Method and apparatus for encrypting and transmitting packet in low-power wide-area network

Abstract

This apparatus for encrypting and transmitting a packet in a low-power wide-area network comprises: a processor which calculates an initialization vector value to be applied to plaintext according to a predetermined block encryption method based on an advanced encryption standard (AES) algorithm, and which encrypts a payload of a first packet to be transmitted by applying the calculated initialization vector value to the plaintext together with an AES key value; and a communication unit for transmitting the encrypted first packet to the low-power wide-area network, wherein the processor calculates a first hash value by applying a first hash function to header bytes corresponding to the plaintext, and calculates the initialization vector value by applying, to the first hash value, a security code selected from a set of security codes stored in advance.

Description

Method and device for encrypting and transmitting packets in a low-power wide area network

[0001] The present invention relates to a method and device for encrypting and transmitting packets, and more particularly, to a method and device for encrypting and transmitting packets in a low-power wide area network. The present invention is a result of research on the development of smart city edge AIoT platform and network infrastructure technology (Project ID 1615013155) of the Smart City Infrastructure AIoT Core Technology Development Project of the Korea Agency for Infrastructure Technology Advancement.

[0002] LPWA stands for "Low Power Wide Area," referring to a low-power wide area network. It refers to a wireless communication technology that allows a large number of devices to connect to the network with low power consumption, transmitting small amounts of data over a wide area. LPWA technology is primarily used in applications involving the Internet of Things (IoT) and sensor-based devices.

[0003] LoRa and LoRaWAN

[0004] LoRa is an LPWA technology that uses radio modulation derived from CSS (Chirp Spread Spectrum) technology. Its low bit rate makes it primarily suitable for applications requiring small data transmissions. It utilizes unlicensed frequency bands and boasts a significantly longer transmission range than unlicensed technologies like Wi-Fi, Bluetooth, and Zigbee, expanding its potential applications to include metering, security, logistics, parking management, facilities, building management, environmental monitoring, leak management, and home care.

[0005] The main features of LoRa are:

[0006] (1) Low power consumption: It can operate for a long time with low power consumption in IoT terminals that are mainly battery-operated.

[0007] (2) Wide area network coverage: Provides effective coverage with low power across a wide area.

[0008] (3) Low module and service costs: It is suitable for large-scale deployment of IoT devices as it can utilize cheaper modules and relay equipment than existing mobile networks.

[0009] (4) Small amount of data transmission: Used to transmit small amounts of data, and is mainly suitable for tasks such as sensor data or simple status updates.

[0010] LoRaWAN stands for Long Range Wide Area Network and provides a standardized protocol and network architecture based on LoRa wireless technology.

[0011] The main features of LoRaWAN are:

[0012] Multiple terminals can connect and communicate simultaneously, and infrastructure construction and maintenance are relatively inexpensive (multiple connections and low costs). LoRaWAN offers various security features based on AES-128 encryption to protect communication between terminals.

[0013] In low-power wide-area networks, packets are transmitted at low power, making excessive encryption and transmission difficult. In particular, applying the widely used ECB (Electronic Codebook) encryption mode to low-power wide-area networks poses numerous challenges in encryption and transmission. Therefore, the present invention proposes an encryption and transmission method suitable for low-power wide-area networks.

[0014] The technical problem to be achieved in the present invention is to provide a transmission device that encrypts and transmits packets in a low-power wide area network.

[0015] Another technical problem to be achieved in the present invention is to provide a method for transmitting packets by encrypting them in a low-power wide area network.

[0016] The technical problems to be achieved in the present invention are not limited to the technical problems mentioned above, and other technical problems not mentioned can be clearly understood by a person having ordinary skill in the technical field to which the present invention belongs from the description below.

