设备的无线认证
我目前正在通过 802.15.4 RF 协议开发两个嵌入式设备之间的无线连接。其中一个设备是协调器（服务器），另一个是节点（客户端）
我想确保只有特定的供应商设备才能与协调器进行通信。
向协调器验证设备的最佳方法是什么，这样其他设备就无法尝试作弊。这些消息通过射频传输，因此任何人都可以用嗅探器收听它们。
I'm currently developing a wireless connectivity between two embedded devices over 802.15.4 RF protocol. One of the devices is the coordinator(server), and the other is a node(client)
I want to make sure that only specific vendor devices will be able to communicate with the coordinator.
What's the best approach to authenticate a device to the coordinator, so other devices couldn't try to cheat. the messages are over RF so anyone can listen to them with a sniffer.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
您可以按 MAC 地址进行过滤，因为来自同一制造商的所有设备都将以相同的三字节 OUI 开头。
不过，最好研究一下 ZigBee 的安全选项。您可以使用秘密的预共享密钥配置所有设备，并且只有具有该密钥的设备才能加入您的网络。
或者，看看智能能源模型，其中每个设备都有一个唯一的预共享密钥。协调器会获得一个 MAC 地址和带外安装代码（通过 ZigBee 网络以外的某种方法），然后允许该单个设备加入网络。
You could filter by MAC address, since all devices from a single manufacturer will start with the same three-byte OUI.
It would be better to look into the security options of ZigBee though. You could configure all of the devices with a secret, pre-shared key, and only devices with that key will be able to join your network.
Or, look at the Smart Energy model, where each device has a unique pre-shared key. The coordinator is given a MAC address and an install code out of band (some method other than over the ZigBee network) and will then allow that single device to join the network.
您正在寻找什么级别的安全性？有什么办法可以防止非参与设备的意外干扰，或者有什么办法可以保护敏感信息免遭窥探？如果是后者，最好不要尝试推出自己的解决方案，因为很难获得绝对的安全性。正如上一个答案中提到的：ZigBee 堆栈将为问题提供全面的解决方案，但成本是增加复杂性和更高规格的硬件（您需要至少 128kB 闪存和 4-8kB RAM 来运行所有类别的 ZigBee设备舒适）。
What level of security are you looking for? Something to prevent accidental interference by non-participating devices, or something to protect sensitive information from prying eyes? If the latter it's best not to try rolling your own solution as it's very hard to get absolute security right. As mentioned in the last answer: a ZigBee stack would provide a comprehensive solution to the problem, but the cost is added complexity and higher spec hardware (you'd need at least 128kB flash, and 4-8kB RAM to run all classes of ZigBee device comfortably).