Beacon Signal Authentication for BLE Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Bluetooth Low Energy (BLE) networks lack effective security measures, making them vulnerable to spoofing and potential transmission of incorrect or damaging content, such as viruses, due to the plain visibility of advertisement frames.

Innovation Solution

Implementing a system that broadcasts a beacon signal with temporal attributes and proximity range, allowing authentication of access devices within a specific range, and managing content access based on these attributes, including time expiration and usage limits, to ensure secure content transmission.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If advertisement frames are made plainly visible for easy reception, then communication ease is improved, but security is worsened due to spoofing vulnerability

Engineering Contradiction:
Improveease of receptionVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary authentication of the transmitting device before content delivery. The receiving device verifies the identity and legitimacy of the beacon transmitter through authentication protocols, ensuring that only authenticated devices can receive content. This preliminary security check prevents spoofing attacks while maintaining the open broadcast nature of BLE advertising.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If authentication requirements are increased to improve security, then security is improved, but device complexity is worsened

Engineering Contradiction:
ImprovesecurityVSAvoidauthentication complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system introduces an intermediary authentication mechanism that mediates between the simple BLE broadcast and secure content delivery. The intermediary layer verifies device identities and manages authentication states without requiring complex cryptographic protocols at the basic broadcast level, thus maintaining security while limiting complexity increase.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system changes authentication parameters dynamically based on the situation. Instead of always using complex authentication, the system adjusts authentication requirements based on the proximity range, content sensitivity, and device trust level, optimizing the balance between security and complexity.

Inventive Principle:
Principle #35Parameter changes

3Reliability

If content access is restricted by temporal attributes to improve security, then security is improved, but loss of time is worsened due to expiration and validation checks

Engineering Contradiction:
ImprovesecurityVSAvoidtime for validation
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system implements periodic authentication and temporal validity checks instead of continuous verification. Content access rights are granted for specific time periods, and the system performs authentication at discrete intervals rather than continuously, reducing the time overhead while maintaining security through time-bound access control.

Inventive Principle:
Principle #19Periodic action

Data Source

PatentEP3135046B1Systems and methods for generating location based entitlements
Publication Date: 2019.05.29 THOMSON REUTERS ENTERPRISE CENTRE GMBH
  • EP3135046B1 patent drawingFigure 1
  • EP3135046B1 patent drawingFigure 2
  • EP3135046B1 patent drawingFigure 3

AI summary

The present disclosure is directed towards systems and methods for providing one or more security measures in Bluetooth low energy protocol environment, which comprises broadcasting a beacon signal, wherein the beacon signal comprises one or more temporal attributes and a proximity range. A request from an access device is received to authenticate the access device with the beacon signal and is subsequently authenticated with the beacon signal when the access device is within the proximity range. One or more content items are the transmitted to the access device in accordance with the one or more temporal attributes while the access device is authenticated with the beacon signal.