Bluetooth Mesh Key Recovery Using Node-Specific Encrypted Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In Bluetooth mesh networks, if a mesh node misses a key refresh procedure, it cannot obtain the latest network key, leading to communication failures and potential security risks due to inconsistent network keys, and existing manual recovery methods are inefficient and risky.
Innovation Solution
A method where a configuration node encrypts the network key using the device key of the first network node to generate a ciphertext, sending it to the node to synchronize the key, ensuring only the configuration node and the first network node can decrypt it, thereby facilitating secure key recovery without manual intervention.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a mesh node misses a key refresh procedure, then the node cannot obtain the latest network key, but manual recovery methods are inefficient and risky
Solution Approach 1:
The system enables self-service by allowing the configuration node to automatically detect and recover missed key refresh procedures. The configuration node monitors key refresh status of all mesh nodes and autonomously initiates recovery by re-sending encrypted key updates to nodes that missed the original refresh, eliminating the need for manual intervention and restoring key consistency efficiently.
Solution Approach 2:
The system implements feedback mechanisms where mesh nodes report their key refresh status to the configuration node. The configuration node receives feedback about which nodes have successfully updated their keys and which have missed the refresh procedure. Based on this feedback, the configuration node automatically re-sends encrypted key updates to the affected nodes, ensuring reliable key consistency without manual recovery.
2Reliability
If the configuration node sends encrypted network key to all nodes, then key synchronization is achieved, but communication security may be compromised if encryption is not node-specific
Solution Approach 1:
The system applies local quality by encrypting the network key with different device-specific keys for each mesh node. Instead of using a single encryption key for all nodes, the configuration node generates node-specific encrypted key updates tailored to each individual mesh node's device key. This ensures that only the intended recipient can decrypt and access the network key, maintaining communication security while achieving reliable key synchronization across the mesh network.
Data Source
AI summary
A key update method, a network device, a system, and a storage medium, applied to a Bluetooth mesh network. The Bluetooth mesh network includes at least two mesh nodes. A configuration node is a mesh node in the Bluetooth mesh network, and the configuration node is configured to configure a network key of the Bluetooth mesh network. The configuration node determines a first mesh node from mesh nodes in the Bluetooth mesh network, where a network key locally maintained by the first mesh node is inconsistent with a current network key of the Bluetooth mesh network. Therefore, the configuration node encrypts the first network key by using a device key of the first mesh node, to obtain a first ciphertext, and sends a first message that carries the first ciphertext, so that the first mesh node obtains the first network key.