[0017] In order to achieve the above technical task, a transmitting device for encrypting and transmitting a packet in a low-power wide area network includes: a processor for calculating an initialization vector value to be applied to a plaintext according to a predetermined block encryption method based on an AES (Advanced Encryption Standard) algorithm, and encrypting a payload of a first packet to be transmitted by applying the calculated initialization vector value together with an AES key value to the plaintext; and a communication unit for transmitting the encrypted first packet to the low-power wide area network, wherein the processor is characterized in that it calculates a first hash value by applying a first hash function to header bytes corresponding to the plaintext to the initialization vector value, and calculates a first hash value by applying a security code selected from a set of security codes stored in advance to the first hash value.

[0018] The above processor is characterized in that it calculates the initialization vector value by additionally applying a second hash function after applying the selected security code to the first hash value.

[0019] The processor can select a corresponding security code by performing a modulo operation on the first hash value by the number of codes in the security code set.

[0020] The above low-power wide area network may be LoRaWAN (Low Power WAN Protocol for Internet of Things) or dcaLPWAN (Differentiated wireless Channel Access based Low Power Wide Area Network).

[0021] The above pre-stored security code set can be shared between the transmitting device and the low-power wide area network.

[0022] In order to achieve the above-described other technical object, a method for transmitting a packet by encrypting it in a low-power wide area network according to the present invention comprises the steps of: calculating an initialization vector value to be applied to a plaintext according to a predetermined block encryption method based on an AES (Advanced Encryption Standard) algorithm; encrypting a payload of a first packet to be transmitted by applying the calculated initialization vector value together with an AES key value to the plaintext; and transmitting the encrypted first packet to the low-power wide area network, wherein the step of calculating the initialization vector value includes the step of calculating a first hash value by applying a first hash function to header bytes corresponding to the plaintext and calculating a first hash value by applying a security code selected from a set of security codes stored in advance to the first hash value.

[0023] In the above method, the step of calculating the initialization vector value is characterized by further including the step of calculating the initialization vector value by additionally applying a second hash function after applying the selected security code to the first hash value.

[0024] In the above method, the step of calculating the initialization vector value is characterized by further including the step of selecting a corresponding security code by performing a modulo operation on the first hash value by the number of codes of the security code set.

[0025] The encryption method for packet transmission in a low-power wide-area network according to the present invention has various advantages, as follows: Increasing the encryption strength further protects data and makes it more difficult for external attackers to decrypt the data.

[0026] Additionally, strong encryption ensures data integrity, protecting it from tampering during transmission. This strong encryption provides greater trust to end users. Especially when sensitive data is being transmitted, enhanced security can provide peace of mind. Strong security can enhance the overall reliability of connected devices and the network by strengthening defenses against potential attacks within dcaLPWAN or LoRaWAN networks. Some industry regulations require stricter data security and encryption requirements. Strong encryption can help ensure compliance with these regulations.

[0027] The effects that can be obtained from the present invention are not limited to the effects mentioned above, and other effects not mentioned can be clearly understood by a person having ordinary skill in the art to which the present invention belongs from the description below.

[0028] The accompanying drawings, which are included as part of the detailed description to aid in understanding the present invention, provide embodiments of the present invention and, together with the detailed description, explain the technical idea of ​​the present invention.

[0029] Fig. 1 is a diagram showing the configuration of a LoRaWAN network (10).

[0030] Figure 2 is a diagram showing the configuration of a dcaLPWAN network (20).

[0031] Figure 3 is a diagram for explaining the ECB encryption mode.

[0032] Figure 4 is a diagram for explaining the CBC encryption mode.

[0033] FIG. 5 is a block diagram showing the configuration of a transmission device (500) in a low-power wide area network according to the present invention.

[0034] FIG. 6 is a diagram for explaining a method for calculating an IV value to be applied to an improved encryption mode (method) according to the present invention.

[0035] Figure 7 is a diagram for explaining the encryption and decryption process between the transmitter and receiver (transmitter and receiver) in a low-power wide area network.

[0036] Figure 8 is a drawing illustrating a security code set proposed in the present invention.

