Authentication of a gateway device in a sensor network
A method in a wireless sensing device for authenticating a gateway device of a sensor network is described. The method includes receiving a certificate where the certificate was generated by the management server upon a determination that the gateway device and the wireless sensing device are associated and is a digital document including data and a digital signature, where the digital signature was generated by the management server based on the data and a private key of the management server, and where the data includes a first identifier and a second identifier; confirming that the wireless sensing device is authorized to upload data to the gateway device; in response to the confirming that the wireless sensing device is authorized to upload data to the gateway device, uploading to the gateway device data indicative of a plurality of sensor measurements taken over time to be transmitted to the management server.
1. A method in a wireless sensing device for authenticating a gateway device, wherein the wireless sensing device and the gateway device are part of a sensor network including a management server, the method comprising:
receiving, from the gateway device, a certificate wherein the certificate was generated by the management server upon a determination that the gateway device and the wireless sensing device are associated and is a digital document including data and a digital signature, wherein the digital signature was generated by the management server based on the data and a private key of the management server, and wherein the data includes a first identifier and a second identifier;
confirming based on the certificate that the wireless sensing device is authorized to upload data to the gateway device; and
in response to the confirming that the wireless sensing device is authorized to upload data to the gateway device, uploading to the gateway device data indicative of a plurality of sensor measurements taken over time to be transmitted to the management server, wherein the plurality of sensor measurements are representative of physical events detected at the wireless sensing device.
2. The method of claim 1 , wherein the data of the certificate further includes a public key of the gateway device, and the method further comprises receiving a second digital signature from the gateway device, wherein the second digital signature is generated at the gateway device with a private key of the gateway device based upon the certificate, and wherein confirming that the wireless sensing device is authorized to upload data to the gateway device further includes authenticating the second digital signature using the public key of the gateway device that is part of the data of the certificate.
3. The method of claim 1 , wherein wireless sensing devices and gateways are registered with the management server, and wherein different ones of the wireless sensing devices and gateway devices are claimed by different ones of a plurality of organizations, and wherein the wireless sensing device is authorized to upload data to the gateway device because the gateway device and the wireless sensing device were claimed by the same one of the plurality of organizations.
4. The method of claim 1 , wherein the wireless sensing device includes one or more sensors for detecting the physical events, wherein the sensors are at least one of a temperature sensor, a light sensor, and an accelerometer.
5. The method of claim 1 , wherein the receiving the certificate and the uploading the data is performed over a Bluetooth low energy (BLE) communication channel between the wireless sensing device and the gateway device.
6. The method of claim 5 , wherein the BLE communication channel is a secure communication channel between the gateway device and the wireless sensing device that is established based on a shared secret stored in both the wireless sensing device and the gateway device at the time of manufacture.
7. The method of claim 1 , wherein the determination that the gateway device and the wireless sensing device are to be associated includes a determination that the gateway device and the wireless sensing device are associated with a same organization identifier from a plurality of organization identifiers as a result of being claimed by a same organization from a plurality of organizations.
8. The method of claim 7 , wherein the gateway device is a first gateway device and the certificate is a first certificate, the method further comprising:
receiving, from a second gateway device, a second certificate, wherein the second certificate was generated by the management server upon a determination that the second gateway device is associated with the same organization and is a second digital document including second data and a second digital signature, wherein the second digital signature was generated by the management server based on the second data and the private key of the management server, and wherein the second data includes a third identifier and the second identifier;
confirming based on the second certificate that the wireless sensing device is authorized to upload data to the second gateway device because it is part of the same organization; and
in response to the confirming that the wireless sensing device is authorized to upload data to the second gateway device, uploading to the second gateway device data indicative of a second plurality of sensor measurements taken over time to be transmitted to the management server, wherein the second plurality of sensor measurements are representative of physical events detected at the wireless sensing device.
9. A wireless sensing device to be coupled with a gateway device of a sensor network, wherein the sensor network includes a management server, the wireless sensing device comprising:
one or more sensors to detect physical events and to provide one or more sensor measurements representative of the physical events;
a communication interface to receive, from the gateway device, a certificate wherein the certificate was generated by the management server upon a determination that the gateway device and the wireless sensing device are associated and is a digital document including data and a digital signature, wherein the digital signature was generated by the management server based on the data and a private key of the management server, and wherein the data includes a first identifier and a second identifier;
a non-transitory computer readable storage medium to store instructions; and
a processor coupled with the non-transitory computer readable storage medium to process the stored instructions to:
confirm based on the certificate that the wireless sensing device is authorized to upload data to the gateway device, and
in response to the confirmation that the wireless sensing device is authorized to upload data to the gateway device, to upload data to the gateway device data indicative of a plurality of sensor measurements taken over time to be transmitted to the management server, wherein the plurality of sensor measurements are representative of physical events detected at the wireless sensing device.
10. The wireless sensing device of claim 9 , wherein the data of the certificate further includes a public key of the gateway device, and wherein the communication interface is further to receive a second digital signature from the gateway device, wherein the second digital signature is generated at the gateway device with a private key of the gateway device based upon the certificate, and wherein to confirm that the wireless sensing device is authorized to upload data to the gateway device further includes to authenticate the second digital signature using the public key of the gateway device that is part of the data of the certificate.
11. The wireless sensing device of claim 9 , wherein sensing devices and gateways are registered with the management server, and wherein different ones of the wireless sensing devices and gateway devices are claimed by different ones of a plurality of organizations, and wherein the wireless sensing device is authorized to upload data to the gateway device because the gateway device and the wireless sensing device were claimed by the same one of the plurality of organizations.
12. The wireless sensing device of claim 9 , wherein the one or more sensors includes at least one of a temperature sensor, a light sensor, and an accelerometer.
13. The wireless sensing device of claim 9 , wherein to receive the certificate and to upload the data is performed over a Bluetooth low energy (BLE) communication channel between the wireless sensing device and the gateway device.
14. The wireless sensing device of claim 13 , wherein the BLE communication channel is a secure communication channel between the gateway device and the wireless sensing device that is established based on a shared secret stored in both the wireless sensing device and the gateway device at the time of manufacture.
15. The wireless sensing device of claim 9 , wherein the determination that the gateway device and the wireless sensing device are to be associated includes a determination that the gateway device and the wireless sensing device are associated with a same organization identifier from a plurality of organization identifiers as a result of being claimed by a same organization from a plurality of organizations.
16. The wireless sensing device of claim 15 , wherein the gateway device is a first gateway device and the certificate is a first certificate, and the communication interface is further to,
receive, from a second gateway device, a second certificate, wherein the second certificate was generated by the management server upon a determination that the second gateway device is associated with the same organization and is a second digital document including second data and a second digital signature, wherein the second digital signature was generated by the management server based on the second data and the private key of the management server, and wherein the second data includes a third identifier and the second identifier; and
wherein the processor is further to,
confirm based on the second certificate that the wireless sensing device is authorized to upload data to the second gateway device because it is part of the same organization, and
in response to the confirmation that the wireless sensing device is authorized to upload data to the second gateway device, to upload to the second gateway device data indicative of a second plurality of sensor measurements taken over time to be transmitted to the management server, wherein the second plurality of sensor measurements are representative of physical events detected at the wireless sensing device.