolen easily. In this paper, a session key generation method is proposed to generate session keys with which two servers can securely communicate with each other, especially enhancing the application layer communication securities undefined in the LoRaWAN Specification. By integrating elliptic curve cryptography and AES-128, the session keys for different pairs of servers are created. The security discussion shows that the proposed method provides the features of mutual authentication, confidentiality and message integrity. Besides, it can also help to resist replay and eavesdropping attacks.INDEX TERMS LoRaWAN, security, network server, join server, session key.

Hybrid Encryption Scheme for Hospital Financial Data Based on Noekeon Algorithm

“…It can not only store large-scale hospital financial data through the cloud, but also process hospital financial data according to the parallel characteristics of the cluster and the computing performance of each node. Among a large number of hospital information data, hospital financial data is most vulnerable to attack and theft in storage and retrieval [2,3]. erefore, the privacy protection of hospital financial data is not only an urgent problem to be solved in the operation of large hospital financial data, but also a very important topic in the field of information security, which has attracted extensive attention of relevant researchers.…”

A Novel Secure Root Key Updating Scheme for LoRaWANs Based on CTR_AES DRBG 128

“…A formal security analysis can be used to confirm that the proposed communication protocols support the root key updating scheme. The communication protocol pairs, 𝑁𝑒𝑤_𝐽𝑜𝑖𝑛-𝑟𝑒𝑞𝑢𝑒𝑠𝑡 and 𝑁𝑒𝑤_𝐽𝑜𝑖𝑛-𝑎𝑐𝑐𝑒𝑝𝑡 and 𝑁𝑒𝑤_𝑅𝑒𝑗𝑜𝑖𝑛-𝑟𝑒𝑞𝑢𝑒𝑠𝑡 and 𝑁𝑒𝑤_𝑅𝑒𝑗𝑜𝑖𝑛-𝑎𝑐𝑐𝑒𝑝𝑡, are validated using Scyther tools [63][64][65]. Scyther is a validation tool that can be used to test the security of protocols and communication networks under enemy control [66] [67].…”

Enhancing Key Management in LoRaWAN with Permissioned Blockchain

“…A session key generation method for LoRaWAN servers, named "Server Session Key Generation" (S2KG), is presented in Reference [18]. In the S2KG method, symmetric and asymmetric encryption are combined to generate session keys for communication between servers in a LoRaWAN network.…”