[0037] Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. The detailed description set forth below, together with the accompanying drawings, is intended to illustrate exemplary embodiments of the present invention and is not intended to represent the only embodiments in which the present invention may be practiced. The following detailed description includes specific details to provide a thorough understanding of the present invention. However, one of ordinary skill in the art will appreciate that the present invention may be practiced without these specific details.

[0038] In some cases, to avoid ambiguity in the concepts of the present invention, well-known structures and devices may be omitted or illustrated in block diagram form focusing on the core functions of each structure and device. Furthermore, the same components are described using the same reference numerals throughout this specification.

[0039] The present invention is susceptible to various modifications and embodiments. Specific embodiments are illustrated and described in detail in the drawings. However, this is not intended to limit the present invention to specific embodiments, but rather to encompass all modifications, equivalents, and alternatives falling within the spirit and technical scope of the present invention.

[0040] When a component is referred to as being "connected" or "connected" to another component, it should be understood that it may be directly connected or connected to that other component, but that there may be other components intervening. Conversely, when a component is referred to as being "directly connected" or "connected" to another component, it should be understood that there are no other components intervening.

[0041] Terms such as first, second, etc. may be used to describe various components, but these components should not be limited by these terms. These terms are used solely to distinguish one component from another.

[0042] The terminology used herein is merely used to describe specific embodiments and is not intended to limit the present invention. The singular expression includes the plural expression unless the context clearly indicates otherwise. In this specification, it should be understood that the terms "comprises" or "has" indicate the presence of a feature, number, step, operation, component, part, or combination thereof described in the specification, but do not exclude in advance the possibility of the presence or addition of one or more other features, numbers, steps, operations, components, parts, or combinations thereof.

[0043] In addition, it is to be understood that the components of the embodiments described with reference to each drawing are not limited to the specific embodiments, but may be implemented to be included in other embodiments within the scope in which the technical idea of ​​the present invention is maintained, and that multiple embodiments may be re-implemented as a single integrated embodiment even if a separate description is omitted.

[0044] Additionally, terms such as “part,” “unit,” “module,” and “device” described in the specification mean a unit that processes at least one function or operation, which may be implemented by hardware, software, or a combination of hardware and software.

[0045] Fig. 1 is a diagram showing the configuration of a LoRaWAN network (10).

[0046] Referring to Figure 1, the LoRa Alliance is an international non-profit organization dedicated to the adoption and expansion of LoRa technology. The alliance develops and maintains specifications and standards related to LoRaWAN, ensuring interoperability across various manufacturers and service providers.

[0047] A LoRaWAN network (10) can be composed of a LoRa terminal (500), a LoRa gateway (100), a LoRa network server (200), and an application server (300), wherein each of the LoRa terminal (500), the LoRa gateway (100), and the application server (300) exists in multiple numbers in LoRaWAN (10). The role or function of each component of the LoRaWAN network (10) is briefly described below.

[0048] The LoRa terminal (500) collects data from sensors or other devices and transmits it to the network via LoRaWAN (10). The LoRa gateway (100) transmits a message received from the LoRa terminal (500) to the LoRa network server (200) or transmits a message from the LoRa network server (200) to the LoRa terminal (500). The LoRa network server (200) performs core functions of the LoRaWAN network (10), such as registration of the LoRa terminal (500), data transmission management, security, and terminal activation. The application server (300) receives data from the LoRa terminal via the LoRa network server (200) or transmits data to the LoRa terminal so that it can be utilized by end users or other systems.

[0049] Figure 2 is a diagram showing the configuration of a dcaLPWAN network (20).

[0050] Differentiated Wireless Channel Access based Low Power Wide Area Network (dcaLPWAN) is a specification that has been established as a TTA (Telecommunications Technology Association) standard based on the Massive IoT network technology developed in the 1st core 2nd detailed task of the Smart City Innovation Growth Engine Project of the Ministry of Land, Infrastructure and Transport. The dcaLPWAN network (20) basically adopts a significant portion of the LoRaWAN specification, but is designed to support priority-based competitive channel access and reservation-based non-competitive channel access in order to accommodate a larger number of terminals and provide relatively differentiated channel access opportunities and periodic channel access opportunities according to service characteristics.

