1. Home
  2. User Guides
  3. LabelNest User Guide
  4. Appendix A: Security Concerns towards Data Transmission of LabelNest™

Appendix A: Security Concerns towards Data Transmission of LabelNest™

A.1 Overview of the Product

LabelNest LN21™ is a 2.1-inch electronic display device designed, developed and manufactured in-house by FootfallCam UK Limited. 

LabelNest LN21™ contains in-house designed circuit board with the use Texas Instruments CC13X0 series wireless microcontroller (MCU), which enables using TI 15.4-Stack, an IEEE 802.15.4-based specification offered by Texas Instruments that provides wireless personal area network (WPAN) which supports AES 256-bit encryption while receiving data from our base station such as FootfallCam 3D Max2™, which also supports TI 15.4-Stack specification. The communication between LabelNest LN21™ and the base station is encrypted with AES 256-bit with unique key that are only usable and executable by these devices, thus LabelNest LN21™ cannot be intercepted by any external unauthorized connections. 

LabelNest™ Analytic Manager software is a web application hosted and located in FootfallCam™ Secure Central Server, which provides a platform for customer to manage both base station and label tag. You can learn more about the solution in Chapter 1: Overview

A.2 Data transmission process

A.2.1 First-time setup phase

During the 1st time setup phase, the base station will automatically scan for LabelNest™ devices that matches a range of MAC address. Once the LabelNest™ detected the scan from the base station, the LabelNest™ will attempt to determine the best frequency channel with the least interference. After determined the best frequency channel, the LabelNest™ will awake and standby for data incoming from the base station. The base station, however, will acknowledge and register the detected LabelNest™'s unique encryption key into it's own database. In addition, each LabelNest™ will have it's own unique ID, but it is not sharable to the base station. 

A.2.2 Operational Phase

By default, the base station is always connected to the LabelNest™ Analytic Manager software by calling RESTful API with HTTPS from the base station to the software. During this action, the base station will periodically request update from the analytic manager. 

Assume that a LabelNest™ has registered and paired to a specific base station via Analytic Manager, if an update to a LabelNest™ is found, the base station will retrieve all the required data from the analytic manager and stored into itself, and mark as ready for transmission once all required data is well received. 

The base station will then broadcast to LabelNest™ devices in range, which the data encrypted message, contains the unique ID of the target LabelNest™. Once the target LabelNest™ device receives the message, it will acknowledge and start receiving data from the base station. 

 

 

Updated on November 10, 2022