Advanced search
Start date
Betweenand


Protecting LoRaWAN data against untrusted network servers

Full text
Author(s):
Show less -
de Moraes, Poliana ; da Conceicao, Arlindo Flavio ; Zheng, J ; Liu, X ; Luan, TH ; Jayaraman, PP ; Dai, H ; Mitra, K ; Qin, K ; Ranjan, R ; Wen, S
Total Authors: 11
Document type: Journal article
Source: IEEE CONGRESS ON CYBERMATICS / 2021 IEEE INTERNATIONAL CONFERENCES ON INTERNET OF THINGS (ITHINGS) / IEEE GREEN COMPUTING AND COMMUNICATIONS (GREENCOM) / IEEE CYBER, PHYSICAL AND SOCIAL COMPUTING (CPSCOM) / IEEE SMART DATA (SMARTDATA); v. N/A, p. 8-pg., 2021-01-01.
Abstract

LoRaWAN is a wireless network technology applied in the Internet of Things long-range communication. Even though LoRaWAN is an end-to-end data encryption protocol by design, security risks in the IoT LoRaWAN-based applications should be carefully analyzed. The LoRaWAN-based application is a system of systems and integrates numerous parties. It usually applies a third-party network server to avoid infrastructure costs so that the network server is not a trusted entity. This work aims to improve data security resilience in IoT LoRaWAN-based applications that employ untrusted network servers. A security risk assessment was performed to demonstrate the data hazards of using an untrusted network server. Subsequently, this work set out a security measure that is a payload format to mitigate the identified risks against assessed scenarios. Finally, tests were carried out in an IoT LoRaWAN-based system prototype to verify results without and with the security measure. In conclusion, IoT LoRaWAN-based applications using third-party network servers cannot assume network servers as trusted entities. The payload format proposed in this work provides additional data confidentiality and integrity layers to mitigate the risks of using an untrusted network server. (AU)

FAPESP's process: 15/24485-9 - Future internet for smart cities
Grantee:Fabio Kon
Support Opportunities: Research Projects - Thematic Grants
FAPESP's process: 14/50937-1 - INCT 2014: on the Internet of the Future
Grantee:Fabio Kon
Support Opportunities: Research Projects - Thematic Grants