This blog provides details about the security advisory notice regarding versions lower than 4.4.4 of the LoRaMAC-Node™ stack. The associated security advisory notice and stack published by Semtech can be found on Semtech’s GitHub repository.

Low Power, Wide Area Networks (LPWANs) are key to the success of Internet of Things (IoT) deployments that need to cover a broad geographical area. LoRaWAN® is an open protocol for one type of LPWAN, while DASH7 is another. Both use the unlicensed spectrum and together they offer complementary benefits.

1.     The Role of the Gateway in LoRaWAN

The LoRaWAN-based gateway is the physical layer (PHY) interface for the LoRaWAN network server (LNS). On the one hand, it listens to certain parts of the radio spectrum and decodes LoRa®-modulated signals originating from LoRa-based sensors. On the other hand, the gateway transmits messages from the network down to a sensor as LoRa-modulated signals.

On-boarding Devices Securely

There are many diverse applications for LoRaWAN^® devices. Similarly, there is a wide and diverse population of end users. These factors lead to a device on-boarding process that takes just as many forms. Device on-boarding is the process of associating a device with a particular network and application server. It is the foundation of a device's level of security. It precedes and enables device activation, whether over-the-air activation (OTAA) or through activation by personalization (ABP), which themselves become compromised if the device on-boarding is done incorrectly.

To ensure that a LoRaWAN®-based device can be uniquely and securely identified on a network, it needs a unique ID and other security key material. Using a device’s unique, built-in identifier and deriving the appropriate key material is called provisioning the device. In this article, we’ll take a look at the best practices for provisioning your devices.

Interested in winning cash and prizes just for making the world a better place?

 

Would you like a free PCB design review from Semtech?

The Semtech PCB Design Review Service is designed to facilitate the development of LoRaWAN®-based hardware for the deployment of successful solutions.

Our engineers will review your schematic and PCB design to help you avoid common design pitfalls. We will even provide you with

Smart Homes are booming in popularity. The increasing volume of connected devices that collect data make them an attractive target for hackers. Accordingly, buyers are increasingly concerned about the privacy and security of their Smart Home data. The combination of LoRa® devices and the LoRaWAN® protocol provides powerful levels of security for Smart Home system consumers.

Amsterdam, January 2020

Helium and Semtech recently announced that the Helium Network is one of the largest, public LoRaWAN networks in the United States. On the heels of this, we want to properly introduce the Helium Network to LoRa® Developer Portal users, and put together a few tutorials and deep dives to ensure this community can quickly take advantage of Helium for Internet of Things (IoT) applications.