LoRaWAN Main Wiki Page

Security

Over-the-Air-Activation (OTAA)

OTAA-Methodebased on Over-the-Air-Messages for Join Requests and Join Accepts. For each end device you need

• 64-Bit-DevEUI [UUID global / like a MAC]
• 64-Bit-AppEUI [crypto sign to join network]
• 128-Bit-AppKey
• 2byte aka 16bit DevNonce [random byte to prevend relplay attack]
• Workflow
• use this key with AppKey to generate a 4-Byte MIC (Message Integrity Code)
• Server accpet only devices with known DevEUI- und AppEUI and check MIC with AppKey.