A Novel Secure Root Key Updating Scheme for LoRaWANs Based on <i>CTR_AES</i> DRBG 128

Hayati, Nur; Ramli, Kalamullah; Windarta, Susila; Suryanegara, Muhammad

doi:10.1109/access.2022.3150281

Cited by 9 publications

(13 citation statements)

References 48 publications

(61 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…To improve security key management, researchers have proposed a method of updating the key, as the fundamental problem of LoRaWAN's key management is that the key has a constant value for a long time. Since LoRaWAN has a root key and session key, some studies have focused on updating the root key [13]- [16], while others have focused on the session key [17]- [20]. The goal of the proposed solution is to improve LoRaWAN security.…”

Section: B Related Workmentioning

confidence: 99%

“…In our scheme, the communication protocol sent by the ED to the JS is defined as a New_Rejoin-request. To secure its communication, the New_Rejoin request is protected by the MIC, where the MIC calculation utilizes the AES-CMAC 128-bit algorithm with an updatable LoRaWAN root key [16].…”

Section: ) Communication Protocol Exchanged Between the Ed And Jsmentioning

confidence: 99%

“…The New_Rejoin request initializes the session key update process to request keying materials and other attributes. We design the ED to send New_Rejoin-request communications on a periodic basis, such as once a week or every n days as scheduled [16]. To respond to such a request, the JS replies by sending a New_Rejoin-response that contains keying material components and attributes needed by the ED to process the session key update.…”

Section: ) Communication Protocol Exchanged Between the Ed And Jsmentioning

confidence: 99%

“…LoRaWAN has been widely adopted by the industrial IoT [4]- [6] as well as academic research in various fields, such as smart cities [7]- [9] and healthcare [10]- [12]. The operation of LoRaWAN guarantees data security by dealing with two parts of cryptographic key management, i.e., the root key [13]- [16] and the session key [17]- [20]. The root key is the LoRaWAN principal key used to derive all other cryptographic keys [21], and the session key is a derivation key used to secure communication and payload transmission [22].…”

Section: Introductionmentioning

confidence: 99%

“…Our previous work in [16] proposed a novel scheme for root key update management operating on the basis of CTR_AES DRBG 128-bit. This scheme regularly changes the LoRaWAN root key from static to dynamic.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

A Novel Session Key Update Scheme for LoRaWAN

et al. 2022

Self Cite

View full text Add to dashboard Cite

This paper proposes a novel Long-range Wide Area Network (LoRaWAN) session key updating scheme to enhance the security of LoRaWAN with cost-effective communication that provides a unique key for each communication session. The scheme consists of three sequential stages, initialization, keying material preparation, and key updating, on the basis of the truncated Photon-256 algorithm with updatable keying materials. These stages are structured by a set of novel communication protocols. To prove the uniqueness of the key, we validated its sequence bit randomness using the NIST 800-22 and ENT statistical test suites. The validation results show that the key passes all test parameters. Subsequently, the communication protocols were validated by using Scyther tools. We proved that these protocols ensure the security of the LoRaWAN key update scheme and guarantee that active interception does not occur. The analysis was performed by focusing on the security features of data confidentiality, integrity protection, mutual authentication, perfect forward secrecy, and replay attack resistance. Finally, a formal security analysis using GNY logic indicated that the overall security goals are achieved. The proposed scheme's performance was evaluated in terms of computational cost, communication cost, and storage. The computational cost needed by the scheme is very small, indicating that there is no additional burden on the backend system. The communication cost requires less traffic than previous solutions, yet it offers more robust security for LoRaWAN by producing a new key in every communication session. The scheme needs insignificant additional storage that is considered negligible.INDEX TERMS LoRaWAN security, session key update, key management, secure protocol, truncated Photon-256

show abstract