BLE Slave Device Relay Attack Mitigation via Channel Degradation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Bluetooth Low Energy (BLE) radio communications are susceptible to relay attacks, where a third party system acts as a relay between the master and slave devices, simulating both roles and compromising communication security.
Innovation Solution
The slave device initiates a connection update by causing the master device to detect a degradation in communication quality on a frequency channel, potentially by sending a distorted message or omitting responses, and implements countermeasures if the update is not processed, such as sending a connection interruption message or shutting down communication if the communication is deemed insecure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If channel hopping mechanism is used for BLE radio communications, then communication efficiency and data exchange capability are improved, but vulnerability to relay attacks increases
Solution Approach 1:
The slave device monitors communication quality metrics (signal strength, packet loss, retransmission rate) and provides feedback to detect anomalies that may indicate a relay attack. This feedback mechanism enables the system to identify security threats while maintaining efficient channel hopping communication.
Solution Approach 2:
The system performs preliminary security checks before and during communication, including verifying device identifiers, monitoring for inconsistent communication patterns, and detecting attempts to manipulate connection parameters. These preliminary anti-actions prevent relay attacks before they can compromise security.
2Reliability
If connection update mechanism is implemented to change frequency channels, then communication quality and security are improved, but communication overhead and processing complexity increase
Solution Approach 1:
The slave device prepares connection update requests in advance with predetermined channel sequences and timing information. This preliminary action reduces the processing burden during actual communication, as the system only needs to execute pre-planned updates rather than making real-time decisions.
Solution Approach 2:
The system changes communication parameters (frequency channels, transmission power, data rate) in a controlled manner through connection updates. By systematically varying these parameters according to predefined patterns, the system achieves diverse communication quality without excessive processing complexity.
3Reliability
If security verification steps are added to detect relay attacks, then security against relay attacks is improved, but communication time and latency increase
Solution Approach 1:
Security verification is performed periodically at key moments in the communication cycle (during connection establishment, at regular intervals during data transfer, and when anomalies are detected) rather than continuously. This periodic approach maintains security without excessive time consumption.
Solution Approach 2:
The system implements partial security verification by focusing on the most critical security checks (device identifier validation, communication quality monitoring, connection parameter verification) rather than attempting to verify every possible security aspect. This partial action provides sufficient security with minimal time overhead.
Data Source
AI summary
A method of radio communication of a slave device with a master device, the method comprising steps of:receiving (202) by the slave device of a connection request sent by the master device comprising first communication parameters for communicating with the master device, the communication parameters being indicative of a sequence of frequency channels to be used during successive periods to communicate with the master device,during one of the periods, implementing by the slave device of a processing capable of causing the master device to send a connection update comprising second parameters for communicating with the master device to be used in place of the first communication parameters, the processing comprising an action (210) on one of the frequency channels capable of causing the master device to detect a degradation in communication quality on the frequency channel.