If a hacker gains access to the keys on a LoRaWAN device, they can impersonate and authorize fraudulent transactions, potentially resulting in a scalable stack with substantial losses in service revenue, recovery costs, and brand value. Microchip Technology Inc., in collaboration with The Things Industries, today announced the first comprehensive security solution on the market that adds secure, managed, and trusted authentication to LoRaWAN devices worldwide. This solution adds hardware-based security to the LoRa ecosystem by combining the ATECC608A-MAHTN-T CryptoAuthentication appliance, compatible with numerous microcontrollers and radios, with The Things Industries' managed connection servers and Microchip's secure delivery service.
This joint solution significantly simplifies the delivery of LoRaWAN devices and addresses the inherent logistical challenges of managing LoRaWAN authentication keys from the outset and throughout the device's lifecycle. Traditionally, network and application keys are unprotected and unattended at the edge node, while LoRaWAN devices pass through multiple stages in the supply chain and are deployed in the field. The ATECC608A, which has achieved high scores according to the Joint Interpretation Library (JIL) Common Criteria, is delivered preconfigured with secure key storage, keeping a device's secret LoRaWAN keys isolated from the system. This ensures that sensitive keys are never exposed throughout the supply chain or during device deployment. Microchip's secure manufacturing facilities provide keys securely, eliminating the risk of exposure during the manufacturing phase. This is further enhanced by The Things Secure Connection Server service
For industries using LoRaWAN networks and application server providers, the solution reduces the risk of device identity corruption by establishing trusted authentication when the device connects to a network.
Similar to how a prepaid data plan works for a mobile device, each ATECC608A-MAHTN-T device comes with a one-year LoRaWAN connection server service managed by The Things Industries. Once the device identifies itself to join a LoRaWAN network, the network contacts The Things Industries connection server to verify that the identity comes from a trusted device and not a fraudulent one. Temporary session keys are then securely sent to the chosen network server and application server. The Things Industries connection server is compatible with any LoRaWAN network, from commercial networks to private networks based on open-source components. After the one-year period, The Things Industries offers the option to renew the service.
“Hardware-based security is essential for today’s connected world,” said Nuri Dagdeviren, vice president of Microchip’s Secure Products Group. “Similar to how a SIM (Subscriber Identification Module) card securely stores an international mobile phone’s identity number and corresponding key for subscriber authentication, the ATECC608A adds a hardware root of trust to the LoRa ecosystem to establish reliable authentication when a device connects to the cloud.”.
Microchip and The Things Industries have also collaborated to streamline the onboarding process for LoRaWAN devices, making it seamless and secure. The identities of LoRaWAN devices are verified by The Things Industries connection server with minimal intervention, eliminating the need for developers to have security expertise. Customers can choose any LoRaWAN network or switch to a different LoRaWAN connection server by assigning new keys to their device. This means customers are not locked into a single vendor and have complete control over where and how their device keys are stored.
“The rapidly growing LoRaWAN market needs an efficient and secure system that enhances security while reducing device delivery time,” said Johan Stokking, Chief Technology Officer of The Things Industries. “We are delighted to collaborate with Microchip to offer it in devices using our global network.”
Development Tools:
The ATECC608A stands out for its broad compatibility and can be connected to any LoRa microcontroller and radio. Developers can build secure LoRaWAN devices by combining the ATECC608A and the SAM L21 microcontroller with support from the Arm® Mbed™ OS LoRaWAN stack or the recently announced SAM R34 SiP (System-in-Package) with Microchip’s LoRaWAN stack. For rapid prototyping, designers can use the CryptoAuthoXPRO board and devices supplied by The Things Industries as samples with the SAM L21 Xplained Pro (atsamd21-xpro) or SAM R34 Xplained Pro (DM320111) boards.
Pricing and Availability
The ATECC608A-MAHTN-T device for The Things Industries, including the first year of prepaid TTN service, is now available.
