Security Improvement for Object Tracking in IoT

Today more and more people want to track their belongings and products. Commerical solutions are in place, but are sometimes expensive and usually require contracts with special providers. The CSG developed an object tracking solution that uses the communication standard LoRa and works together with "The Things Network". The advantages of the developed solution are: (1) User can use own tags, just requiring compability with LoRa, (2) user specific threshold support (e.g., alarming, message sending), (3) modular back-end solution, and (4) user-friendly front-end solution to track objects.

Currently, the developed solution has some privacy and security issues that need to be solved in order to raise the acceptence of the solution on the market. Therefore, the first step in the thesis is to identify privacy and security needs of stakeholders, followed by designing and implenting appropiate solutions. Some points of interest arethe following:

• Security audit for TTN APIs
• How to authenticate owner of tags?
• Use randomized hey names as tag IDs.
• Improve APIs Security
• Two-Factor authentication for login
• Preventing SQL Injections
• Session timeout handling
• improving exchange of access key for token at account serve

Finally, required updates must be integrated into front- and back-end, as well as evaluated to show them in operation and prove the user-friendly workflow.