基于LoRaWAN协议的双向认证接入机制的研究

Research on Bidirectional Authentication Mechanism Based on LoRaWAN Protocol

针对LoRaWAN中终端设备与网络服务器建立连接过程中存在的安全漏洞做出改进。提出一种基于LoRaWAN协议的安全模型,通过终端与服务器之间双向认证机制加强终端与服务器的身份认证的安全性,防止第三方设备窃听,又将身份认证规则进行周期性更新,在防止重放攻击,加强链路安全性的同时,尽可能地降低对功耗的影响。仿真结果表明,该机制对LoRaWAN协议终端认证过程的安全性随着更新周期的缩短而更大,该机制的双方认证过程的能耗随着周期的缩短而增大,但对整体数据传输阶段的能耗和数据传输阶段的接收延迟影响不明显,其中数据传输阶段的接受延迟增加不足7%。

Improvements are made to the security issue in the connection process between LoRawan terminal equipment and network server.A security model is proposed based on LoRaWAN protocol which,through the two-way authentication mechanism between the terminal and server,strengthens the security of terminal and server authentication to prevent the third-party equipment eavesdropping.This model updates regularly the authentication rules,prevents the replay attack,strengthens the link safety and at the same time,reduces the impact on the power consumption as far as possible.Simulation results show that that the security of this mechanism for the LoRaWAN protocol terminal authentication process becomes greater with the shortening of the update cycle.The energy consumption of the authentication process of the two parties of this mechanism increases with the shortening of the cycle.But it doesn’t have an obvious impact on the energy consumption of the overall data transmission phase and the reception delay of the data transmission phase.The acceptance delay during the data transmission phase increases by less than 7%.