FR3087983A1 - IMPROVED MONITORING SYSTEM FOR CONNECTED SENSORS - Google Patents

Abstract

The invention proposes a supervision system comprising terminals and a gateway in communication with an external network, the gateway comprising at least one radiofrequency receiver for connection with the terminals, a computer and a memory, in which each terminal includes at least one power supply, a sensor module connected to a management module, management module identifiers being associated with at least one decryption parameter in a table stored in the gateway, the sensor module comprising at least one sensor and a memory storing information relating to at least one communication protocol, the management module comprising at least one computer, a memory memorizing at least its identifier and storing data representative of the measurements carried out, an encryption module, a radiofrequency transmitter and an interface module, the interface module controlling the exchanges with the sensor module according to the information read in the memory of said module, the encryption module encrypting measurement data from said sensor and service and / or control data comprising at least one piece of data representative of the sensor module, the management module sending, to the gateway, via the radiofrequency transmitter module, at least the encrypted data and the unencrypted identifier of the management module, the gateway comprising a decryption module performing decryption as a function of said decryption parameter associated, in the table, with the identifier received from the management module.

Description

FIELD OF THE INVENTION The present invention relates to the field of connected objects in a context of industrial use also called 1.10T (Industrial Internet of Things).

Industry 4.0 is indeed marked by ultra-connectivity allowing advanced supervision functions.

STATE OF THE ART Vulnerability to cyber attacks is a major concern to which system architects must respond.

We know of private wired networks not connected to the Internet for which the physical protection of their site provides good security.

However, opening up to the Internet can prove to be a major competitive advantage that cannot be ignored.

In addition, wired connections entail a particularly high installation cost.

Radiofrequency wave communication systems, such as WiFi, easily allow the supervision of sensors connected to home networks secured by symmetric encryption key.

A camera can thus be installed and configured to communicate with a remote security center, via the Internet.

It is understood, however, that this type of installation is difficult to transpose, or even incompatible with the world of industry because of the installation or maintenance constraints resulting from the much larger number of sensors to be supervised.

There is thus a need for simplification in the supervision of connected objects, while maintaining increased security so as to allow secure and agile massive deployment of connected objects.

PRESENTATION OF THE INVENTION The aim of the invention is to remedy at least in part the drawbacks of the prior art by proposing a supervision system comprising a plurality of terminals and a gateway in communication link with an external network, the gateway comprising at least one radiofrequency receiver module for connection with the plurality of terminals, a computer and a memory, characterized in that each terminal comprises at least one power supply, a sensor module connected via a connector to a management module, a plurality of identifiers of management modules each being associated with at least one decryption parameter in a table stored in the gateway, the sensor module comprising at least one sensor and at least one memory storing 2 information relating to at least one communication protocol and to the useful pins of the connector, the management module, comprising at least one computer, a memory storing in me ns its identifier and also storing data representative of the measurements carried out, an encryption module, a radiofrequency transmitter module and an interface module, the interface module controlling the exchanges with the sensor module according to the information, read in memory of the sensor module, relating to said communication protocol and to the useful pins, the encryption module carrying out the encryption of data representative of the measurements carried out by said sensor and of service and / or control data comprising at least one piece of data representative of the module sensor, the management module carrying out sends, to the gateway, via the radiofrequency transmitter module, at least the encrypted data and the unencrypted identifier of the management module, the gateway comprising a decryption module carrying out a decryption as a function of said decryption parameter associated, in the table, with the identifier received from the management module.

According to one characteristic of the invention, the gateway comprises a radiofrequency transmitter module for connection with the plurality of terminals, each terminal comprising a radiofrequency receiver module, the encrypted data transmitted by each terminal comprising a control code, the gateway comprising a module. sending a response message, and in that each response message, following the receipt of data from the management module, comprises at least the control code retransmitted to this management module as acknowledgment of receipt.

According to another characteristic of the invention, each management module 25 comprises an acknowledgment verification module triggering a standby of the transmitter and receiver modules in the event of confirmation of reception or triggering in the event of failure of reception, beyond a determined time delay, a retransmission of the same message, the transmission power being increased.

According to another characteristic of the invention, the number of retransmissions and of successive increases in the transmission power are limited, the management module triggering the sending of an alert message after a determined number of failures. of re-broadcasts.

3 According to another characteristic of the invention, the response message comprises a command for configuring said terminal or an actuator command.

According to another characteristic of the invention, the gateway performs authentication of the management module by success during the decryption of the message received.

According to another characteristic of the invention, the interface module comprises a connection detection and initialization module of the interface module triggering a reading in memory of configuration data of the sensor module comprising at least the information relating to said. communication protocol and useful pins.

According to another characteristic of the invention, the configuration data also comprises data representative of the type of said sensor, of the format of the measured data as well as of an associated channel in the event of a plurality of sensors.

According to another characteristic of the invention, the connection and initialization detection module also triggers the sending of an encrypted frame, to the gateway, representative of the configuration of the sensor module comprising the configuration data.

According to another characteristic of the invention, the gateway is in an encrypted communication link with a dedicated server of the external network comprising at least one dedicated application for the use of the measurement data, the management module carrying out an encryption of the data of the control decryptable by the gateway and by the dedicated application and encryption of the measurement data decryptable only by the dedicated application.