[0051] Referring to FIG. 2, the dcaLPWAN network (20) is composed of a terminal (500), an RF gateway (600), and a network controller (700). IoT devices that measure or collect IoT data, such as temperature sensors and humidity sensors, can access the dcaLPWAN (20) through the terminal (500), and the service platform that provides IoT services provides IoT services through the network controller (700) of the dcaLPWAN (20). In FIG. 2, the terminals (500) and RF gateways (600) exist in multiple numbers. The network controller (700) corresponds to the LoRa network server (200) of the LoRaWAN network (10). In the present invention, LoRaWAN (10) and dcaLPWAN (20) are exemplified as low-power wide-area networks, but the present invention is not limited thereto.

[0052] Security of LoRaWAN (10) and dcaLPWAN (20)

[0053] The basic encryption-related specifications of LoRaWAN (10) and dcaLPWAN (20) are the same. LoRaWAN (10) and dcaLPWAN (20) encrypt data between the terminal (500) and the network controller (700) (or LoRa network server (200)) using the Advanced Encryption Standard (AES)-128 algorithm. Since AES-128 is a 16-byte symmetric key encryption method, the terminal (500) and the network controller (700) use the same key.

[0054] When registering a terminal (500) in a network controller (700), an application key of 16 bytes in length is registered, and the same application key is also recorded in the storage space of the terminal (500).

[0055] During the terminal activation process, the network controller (700) and the terminal (500) generate a 16-byte application session key and a network session key through a process defined in the standard using the application key. The network controller (700) and the terminal (500) perform an AES-128 encryption / decryption process using the generated application session key and network session key.

[0056] AES (Advanced Encryption Standard)

[0057] AES stands for Advanced Encryption Standard. AES is an encryption method designated as a Federal Information Processing Standard by the National Institute of Standards and Technology (NIST). It is an encryption algorithm approved by the NSA for use in top-secret documents and is open-source. It is a block cipher that uses a symmetric key. Its high security and speed have made it popular and widely used worldwide. These advantages have also led to its widespread use in ransomware. Currently, AES refers to the Rijndael algorithm, which was selected in a competition hosted by the NIST under the name AES (Advanced Encryption Standard), succeeding DES (Data Encryption Standard). Strictly speaking, among the various Rijndael algorithms, three variants with 128-bit encryption block sizes and 128, 192, and 256-bit encryption key lengths have been designated as the AES standard. They are called AES-128, AES-192, and AES-256, respectively.

[0058] AES is a block-based symmetric key algorithm that uses the same key for encryption and decryption. Its high security and high speed make it widely used in two-way encryption. Depending on the encryption key length, there are three types: AES-128, AES-192, and AES-256, with the number following the key indicating the key length in bits.

[0059] Encryption mode

[0060] A cipher mode specifies how data is processed by the algorithm used in the encryption process. Encryption algorithms typically operate as block ciphers. Block ciphers divide input data into fixed-length blocks and process them. For example, a block cipher algorithm with a 64-bit block size processes data in 64-bit blocks. The cipher mode determines the order in which each block is encrypted and concatenated in such a block cipher algorithm.

[0061] There are various types of cipher modes, such as ECB (Electronic Codebook), CBC (Cipher Block Chaining), CTR (Counter), OFB (Output Feedback), and CFB (Cipher Feedback), but only ECB and CBC are described here.

[0062] Figure 3 is a drawing for explaining the ECB encryption mode, and Figure 4 is a drawing for explaining the CBC encryption mode.

[0063] Referring to Figures 3 and 4, the Electronic Codebook (ECB) mode encrypts each block independently, making all blocks vulnerable to security threats because they all use the same encryption key. The Cipher Block Chaining (CBC) mode chains blocks, using an initialization vector (IV) (value) at the beginning. This effectively uses the encrypted block of the previous block as the IV for encrypting the next block, using a different key each time.

