As I was testing an android app controls door lock over Bluetooth, I deployed HMAC SHA256 on both the door lock controller and the android app to ensure integrity and authentication of message. Also I have the door lock controller to generate random access token per connection to avoid replace attack.
I would like to replace to the Bluetooth with WiFi and test the application with FIWARE. I found I may need to provide a device name, id and password when provisioning a device with an IoT agent. However I am not sure what may be the measures in place to insure integrity and authentication of message and to avoid replay attack. Can you shed some light? Thanks.