According to another characteristic of the invention, the dedicated application comprises a module for sending encrypted commands to the management modules, each command being decryptable only by each management module to which this command is addressed.

According to another characteristic of the invention, the gateway comprises a module for cutting off the power supply to its communication link with the dedicated server and for re-energizing in the event of a request by one of the management modules.

4 Advantageously, the supervision system according to the invention is highly versatile and allows rapid and secure deployment.

Indeed, this system can be fully managed by a customer, by locating the terminals and the gateway in its premises.

Advantageously again, the structure of the terminals allows supervision exhibiting increased agility.

One or more new sensors can easily replace a previous sensor for development or maintenance needs.

The secure installation of additional connected objects is also facilitated.

Advantageously, for maintenance operations or predictive or preventive maintenance of supervision systems in companies, the invention will bring gains in particular in: - increased operational efficiency of the equipment, - lower operating costs of the equipment , 15 - the increased quality of manufacturing or in general of the production of products in the company, - energy savings of resources or material.

Another advantage is the simple, fast and secure retrieval of surveillance data.

20 An advantage is also great agility for the deployment of supervision solutions that can meet various technical constraints.

The same supervision system will thus be able to respond simultaneously to several use cases such as the energy supervision of a building, the supervision of a production line and the support of logistics tools.

Advantageously again, a protocol breaking mechanism integrated into the gateway allows increased resistance to attacks.

An advantage is also that the structure based on an independent radiofrequency micro-network allows energy saving while reinforcing security by limited radiation.

DESCRIPTION OF THE FIGURES Other characteristics, objects and advantages of the invention will emerge from the description which follows, which is purely illustrative and not limiting, and which should be read with reference to the appended drawings in which: FIG. 1 represents schematically an example of a supervision system according to the invention, FIG. 2 schematically represents a more detailed example of a terminal.

Figure 3 schematically shows a more detailed example of a gateway.

FIGS. 4a to 4c schematically represent three types of configuration of a supervision system according to the invention, FIG. 5 diagrammatically represents a method of transmitting data generated by a sensor within a supervision system, - Figures 6a and 6b represent an example of the structure respectively of a message sent by a terminal and of a message sent in response by a gateway, FIG. 7 diagrammatically represents an encryption key creation protocol used for transmissions within of the supervision system.

DETAILED DESCRIPTION OF AT LEAST ONE EMBODIMENT OF THE INVENTION The supervision system 1 as represented in FIG. 1 allows for example the recovery of data representative of measurements carried out by sensors within an installation.

Advantageously, the supervision system 1 according to the invention does not include a core network, also designated by server network, as in a conventional IoT architecture.

Thus according to the present invention all the components can easily be installed in the premises of the body which wishes to access and use the data generated by its sensors.

The components installed in the premises of the organization may include the terminals and the gateway (s).

The components installed in the premises of the organization can also include the application server, for example integrated into the gateway.

The clients are generally remote for operational needs but one could also consider one or more clients who are users of the dedicated application, placed in the premises of the organization.

The supervision system 1 comprises a plurality of terminals 10 and one or more gateways 20 in communication link with an external network 32 such as for example the Internet, WiFi or wired intranet networks or mobile telephone networks.

The data generated by the terminals are centralized automatically and in a secure manner by the dedicated application via the gateway (s).

The gateways 20 collect the data and retransmit them to the application in the server 30.

The dedicated application allows clients 40 for example to perform remote operation and supervision.

5 The terminal is broken down into three functional blocks including a power supply 13, a management module 12 and a sensor module 11.

The sensor module 11 can include one or more types of sensors and advantageously is interchangeable.

As explained below, provision is made for automatic initialization of the management module 12 as a function of the sensor module connected.

Likewise, as explained later, an automatic connection is provided between a plurality of sensors and a gateway.

A gateway is for example preconfigured to automatically connect to a determined number of management modules referenced in memory.

It is thus easy to install new supervision sensors or simply replace a management module or a sensor module during maintenance operations, while ensuring data security and checking the authenticity of the terminals.

Among the applications that can be envisaged for connected objects, there are many in the field of industry, where the use of connected objects in a supervision system according to the invention gives hope of substantial savings in costs and efficiency, such as for example: - Monitoring of equipment, and implementation of predictive or preventive maintenance, - Management of resource and infrastructure consumption, - Efficiency of logistics processes, 25 The supervision system advantageously presents a hardware architecture and a software organization that meets security requirements while maintaining ease of deployment.

The hardware components are extremely modular making it very easy to adapt to needs as different as they are varied with common technical bricks.

In addition, the structure of the supervision system is advantageously based on pairing procedures, advanced hardware management and advanced and secure configurations.

With reference to FIG. 2, each terminal 10 comprises at least one electric power supply 13, for example a cell or a rechargeable battery.

7 The power supply can also include a transformer connected to the power grid.

The power supply 13 can be housed in the management module or in a separate module suitable for being removably mounted on the management module 12.

Each terminal 10 also comprises a sensor module 11 and a management module 12 connected to each other via a two-part connector 14a and 14b.

The connector is for example formed by GPIO ports (for the English acronym General Purpose Input / Output) carried by the sensor module 11 and the management module 12.

The connector can support, for example, a 12C bus, an SPI bus, a UART bus such as RS232 or RS485 or digital or analog input or output lines.

The sensor module 11 is for example a module that can be assembled in a removable manner to the management module 12.