[0064] Here's a brief explanation of hashing, a technique used in cryptography. A hash is a one-way encryption technique that uses a hash function to convert input data of arbitrary length into a fixed-length hash value. The characteristics of a hash function are: (1) it outputs a completely different hash value even if only a portion of the input value is changed; (2) it outputs a fixed-length hash value regardless of the input value; (3) it is impossible to decrypt; and (4) it guarantees the same output value for the same input value. Representative hash algorithms include SHA and MD5, but many others exist.

[0065] MD5 (Message-Digest algorithm 5) takes an arbitrary length input and outputs a 128-bit hash value. SHA (Secure Hash Algorithm) was first defined and announced as SHA-0, but vulnerabilities were immediately discovered, so an improved version, SHA-1, was announced and became widely used. SHA-1 also discovered vulnerabilities due to collisions, so SHA-2 was announced. SHA-2 selects SHA-224, SHA-256, SHA-384, and SHA-512 bits depending on the hash length. The longer the hash length, the more secure it is. SHA-3, which has high stability, has also been announced.

[0066] Currently, dcaLPWAN (20) or LoRaWAN (10) uses the encryption algorithm AES in ECB mode, which may cause problems in protecting application data transmitted and received by the terminal (500) from increasing computing power and various newly evolving security risk factors. In order to use the AES algorithm in CBC mode, the IV value must be maintained in a chain form or a random value must be continuously generated and used. However, in the former case, it is practically difficult to maintain the chain in the LPWA network (10) where loss of transmitted and received packets frequently occurs, so it cannot be used universally. In the latter case, the randomly generated IV value must be transmitted together with the encrypted message, but it is difficult to apply in reality due to the characteristics of the LPWA network (10) where the transmission packet size is small, and since the method of including the IV value is disclosed through the standard, it is bound to be vulnerable in terms of security.

[0067] Therefore, it is necessary to increase the encryption strength by applying the improved block cipher mode proposed in the present invention to the AES algorithm of the existing dcaLPWAN (20) or LoRaWAN (10). In addition, by adopting a mode that generates an IV value by utilizing a hash algorithm and a pre-shared security code set, it is possible to prevent limitations that arise from applying the CBC mode, such as maintaining a chain of packets or adding an IV value to an encrypted packet.

[0068] In the present invention, by applying an improved block cipher mode utilizing a hash algorithm and a security code set to the AES algorithm, the vulnerability of AES encryption in low-power wide area networks (LPWA networks) such as dcaLPWAN (20) and LoRaWAN (10) is improved. In particular, due to the characteristics of low-power wide area networks (LPWA networks) such as dcaLPWAN (20) and LoRaWAN (10), when encrypting in a chain manner, if one block (or packet) is not decrypted, a problem may occur in which it is difficult to decrypt the entire block, and such a problem is not desirable in low-power wide area networks.

[0069] Therefore, the improved block cipher proposed in the present invention is not a chain method like CBC, but can utilize IV values ​​and hash functions like CBC mode.

[0070] Below, the application of the improved encryption mode (method) proposed in the present invention to the AES algorithm, which is the encryption algorithm of the existing dcaLPWAN (20) or LoRaWAN (10), is described.

[0071] In the present invention, the object to be encrypted by applying the improved encryption mode proposed in the present invention to the AES algorithm is the payload of a message / packet transmitted between a terminal (500) and a network controller (700) or a LoRa network server (200) in a dcaLPWAN (20) or LoRaWAN network (10). The improved encryption mode proposed in the present invention is applied to AES encryption of the payload of the message.

