BLE Advertising Packet Security with Challenge-Response Hashing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Bluetooth-enabled devices, particularly battery-powered devices, are vulnerable to security breaches and battery drain during the pairing process, which can lead to unauthorized access and premature battery depletion, especially in IoT networks.
Innovation Solution
Implementing a specific key generation algorithm and fixed values within a challenge sent via a scannable undirected advertising message to secure advertising packets, using a secure hash algorithm for verification, and reducing unnecessary pairing attempts to conserve battery power.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If devices perform discovery, scanning, and connecting processes during pre-pairing, then device pairing functionality is enabled, but security vulnerabilities and battery drain occur
Solution Approach 1:
The patent implements preliminary security measures by incorporating security parameters and authentication mechanisms into the advertising packet itself before the actual pairing process begins. This allows security verification to occur during the advertising phase rather than waiting until pairing, thereby preventing unauthorized devices from initiating harmful interactions in the first place.
Solution Approach 2:
The patent applies preliminary anti-action by implementing challenge-response authentication and device authorization checks during the advertising packet exchange. Unauthorized devices are identified and blocked before they can perform denial-of-service attacks or drain battery power, thus preventing harmful actions before they occur.
2Adaptability or versatility
If unauthorized devices are allowed to attempt connections during advertising, then advertising functionality is maintained, but battery power is drained and security is compromised
Solution Approach 1:
The patent performs preliminary authorization verification during the advertising packet exchange by including security parameters that allow receiving devices to authenticate transmitting devices before establishing connections. This preliminary check prevents battery-powered devices from engaging in prolonged pairing attempts with unauthorized devices, thereby conserving battery power while maintaining advertising functionality for legitimate devices.
3Reliability
If security verification is performed during pairing, then authorized devices can connect, but pre-pairing processes remain vulnerable to attacks
Solution Approach 1:
The patent moves security verification forward in time by implementing authentication during the advertising packet exchange rather than waiting until the pairing phase. Security parameters are verified preliminarily during advertising, which eliminates the vulnerable time window between advertising and pairing while maintaining the ability to establish authorized connections.
Data Source
AI summary
A metrology device may include a processor and a non-transitory computer-readable media storing instructions that, when executed by the processor, cause the processor to perform operations. The operations may include generating a challenge message, the challenge message including a challenge; issuing the challenge message in a scannable undirected advertising message; receiving from the field tool a response solution to the challenge message, the response solution being calculated based at least in part on the challenge and a challenge key associated with the challenge, and verifying the response solution based at least in part on a secure hash algorithm (SHA). The challenge key may include a fixed value specific to a manufacturer of the metrology device and known to the field tool and the metrology device.