The sensor module 11 then comprises a housing in which components of the sensor module are arranged, this housing 15 being shaped to be able to be removably mounted to a housing of the management module in which the components of the management module are arranged.

The connection between the sensor module 11 and the management module 12 can be made by a removable mechanical connection, for example with snap-fit.

The sensor module 11 comprises at least one sensor 110, and can comprise several sensors 110a and 110b.

The sensors can be of very varied types, for example: - environmental monitoring sensors, suitable for reading at least a quantity such as temperature, pressure, humidity, brightness, air quality, 25 - sensors for monitoring electricity, water and gas consumption, - sensors for monitoring an electrical installation by measuring current or voltage, - sensors of mechanical quantities by measuring vibrations, accelerations, shock detection, of movements, measurement of deformations, door opening, etc. - position sensors.

The sensor module 11 also includes a memory 111 storing information 111a relating to at least one communication protocol and to the 8 useful pins of the connector ensuring the connection between the sensor module and the management module.

In particular, the memory 111 stores information 111a relating to the number of sensors 110 present in the sensor module and information 5 specific to each sensor, referenced 110, 110a or 110b, contained in the sensor module 11.

This latter information may include, for each sensor: - the type of the sensor, - an identifier of the sensor, - a communication protocol with the sensor, identifying for example the type or format of the data generated by the sensor (for example integer , floating point, character string, etc.), the data access mode or the data access frequency, - a sensor operating mode such as triggering following a monitoring threshold crossed, a deviation of variation detected or a change in value detected.

Each sensor module 11 of a terminal can also include one or more actuators and can also include a computer 112.

This computer 112 can for example be configured to control the actuator (s) of the terminal.

The computer may for example take the form of a processor, a microprocessor or a microcontroller.

The sensor module 11 can comprise functional modules for collecting 113 data and transferring 114 data to the management module, these modules 113 and 114 being able to be in the form of programs or subroutines stored in the memory 111.

The management module 12 can also perform direct access to the memory of the sensor module 11.

The management module 12 comprises at least one computer 121, such as for example a microcontroller, a microprocessor or a microcomputer and a memory 122.

The memory 122 notably stores the identifier ID1 of the management module.

The memory can also store data 127 representative of the measurements made by the sensor (s) of the sensor module 11.

For example, this data 127 can be supplied by the sensor (s) and stored temporarily by the memory 122 while awaiting their sending to the gateway 20.

9 The management module 12 can include an interface module 129 with the sensor module 11, controlling the exchanges with the sensor module, and in particular controlling the recovery of the data generated by the sensors, according to the information 111a read in memory 11 of the sensor module, 5 relating to the communication protocol and the useful pins of the connector.

Thus, this interface module 129 can read access to the memory of the sensor module, in order to deduce the recovery methods therefrom, then recover data representative of the measurements carried out by the sensor (s).

It is also possible to envisage information 111a in the form of a determined code representative of the configuration of the sensor 11, in order to save bandwidth during the retransmission of this information 111a to the server.

The interface module 129 may further include a connection detection and initialization module 126.

This detection and initialization module 126 triggers in particular a reading, in the memory of the sensor module, of the configuration data 111a of the sensor module, comprising at least the information relating to the communication protocol and to the useful pins of the connector.

The configuration data 111a can also include data representative of the type of sensor, of the format of the measured data or of a channel associated with each sensor, in the case of a plurality of sensors in the sensor module.

This initialization with reception of the configuration data can be implemented when the terminal is powered on.

This allows in particular, in the case where the terminal comprises a removable and interchangeable sensor module, that the sensor module 11 carries all the information necessary for the recovery and the processing of the data generated by its sensors, all this information being recovered by the management module 12 for example during a first connection.

This advantageously makes it possible to use a large variety of different sensors with immediate deployment.

The management module 12 also comprises an encryption module 123, for example of data representative of the measurements generated by the sensors of the sensor module and of service and / or control data.

The service and / or control data include in particular at least one data item 10 representative of the sensor module.

The data representative of the sensor module include, for example, the configuration data 111a.

The management module can also include a decryption module 152, in particular for decrypting a command received. s The encryption module 123 can for example be implemented by the computer 121 and / or by a secure cryptographic component.

The secure cryptographic component stores for example encryption / decryption keys.

The secure cryptographic component can also perform operations to derive a key selected as a function of a counter internal to the cryptographic component, the derived key then being used as a session key.

The encryption performed by the management module is symmetric encryption using one or more session keys for each message.

The session key (s) can be modified regularly or even with each new message.

The session key or keys are advantageously specific to each management module.

The session keys used by each management module are obtained in particular by using data specific to the management module such as the identifier ID1 of the management module.

The identifier ID1 of the management module is also transmitted in clear in the message, the gateway being able to find this identifier in memory.

The management module 12 may for example comprise a transfer module 128 for setting up data transmissions to the gateway, via the transmitter module.

Each message comprises for example an unencrypted header, encrypted generated data, encrypted service information and / or encrypted control information.

The generated data, the service information and the control information are preferably encrypted independently of each other.

The encryption module 123 also generates one or more session keys for each new message using a stored counter of the number of messages sent, the gateway also being able to increment a counter in memory associated with the identifier of the terminal. , for each 30 message received.

