question about methods to secure about nodejs-tk102 HOT 4 CLOSED

Complete security is not possible as the protocol does not support authentication or signing, but you can get a little bit closer with checksum validation. From there you can filter on admin phonenumber, IMEI, GPRS network/IP-range, date & time matching to reality, expected geo bounding box or geocoding (city, water, etc).

from nodejs-tk102.

Right, these simple embedded devices with gsm access don't generally have the sophistication to handle ssl. One alternative is leveraging the cellular infrastructure, by connecting through a secure APN that allows you to limit in/out bound data to devices on a VPN for instance, but your talking additional cost.

from nodejs-tk102.

There is no way to set a vpn, proxy or tunnel in the TK102 trackers.

It would be great if the tracking device could AES encrypt the string with a pre-shared key, but they don't so I wouldn't rely on this system for tracking nuclear misiles or money trucks, if you catch my drift.

from nodejs-tk102.

yes, your device isn't capable of setting a vpn, but the cellular provider can, and it would be reasonable to assume that the cellular network air interface is more secure that the network path you data would travel to hit your node server.
thanks, this thought exercise has been helpful.

from nodejs-tk102.