Secure OTA Bootstrap for IoT Terminals
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing over-the-air (OTA) bootstrap modes for IoT terminals lack sufficient security, particularly when transmitting sensitive information in plaintext over public networks, risking leakage and malicious identification of terminals.
Innovation Solution
A secure OTA bootstrap method is introduced, where a terminal sends a node identifier and transmission channel parameter to a server, which determines a secure channel using a temporary identifier and key, establishing a trusted communication channel through elements like MTC-IWF, SMSC, or SCEF, ensuring secure data transmission and bootstrapping.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If plaintext transmission is used on public network, then transmission simplicity is improved, but security deteriorates
Solution Approach 1:
The patent applies preliminary action by establishing security credentials and encrypted communication channels before transmitting sensitive bootstrap information. The terminal and server perform mutual authentication and set up secure tunnels in advance, ensuring that identifier information, service subscription information, and platform addresses are transmitted through encrypted channels rather than plaintext, thus maintaining security while preserving transmission simplicity.
2Measurement precision
If node identifier is used for terminal identification, then identification capability is improved, but security deteriorates due to malicious inference
Solution Approach 1:
The patent uses the server as an intermediary that holds the mapping relationship between node identifiers and terminal identities. Instead of directly exposing terminal identifiers, the server receives node identifiers from terminals, authenticates them, and then retrieves the corresponding identity information from its database. This intermediary approach maintains identification capability while preventing malicious users from inferring terminal identities by only having access to node identifiers.
3Reliability
If secure channel establishment is added, then security is improved, but device complexity increases
Solution Approach 1:
The patent implements self-service by enabling terminals to autonomously perform mutual authentication with servers and automatically establish encrypted communication channels without requiring manual configuration or complex security management infrastructure. The authentication credentials and encryption parameters are provisioned during device initialization, and the terminal independently manages the secure connection lifecycle, thereby improving security while minimizing the increase in device complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Embodiments of this application disclose a device bootstrap method, to improve security of transmitting and bootstrapping related data. The method in the embodiments of this application includes: sending, by a terminal, a second bootstrap request to a server, where the second bootstrap request includes a node identifier and a transmission channel parameter of the terminal, and the transmission channel parameter is used to indicate a transmission channel supported by the terminal; receiving, by the terminal, a second acknowledgment message that is sent by the server according to the second bootstrap request, where the second acknowledgment message carries a transmission channel selected by the server, and the transmission channel selected by the server is determined by the server based on the transmission channel parameter; receiving, by the terminal, a temporary identifier indication message sent by a forwarding apparatus, where the temporary identifier indication message includes a temporary identifier and a temporary key, and the forwarding apparatus is a network element that is configured to send a message to the terminal through the transmission channel selected by the server; and sending, by the terminal, a connection request to the server based on the temporary identifier and the temporary key, where the connection request is used to request to establish a secure channel with the server.