Authors:
Hassan N. Noura
1
;
Ola Salman
2
;
Tarif Hatoum
3
;
Mohammad Malli
3
and
Ali Chehab
2
Affiliations:
1
American University of Beirut, Department of Electrical and Computer Engineering, Lebanon, Arab Open University, Department of Computer Sciences, Beirut, Lebanon
;
2
American University of Beirut, Department of Electrical and Computer Engineering, Lebanon
;
3
Arab Open University, Department of Computer Sciences, Beirut, Lebanon
Keyword(s):
IoT, LoRaWAN, ABP, OTAA, Security Attack, Lightweight Security Solution.
Abstract:
A large number of power-constrained devices will be connected to the Internet of Things (IoT). Deployed in large areas, the battery-powered IoT devices call for power efficient and long range communication technologies. Consequently, the Low Power Wide Area Networks(LPWAN) were devoted to being the key IoT enablers. In this context, LoRaWAN, an LPWAN technology, is one of the main IoT communication protocols candidates. However, LoRaWAN suffers from different security and privacy threats. These threats lead to several availability, authentication, and privacy attacks. In this paper, we present efficient countermeasures against two well-known ABP attacks (eavesdropping and replay). The proposed solution aims at making LoRa ABP end-devices safer, more secure and more reliable. In fact, the proposed solution is based on the dynamic key derivation scheme. We presented two variants of dynamic key derivation: counter-based and channel information-based. A set of security and performance te
sts shows that the proposed countermeasures present low overhead in terms of computation and communication resources with a high level of security.
(More)