Symmetric key encryption / decryption uses, for example, AES 128 CCM * encryption or AES256 encryption.

11 The key generation subroutine can for example be in the form of a secret derivation protocol such as NIST-800-108-KDF, X9.63- KDF, NIST-800-56-KDF -A / B, NIST-800-56-KDF-C or HKDF.

The generation subroutine can for example derive a key as a function of one or more parameters such as a message counter, an identifier, a hazard or a counter stored in a security component.

K ′ = F (K, Cmpt) The key derived from K ′ by the derivation function F is for example obtained from the key K and from the counter Cmpt.

Several parameters can also be aggregated or combined to form one of the variables of the function F.

The management module 12 also includes a radiofrequency transmitter module 124.

The management module 12 can also include a radiofrequency receiver module 125.

These two modules can be formed by the same radiofrequency transmitter / receiver module.

The radiofrequency emissions between the terminals and the gateway (s) are for example produced in the ISM bands (industrial, scientific and medical).

These frequency bands can be used in particular in a small space for industrial applications.

The functional modules of the management module 12 can be constituted by software or hardware components, or a combination of programs or subroutines implemented by one or more hardware components.

For example, they may be software bricks stored in a memory and executed by the computer 121.

As a variant, these functional modules can be implemented by respective computers.

As represented in FIG. 3, the gateway 20 comprises at least one radiofrequency receiver module 21 for connection with the plurality of terminals 10, a computer 23, and a memory 24.

The gateway 20 can also include a microcomputer comprising the computer and the memory.

Gateway 20 can also include at least one radiofrequency transmitter module 22 for connection with the plurality of terminals, each terminal then also comprising a radiofrequency receiver module 125.

A control code is for example added to each message sent by each terminal, this control code being decrypted before being sent back, by a module 51 for sending response messages, to the terminal concerned.

Each management module comprises a module 151 for verifying the acknowledgment of receipt.

This module remains on standby for an acknowledgment of receipt for a determined time delay and then can carry out one or more new sendings of the message previously sent.

The power is for example increased each time the same message is sent again.

The acknowledgment verification module 151 receiving the acknowledgment of receipt can also read a parameter data item contained in the response message, such as, for example, an increase or a decrease in the transmission power.

The transmission power can advantageously be set to the minimum necessary.

The acknowledgment of receipt verification module 151, in the event of absence of acknowledgment, can also send an alert message, for example on a generic frequency and according to a generic communication protocol compatible with any gateway.

This is for example a broadcast of type 15 broadcast.

The alert message aims in particular to signify the absence of connection of the management module with a gateway.

The gateway can also include several radiofrequency transceivers.

The terminals can for example communicate with the gateway each via two channels, one of which is used for reception and the other for transmission.

The memory 24 of the gateway stores in a table T a plurality of terminal identifiers corresponding for example to the identifiers of their management module, with which the gateway is paired.

In this table T, each terminal identifier is associated with at least one message decryption parameter sent by the terminal.

The encryption and decryption methods using symmetric keys will be described in more detail below.

The memory 24 may further include a decryption module 25.

This decryption module 25 comprises for example a secure cryptographic component 30, in which decryption keys are stored.

The decryption module also stores the decryption programs.

In particular, the decryption module is configured to perform a decryption of at least part of the encrypted data received from a terminal.

The gateway can also include an encryption module, in particular when the application server is included in the gateway in an “edge computing” type configuration.

Thus the gateway attempts to decrypt a message whose symmetrical key 5 is not stored by the gateway but generated by the latter as a function of the identifier of the management module.

The parameter associated with the identifier ID1 of the terminal in the table T is moreover variable over time and corresponds for example to the number of messages received from this terminal.

Thus, a successful decryption of the message coming from the management module corresponds to an authentication of this management module.

The gateway 20 is also in communication link with the external network 32 such as for example the Internet, an intranet or a mobile telephone network, via a dedicated interface.

In this regard, it can include a protocol breaking module 26 to isolate and protect the data exchanged.

The protocol breaking module 26 notably comprises an optical interface linked on either side with two items of equipment supplied by separate power sources.

In addition, the communication protocol is also modified on either side of the protocol breaking module, for example going from a serial protocol to an Ethernet protocol.

For the management of the communication 20 with the external network, the protocol breaking module uses for example a microcontroller which can be switched off in the event of absence of data to be transmitted, thus limiting the cyber attack surface of the gateway.

The power to the microcontroller is cut off.

The microcontroller is then switched on again for a new transmission on the external network.

The gateway 20 also includes a module 28 for sending responses to the terminals following receipt of a message from a terminal.

With reference to FIGS. 4a to 4c, the supervision system further comprises a server 30 comprising a dedicated application for the exploitation of the supervision data, that is to say allowing the exploitation and the visualization of the supervision data 30. in liaison with client entities 40.

In a case shown schematically in FIG. 4a, this server 30 is integrated into the gateway 20.

Clients 40 (client applications hosted for example on a PC, tablet, smartphone) can access this server 30 via the external network such as an intranet 32a.

The application may also include a 14 module for sending encrypted commands to the management modules 12.

Each command can for example be deciphered only by each management module 12 to which this command is addressed.

In another case shown schematically in FIG. 4b, the server 30 hosting the application is remote from the gateway 20 and connected to the latter via an intranet link.

Clients 40 can access this application server 30 via the outside network such as an intranet 32a.

