Is smart home product safe? Listen to experts how to say!

[Introduction] Smart homes and the earth have facilitated people's lives, and their safety has received increasing attention. Zhijia Wang invites smart homes to explain to us the current ZigBee security of smart homes.

The rapid development of the Internet of Things and smart home products has greatly facilitated people's lives. At the same time, however, the security of smart home products has also received more and more attention.

Among the currently popular connection technologies, wireless connection methods mainly include WiFi, Bluetooth, and ZigBee. Among them, ZigBee technology has become the preferred connection protocol for more and more smart home products due to its good security, low power consumption, and strong networking capabilities. This article Xiaozhi to discuss with you about ZigBee's security issues.

Those who are concerned about ZigBee technology should all know that the ZigBee technology at the 2015 Black Hat Conference (BlackHat2015) was exposed as "a serious security breach". At that time, media reports said: "Hackers may invade the smart home, freely control the network door locks, The alarm system can even switch the light bulb."

But the fact is, the researchers who discovered the vulnerability said that "the root cause of the vulnerability is more to the manufacturer's ease of use, the ability to work seamlessly with other networked devices, and the pressure to reduce costs, not ZigBee. The design problem of the protocol standard itself." Then where is the problem? The security personnel explained: "The short boards and limitations we found in ZigBee are caused by the manufacturers. Each company wants to create the latest and best products. Right now it means networking, and simple components such as light bulb switches must be compatible with a variety of other devices, and not surprisingly, security requirements are seldom taken into consideration—more attention is paid to reducing costs. Yes, the severity of the last layer of security threats in the wireless communication standard is very high."

Therefore, this pot should still be backed by a less powerful small manufacturer.

The good news is that with the development of the past few years, both ZigBee 3.0 and the technology accumulation of manufacturers have greatly improved the security of smart home products, and ordinary consumers do not need to worry about it. Xiao Zhiben also invited the ZigBee Alliance's 12th member of the board of directors and the first member of the Asian Regional Board of Directors, the global Internet of Things and the makers and consummaters of the smart home standards. Nanjing Smart Home provided us with the safety of ZigBee.

In fact, ZigBee provides multiple security guarantee mechanisms. Even if it is a R&D engineer who is generally engaged in the application of ZigBee protocol, it is difficult to invade the ZigBee network to perform random operations on connected devices. This requires an in-depth understanding of the bottom layer of the link and a clear understanding of each protocol. Experts working on component workflows can only succeed if they start at the right time. This is estimated to be only one of the original work teams. Let's take a look at the following guarantees provided by ZigBee:

1. Internal structure security

ZigBee protocol In order to have a secure network, first of all the device image creation, you must enable the preprocessing security flag, set a default password. This default password can be pre-configured to each device on the network or only to the coordinator and then distributed to all devices on the network. Note that in the future, this password will be distributed to every device that joins the network. Therefore, it will become an “instantaneous weakness” during the joining of the network, but this is often done in more than ten milliseconds.

2. Strict network access control

In a secure network, when a device joins the network, it is informed of a trust center. The credit center has the option of allowing the device to remain on the network or to deny access to this device. The trust center can use any logical method to determine whether a device is allowed to enter the network. One of them is that the trust center only allows one device to join the network in a short window of time, which cannot bypass the user's permission process.

3. Application data security

The trust center can update the network password according to its own judgment. The application developer modifies the network password update strategy. The default trust center performs a specified policy that can be used to meet the developer. A sample policy will update network passwords at regular intervals. The other will update the network password based on user input.

"In the general security level of zigbee, there are generally two keys, one is the key of the trust center, and the other is the network key when the data is actually transmitted over the network. Finally, if you want to crack the zigbee network, you must obtain the latter 16 bytes. Strong password network key, because zigbee adopts AES 128 encryption algorithm.Under the condition of not knowing this network key, it is impossible to break through brute force and there is no precedent for cracking.The speed of brute force cracking is extremely low, generally only 300key/ s Even with the so-called GPU acceleration, the speed is only 10000 key/s, and the complex password cracking time for an 8-bit alphanumeric character requires 2900 years! Even with 100 distributed, it takes 29 years! Zigbee's key Is a 16-byte strong password."

Therefore, everyone can be assured of ZigBee's security. As for “there are serious loopholes in smart home devices using the ZigBee protocol”, there is a precondition: manufacturers are not responsible or technologies are not in place. Therefore, Xiaozhi suggested that when choosing a smart home product, you should still choose the first-line brand products with big technical strength. Nanjing Wulian Sensing Technology Co., Ltd. is a leading provider of Internet of Things devices and solutions. Based on continuous innovation of customer needs, long-term exploration and unremitting accumulation have taken place in several major areas such as IoT sensors, controllers, mobile internet of things, cloud computing, and big data. Thanks to its comprehensive advantages in object sensing, learning, and control, it has become one of the key drivers of the IoT smart home industry.

On March 10, 2015, Nanjing Wulian joined the ZigBee Alliance, one of the IoT's authoritative international organizations, as the “promoter” and became the world's 12th member of the board of directors and the first Asian company after Philips, Legrand, Schneider and other companies. Regional board members participate in the formulation and improvement of the global Internet of Things and smart home standards.

Its smart home brands include intelligent gateways, smart switches, natural gas detectors and many other practical smart home products. It adopts mainstream IEEE802.15.4 ZigBee technology and has innate advantages in the security and application of smart homes. It protects every consumer. Home security.