SecureAutoLoRa: An Automated Secure Registration Procedure for LoRaWAN Devices

Mallen, Lucas (Universidad de Zaragoza) ; Sanguesa, Julio A. (Universidad de Zaragoza) ; Roldán-Gómez, José (Universidad de Zaragoza) ; Torres-Sanz, Vicente (Universidad de Zaragoza) ; Martinez, Francisco J. (Universidad de Zaragoza)

Resumen: Device registration in LoRaWAN systems can be a tedious process, particularly when managing a large number of devices. To automate this task, we previously developed the AutoLoraConfig protocol, although it includes vulnerabilities that attackers can exploit. To solve this, in this work we introduce the SecureAutoLoRa, a protocol designed to enhance security in the automated device registration process for LoRaWAN networks. SecureAutoLoRa blocks abuse of the guest DevEUI used in automated joins by obfuscating registration messages and enforcing a configurable positional security code that dictates where the real DevEUI appears across packets, markedly hindering unauthorized registrations.Results show that SecureAutoLoRa sharply reduces attackers’ success. Compared with AES-128 and SPECK, it complements standard encryption to provide a practical, layered defense suitable for large-scale LoRaWAN onboarding.

Idioma: Inglés

DOI: 10.1109/MSWiM67937.2025.11309065

Año: 2025

Publicado en: International Conference on Modeling, Analysis and Simulation of Wireless and Mobile Systems 2025 (2025), 795-798
ISSN:

Financiación: info:eu-repo/grantAgreement/ES/DGA-FSE/T40-23D
Financiación: info:eu-repo/grantAgreement/ES/MCIU/AEI/PID2021-122580NB-I00

Tipo y forma: Artículo (PostPrint)

Área (Departamento): Área Arquit.Tecnología Comput. (Dpto. Informát.Ingenie.Sistms.)
Área (Departamento): Área Lenguajes y Sistemas Inf. (Dpto. Informát.Ingenie.Sistms.)