Adaptation of EAP-NOOB Method for LoRaWAN with LO-CoAP-EAP and CBOR

International audienceThe Internet of Things (IoT) is driving research and innovation in the areas of security and device management. The bootstrapping procedure is yet another security problem that needs to be solved. At the bootstrapping period, a newly deployed device is performing a set of actions that allows it to join a network as a trusted party. One of the currently proposed methods in the Internet Engineering Task Force (IETF) EAP Method Update (EMU) Working Group (WG) is employing the Extensible Authentication Protocol (EAP) to enable the authenti-cation of IoT devices in more efficient and scalable ways. In this sense, we select and investigate the suitability one of the newly proposed EAP method in LoRaWAN, a Low-Power Wide-Area Network (LPWAN) technology. EAP-Nimble out-of-band (EAP-NOOB) method works without pre-established configuration and enables an out-of-band channel to improve authentication. In this paper, we analyse how the EAP-NOOB method can be employed in LoRaWAN networks, we then propose the use of two mechanisms that can be used to reduce the message size of the EAP-NOOB exchange