Bluetooth Capability Signaling for Secure Low-Overhead PDUs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Bluetooth 5.4 PDUs transmitted on primary advertising channels lack cryptographic information, which hinders efficient data transmission and security, and existing Bluetooth tributaries do not utilize shared keys for secure communication.
Innovation Solution
Incorporating cryptographic information, such as a combined OD-MPS code, in PDUs to enable secure communication and using shared keys derived from random functions for wireless channel security, along with enhanced frame formats and signaling procedures to optimize data transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic information is added to Bluetooth 5.4 PDUs on primary advertising channels, then security is improved, but PDU header size and complexity increase
Solution Approach 1:
The patent embeds cryptographic information within existing PDU header structures by nesting capability identifiers and encryption indicators within the flag fields and header portions of PDUs. This allows security information to be contained within the existing PDU framework without adding separate overhead structures, thereby improving security while minimizing header complexity increases
Solution Approach 2:
The patent makes existing PDU header fields multi-functional by using flag fields to simultaneously indicate packet type, encryption status, and capability information. This allows a single header structure to serve multiple purposes including security indication and packet formatting, resolving the contradiction between adding cryptographic information and maintaining header simplicity
2Reliability
If shared keys are used for secure communication, then transmission security is improved, but key management complexity increases
Solution Approach 1:
The patent implements self-service key management where devices automatically derive shared keys from random functions and capability identifiers exchanged during connection establishment. The system performs key generation, exchange, and management autonomously without requiring external key distribution infrastructure, thereby improving transmission security while keeping key management complexity manageable through automation
Solution Approach 2:
The patent performs key derivation and capability exchange in advance during the connection establishment phase before actual data transmission begins. By preparing shared keys and encryption parameters preliminarily, the system ensures security is in place before communication starts, while the preliminary setup consolidates key management complexity into a single initialization phase rather than ongoing management
3Reliability
If capability identifiers are processed to determine encryption and modulation support, then communication reliability is improved, but processing time increases
Solution Approach 1:
The patent encodes capability information including encryption support, modulation support, and frame space timing capabilities into compact capability identifiers that are processed during connection establishment. By determining all necessary capability parameters preliminarily before data transmission, the system ensures communication reliability is optimized in advance while minimizing processing time during actual data transfer
Solution Approach 2:
The patent uses coded capability identifiers that efficiently encode multiple parameters (encryption support, modulation support, timing capabilities) into compact binary representations. This parameter encoding allows rapid processing of capability information to determine communication parameters, improving communication reliability through thorough capability matching while minimizing the time required for capability processing through efficient binary decoding
Data Source
AI summary
A method performed by a wireless device may comprise performing at least one capability check procedure with another device, the capability check procedure comprising at least a wireless transmission of a single coded capability identifier representative of a plurality of supported features, wherein the plurality of supported features include at least encryption support and modulation support. The method may further comprise operating in at least one of a plurality of operating modes that support measurement taking, in accordance with the single coded capability identifier, wherein the plurality of operating modes comprise a first operating mode and a second operating mode.