SecureAutoLoRa: An Automated Secure Registration Procedure for LoRaWAN Devices

Device registration in LoRaWAN systems can be a tedious process, particularly when managing a large number of devices. To automate this task, we previously developed the AutoLoraConfig protocol, although it includes vulnerabilities that attackers can exploit. To solve this, in this work we introduce the SecureAutoLoRa, a protocol designed to enhance security in the automated device registration process for LoRaWAN networks. SecureAutoLoRa blocks abuse of the guest DevEUI used in automated joins by obfuscating registration messages and enforcing a configurable positional security code that dictates where the real DevEUI appears across packets, markedly hindering unauthorized registrations.Results show that SecureAutoLoRa sharply reduces attackers’ success. Compared with AES-128 and SPECK, it complements standard encryption to provide a practical, layered defense suitable for large-scale LoRaWAN onboarding.