[0072] In a dcaLPWAN (20) or LoRaWAN network (10), the transmitter or transmitter encrypts and transmits an application message or packet, and the receiver or receiver decrypts the encrypted message. When a terminal (500) in a dcaLPWAN (20) or LoRaWAN network (10) transmits a message / packet to a network controller (700) or a LoRa network server (200) via an uplink, the terminal (500) becomes the transmitter or transmitter, and the network controller (700) or the LoRa network server (200) becomes the receiver. Conversely, when a message / packet is transmitted from a network controller (700) or a LoRa network server (200) to a terminal (500) via a downlink, the network controller (700) or the LoRa network server (200) becomes the transmitter or transmitter, and the terminal (500) becomes the receiver or receiver.

[0073] FIG. 5 is a block diagram showing the configuration of a transmission device (500) in a low-power wide area network according to the present invention.

[0074] Referring to FIG. 5, for convenience of explanation, the transmitting device (500) assumes a situation in which a terminal encrypts and transmits a message or packet to a network controller (700) or a LoRa network server (200) via an uplink. Although not illustrated in FIG. 5, in the case of a downlink, the block diagram illustrated in FIG. 5 may be the configuration of a network controller (700) or a LoRa network server (200).

[0075] Referring to FIG. 5, the transmitting device (500) may include a processor (510), a communication unit (520), and a memory (530). The processor (510) encrypts and controls transmission of messages or packets in a low-power wide area network. The communication unit (520) transmits the encrypted messages or packets to the network. The memory (530) is electrically coupled to the processor (510) and may store various information necessary for computing, such as information necessary for the processor (520) to estimate a result and information about the estimated result.

[0076] FIG. 6 is a diagram for explaining a method for calculating an IV value to be applied to an improved encryption mode (method) according to the present invention.

[0077] Referring to FIG. 6, the processor (510) calculates an initialization vector value (IV) to be applied to plaintext according to a predetermined block encryption method based on the AES algorithm, i.e., an improved encryption mode (method) according to the present invention. The processor (510) can calculate a first hash value (615) by applying a first hash function (610) (for example, SHA3-256) to the header bytes (610) of a packet corresponding to the plaintext using the initialization vector value. At this time, the first hash value (615) may be a hash value of 16 bytes or more. Since the header bytes include different values ​​for each packet, such as a Frame Counter field, sufficient irregularity can be obtained through the hash process. The Frame Count (FCnt) field is 2 bytes long and includes a frame counter value. The transmitting device (500) has two frame counters for recording the number of transmitted or received frames.

[0078] The processor (510) calculates by applying a security code (635) selected from a security code set (630) stored in advance to the first hash value (615). That is, the processor (510) selects a security code (635) from the security code set (630) stored in advance to the first hash value (615), attaches the selected security code to the first hash value (615), and calculates a value to which the security code (635) is applied. At this time, the processor (510) performs a modulo operation (617) on the first hash value (615) by the number of codes of the security code set (635) to extract the corresponding security code set index, and selects a security code corresponding to the extracted security code index. After attaching the selected security code (635) to the first hash value (615), the processor (510) may additionally apply a second hash function (620) to calculate an initialization vector value.

[0079] Figure 7 is a diagram for explaining the encryption and decryption process between the transmitter and receiver (transmitter and receiver) in a low-power wide area network.

[0080] Referring to FIG. 7, the processor (510) of the transmitting device (500) (transmitter) receives plaintext corresponding to the header of a packet to be transmitted and encrypts it by applying an improved encryption mode (method) based on the AES algorithm. The processor (510) encrypts the payload using the security code set (630) and the AES key as described above. Specifically, the processor (510) can encrypt the payload of the first packet to be transmitted by applying the calculated initialization vector value together with the AES key value to the plaintext. In LoRaWAN (10) and dcaLPWAN (20), AES-128 encryption and decryption are applied only to the payload excluding the header of the packet. The communication unit (520) can transmit the encrypted first packet to the receiving side of the low-power wide area network.

[0081] Figure 8 is a drawing illustrating a security code set proposed in the present invention.

