LoRa Part 1. Understanding Private & Public Keys: How LoRa Devices Join Networks. (OTAA/ABP)

LPWAN playlist. Watch these video to understand more on LPWAN.
• LPWAN Part 1. Understa...
Demystify Low Power Wide Area Network (LPWAN)
End Device Joins LoRaWAN Network:
Over-the-Air Activation (OTAA) or
Activation By Personalization (ABP)
Part 4
Before an end-device can communicate on the LoRaWAN, the following information (in red) are required.
Device Address (DevAddr)
Network Session Key (NwkSKey)
Application Session Key (AppSKey)
Two activation methods are available to join the LoRa network
Over-the-Air Activation (OTAA)
Activation By Personalization (ABP)
The first is 1) OTAA, Over-the-Air-Activation. The device and the network exchange a 128-bit AppKey. When the device send the join request, the AppKey is used to create a Message Integrity Code (MIC), the server then check the MIC with the AppKey. If the check is valid, the server creates two new 128-bit keys, the App Session key (AppSkey) and the Network Session Key (NwkSkey). These keys are sent back to the device using the AppKey as an encryption key. When the keys are received the device decrypts and installs the two session keys.
The second method for the network join is 2) ABP, Activation by Personalization. In this case the device session keys are inserted by the user, thus is possible to have security issues.
Device Address (DevAddr)
32-bit identifier
Unique within the network
Present in each data frame
Shared between End-device, Network Server, and Application Server
Differentiates nodes within the network, allowing the network to use the correct encryption keys and properly interpret the data
Network Session Key (NwkSKey)
128-bit AES encryption key
Unique per end-device
Shared between end-device and Network Server
Provides message integrity for the communication
Provides security for end-device to Network Server communication
Application Session Key (AppSKey)
128-bit AES encryption key
Unique per end-device
Shared between end-device and Application Server
Used to encrypt or decrypt application data messages
Provides security for application payload

[@Jay-tf2bx]

P r o m o s m 😆

[@technologiesdiscussion1676]

Thank you