LoRaWAN Secure Activation Using Dynamic Identifiers

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

LoRaWAN end-device activation is vulnerable to attacks that compromise the randomness of DevNonce, reducing the security of communication and authentication in wide area networks, particularly in IoT applications where devices have limited resources and can be subjected to freezing or magnetic shielding.

Innovation Solution

Adapting the LoRaWAN protocol by making AppEUI and DevEUI dynamic, using a larger range of identifiers as both security and session information, and implementing a system to randomly assign new values to these identifiers, thereby increasing the security information space without requiring additional hardware or memory, and ensuring unique session control.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If software-based pseudo random number generators are used for DevNonce, then device complexity is reduced, but security is compromised due to reduced randomness quality

Engineering Contradiction:
Improvedevice complexityVSAvoidsecurity
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent introduces a true random number generator (TRNG) as an intermediary component between the hardware and the software-based pseudo random number generator. The TRNG provides high-quality random entropy that seeds the pseudo random number generator, ensuring that while the device remains software-based (low complexity), the output maintains true randomness quality (high security). This mediator approach allows the system to benefit from both simplicity and cryptographic strength.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent combines two different random number generation approaches - hardware-based true random number generation and software-based pseudo random number generation - into a composite system. The hardware TRNG provides the random entropy source, while the software PRNG provides the algorithmic generation capability. This composite approach leverages the strengths of both methods to achieve security comparable to hardware-based solutions while maintaining device simplicity.

Inventive Principle:
Principle #40Composite materials

2Ease of operation

If external factors are imposed on the end-device to generate static or smaller range DevNonce, then ease of operation is improved, but security is compromised due to reduced permutations

Engineering Contradiction:
Improveease of operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent implements preliminary anti-action by pre-seeding the pseudo random number generator with high-quality random entropy from a true random number generator before the device is deployed or before each session. This pre-established random foundation prevents external factors (such as freezing or magnetic shielding) from later compromising the randomness quality, as the seed already contains sufficient entropy that cannot be easily manipulated or reduced by external conditions.

Inventive Principle:
Principle #9Preliminary anti-action

Solution Approach 2:

The patent enables the device to self-generate high-quality random numbers through an internal true random number generator that does not rely on external environmental factors. The device serves itself by generating its own cryptographic-strength random entropy through hardware-based physical phenomena (such as thermal noise or quantum effects), making it immune to external manipulation while maintaining ease of operation.

Inventive Principle:
Principle #25Self-service

3Ease of operation

If DevNonce is reduced to smaller range permutations, then ease of operation is improved, but security is compromised with only 1.5% of original quality remaining

Engineering Contradiction:
Improveease of operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent fundamentally changes the parameter of random number generation quality by switching from software-based pseudo random generation (which can be reduced to small ranges) to hardware-based true random number generation. This parameter change ensures that the DevNonce maintains the full 65536 permutations (or more) regardless of device conditions, as the randomness comes from physical phenomena rather than algorithmic processes that can be constrained.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentEP3310082B1Secure activation
Publication Date: 2019.12.11 GIESECKE & DEVRIENT EPAYMENTS GMBH
  • EP3310082B1 patent drawingFigure 1
  • EP3310082B1 patent drawingFigure 2
  • EP3310082B1 patent drawingFigure 3

AI summary

The present invention is directed towards a method for secure communication between and end-device and a server system and is furthermore directed towards a communication protocol implementing the suggested method. Furthermore, the present invention is directed towards a communication system, which can be operated in accordance with the suggested method and the suggested communication protocol. In addition, a computer program product is suggested providing instructions, which implement the respective method steps and store the transmissions beam triggered by the communication protocol.