2

Actually even in OTA (using Join) the LoRaWAN spec separates the network session key (used by the network server to verify checksums and potentially de-ambiguate colliding short DevAddr addresses into their unique devEUIs), and the payload encrypting session key (AppSKey). It is one of its key innovations compared to other MAC layers like 802.15.4. The trick ...


1

There is a simple way to prevent your users using your REST API from outside their RPI. It would work in the following way: You protect the file system of the RPI by a root password that is not shared with the user. The filesystem must be encrypted too. Instead of assigning an access token to a user, you assign a security key. The user puts the security key ...


Only top voted, non community-wiki answers of a minimum length are eligible