[0082] Referring to FIG. 8, the security code set (635) proposed in the present invention can be shared in advance between the transmitting side and the receiving side in the low-power wide area network (10 or 20). That is, the transmitting device (500) and the LoRa network server (200) or the network controller (700) share and store the security code set (635) in advance. In the case of the transmitting device or terminal (500), the security code set (635) is stored in the memory (530) together with the AES key, and the network controller (700) or the LoRa network server (200) must have the same security code set (635) as the corresponding terminal (500). In addition, the security code set (635), like the AES key, must be set to different values ​​for each terminal or each transmitting device. That is, the transmitter (500) and the network controller (700) or LoRa network server (200) share a transmitter-specific or transmitter-unique security code set (635).

[0083] The security code set (635) can be defined as an array of security codes, and its structure can be defined by the length (number of bytes) of the security code and the number of security codes. In the security code set (635), a specific security code can be searched by an index, and the index has a value from 0 to N-1 for convenience (N is the number of security codes). Although a large number of security codes is advantageous in terms of security, the amount of code data that must be input or stored in the terminal (500) and network controller (700) increases, and therefore, the length and number should be defined taking into account operational aspects.

[0084] The process and method for encrypting a packet in order to transmit the packet to the receiving side of a low-power wide area network by a transmitting device (500) are described above.

[0085] Conversely, if the receiving side normally receives the packet, it can derive the IV value through the same process as the transmitting device (500), so normal decryption is possible.

[0086] The hash function used in the two hashing processes proposed in the present invention can be appropriately selected based on system performance, function stability, and complexity. The hash functions used in the two hashing processes can be the same or different.

[0087] The encryption method for packet transmission in a low-power wide-area network according to the present invention described above has various advantages, as follows. Increasing the encryption strength further protects data and makes it more difficult for external attackers to decrypt the data.

[0088] Additionally, strong encryption ensures data integrity, protecting it from tampering during transmission. This strong encryption provides greater trust to end users. Especially when sensitive data is being transmitted, enhanced security can provide peace of mind. Strong security can enhance the overall reliability of connected devices and the network by strengthening defenses against potential attacks within dcaLPWAN or LoRaWAN networks. Some industry regulations require stricter data security and encryption requirements. Strong encryption can help ensure compliance with these regulations.

[0089] The devices described above may be implemented as hardware components, software components, and / or a combination of hardware components and software components. For example, the devices and components described in the embodiments may be implemented using one or more general-purpose computers or special-purpose computers, such as, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable gate array (FPGA), a programmable logic unit (PLU), a microprocessor, or any other device capable of executing instructions and responding to them. The processing device may execute an operating system (OS) and one or more software applications running on the operating system. The processing device may also access, store, manipulate, process, and generate data in response to the execution of the software. For ease of understanding, the processing device is sometimes described as being used alone; however, one of ordinary skill in the art will recognize that the processing device may include multiple processing elements and / or multiple types of processing elements. For example, a processing unit may include multiple processors, or a processor and a controller. Other processing configurations, such as parallel processors, are also possible.

[0090] Software may include a computer program, code, instructions, or a combination of one or more of these, and may configure a processing device to perform a desired operation or, independently or collectively, command the processing device. The software and / or data may be permanently or temporarily embodied in any type of machine, component, physical device, virtual equipment, computer storage medium or device, or transmitted signal wave, for interpretation by the processing device or for providing instructions or data to the processing device. The software may also be distributed across network-connected computing devices and stored or executed in a distributed manner. The software and data may be stored on one or more computer-readable recording media.

[0091] The method according to the embodiment may be implemented in the form of program commands that can be executed through various computer means and recorded on a computer-readable medium. The computer-readable medium may include program commands, data files, data structures, etc., alone or in combination. The program commands recorded on the medium may be those specially designed and configured for the embodiment or may be those known and available to those skilled in the art of computer software. Examples of the computer-readable recording medium include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CDROMs and DVDs, magneto-optical media such as floptical disks, and hardware devices specially configured to store and execute program commands, such as ROMs, RAMs, and flash memories. Examples of the program commands include not only machine language codes generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter, etc. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiment, and vice versa.