The gateway can also include a module 27 for placing its communication link on standby with the dedicated server 30, and for waking up in the event of a request by one of the management modules 10 of the terminals.

The link between the gateway 20 and the application server 30 is for example encrypted so as to achieve over-encryption.

The HTTPS protocol is for example implemented between the application server 30 and the gateway 20.

The application may also include a module 251 for sending encrypted commands to the management modules 12.

Each command can for example be deciphered only by each management module 12 to which this command is addressed.

In another case shown schematically in FIG. 4c, the server 30 is remote from the gateway 20 and connected to the latter via the external network such as the Internet or WiFi.

Clients 40 can for example access this server 30 20 via the external Internet network 32b.

The gateway 20 can further include a module 27 for putting its communication link to standby with the dedicated server, and for waking up in the event of a request by one of the terminal management modules.

The application may also include a module 251 for sending encrypted commands to the management modules 12.

Each command can for example be deciphered only by each management module 12 to which this command is addressed.

The link between the gateway 20 and the application server 30 is for example encrypted so as to achieve over-encryption.

The HTTPS protocol is for example implemented between the application server 30 and the gateway 20.

Sending data 30 to the application comprises for example: - switching on the electronics at the gateway output, - sending a certificate from the Server Application and a request - establishing a the secure HTTPS connection 15 - the sending of messages with the over-encryption of the TLS (Transport layer Secure) layer including the supervision data.

With reference to FIG. 7, examples of symmetric encryption keys used for the encryption and decryption of the messages 5 exchanged within the supervision system will be described.

The set of keys used within the supervision system is for example derived from a unique key Kapp which belongs for example to the organization within which the supervision system is installed.

From at least this unique key Kapp and an identifier of the gateway, a master key of the gateway KCGTW is derived, which is stored in the gateway such as for example in a secure component of the gateway.

From this master key of the KCGTW gateway is derived, for each terminal, and thanks to at least one identifier of the terminal, a service master key, KCT, which is specific to each terminal.

A secure component is for example of the Java Card type.

The master service key KCT is derived to generate first local keys KCTERM #, also specific to each terminal, and which are stored in their respective terminal.

These first local keys KCTERM # are for example stored, in the form of a list, in the secure component of the terminal.

The KCT service master key is preferably not stored in the terminal.

The first local keys KCTERM # are for example derived from at least the master key specific to the terminal KCT and from a rank number in the list of first keys.

The rank number is for example an integer ranging from 1 to 6.

The rank number can also be in the form of an integer ranging from 7 to 25 12.

The KSC # session key is determined from the list of the first KCTERM # local keys based on a local counter.

It may for example be a selection of the key located in the row corresponding to the sent message counter.

The rank of the selected key corresponds for example to the modulo counter 30 the number of first keys.

It can also be, for example, a selection of the key located in the rank calculated according to a message counter sent where each first key is used successively a determined number of times before moving to the next rank or returning to the initial rank. .

16 It is also possible, following the selection of the key as a function of the message counter sent, to perform a derivation operation as a function of the selected key and of a counter internal to a secure cryptographic component, this component also memorizing the list of first keys and performing the derivation operation 5.

A master key of application KDT, specific to each terminal, is moreover derived from the unique key Kapp from an identifier of the server dedicated to the application 30, from the identifier of the gateway and from the identifier of the device. terminal.

This KDT application master key is used to derive second local keys KDTERM #, and third local keys KATERM # which are stored at the factory in each terminal, for example in a secure cryptographic component of each terminal, in the form respective lists.

The second local keys KDTERM # and the third local keys KATERM # are for example derived from at least the master application key KDT and from the rank numbers of the keys in their respective list.

A counter is also used to make at least one selection from the list of second or third keys.

KSD # or KSA # session keys can be obtained by selecting from their respective list.

The KSD # or KSA # session keys can also be obtained by making a selection from their respective list and then a derivation operation as a function of the counter or of a counter internal to a security component.

The internal counter is for example updated as a function of the external counter to the security component.

The server can hold only the unique Kapp key without storing the KDT data master key, thereby enhancing security.

Each terminal comprises for example the set of first local keys KCTERM #, second local keys KDTERM # as well as counters of messages received and of messages sent by the terminal.

The terminal can also include the set of third local keys and a counter of the number of commands received, according to which a decryption key is determined.

In the case of determining the session key by deriving a local key, for encryption or decryption, the local key list can be stored in the secure cryptographic component which furthermore performs the derivation operation.

The gateway also stores a table comprising each terminal identifier with which it is paired associated with at least one counter specific to each terminal.

This counter can be used to record the number of messages received by the gateway from the corresponding terminal.

This table can be stored in a secure component of the gateway.

The gateway can also store, for each terminal, an additional counter for the number of times each local key is used by the terminal.

The server 30 dedicated to the application comprises a computer and a memory, in which are stored the identifiers of the gateway 20 and of the terminals 10, as well as the unique key Kapp.

The server 30 also stores a table comprising each terminal identifier associated with at least one counter specific to each terminal.

This counter 15 can be used to record the number of messages received by the application server from the corresponding terminal.

This table can be stored in a secure component of the server.

The server can also store, for each terminal, an additional counter for the number of times each local key is used by the terminal.

The application server can also store, in the table, a counter of encrypted commands sent to each terminal.

