Refereed article in conference proceedings (A4)

Key Management through Delegation for LoRaWAN based Healthcare Monitoring Systems




List of AuthorsDonmez T., Nigussie E.

Conference nameInternational Symposium on Medical Information and Communication Technology

PublisherIEEE Computer Society

Publication year2019

JournalInternational Symposium on Medical Information and Communication Technology

Book title *2019 13th International Symposium on Medical Information and Communication Technology (ISMICT)

Journal name in sourceInternational Symposium on Medical Information and Communication Technology, ISMICT

Start page187

End page192

ISBN978-1-7281-2342-4

ISSN2326-8301

DOIhttp://dx.doi.org/10.1109/ISMICT.2019.8743947


Abstract

We present a key management scheme, Assisted Mode, for improving security of LoRaWAN. LoRaWAN stores lifetime root keys in end-devices which are susceptible to physical compromise, and lacks mechanisms to update the root keys. Since security of LoRaWAN is intrinsically dependent on root keys, this practice makes LoRaWAN vulnerable to attacks on end-devices, and malpractices in their manufacturing. Due to the lifetime nature of the root keys and long lifetime of end-devices, cryptoperiods of LoRaWAN's security keys exceed recommended values. Moreover, if LoRaWAN's root keys are exposed, security of sessions which took place before the exposure are weakened. Assisted Mode addresses these problems by freeing the end-devices from management of lifetime keys, and delegating these tasks to a master device. Unlike most existing schemes, security is improved without necessitating significant changes to the protocol or incurring overhead on LoRa communications. Assisted Mode is a promising scheme for complementing LoRaWAN's key management in healthcare monitoring applications, and in other applications where the introduction of a master device is practical.


Last updated on 2021-24-06 at 10:29