The Token — The security key

The Token is a unique secret key automatically generated by SookSook.

Example :

ssk_iot_8d54f5f4e8d1f84f...

What is the Token used for?

The Token is used to:

• authenticate the sensor,
• secure exchanges,
• prevent fake devices,
• prevent fraudulent shipments,
• check that the sensor is authorized.

Without valid token → data refused

If a device tries to send data without the correct token:

❌ the data is refused.

SookSook replies:

unknown token

Or :

sensor inactive

Why it is important

Without token system:

• anyone could send false data,
• pollute the histories,
• trigger false states,
• create false alarms,
• modify critical values.

The token therefore protects the platform.

How security works

When a sensor sends JSON:

{ "token":"ssk_iot_xxxxx", "device_id":"10t-cc", "temperature":42
}

SookSook:

Step 1

Search for the token.

Step 2

Check that it exists.

Step 3

Verify that the sensor is active.

Step 4

Checks that the Device ID matches the token.

Protection against theft

Even if someone knows the Device ID:

10t-cc

this is not enough.

It is also necessary:

✅ the correct associated token.

Otherwise :

❌ access denied.

Token ↔ Device ID link

In SookSook:

• a token belongs to a single sensor,
• and a sensor has its own token.

This avoids:

• that one sensor pretends to be another,
• that a device sends data to the wrong equipment,
• data collisions.

Regeneration of the token

The user can regenerate a token at any time.

This allows:

• to block an old device,
• replace a sensor,
• secure an installation again,
• invalidate a compromised token.

The old token immediately becomes unusable.

Concrete example

Real case: 10T-CC freight elevator

The SookSook profile has:

Device ID: 10t-cc

The physical sensor installed on the freight elevator has:

Token: ssk_iot_7f84d1...

The sensor sends:

{ "token":"ssk_iot_7f84d1...", "device_id":"10t-cc", "position":14, "temperature":36, "contact_status":1
}

SookSook:

✅ authenticates the sensor
✅ verifies identity
✅ stores data
✅ updates widgets
✅ refreshes graphics
✅ logs measurements

Why separate Device ID and Token

Because they do not have the same role.

Device ID

= visible technical identity.

Token

= secret security key.

Simple analogy

Device ID

Like a license plate.

Token

Like a secure key or access badge.

Advantage for traceability

Each data received is automatically associated:

• the right equipment,
• with good history,
• with the right profile,
• in the right technical context.

This allows:

• reliable supervision,
• complete traceability,
• a clean history,
• better maintenance,
• better analysis of field events.