MDEV-868-PRC datasheet(42/55 Pages) LINX

42 / 55 page

–

SECOPT - Security Options

Volatile Address = 0xD4; Non-Volatile Address = 0x84

This register selects options for security features.

Each bit in the register sets an option as shown in Figure 83. Unlike other

registers, the non-volatile register (0x84) affects all Join operations. The

EN_UNENC bit in the volatile register affects data packet reception.

When PB_RESET is 1 the Factory Reset function is enabled from the PB

input. This allows a user to reset the module configurations back to the

factory defaults with 4 short presses and a 3 second hold of a button

connected to the PB input.

When PSHARE is 1 the Share Network Key function is enabled during the

Join Process. This allows an administrator to share the encryption key it

created. When 0, a Join Process sends the network address, but no key.

Figure 82: HumPRCTM Series Transceiver Packet Options Command and Response

HumPRCTM Series Security Options

Read Command

Read Response

Header

Size

Escape

Address

ACK

Address

Value

0xFF

0x03

0xFE

0x54

0x04

0x06

0xD4

0x84

Write Command

Header

Size

Escape

Address

Value

0xFF

0x03

0xFE

0x54

0x04

HumPRCTM Series Transceiver Security Option Codes

Bit

Name

Description

PB_RESET

Permit factory reset from PB input sequence

PSHARE

Permit key sharing

PGKEY

Permit clearing key and changing key

CHGADDR

Permit changing an address

KEYRCV

1: Receive key and address during Join Process (node)

0: Send key and address during Join Process (admin)

EN_UNENC

Enable receiving unencrypted packets

Reserved

Reserved (must be 1)

EN_CHANGE Enable changes to security options

Figure 83: HumPRCTM Series Transceiver Security Option Codes

When PGKEY is 1 the Join Process is allowed to change or clear the

network key. The key can always be changed through serial commands.

When CHGADDR is 1 the Join Process is allowed to generate a random

network address if the module is an administrator. If the module is a node it

is allowed to accept an address assignment from the administrator.

When KEYRCV is 1 the module is set to receive a network key from an

administrator and act as a node. When it is 0, the module is set as an

administrator and sends a network key and assigns an address to the

node.

In order for this bit to change from 1 to 0, both volatile and non-volatile

copies of the network key must be cleared, preventing nodes from being

manipulated to transmit the key. This bit is cleared by the GENERATE_KEY

push-button function.

When EN_UNENC is 1 the module accepts unencrypted packets. If this bit

is 0, unencrypted received packets are ignored.

When EN_CHANGE is 1, changes are permitted to the SECOPT register,

except as noted for KEYRCV changes.

Clearing this bit prohibits the following SECOPT changes to enhance

security:

1. Changing PSHARE from 0 to 1

2. Changing EN_CHANGE from 0 to 1.

3. Changing EN_UNENC from 0 to 1.

An attempt to make a prohibited change causes a NACK command

response.

When EN_CHANGE is 0, these restrictions can only be removed by

resetting the module configuration to the factory default.

MDEV-868-PRC Datasheet(PDF) 42 Page - Linx Technologies

MDEV-868-PRC Datasheet(HTML) 42 Page - Linx Technologies

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55

Datasheet Download

Link URL