Wireless Device Self-Commissioning Using Hash-Based Key Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for commissioning ZIGBEE wireless network devices are inefficient, as they require external tools for generating and uploading PANIDs and encryption keys, leading to potential security vulnerabilities and difficulties in configuring devices in hard-to-reach locations, with routes becoming suboptimal due to changes in device positions.
Innovation Solution
A method where a user-defined number is used to generate a PANID and encryption key using hashing algorithms within the device, eliminating the need for external tools and enhancing security by never transmitting the encryption key, allowing devices to join the network internally.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If external tools are used to generate and upload PANIDs and encryption keys, then device commissioning can be performed, but security vulnerabilities increase and device configuration becomes complex
Solution Approach 1:
The device autonomously generates its own PANID and encryption key using an internal hash function and a user-defined number, eliminating the need for external commissioning tools. The user simply inputs a number through the device's interface, and the device handles key generation and network joining independently, thereby improving security by keeping keys local and reducing commissioning complexity.
2Productivity
If external tools are used for device commissioning, then PANID and encryption key can be uploaded, but the process becomes time-consuming and inefficient
Solution Approach 1:
The device performs self-commissioning by generating its own network credentials internally without requiring external tool intervention. The user provides a simple numeric input, and the device automatically generates the PANID and encryption key, then joins the network autonomously, dramatically reducing commissioning time and improving productivity.
Solution Approach 2:
The device pre-generates its PANID and encryption key before network joining using the user-defined number and hash function. This preliminary key generation eliminates the need for time-consuming key upload processes during commissioning, allowing the device to join the network immediately with pre-configured security credentials.
3Reliability
If encryption keys are transmitted externally, then devices can join the network, but security vulnerabilities increase due to potential surveillance
Solution Approach 1:
The device generates its own encryption key locally using a hash function applied to a user-defined number, and never transmits this key externally. The device uses the generated key to encrypt its network joining message, maintaining security while enabling autonomous network access without external key distribution.
Solution Approach 2:
A hash function serves as an intermediary mechanism that transforms a user-defined number into a secure encryption key without requiring the key to be transmitted or stored externally. This cryptographic intermediary enables secure key generation from simple user input while maintaining security by keeping the actual key local to the device.
Data Source
AI summary
A method of commissioning wireless network devices in a communication network includes assigning a user-defined number to a wireless network device. The method further includes generating, by the wireless network device, an identification number based on the user-defined number using a first hashing algorithm, generating, by the wireless network device, an encryption key based on the user-defined number using a second hashing algorithm, and transmitting, by the wireless network device, a message that is encrypted using the encryption key for joining the wireless network device to the communication network. The user-defined number is to be provided by a user using an input device that is coupled to, or integral to, the wireless network device.