From the LoRa Alliance specification, we know that the LoRaWAN Application Server handles the decryption (uplink) and the encryption (downlink) thanks to the AppSkey. The first thing which is not clear is that Thinkpark is a LNS, so supposed to deal only with authentication but obviously goes further in the process as it can decrypt the payload which should be the App Server work.
The second point that I can't understand is how I can perform an "end to end" security as the payload is sent decrypted from Thingpark to my IoT Platform. This seems obvious because my IoT Platform doesn't have the AppSKey and anyway, has no direct connection with the Join Server. To summarize my questions:
- How come the Actility community calls the IoT Platform the App Server as it doesn't have the AppSkey?
- How come Thinkpark is called LNS if it does the App Server work?
I've admitted this behavior so far, but that is really too confusing when I try to explain it to someone else. Why don't we say that ThingPark is a LoRaWAN Server (LNS+AppS) and that the IoT Platform is just a User Application which has nothing to do with LoRaWAN? That would be easy to explain that if we want end to end security , we just have to shortcut Actility App Server and build our own (as well as our User App).
Thank for your insight and clarification.