4. Security

SigFox's primary responsibility is to guarantee authentication, in order to eliminate any risk of usurpation or parasitic injection that an ill-intentioned entity might have the idea of carrying out by eavesdropping on the object or on traffic in general. Each object is assigned a unique identifier (ID), coded on 4 bytes and eventually 5 bytes. This unique ID is associated with an AES128 key and a unique set of algorithms ensuring, among other things, scrambling of the authentication field, both uplink and downlink. Security is thus never negotiated over the air, and is known only to the object and a central security system, so it is not possible to replace a given object by listening to it. However, while SigFox's responsibility is to guarantee the integrity of the central security and filtering system, the manufacturer of the object is responsible for its resistance to physical attacks....