EN
.
57
16. Z-Wave Security
Qubino Smart Meter supports the latest Security 2 feature. Security S2 is handled by the Strong
AES 128 Encryption protocol, which means that the S2 makes Z-Wave the most secure IoT
(Internet of Things) security platform out there. In order to fully utilize the product and its
SECURITY 2 feature, a Security Enabled Z-Wave gateway (hub) must be used.
Authenticated Control
•
Out-Of-Band Device Specific Key for inclusion
•
May be used by most implementations
Also supports: Security S2 Unauthenticated, Security S0 and Unsecure inclusion.
IMPORTANT: When adding the Smart Meter to a Z-Wave network with a controller supporting
Security 2 (S2), the Z-Wave Device Specific Key (DSK) is required. The unique DSK code is
printed on the side label of the product and a copy is inserted in the packaging, which must not
be lost. Do not remove the DSK from the product. As a backup measure, please use the label in
the packaging to record the location where the product has been installed.
The first five digits of key is highlighted or underlined to help the user
identify the PIN code portion of the DSK text.
The DSK is additionally represented with a QR Code as shown here.
DSK label and QR code (example)
A joining node requesting to join the S2 Access Control Class or the S2
Authenticated Class will obfuscate its Public Key by setting the bytes 1...2 to zeros (0x00) before
transferring its key via RF.
A joining node requesting to join only the S2 Unauthenticated Class will send the its full Public
Key when transferring the key via RF as the including node has no access to the DSK.
The DSK may be used for out-of-band (OOB) authentication in two ways.
•
The including gateway (hub) may use QR code scanning to read the entire DSK off the
joining device and match it with the obfuscated public key received via RF from the
joining device.
