Frequency Domain Traps for BLE Spoofing Detection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

RTT-based ranging techniques in BLE distance estimation are susceptible to spoofing attacks, such as early commit late detect and early detect late commit, which compromise the security of keyless entry systems by allowing unauthorized access to enclosures and resources.

Innovation Solution

Incorporating frequency domain artifacts or 'traps' into packet bit patterns during RTT estimation, which are detectable by the receiving device using corresponding frequency and time shift corrections, to enhance security without requiring prior agreements between devices or hardware modifications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If RTT-based ranging techniques are used in BLE distance estimation, then distance measurement capability is provided, but the system becomes susceptible to spoofing attacks compromising security

Engineering Contradiction:

Improvedistance measurement capabilityVSAvoidsecurity against spoofing attacks

Core Design Contradiction:

Measurement precisionVSReliability

Solution Approach 1:

The transmitting device embeds frequency domain artifacts (traps) and corresponding correction values into packet bit patterns before transmission. These preliminary embedded elements enable the receiving device to detect and correct spoofing attempts, thereby resolving the security vulnerability while maintaining distance measurement functionality

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

Frequency domain artifacts act as intermediary elements that mediate between the transmitting and receiving devices. These artifacts serve as detectable markers that enable verification of packet authenticity, allowing the system to distinguish legitimate packets from spoofed ones without compromising the RTT-based ranging capability

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If frequency domain artifacts are embedded in packet bit patterns, then detection of intrusion attempts is improved, but device complexity increases

Engineering Contradiction:

Improvedetection of intrusion attemptsVSAvoidprocessing complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent transforms the detection problem by changing parameters in the frequency domain rather than requiring complex time-domain analysis. By embedding artifacts with specific frequency characteristics and providing correction values, the system enables simpler spectral analysis at the receiving end, improving intrusion detection while managing computational complexity

Inventive Principle:

Principle #35Parameter changes

Solution Approach 2:

The frequency domain artifacts are lightweight, computationally inexpensive elements that are embedded in each packet. These artifacts serve their purpose of enabling intrusion detection and can be processed efficiently without requiring complex, persistent security infrastructure, thus resolving the contradiction between detection capability and device complexity

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

Data Source

PatentUS20240365123A1Insertion of traps for improved attack detection in round trip timing estimation

Publication Date: 2024.10.31 INFINEON TECHNOLOGIES AMERICAS CORP

AI summary

A wireless device includes a transmitter and logic at least one of coupled to or integrated within the transmitter. The logic generates a frequency domain artifact within a portion of a packet to be transmitted during a round trip timing estimation of an enclosure having a receiver. The logic causes a frequency of samples of bit patterns of the portion of the packet to be modified based on the frequency domain artifact before the transmitter transmits the packet to the receiver.