Sending securely UDP data using nRF9160 and authenticating received data on server end

RE: Sending securely UDP data using nRF9160 and authenticating received data on server end

SilasV — Tue, 03 Nov 2020 14:15:32 GMT

Hi Didrik

Thank you for all the information! I will work on this example and see how it goes.

Thanks 🙂

RE: Sending securely UDP data using nRF9160 and authenticating received data on server end

Didrik Rokhaug — Mon, 02 Nov 2020 14:42:35 GMT

Documentation for samples:

https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/nrf/samples.html#nrf9160-samples

The LwM2M client sample has some information on how to test the sample against the Leshan demo server. Other than that, I don't think there are much information relevant for this case, but you might find something I did not think of.

You can find the samples themselves in the nrf/samples/nrf9160 folder in your NCS installation.

RE: Sending securely UDP data using nRF9160 and authenticating received data on server end

SilasV — Sun, 01 Nov 2020 23:23:30 GMT

Hi Didrik

thank you for your reply! sure DTLS would be the right way.

At present we have a cloud server which implements HTTP integration - with device data coming from LoRa server. Now we are looking into providing NB IoT connectivity option for our smart devices using nRF9160 SLM, and UDP with LwM2M seems to be good option.

[quote userid="81181" url="~/f/nordic-q-a/67798/sending-securely-udp-data-using-nrf9160-and-authenticating-received-data-on-server-end/277865#277865"]what you might find in some samples.[/quote]

Can you provide link to such examples?

If anyone has already implemented such a setup (UDP + LwM2M client-server), would you please comment and share your experience?

Thanks 🙂

RE: Sending securely UDP data using nRF9160 and authenticating received data on server end

Didrik Rokhaug — Fri, 30 Oct 2020 15:20:20 GMT

Hi,

Unfortunately, we do not have any documentation on how to set up the cloud side of things other than what you might find in some samples.

[quote user=""]1. How can we secure this setup? Of course the UDP messages will be in binary and encrypted. [/quote]

The LwM2M client supports DTLS. Other than that, I am not quite sure what you mean. What do you want to secure? Against what?

[quote user=""]2. What is the way to avoid any third party messages / spoofing attacks hitting our server? [/quote]

You can use DTLS, and the built in LwM2M mechanisms for verifying the client.

Best regards,

Didrik