Smart home security can't be superstitious, ZigBee still needs to be improved

OFweek smart home network: In the competition with wireless technology protocols such as WiFi, Bluetooth, Z-Wave, ZigBee does not fall into the wind, one of the important reasons is that ZigBee has strong security, based on its smart home devices are compared Reliable, not easy to crack.

-- "ZigBee provides a three-level security model, including no security settings, access control lists (ACLs) to prevent illegal access to data, and symmetric passwords using the Advanced Encryption Standard (AES 128) for flexible security. Attributes that guarantee the security of your home ZigBee network."

So does it mean that everything is fine with the ZigBee protocol?

of course not. As recently stated in the Cognosec paper at the Black Hat Conference, although "the design problem of the ZigBee protocol standard itself is not the cause of the vulnerability", if the "manufacturer is convenient to use, it can be used with other networked devices." Sewing the collaborative equipment while minimizing the cost of the equipment, regardless of the necessary security at the security level, then there may be security holes in the smart home based on the agreement, which will affect the user's home experience and information security.

To put it bluntly, the ZigBee protocol itself is safe, but if the level of technology is limited or "improper operation," security is just a matter of paper. In other words, the security of smart home devices based on any protocol is not completely determined by the protocol itself. The subjectivity of the vendors in the actual application process is also an important factor, as is the ZigBee protocol.

Some people don't quite understand why the compatibility and connectivity issues are raised in the news about the Black Hat Conference's exposure to the ZigBee protocol. In fact, this is not difficult to understand.

For example, three vendors have adopted ZigBee technology. As mentioned above, the security of their devices is also inconsistent and usually does not really achieve compatibility. However, pursuing a balance point for device compatibility to maintain mutual connectivity will, to a certain extent, expose the security risks of devices with lower security levels, resulting in a decline in overall security levels.

As an early enterprise that selected the ZigBee protocol as a smart home communication technology, how does the IoT do it?

In fact, IoT has always trusted ZigBee, firmly believe that ZigBee technology is the most stable, safest and fastest technology currently used in smart homes, and its encryption algorithm is not lost to banks. But even as the only board member of the ZigBee Alliance Board of Directors in Asia, IoT has never been superstitious about ZigBee, so in the application of smart home systems , the strategy adopted by IoT is: "select + strengthen", choose better technology - ZigBee And maximize security.

It is clear to ZigBee friends who know each other. It is not easy to crack the ZigBee network itself, even the professional team is very difficult.

- In the general security level of ZigBee, there are generally two keys: one is the key of the trust center; and the other is the network key when actually transmitting data on the network. To break the zigbee network, you must obtain the latter 16-byte strong password network key. However, ZigBee adopts the AES 128 encryption algorithm. Without knowing the network key, the chance of brute force is very low.

Intergrated Solar Street Light means the Solar Panel and head of light are intergraged together,just show as two opposite sides.

the advantage contains :no need to lay cables and ac power supply,just supply the power with sunlight,in case of no electricity charges; DC power supply,photosensitive control.

Intergrated Solar Street Light

Intergrated Solar Street Light,Solar Panel Street Light,Solar Powered Street Lamp,Intergrated Solar Street Lamp

Jilin Province Wanhe light Co.,Ltd , https://www.wanhelight.com

Posted on