Device default WiFi credentials for simplified and secure configuration of networked transducers
A wireless device with transducers can support remote monitoring and include an 802.11 compatible radio and a set of device default credentials. The device can be installed at a physical location with service from a fixed access point operating with a different set of owner credentials. A mobile phone can (i) scan a tag for the device and download a set of configuration parameters for the device, and (ii) authenticate with a configuration system. The mobile phone can receive the set of device default credentials from the configuration system. The mobile phone can activate a mobile access point using the set of device default credentials. The device can connect with the mobile phone's access point and receive a ciphertext with the owner credentials and a configuration package. The device can apply the configuration package and load the owner credentials in order to connect with the fixed access point.
1 . A method for configuring a device to securely communicate with a configuration system, the method performed by the device, the method comprising:
a) storing, in a nonvolatile memory, (i) a tag value comprising networking parameters and a first device identity for the device, (ii) a root certificate, and (iii) default credentials comprising a passphrase for the device, wherein the device enables a mobile phone to read with a camera a tag comprising the tag value;
b) establishing, by a Wi-Fi radio and with the mobile phone, a first connection using the networking parameters, wherein a service set identifier (SSID) comprises the first device identity, and wherein the networking parameters specify the first connection is for an open Wi-Fi network;
c) receiving, from the mobile phone via the first connection for the open Wi-Fi network, a first certificate for a configuration system, authentication parameters, a second device identity for the device, and a first digital signature by the configuration system over at least the second device identity;
d) verifying (i) the first digital signature with the first certificate, and (ii) the first certificate using the root certificate;
e) scanning, by the Wi-Fi radio, a radio-frequency spectrum for a list of available Wi-Fi networks for the device;
f) transmitting, by the Wi-Fi radio to the mobile phone via the open Wi-Fi network, a first ciphertext comprising the list of available Wi-Fi networks;
g) receiving, by the Wi-Fi radio from the mobile phone via the open Wi-Fi network, a ciphertext of second credentials for a new Wi-Fi network, wherein the list of available Wi-Fi networks includes the new Wi-Fi network, and wherein the ciphertext is decrypted by the device using a device private key and an elliptic curve cryptography algorithm;
h) connecting to the new Wi-Fi network using the received, decrypted second credentials of the new Wi-Fi network; and
i) establishing, by the Wi-Fi radio via the new Wi-Fi network, a second connection with the configuration system using (i) the second device identity and (ii) the first certificate for the configuration system, wherein the device transmits a report to the configuration system through the second connection.
2 . The method of claim 1 , wherein the elliptic curve cryptography algorithm comprises a curve P-256.
3 . The method of claim 1 , wherein the second credentials for the new Wi-Fi network comprise a second SSID and password.
4 . The method of claim 1 , wherein the passphrase is unique for the device.
5 . The method of claim 1 , wherein the first device identity comprises a random number.
6 . The method of claim 1 , further comprising in step d), verifying the first digital signature with the first certificate and an elliptic curve digital signature algorithm (ECDSA).
7 . The method of claim 1 , wherein the radio-frequency spectrum comprises channels 1 through 11 for 2.4 Ghz and channels 40 through 62 for 5 Ghz.
8 . The method of claim 1 , wherein the tag comprises a QR code.
9 . The method of claim 1 , wherein packets transmitted through the open Wi-Fi network are not encrypted by the Wi-Fi radio.
10 . The method of claim 1 , further comprising before step f), generating, by a processor in the device, the first ciphertext using the device private key and the elliptic curve cryptography algorithm.