Since you know what interval legitimate devices report at, could an algorithm be made to detect messeges that deviate from this?

What about pki? That could be used for non-repudiation on the device’s messages. It may be hard to implement/enforce on diy units though.