Question about (auto) commissioning and security

RE: Question about (auto) commissioning and security

Edvin — Thu, 14 Mar 2019 11:52:18 GMT

Hello Max,

Our Thread and Zigbee team has been very busy lately, and I have not received a reply for my internal ticket yet. I will ping the internal ticket, and keep you updated. Thank you for popping by.

BR,

Edvin

RE: Question about (auto) commissioning and security

Max — Thu, 14 Mar 2019 10:26:32 GMT

Hello Edvin,

I will conduct more tests on the network connection next week, once my code is working properly again.

(I heavily refactored the whole project to work with GCC, vscode, and integrate tests Unity/Ceedling).

I will start by assigning a hardcoded Master key and see for the PSKc secret (as per Thread UM)

BR,

Max

RE: Question about (auto) commissioning and security

Edvin — Fri, 08 Mar 2019 14:11:32 GMT

Hello Max,

I just wanted you to know that your ticket is not forgotten, but I am still waiting for help from our Thread team.

Let me know if you for some reason have additional information.

BR,
Edvin

RE: Question about (auto) commissioning and security

Max — Thu, 28 Feb 2019 08:26:51 GMT

Hello Edvin,

You got my question right, we would like our nodes to to connect to each other and form a private network.

Thus restricting other devices to connect.

I would like (for now) these nodes to have hardcoded credentials of the network and join/create automatically.

Our customer wants the minimum interaction with the system. basically, we power up the nrf52 devices and they should connect automatically. This is the case right now, but we now need to secure the system/network by changing the credentials.

Later on, we will use DFU update over the air to update the credentials or add user interaction via a push button or so.

if I understand correctly, the masterkey and the PSKc secret are hardcoded within the openThread library that Nordic compiled.

Would changing the MasterKey on all devices allow us for setting-up a private network ?

Do we need to use set the PSKc secret since we are using auto-commissioning ?

RE: Question about (auto) commissioning and security

Edvin — Thu, 28 Feb 2019 08:07:26 GMT

Hello Max,

Sorry for the late reply.

I am trying to understand what you need.

So you want to pre-program the devices so that when you turn them on, they will automatically connect to each other and form a network? Or do you want all devices to be able to join any network?

I would have to double check with our Thread team, but I believe that the Masterkey is hardcoded, and if not changed, it is set to 0x00112233445566778899aabbccddeeff.

It can be overwritten by setting the master key which is located in dataset.h.

But can you describe how you want the nodes to behave? Should all the nodes be hard coded this specific network, or do you want to commission the nodes, so that you (or a customer) at any time can get a new node, and commission it to any existing network?

Best regards,

Edvin