EN
.
49
16. Z-Wave Security
Qubino Smart Meter supports the latest Security 2 feature. Security S2 is handled by the Strong
AES 128 Encryption protocol, which means that the S2 makes Z-Wave the most secure IoT
(Internet of Things) security platform out there. In order to fully utilize the product and its
SECURITY 2 feature, a Security Enabled Z-Wave gateway (hub) must be used.
Authenticated Control
Out-Of-Band Device Specific Key for inclusion
May be used by most implementations
Also supports: Security S0 and Unsecure inclusion
The first five digits of key is highlighted or underlined to help the
user identify the PIN code portion of the DSK text.
The DSK is additionally represented with a QR Code as shown here
DSK label and QR code (example)
A joining node requesting to join the S2 Access Control Class or the S2 Authenticated Class will
obfuscate its Public Key by setting the bytes 1..2 to zeros (0x00) before transferring its key via
RF.
A joining node requesting to join only the S2 Unauthenticated Class will send the its full Public
Key when transferring the key via RF as the including node has no access to the DSK.
The DSK may be used for out-of-band (OOB) authentication in two ways.
The including gateway (hub) may use QR code scanning to read the entire DSK off the
joining device and match it with the obfuscated public key received via RF from the
joining device.
Else the including gateway (hub) will ask the user to enter a 5 digits PIN code (the 5 first
digits of the DSK label) in order to substitute the obfuscated bytes of the joining node’s
Public Key. The including gateway (hub) may additionally ask the user to visually validate
that the rest of the DSK with the Public Key received via RF.