Enhancing LoRaWAN Security through a Lightweight and Authenticated Key Management Approach

Area of Science:

• Cybersecurity
• Wireless Communication Networks
• Internet of Things (IoT)

Background:

• Modern communication technologies increasingly integrate security features.
• Internet of Things (IoT) and Low-Power Wide-Area Networks (LP-WAN) incorporate security, but initial approaches require enhancement.
• LoRa Wide Area Network (LoRaWAN) uses pre-shared keys, posing challenges for flexible key updates.

Purpose of the Study:

• To evaluate security vulnerabilities in LoRaWAN key management.
• To propose alternative security schemes for LoRaWAN.
• To assess the suitability of Ephemeral Diffie-Hellman Over COSE (EDHOC) for LoRaWAN.

Main Methods:

• Analysis of LoRaWAN security vulnerabilities, specifically in key management.
• Conceptual comparison of alternative security schemes.
• Evaluation of Ephemeral Diffie-Hellman Over COSE (EDHOC) for its flexibility, low computational cost, and minimal message exchanges.

Main Results:

• Identified security vulnerabilities in LoRaWAN's current key management approach.
• Demonstrated the potential of EDHOC as a viable alternative for LoRaWAN security.
• Comparative analysis highlights EDHOC's advantages in overhead and flexibility for LP-WAN.

Conclusions:

• LoRaWAN's pre-shared key system presents security limitations, particularly for key updates.
• Ephemeral Diffie-Hellman Over COSE (EDHOC) offers a flexible and efficient solution for enhancing LoRaWAN security.
• EDHOC is a promising approach for improving key management in LP-WAN environments.