The counter for the number of commands sent can be associated with a second counter for the number of successive uses of the encryption key used.

The storage of the unique key Kapp as well as the derivation operations for obtaining the master key of application KDT, the second local keys KDTERM # and the third local keys KATERM # can also be carried out by a highly secure component by example of HSM type (High Secure Module).

This highly secure component can be implemented in a second server in communication link with the application server.

The application server transmits for example its identifier as well as the identifiers of the gateway and of the terminal to the highly secure component which transmits in return, to the application server, the second local keys KDTERM # and the third local keys KATERM #.

With reference to FIGS. 5, 6a and 6b, a description will now be given of a data transmission method implemented by a supervision system according to the invention.

This method can comprise a preliminary step 90, carried out when powering up a terminal, of retrieving the configuration data of the sensor module by the detection and initialization module.

This step is for example followed by sending 91 an encrypted frame, to the server, via the gateway, representative of the configuration of the sensor module.

The frame transmitted 91 to the gateway is retransmitted 92 to the application.

This frame 10 can in particular include a list of sensors, the corresponding channel numbers, the type (s) of sensors, this to allow the application to subsequently identify the data from the sensors in the frames subsequently sent by the management module, depending for example on their size and position.

For the encryption of this frame, one of the symmetric encryption keys stored by the terminal or a key derived from one of these keys is used for example, the selection and the derivation being for example carried out according to the counter of messages sent by the terminal.

The method then comprises a step 100 of recovering data representative of the measurements carried out by the sensor (s), thanks to the interface module 129, then the encryption 110, by means of the encryption module on the one hand of the data retrieved and on the one hand. other part of service and / or control data comprising at least one piece of data representative of the sensor module.

The service and / or control data can also include terminal configuration information.

Advantageously, these service and / or control data can comprise an ACK control code then used as acknowledgment of receipt.

The control code ACK differs for example for each message and is for example generated using a random number and a variable corresponding for example to an internal clock.

Advantageously, the symmetric encryption key used for the encryption of the service and / or control data may be different from the key used for the encryption of the data representative of the measurements carried out by the sensors.

These two session keys come for example from two distinct lists KCTERM # and KDTERM #.

19 For the service and / or control data, the encryption key used is a session key KSC # determined from one of the first local keys KCTERM # and from the message sending counter of the terminal.

Advantageously, the first local keys can be used successively a predetermined number of times before using the next key in the list.

The selection of the first local key used for the session key KSC # is carried out by means of a variable determined as a function of a counter stored in the terminal.

For example, the value of the counter for sending messages from the terminal makes it possible, by knowing the maximum number of successive uses of a first local key, to determine the rank in the list of the first local key to be used.

The session key can result from this selection or be generated by an additional operation, such as for example a derivation operation by means of a secure cryptographic component.

For the data representative of the measurements carried out by the sensors, the encryption key used is a session key KSD # determined from one of the second local keys KDTERM # and from the counter for sending messages from the terminal.

The second local keys KDTERM # can also be used a predetermined number of times, and the selection of the second local key used to determine the session key KSD # is made from a variable determined according to a counter of the. terminal.

For example, the value of the counter for the number of messages sent by the terminal makes it possible, by knowing the maximum number of successive uses of a same second local key, to determine the rank in the list of the second local key used.

The session key can result from this selection or be generated by an additional operation, such as for example a derivation operation by means of a secure cryptographic component.

The management module 12 then sends 200, to the gateway 20, via the radiofrequency transmitter module, a message M comprising encrypted data and the unencrypted identifier, in clear, of the terminal.

In an exemplary embodiment shown schematically in FIG. 6a, the message M sent comprises: a clear block BI comprising at least the identifier of the terminal and, where appropriate, an identifier of the gateway, an identifier of the type of network ( for example point to point or star) as well as a mode of use of the network (towards a dedicated gateway or on a generic frequency), 5 - a BS block of service / configuration data, encrypted with a session key KSC # determined from first local keys KCTERM #, and a block BD of supervision data generated by sensors, encrypted with a session key KSD # determined from second local keys KDTERM #.

The counter of sent messages stored by the terminal is incremented 210 after the sending step.

A timer is also started to monitor the receipt of an acknowledgment message from the gateway.

The method can then comprise a step 300 of reception, by the gateway, of the message sent by the terminal.

The method then comprises a next step of generation 310 of the session key that has enabled the encryption of the service and / or control data of the message.

The gateway here allows the decryption of the service or control part of the message, the entire message being subsequently decrypted by the application.

The gateway thus covers a search, in the stored table, for the identifier of the terminal which was contained in clear in the message, in order to retrieve in particular the stored value of the counter for sending messages associated with the identifier of the terminal. , in this table.

The master service key KCT, specific to the terminal, is generated by the gateway by deriving the master key KCGTW stored by the gateway with at least the identifier of the terminal as derivation parameter.

The gateway is then able to find at least one of the first local keys KCTERM # obtained by deriving the master service key KCT and a parameter calculated as a function of the message counter.

The rank is for example calculated as a function of the number of messages and as a function of the number of successive uses of each of the first keys KCTERM #.

The determination of the session key KSC # can correspond to the first key of rank corresponding to the number of messages received or an additional operation can be carried out on this first key, such as for example a new operation of derivation of this first key and of 'a parameter such as a counter for successive uses of the same key.

