Author: J\u00fcrgen Messerer, bbv Software Services AG<\/p>\n
In our digital age, we are surrounded by connectivity. Everyone and everything is exchanging information. A crucial component of this digital network is the Internet of Things (IoT) with its countless applications. However, not every application can be implemented with a single technology. A variety of wireless solutions are available for IoT devices. To select the most suitable technologies, various criteria must be considered, such as range, data rate, security, and licensing model. One technology that meets these criteria while being uncomplicated and versatile is the Low-Power Wide Area Network, or LPWAN. LPWAN offers long battery life with broad coverage and low throughput. But what about security? Are we seeing the same issues as with other IoT devices, where security was implemented only sparsely or not at all? This article will show what needs to be considered to prevent tomorrow's LPWAN devices from being immediately reconfigured as bots by unauthorized individuals.<\/strong><\/p>\n Security means being in a state that is practically free of threats and dangers. However, the more complex a system is, the more difficult, if not impossible, it becomes to achieve this state. The field of computer technology is such a complex system, and it is constantly evolving. Because protective measures are being circumvented or broken with increasing frequency, a security concept to safeguard confidentiality, availability, and integrity must be developed from the outset. This concept must also consider future security attacks that are not yet even known. Security should never be considered an option! Retrofitting security measures is also highly impractical, as it would exponentially increase production costs.<\/p>\n It is important to gain an overview of a product's safety by asking targeted questions. The following simplified questions can already reveal a great deal about a device's safety concept.<\/p>\n \u00a0Physical Assessment<\/em><\/p>\n Access Control Assessors<\/em>t<\/p>\n Vulnerability Assessment<\/em><\/p>\n Network Security Assessors<\/em>t<\/p>\n Software Update Process Assessment<\/em><\/p>\n Key Management Assessment<\/em><\/p>\n Let's look at a low-power device like an LPWAN device, which is battery-operated and has limited processing power and memory. LPWAN protocols and their implementations, such as LoRaWAN, Sigfox, Weightless-P, RPMA, and NB-IoT, have certain security features that cover only a small part of the assessment listed earlier. Generally speaking, all of these protocols use AES encryption and decryption of data, i.e., symmetric keys.<\/p>\n Unfortunately, in reference implementations, these keys are statically stored in the devices. There is no way to replace these keys if needed. The only option is to physically remove the keys. Another security weakness lies in the inability to distribute software updates over the air. Often, for cost reasons, the keys are not stored in secure storage. How can these weaknesses of LPWAN security be addressed?<\/p>\n Security begins with the hardware design. The keys must be stored in a secure memory area. To achieve this, it is advantageous to use a security chip. Microchip, formerly Atmel, offers a whole series of such security chips, each covering a specific security segment. Security memory chips like the AT88SCxxxx are ideally suited for securely storing symmetric keys and, at 50 cents per 1000 units, are in a cost-effective price range. But what about over-the-air key updates?<\/p>\n To enable key updates over an insecure channel, such as over the air, additional security mechanisms are required. Fortunately, such security mechanisms have been known for over 20 years. To ensure that symmetric keys can be securely exchanged over the air, a secure channel must be established. The Diffie-Hellman key exchange, which is based on asymmetric keys, has been used for this purpose for many years. Unlike encryption with symmetric keys, asymmetric encryption is more computationally intensive and therefore consumes more energy. For battery-powered devices, a modified form of the Diffie-Hellman key exchange is used: the so-called Elliptic Curve Diffie-Hellman (ECDH) method, which is based on elliptic curves and is therefore less computationally intensive and more energy-efficient. This method only secures the exchange itself, but not whether the sender is actually the one we trust.<\/p>\n Fortunately, there is a proven method for this as well: the Elliptic Curve Digital Signature Algorithm (ECDSA), a modified version of the conventional Digital Signature Algorithm. These two methods, ECDH and ECDSA, ensure secure key exchange over the air. Microchip offers a cost-effective solution for this as well: the ATECC508A Crypto Authentication Chip. In addition to securely storing keys, this chip provides an easy-to-use interface for key exchange using ECDH and ECDSA. A possible hardware design could look like this:<\/p>\n (see illustration,\u00a0PDF<\/a>)<\/p>\n Using ECDH and ECDSA, secure over-the-air software updates could also be implemented. In some implementations, only a limited downlink is offered. If this is the case, it must be verified whether a key update is even possible and thus meets the security requirements. Furthermore, most LPWAN protocols lack a broadcast-to-all feature. Organizations like the LoRa Alliance have recognized these weaknesses and are extending the protocol specification to include precisely this feature.<\/p>\n From a security perspective, LPWAN protocols and their implementations are inadequate. Using a dedicated crypto chip, such as the ATECC508a from Microchip, it is possible to retrofit functions like ECDH and ECDSA to such LPWAN devices and their implementations. This significantly increases the security of these devices.<\/p>\n J\u00fcrgen Messerer works at bbv Software Services AG as an embedded software architect. His focus is on small and large embedded systems as well as application development with C++ and Qt5.<\/p>\n Download the article as a PDF<\/strong><\/a><\/p>\n Do you want to bring yourself up to date with the latest technology?<\/strong><\/p>\n Then find out more\u00a0here<\/strong>\u00a0<\/a>MircoConsult offers training courses\/seminars\/workshops and individual coaching on the topics of IoT\/Industry 4.0\/system and hardware development.<\/p>\n Training & coaching on the other topics in our portfolio can be found here.\u00a0here<\/a>.<\/strong><\/p>\n Valuable expertise in IoT\/Industry 4.0\/system and hardware development is available.\u00a0here<\/strong>\u00a0<\/a>Available for you to download free of charge.<\/p>\nintroduction<\/h2>\n
Security Audit\/Assessment<\/h2>\n
\n
\n
\n
\n
\n
\n
Security weaknesses in LPWAN implementations<\/h2>\n
\n
Security by Design<\/h2>\n
Summary\/Conclusion<\/h2>\n
author<\/h2>\n
\nIoT \/ Industry 4.0 \u2013 our training courses & coaching<\/h2>\n
\nIoT \/ Industry 4.0 \u2013 Expertise<\/h2>\n