BLE Advertising Packet Encryption for Low-Power IoT Security

The patent applies preliminary action by pre-sharing secret keys between the beacon device and receiver devices before advertising communication occurs. The encryption key is prepared in advance and stored in both transmitting and receiving devices, allowing immediate encryption of advertising packets without requiring complex key exchange procedures during runtime. This resolves the contradiction by establishing security infrastructure beforehand, reducing the complexity burden during actual advertising operations.

The patent extracts the encryption and decryption functionality into separate, dedicated modules within the beacon device and receiver devices. The encryption unit in the beacon device and the decryption unit in the receiver device are implemented as distinct functional components, allowing the core advertising transmission logic to remain simple while security operations are handled by specialized extracted modules. This modular extraction reduces overall system complexity by isolating cryptographic operations.

The patent applies partial action by selectively encrypting only the essential advertising data fields (such as the unique identifier) while leaving other fields unencrypted or using simpler protection mechanisms. The encryption unit processes only the critical portions of the advertising packet that contain sensitive information, rather than encrypting the entire packet. This partial encryption approach maintains data security for essential information while significantly reducing the computational burden and power consumption compared to full-packet encryption.

The patent employs lightweight cryptographic algorithms that are computationally inexpensive and optimized for resource-constrained BLE devices. The encryption method uses simplified cryptographic operations that can be executed quickly with minimal power consumption, treating the encryption process as a disposable, low-cost operation rather than a heavy computational task. This allows security to be implemented without significantly impacting the power budget of battery-operated beacon devices.

The patent applies preliminary action by pre-computing and caching encryption keys in both the beacon device and receiver devices before advertising communication begins. The key generation and distribution is performed in advance through a separate provisioning process, so that during actual advertising transmissions, both devices can immediately apply encryption and decryption operations without waiting for key exchange or computation. This pre-preparation eliminates key-related latency from the advertising communication path.

The patent implements optimized encryption algorithms that are specifically designed for low-latency operation in BLE advertising contexts. The encryption unit processes advertising packets through streamlined cryptographic operations that minimize processing time, using hardware-accelerated cryptographic instructions when available. The decryption unit similarly uses optimized algorithms to rapidly decrypt received advertising packets, allowing the encryption/decryption overhead to be minimized and rushed through as quickly as possible to maintain real-time advertising performance.