Once the session key has been obtained, the gateway increments the counter of received messages associated with the identifier of the terminal, in the stored table, during a step 320.

The method then comprises the decryption 330 of the control and / or service data contained in the message and encrypted with the session key.

If decryption 340 fails, the message is not processed.

The steps 310 and 320 for generating the session key KSC # and for incrementing the counter 10 are then repeated by the gateway, in order to carry out at least one new attempt to decrypt the message with an incremented value of the counter.

This makes it possible, in the event that a previous message sent by the terminal has not been received by the gateway, that the latter increments its counter so that it catches up to the value of the counter of the terminal.

The gateway repeats, for example, these decryption attempt steps a determined maximum number of times, for example 3 times.

In the event of successful decryption of the message, the gateway will on the one hand have access to the control or service data and, moreover, the gateway will have carried out a verification of the identity of the terminal by decryption of the coding specific to this terminal.

Terminal authentication can also be performed via a MIC (Message Interchange Control) code.

Following decryption, the gateway implements two actions.

A first action 350 is to send, to the terminal, a response message M ′ 25 comprising an acknowledgment of receipt ACK formed for example by the control code contained in the control data / service block BS.

The response message can also comprise a command for setting the terminal, such as for example a command to lower or increase the transmission power level of the terminal, or a command from an actuator of the terminal, or any other command to be executed by the terminal.

The commands are preferably encrypted by the application, in the case of a response provided by the application, via the gateway.

The response message M 'can be at least partially encrypted.

For example, with reference to FIG. 6b, it may comprise a clear block BI 'comprising the identifier of the terminal and / or that of the gateway, as well as the acknowledgment of receipt, and an encrypted block BC comprising, the if applicable, a command to be executed by the terminal.

As will be seen in more detail below, the commands preferably come from the application server 30 and the encryption is performed by the application.

Each management module of a terminal can include an acknowledgment verification module, adapted to trigger a standby of the transmitter and receiver modules of the terminal in the event of proper receipt of the acknowledgment of receipt.

This acknowledgment verification module can also increment a response or command counter received by the terminal.

On the other hand, in the event of reception failure, the management module 12 re-transmits the same message during a new step 200, by increasing the transmission power, and without increasing its counter of messages sent.

Following a re-transmission of the message, if the terminal then receives an acknowledgment signal from the gateway, the management module 12, for example, stores the level of transmission power allowing good reception by the gateway.

On the other hand, if still no acknowledgment message reaches it, the terminal repeats the step of re-sending the message by increasing the power, a determined number of times, for example three times.

After the determined number of failures, the terminal generates an alert message during a step 220.

The alert message can be a message on a so-called factory frequency, that is to say a frequency common to all the supervision systems and in particular to all the gateways, the message being sent at full power.

A second action performed by the gateway 20 once the module 25 has been authenticated is to transfer 400 the message received from the terminal 10, that is to say with a block BS of encrypted control / service data, and a data block BD also encrypted sensors, to the server 30 dedicated to the application.

The identifier of the gateway in clear is aggregated at the header of the retransmitted message.

In the case where the server 30 dedicated to the application is integrated into the gateway 20, it is the gateway which performs the rest of the steps described below.

In the case where the server 30 dedicated to the application is a remote server, the connection between the gateway and the application server is advantageously a secure connection, so as to provide over-encryption of the messages transmitted.

23 The server 30 dedicated to the application, storing the unique KAPP key, is able to decrypt on the one hand the control / service data block BS and on the other hand the data block BD, by successive derivations from of this KAPP key.

For the block BS, the server 30 derives, from the unique key KAPP and from the identifier of the terminal contained in clear in the message, the master key of the gateway KCGTW, then successively derives from this key the key service master KCT, a first local key KCTERM # and determines a session key KSC # using a stored counter of received messages associated with each terminal identifier.

In this regard, the server can also include one or more counters making it possible to determine the rank of the first local key making it possible to determine the key KSC #.

The server 30 can also decrypt the data block BD by determining the session key KSD # used by the terminal for the encryption of the block BD, as follows: - derivation of the unique key Kapp from the identifiers of the gateway, of the terminal and of the application server, - derivation of the application master key KDT from the identifier of the terminal and of the gateway contained in clear in the identification block BI of the message, 20 - then determination of the second local keys KDTERM # by deriving the key KAT and a variable determined as a function of a counter stored by the server, - then determination of the session key KSD # from the second local keys and the message counter received by the server.

For the determination of the second local key, the rank of the second key is determined from the value of the counter of messages received by the server.

A second counter specific to each second local key KDTERM #, stored by the server, can also be used.

The rank is for example taken into account.

After the selection of the local key, a new derivation can be made taking, for example, an internal counter as a parameter.

The encryption mode used allows for example that the control / service block can be decrypted by the gateway and by the server dedicated to the application, while the data block generated by the sensors can only be decrypted by the server dedicated to the application. the application.

24 On receipt of a message transmitted by the gateway, the server dedicated to the application therefore derives the encryption keys from the message and decrypts the message during a step 410.

This server 40 can then process the data, allow them to be downloaded remotely and their display on client applications, etc., during a step 420.

The application server 40 can also include a module for sending encrypted commands to the terminal management modules, for example to send configuration or control commands to the terminals, or for example commands for actuators of the terminals, during of a step 430.

