Security: 256 Bit End-To-End Encryption

When it comes to devices that can control and monitor your boat lift, security is extremely important, that's why we have put so much thought and effort into Lift Mate's security. Independent from whether you use Bluetooth or WiFi, Lift Mate uses 256 bit authenticated end-to-end encryption between your smartphone and the Lift Mate device.

Connection methods

From the Lift Mate app, you have full control over how your smartphone connects to your Lift Mate device. You can choose from three options:

Bluetooth: in this mode Lift Mate only uses its Bluetooth module. No data goes through your WiFi network in this mode. On top of the standard Bluetooth security, the authenticated 256 bit end-to-end encryption ensures security in this mode.

Home WiFi: in this mode Lift Mate only uses its WiFi module without Bluetooth. No data goes through the internet. All data remains within your home WiFi network. The authenticated 256 bit end-to-end encryption also ensures security in this mode.

Internet: in this mode Lift Mate is connected to the internet via WiFi. On top of the industry standard SSL connection, the authenticated 256 bit end-to-end encryption guarantees security in this mode. We have created a one-click-setup-environment for setting up the internet connectivity (recommended for most users), but if you are an experienced user you can also define the internet address of your device in the App to setup a peer-to-peer connection.

 

Key generation

Keys are generated during setup and are only stored on your smartphone and the Lift Mate device itself. Your keys are not stored anywhere else. Even the setup process is protected against hackers trying to get your virtual keys as it uses the highly secure, state-of-the-art Ephemeral Elliptic Curve Diffie-Hellman key exchange method, which together with the additional certificate validation and digital signature scheme, is resistant to eavesdropping, man-in-the-middle and other attacks. Lift Mate, unlike other boat lift controllers, is not cloud-based , so your security does not depend on a third party (such as a cloud service provider)

Any time your smartphone sends a request to the Lift Mate device, it sends a unique mathematical problem back to the smartphone which it can only solve using the key the two devices agreed on during setup. Since this mathematical problem is always different, signals for two opening cycles are never the same, therefore Lift Mate is protected against replay attacks . (It means that even if a hacker eavesdrops the communication between your smartphone and the Lift Mate device, and replays it to the device, the hacker won't be able to control your boat lift).