BLE Advertising Channel Authentication via Nonce Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless data exchange protocols, such as BLUETOOTH Low Energy (BLE), lack effective security measures to prevent attacks like replay, relay, and man-in-the-middle attacks, especially for non-connected devices.
Innovation Solution
A method involving the exchange of nonces between peripheral and central devices using a shared key for encryption, where the peripheral device sends an advertising channel PDU with a first nonce, and the central device responds with a scan request PDU containing a second nonce, with both devices performing an encryption function to authenticate each other if the results match.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic authentication is implemented using nonce exchange between connected devices, then security against replay and man-in-the-middle attacks is improved, but device complexity and protocol overhead increase
Solution Approach 1:
The patent applies universality by making the existing advertising and scanning protocol serve dual purposes: traditional device discovery and connection establishment, plus cryptographic authentication. The advertising PDU and scan request/response PDUs are enhanced to include nonce fields, allowing the same message exchange mechanism to perform both connection setup and security authentication functions simultaneously.
Solution Approach 2:
The patent implements preliminary action by performing cryptographic authentication during the advertising and scanning phase, before formal connection is established. Nonces are exchanged and encrypted data is verified in advance, so that when connection is requested, authentication has already been completed. This prevents replay attacks and man-in-the-middle attacks before they can compromise the connection.
2Reliability
If authentication is performed during advertising and scanning phases, then protection against relay attacks is improved, but processing time requirements increase
Solution Approach 1:
Authentication is performed in advance during the advertising and scanning phases, before connection establishment. The nonces are exchanged and encrypted verification is completed during this preliminary phase, so that when connection is requested, authentication is already done. This prevents relay attacks by ensuring authentication occurs before any meaningful data exchange can be intercepted and relayed.
Solution Approach 2:
The patent changes the timing parameter of when authentication occurs in the protocol sequence. Instead of authenticating after connection is established, the authentication is moved to occur during the advertising scanning phase. This parameter change in the protocol timeline allows security verification to happen earlier, preventing relay attacks while maintaining efficiency by using the existing message exchange timing.
Data Source
AI summary
A security solution for BLUETOOTH Low Energy (BLE) or equivalent wireless data exchange protocols involves authentication of a peripheral device by a central device using the advertising channel is presented. A method of authenticating a peripheral device in a wireless data exchange has a peripheral device sending an advertising channel Protocol Data Unit (PDU), a central device receiving the advertising channel PDU and the central device sending a scan request scanning PDU to the peripheral device. The advantage of this method of using discovery protocol enables a software based solution for the monitoring device and a hardware with software based solution on the beacon device.