BLE Asset Tracking Security and Power Optimization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing Bluetooth Low Energy (BLE) asset tracking systems face challenges in preventing hacking devices from impersonating asset tags and conserving energy, as multiple scanning devices can waste the battery power of BLE tags by repeatedly scanning them.

Innovation Solution

A system that uses BLE tags to transmit advertising packets with a random address and incremental counter values, only responding to known scanning devices and adjusting transmission frequency based on counter values and proximity, to ensure secure tracking and reduce power consumption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multiple scanning devices repeatedly scan the BLE tag to track assets, then tracking coverage and reliability are improved, but the battery power of the BLE tag is consumed faster

Engineering Contradiction:
Improvetracking reliabilityVSAvoidbattery power consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The system performs preliminary actions by having scanning devices send scan requests to a server before actively scanning the BLE tag. The server coordinates these requests, consolidates them, and sends a single coordinated scan request to the tag. This preliminary coordination prevents multiple simultaneous scanning operations, thereby maintaining tracking reliability while significantly reducing the BLE tag's battery power consumption.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The server acts as an intermediary between multiple scanning devices and the BLE tag. Instead of allowing multiple scanning devices to directly and simultaneously scan the tag (which would consume excessive power), the server receives scan requests from all devices, processes them centrally, and coordinates a single efficient scan operation. This intermediary approach maintains the tracking function while optimizing energy consumption.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of manufacture

If any device can broadcast as a BLE tag for simplicity, then ease of manufacture and deployment are improved, but security against hacking devices deteriorates

Engineering Contradiction:
Improvedeployment simplicityVSAvoidsecurity against impersonation
Core Design Contradiction:
Ease of manufactureVSReliability

Solution Approach 1:

The system implements feedback mechanisms where the server receives advertising packets from BLE tags and validates them against known tag identifiers. The server sends scan requests only to authenticated tags and provides feedback about scan results to authorized scanning devices. This feedback loop ensures that only legitimate tags can be tracked while maintaining simple BLE tag deployment, as the security validation occurs at the server level rather than requiring complex hardware in each tag.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The server serves as a security intermediary that mediates between simple BLE tags and the tracking system. While BLE tags remain simple and easy to manufacture (broadcasting basic advertising packets), the server validates tag identities, authenticates scanning devices, and coordinates the tracking process. This intermediary approach maintains deployment simplicity while providing robust security against hacking devices attempting to impersonate legitimate tags.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP2888700B1Method and apparatus for secure asset tracking
Publication Date: 2023.05.17 NOKIA TECHNOLOGIES OY
  • EP2888700B1 patent drawingFigure 1
  • EP2888700B1 patent drawingFigure 2
  • EP2888700B1 patent drawingFigure 3

AI summary

An approach is provided for providing a secure and energy efficient method of asset tracking using BLE tags (101). The security module (107) determines identification criteria associated with at least one scanning device (103a, 103n). The security module (107) processes and/or facilitates a processing of the identification criteria to cause, at least in part, a transmission of at least one scan response to the at least one scanning device (103a) including, at least in part, asset data associated with at least one tag (101). The security module (107) causes, at least in part, a modification of one or more advertising packets of the at least one tag (101) based, at least in part, on the transmission of the asset data.