Bootstrapping devices on a network
Methods for operating a device and for managing bootstrapping of devices are disclosed. The method ( 100 ) for operating a device comprises computing ( 102 ) a derivative of a secret shared between the device and a server entity of a network, generating ( 104 ) a temporary bootstrap URI by combining at least a part of the computed derivative with a static bootstrap URI for the network, and sending ( 106 ) a bootstrap request to the temporary bootstrap URI. The method for managing bootstrapping of devices comprises generating temporary bootstrap URIs corresponding to devices operable to connect to a network, and updating a network DNS registry to map the generated temporary bootstrap URIs to the IP address of at least one of a bootstrap server instance reachable via the network and/or a bootstrap load balancer. Also disclosed are a device, a bootstrap load balancer, a bootstrap server, and a computer program.
1. A method for operating a device that is operable to connect to a network, the device operable to run a Light Weight Machine to Machine, LWM2M, client and being provisioned with a security credential comprising a secret that is shared with an LWM2M server entity reachable via the network, the method, performed in the device, comprising:
computing a derivative of the secret;
generating a temporary bootstrap Uniform Resource Identifier, URI, by combining at least a part of the computed derivative with a static bootstrap URI for the network ( 104 ); and
sending a bootstrap request to the temporary bootstrap URI.
2. A method as claimed in claim 1 , further comprising:
receiving a bootstrap response; and
completing a bootstrapping procedure for the network by sending bootstrap messages to the temporary bootstrap URI.
3. A method as claimed in claim 1 , wherein computing a derivative of the secret comprises computing a hash function of an input including the secret.
4. A method as claimed in claim 1 , wherein computing a derivative of the secret comprises:
generating an input by combining the secret with a parameter; and
computing the derivative of the generated input.
5. A method as claimed in claim 4 , wherein combining the secret with a parameter comprises concatenating the secret with the parameter.
6. A method as claimed in claim 1 wherein generating a temporary bootstrap URI further comprises combining a parameter with the at least a part of the computed derivative and static bootstrap URI for the network.
7. A method as claimed in claim 4 wherein the parameter comprises at least one of:
an identifier of the device;
a random variable;
a time stamp.
8. A method as claimed in claim 1 , wherein the secret that is shared with an LWM2M server entity reachable via the network comprises a secret that is specific to the device.
9. A method as claimed in claim 1 , wherein the secret that is shared with an LWM2M server entity reachable via the network comprises a secret that is common to at least two devices.
10. A device that is operable to connect to a network, the device operable to run a Light Weight Machine to Machine, LWM2M, client and being provisioned with a security credential comprising a secret that is shared with an LWM2M server entity reachable via the network, the device comprising a processor and a memory, the memory containing instructions executable by the processor such that the device is operable to:
compute a derivative of the secret;
generate a temporary bootstrap Uniform Resource Identifier, URI, by combining at least a part of the computed derivative with a static bootstrap URI for the network; and
send a bootstrap request to the temporary bootstrap URI.