A Secure and Efficient Blockchain-based Key Management Scheme for LoRaWAN

Abstract

Vehicle technology has development rapidly these years, however the security measures for in-vehicle network does not keep up with the trend. Controller area network(CAN) is the mostly used protocol in in-vehicle network. With the characteristic of CAN, there exists many vulnerabilities including lacks of integrity and confidentiality, and hence CAN is vulnerable to various attacks such as impersonation attack, replay attack, and etc. In order to implement the authentication and encryption, secret key derivation is necessary. In this work, we proposed an efficient key management scheme for in-vehicle network. In particular, the scheme has five phases. In the first and second phase, we utilize elliptic curve cryptography based key encapsulation mechanism(KEM) in order to derive pairwise secret between each ECU and a central secure ECU in the same group. Then in the third phase, we design secure communication to derive group shared secret among all ECU in a group. In the last two phases, SECU is not needed, regular ECU can derive session key on their own. We presented a possible attack analysis(chosen-cipertext attack as main threat) and a security property analysis for our scheme. Our proposed scheme is evaluated based on hardware-based experiment of three different microcontrollers and software-based simulation of IVNS. We argue that based on our estimation and the experiment result, our scheme performs better in communication and computation overhead compared to similar works.

Blockchain Regulated Verifiable and Automatic Key Refreshment Mechanism for IoT

“…In [10], a permissioned blockchain is used for solving the problem that the root key is unchanged throughout the device's life in the LoRaWAN key management. The key update process relies on the Elliptic Curve Diffie-Hellman (ECDH).…”

A Fault-Tolerant and Secure Architecture for Key Management in LoRaWAN Based on Permissioned Blockchain

“…In [10], the authors propose a blockchain-based architecture to increase availability and security in the join procedure at LoRaWAN. The key management is shared between Join Server and Network Server, which are all nodes in a permissioned blockchain.…”

Implementation of a Secure LoRaWAN System for Industrial Internet of Things Integrated With IPFS and Blockchain

“…In [19], smart contact and permissioned blockchain-based architecture for LoRaWAN key management were proposed to enhance the security and availability. A similar work was proposed in [20] with a new approach to update the root key. LoRaWAN has been creating opportunities for healthcare industries to provide long-range, secure communications using blockchain services.…”