In this case, the command is advantageously encrypted by the application so that it can only be decrypted by the management module of the terminal to which this command is sent.

In this regard, the encryption key used is advantageously a KSA # session key determined from a third local key KATERM # as a function of a counter of commands sent by the server to each terminal.

The third local keys KATERM # are themselves derived by the server from the application master key KDT and from a rank determined as a function of a counter of the server.

For example, the rank of the third local key KATERM # to be used can be determined from the value of the counter of commands sent by the server.

The encrypted command sent by the application server is for example sent to the gateway, which stores it and adds it to a next acknowledgment message M ′ sent to the terminal.

The command can also be transmitted directly to the terminal by the gateway.

The gateway is not able to decrypt the encrypted command here.

On the other hand, the terminal, which has the third local keys KATERM # and a counter of commands received, can determine the session key KSA # making it possible to decrypt the command block.

The communication protocol used by the supervision system, and the structure of the encryption keys used make it possible to secure the data from end to end, that is to say from their acquisition by the sensors to their reception by the server. 'application.

Claims (12)

CLAIMS 1. Supervision system comprising a plurality of terminals (10a, 10b, 10c) and a gateway (20) in communication link with an external network (32), the gateway (20) comprising at least one radio frequency receiver module (21) for connection with the plurality of terminals, a computer (23) and a memory (24), characterized in that each terminal (10) comprises at least one power supply (13), a sensor module (11) connected via a connector (14a, 14b) to a management module (12), a plurality of management module identifiers each being associated with at least one decryption parameter in a table (T) stored in the gateway (20), the sensor module (11) , comprising at least one sensor (110) and at least one memory (111) storing information (111a) relating to at least one communication protocol and the useful pins of the connector, the management module (12), comprising at least one computer (121), a memory (122) memorizing at least its ide identifying (ID1) and further storing data representative of the measurements carried out (127), an encryption module (123), a radiofrequency transmitter module (124) and an interface module (129), the interface module ( 129) controlling the exchanges with the sensor module (11) as a function of the information (11 a), read in the memory of the sensor module, relating to said communication protocol and to the useful pins, the encryption module (123) carrying out the encryption of the data representative of the measurements carried out by said sensor and of service and / or control data comprising at least one piece of data representative of the sensor module, the management module (12) carrying out the sending, to the gateway (20), via the module 30 radiofrequency transmitter (124), of at least the encrypted data and of the unencrypted identifier of the management module (12), the gateway (20) comprising a decryption module (25) performing decryption as a function of said parameter decryption a s associated, in the table (T), with the identifier (ID1) received from the management module (11). 26 2. Supervision system according to claim 1, characterized in that the gateway comprises a radiofrequency transmitter module (22) for connection with the plurality of terminals, each terminal comprising a radiofrequency receiver module (125), the encrypted data transmitted by each terminal 5 comprising a control code, the gateway comprising a module (51) for sending a response message (M '), and in that each response message (M'), following the reception of data from the module management (1), comprises at least the control code retransmitted to this management module as acknowledgment of receipt. 10 3. Supervision system according to claim 2, characterized in that each management module (12) comprises an acknowledgment verification module (151) triggering a standby of the transmitter (124) and receiver (125) modules. in the event of confirmation of reception or triggering in the event of failure of reception, beyond a determined time delay, a re-transmission of the same message (M), the transmission power being increased. 4. Supervision system according to claim 3, characterized in that the number of retransmissions and successive increases in the transmission power are limited, the management module (11) triggering the sending of an alert message. after a determined number of failed re-transmissions. 5. Supervision system according to one of claims 2 to 4, characterized in that the response message (M ') comprises a command for setting said terminal or an actuator command. 6. Supervision system according to one of the preceding claims, characterized in that the gateway (20) performs an authentication of the management module (11) by a success during the decryption of the message (M) received. 7. Supervision system according to one of the preceding claims, characterized in that the interface module (129) comprises a module (126) for detection of connection and initialization of the interface module triggering a read in memory ( 111) of configuration data (111a) of the sensor module (11) comprising at least the information relating to said communication protocol and to the useful pins. 8. Supervision system according to the preceding claim, characterized in that the configuration data (111a) also include data 27 representative of the type of said sensor (110, 110a, 110b), of the format of the measured data and of a channel. associated in the event of a plurality of sensors. 9. Supervision system according to claim 7 or 8, characterized in that the connection detection and initialization module (126) also triggers a sending (91) of an encrypted frame to the gateway (20). , representative of the configuration of the sensor module (11) comprising the configuration data (111a). 10. Supervision system according to one of the preceding claims, characterized in that the gateway (20) is in an encrypted communication link 10 with a server (30) dedicated to the external network comprising at least one dedicated application for the operation of measurement data, the management module (12) performing an encryption of the control data decryptable by the gateway and by the dedicated application and an encryption of the measurement data decryptable only by the dedicated application. 15 11. Supervision system according to claim 10, characterized in that the dedicated application comprises a module (251) for sending encrypted commands to the management modules (12), each command being decipherable only by each management module (12). ) to whom this order is sent. 12. Supervision system according to claim 10 or 11, characterized in that the gateway (20) comprises a module (27) for cutting off the power supply to its communication link with the dedicated server (30) and for re-energizing. in the event of request by one of the management modules (12).