[0092] The embodiments described above are combinations of components and features of the present invention in a predetermined form. Each component or feature should be considered optional unless explicitly stated otherwise. Each component or feature may be implemented without being combined with other components or features. Furthermore, it is also possible to form an embodiment of the present invention by combining some components and / or features. The order of operations described in the embodiments of the present invention may be changed. Some components or features of one embodiment may be included in another embodiment or may be replaced with corresponding components or features of another embodiment. It is self-evident that claims that do not have an explicit citation relationship in the patent claims may be combined to form an embodiment or may be incorporated as a new claim through a post-application amendment.

[0093] In the present invention, the processor (510) may be implemented by hardware, firmware, software, or a combination thereof. When implementing an embodiment of the present invention using hardware, application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), etc. configured to perform the present invention may be provided in the processor (510).

[0094] A method and device for encrypting and transmitting packets in a low-power wide area network are industrially applicable to increase the encryption strength to further secure data and make it more difficult for external attackers to decrypt the data.

Claims

1. In a transmission device that encrypts and transmits packets in a low-power wide area network, Based on the AES (Advanced Encryption Standard) algorithm, the initialization vector value to be applied to the plaintext is calculated according to a certain block encryption method. A processor that encrypts the payload of the first packet to be transmitted by applying the calculated initialization vector value together with the AES key value to the plaintext; and Including a communication unit for transmitting the encrypted first packet to the low-power wide area network, A transmitting device, characterized in that the processor calculates a first hash value by applying a first hash function to header bytes corresponding to the plaintext and a security code selected from a set of security codes stored in advance to the first hash value.

2. In paragraph 1, The above processor is characterized in that it calculates the initialization vector value by additionally applying a second hash function after applying the selected security code to the first hash value.

3. In paragraph 1 or 2, A transmitting device, characterized in that the processor selects a corresponding security code by performing a modulo operation on the first hash value by the number of codes of the security code set.

4. In paragraph 1, The above low-power wide area network is a transmitter device, which is a LoRaWAN (Low Power WAN Protocol for Internet of Things) or dcaLPWAN (Differentiated wireless Channel Access based Low Power Wide Area Network).

5. In paragraph 1, A transmitting device, wherein the set of security codes stored in the above-mentioned pre-stored device is shared between the transmitting device and the low-power wide area network.

6. A method for transmitting packets by encrypting them in a low-power wide area network, A step of calculating an initialization vector value to be applied to plaintext according to a predetermined block encryption method based on the AES (Advanced Encryption Standard) algorithm; A step of encrypting the payload of the first packet to be transmitted by applying the calculated initialization vector value together with the AES key value to the plaintext; and A step of transmitting the encrypted first packet to the low-power wide area network, The step of calculating the above initialization vector value is: An encrypted packet transmission method, characterized in that it includes a step of calculating a first hash value by applying a first hash function to header bytes corresponding to the plaintext using the initialization vector value, and calculating a security code selected from a set of security codes stored in advance to the first hash value.

7. In paragraph 6, The step of calculating the above initialization vector value is: An encrypted packet transmission method, characterized in that it further includes a step of calculating the initialization vector value by additionally applying a second hash function after applying the selected security code to the first hash value.

8. In paragraph 6 or 7, The step of calculating the above initialization vector value is: An encrypted packet transmission method, characterized in that it further includes a step of selecting a corresponding security code by performing a modulo operation on the first hash value by the number of codes of the security code set.

9. In paragraph 6, The above low-power wide area network is an encrypted packet transmission method, which is LoRaWAN (Low Power WAN Protocol for Internet of Things) or dcaLPWAN (Differentiated wireless Channel Access based Low Power Wide Area Network).

10. In paragraph 6, A method for transmitting encrypted packets, wherein the set of security codes stored in the above dictionary is shared between the transmitting device and the low-power wide area network.

Images