Mesh Provisioning

Provisioning Data

Once the device has been authenticated, the Provisioner and device shall use the calculated Diffie-Hellman shared secret ECDHSecret and generate a session key from that shared secret. That session key shall then be used to encrypt and authenticate the provisioning data. The Provisioner then shall send the Provisioning Data PDU containing the encrypted and authenticated provisioning data to the device

Protocol for Provisioning Protocol Data Unit

Provisioning Protocol Data Unit Types

Provisioning Data Unit Capabilities

The device sends this PDU to indicate its supported provisioning capabilities to a Provisioner

Provisioning Data Unit Invite

A Provisioner sends this PDU to indicate to the device that the provisioning process is starting

Provisioning Data Unit Start

This Provisioner sends this PDU to deliver the public key to be used in the ECDH calculations

Provisioning Data Unit Public Key

This Provisioner sends this PDU to deliver the public key to be used in the ECDH calculations

Provisioning Data Unit Input Complete

The device sends this PDU when the user completes the input operation

Provisioning Data Unit Confirmation

The Provisioner or the device sends this PDU to the peer to confirm the values exchanged so far including the OOB Authentication value and the random number that has yet to be exchanged

Provisioning Data Unit Random

A Provisioner or device sends this PDU to enable the peer device to validate the confirmation

Provisioning Data Unit Data

A Provisioner sends this PDU to deliver provisioning data to the device

Provisioning Data Unit Complete

The device sends this PDU to indicate that it has successfully received and processed the provisioning data

Provisioning Data Unit Failed

The device sends this PDU if it fails to process a received provisioning protocol PDU