How to run DLMS Server Simple with chiphering (Security Level)?

By wenfengzhao, 20 November, 2023
Forums
Gurux DLMS for Java

HI

Now I successfully run DLMS Server Simple, and successfully ran DLMS Client Simple to connect to it, but this is no chiphering /Authentication.

APDU as follow:
Connect using network connection gurux.net.GXNet@12edcd21
Authentication: None
ClientAddress: 0x10
ServerAddress: 0x1
Standard: DLMS
TX: 00:42:33.332 00 01 00 10 00 01 00 1F 60 1D A1 09 06 07 60 85 74 05 08 01 01 BE 10 04 0E 01 00 00 00 06 5F 1F 04 00 42 1E 5D FF FF
RX: 00:42:33.336 00 01 00 01 00 10 00 2B 61 29 A1 09 06 07 60 85 74 05 08 01 01 A2 03 02 01 00 A3 05 A1 03 02 01 00 BE 10 04 0E 08 00 06 5F 1F 04 00 00 00 10 04 00 00 07
----------------------------

I want to know how to run DLMS Server Simple with chiphering / Authentication by using AK EK ...

-C Security Level. (None, Authentication, Encrypted, AuthenticationEncryption or DigitallySigned)

thank you ~
BR,

Kurumi

1 year ago

Hi,

There is a ciphered association in the example server. Check addSecuredHighLevelAssociation. The client address is 24. Authentication key is D0 D1 D2 D3 D4 D5 D6 D7 D8 D9 DA DB DC DD DE DF and Block cipher key is 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F. You need to read invocation counter first from 0.0.43.1.8.255.

BR,
Mikko

wenfengzhao

1 year ago

Thank you very much.

I checked the function " boolean init(final String port) throws XMLStreamException, IOException " ,i found it load the file from .../gurux.dlms.java/gurux.dlms.server.example.java/target/4063settings.xml , so i can modify this file to have a ciphered association ?....

ee.... I am still confused , Could you provide me with a demo class please ?

Best regards~

Image

Kurumi

1 year ago

Hi,

You don't need to modify anything. Those are the default settings for the ciphered connection. When you use them you can connect to the server.

Command line parameters are something like:

-h YOUR_HOST_ADDRESS -p PORT_NUMBER -c 24 -C AuthenticationEncryption -v 0.0.43.1.8.255

BR,
Mikko

wenfengzhao

1 year ago

Hi Kurumi

First of all, thank you for your patient guidance

Following your guidance, I connected the example server successfully with the command line as follow：
-h HOST_ADDRESS -p PORT_NUMBER -t Verbose -i WRAPPER -a High -c 24 -C AuthenticationEncryption -v 0.0.43.1.8.255 -P Gurux

The new problem now is that after I changed the Authentication option to HighGmac, it failed. I tried switching and the connection failed as the client was 21. The PDU is as shown in the attachment ，I hope you can give me some guidance~

Connect Failed Command Line: -h HOST_ADDRESS -p PORT_NUMBER -t Verbose -i WRAPPER -a HighGmac -c 21 -C AuthenticationEncryption -v 0.0.43.1.8.255 -P Gurux

ARRQ:
TX: 19:04:03.415 00 01 00 15 00 01 00 5F 60 5D A1 09 06 07 60 85 74 05 08 01 03 A6 0A 04 08 41 42 43 44 45 46 47 48 8A 02 07 80 8B 07 60 85 74 05 08 02 05 AC 12 80 10 02 68 07 30 26 79 5A 69 62 26 65 57 28 18 79 03 BE 23 04 21 21 1F 30 00 00 00 6A 61 95 FE 59 66 DA BD 72 11 15 77 E4 6F 0D 18 D3 A7 F6 5F 4C 36 29 4C E0 C7 2A
RX: 19:04:03.417 00 01 00 01 00 15 00 46 61 44 A1 09 06 07 60 85 74 05 08 01 01 A2 03 02 01 01 A3 05 A1 03 02 01 02 A4 0A 04 08 47 52 58 00 00 00 00 01 88 02 07 80 89 07 60 85 74 05 08 02 05 AA 12 80 10 44 5A 3A 5D 21 3B 01 45 3B 4F 42 12 31 6F 11 12

Best Regrads.

Image

Kurumi

1 year ago

Hi,

The server example doesn't use ciphering with GMAC client address 21. Try with arguments.

-h HOST_ADDRESS -p PORT_NUMBER -t Verbose -i WRAPPER -a HighGmac -c 21

BR,
Mikko