Bluetooth Node Pairing With Pre-Shared Key Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Bluetooth node pairing in vehicles is vulnerable to security threats due to low-security pairing modes, particularly in NoInputNoOutput, DisplayOnly, and DisplayYesNo nodes, leading to untrusted connections that endanger safety.
Innovation Solution
Implement a method where nodes exchange pre-shared keys (PSKs) to authenticate each other, ensuring only trusted nodes with predefined PSKs can pair, thereby enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If just work mode is used for pairing in NoInputNoOutput or DisplayOnly nodes, then ease of operation is improved, but security is worsened
Solution Approach 1:
The patent applies preliminary action by pre-configuring a PSK (pre-shared key) on both the vehicle Bluetooth node and the external device before pairing occurs. This advance preparation enables secure authentication without requiring interactive input/output operations during the pairing process, thus maintaining ease of operation while improving security for NoInputNoOutput and DisplayOnly nodes.
2Reliability
If PSK pairing capability is added to nodes, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent implements universality by designing a PSK-based pairing mechanism that can be applied across multiple node types (NoInputNoOutput, DisplayOnly, DisplayYesNo) without requiring separate pairing solutions for each type. The PSK authentication approach provides a unified security mechanism that works for all these node categories, improving security while avoiding the need for complex type-specific pairing implementations.
Data Source
AI summary
In an example method, a second node receives a pairing request message from a first node. The pairing request message includes information used to indicate whether the first node has a pre-shared key (PSK) pairing capability. The second node sends a pairing response message to the first node in response to that the pairing request message includes information used to indicate that the first node has the PSK pairing capability. The pairing response message is used to indicate to perform pairing by using a shared first PSK. The second node authenticates the first node based on the first PSK.