We are working on a sensor that is going to be collecting data, passing it to a smart phone which then stores the data in a database. I need to be able to verify that the hardware is legitimate, so that the data that gets stored in the database is legitimate too.
My current thought is to have a secret key stored on the hardware, which gets encrypted and sent when the hardware first connects. If authentication fails, the following data is rejected.
Is there a standard for authenticating hardware, to prevent malicious hardware impersonating a real device?