Counterfeit Advertiser Detection via Timestamp Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In wireless communication systems, especially those using Bluetooth Low Energy (BLE), counterfeit advertisers can easily be generated by attackers due to the lack of encryption in BLE advertisement packets, which compromises privacy and security, as they can reuse MAC addresses, making it difficult to distinguish between genuine and fake advertisers.
Innovation Solution
A method and apparatus that detect counterfeit advertisers by analyzing the random delay time or cumulative interval of advertisement packets using time stamps, allowing the system to determine whether an advertiser is genuine or counterfeit without altering the existing advertisement packet format, by comparing the delay times between a reference device and receiving devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If BLE advertisement packets are transmitted without encryption through published channels, then any device can receive and analyze the packets enabling widespread connectivity, but attackers can easily receive, copy, and transmit these packets to generate counterfeit advertisers compromising security
Solution Approach 1:
The system performs preliminary actions by having a reference device receive and forward advertisement packets to the server before attackers can exploit them. The server stores these packets with timestamp information in advance, creating a baseline for later authentication of receiving devices
Solution Approach 2:
The server provides feedback by comparing the advertisement packets and timestamp information received from reference devices with those received from receiving devices. This feedback mechanism enables the system to identify and alert counterfeit advertisers by detecting inconsistencies in the advertisement packet patterns
2Measurement precision
If the same MAC address is reused by the BLE advertiser, then the advertiser can be easily identified using the MAC address, but attackers can also easily generate counterfeit advertisers by reusing the same MAC address
Solution Approach 1:
The server acts as an intermediary between advertisers and receiving devices. It collects advertisement packets from reference devices, stores them with timestamp information, and uses this intermediate storage to authenticate receiving devices by comparing their received packets against the stored baseline
Solution Approach 2:
The system performs preliminary actions by having the reference device forward advertisement packets to the server before attackers can exploit them. The server stores these packets with timestamp information in advance, creating a baseline for later authentication
3Reliability
If timestamp information and delay time analysis are used to detect counterfeit advertisers, then security is enhanced by identifying fake advertisers, but the system complexity increases due to additional detection mechanisms
Solution Approach 1:
The system uses self-service by leveraging the existing advertisement packet transmission mechanism and timestamp functionality already present in BLE devices. The reference device naturally forwards packets it receives, and the server automatically performs timestamp comparison and authentication without requiring additional hardware or complex protocols
Data Source
Figure 1A~1B
Figure 2
Figure 3
AI summary
The present disclosure relates to a sensor network, machine type communication (MTC), machine-to-machine (M2M) communication, and technology for internet of things (IoT). The present disclosure may be applied to intelligent services based on the above technologies, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. A method for detecting a counterfeit advertiser by a server includes detecting a random delay time or a cumulative interval for a reference device based on a time stamp for an advertisement packet received from the reference device, and detecting a random delay time or a cumulative interval for a receiving device other than the reference device based on a time stamp for an advertisement packet received from the receiving device.