Bluetooth 4.2 range Bluetooth#

But this method will fail, if an active MITM attacker listens to the shared public key during the initial pairing process and shares his own public Key instead of actual public key. Public key cryptography can provide needed protection against MITM. But an intermediate MITM attacker has complete control over the communication of these devices. Devices participating in the connection will assume that they are communicating with each other directly. During the course of attack, attacker may insert his own messages or corrupt the data before delivering it to the reader. Since the attacker is actively involved in the communication between the devices, this attack is also known as active eavesdropping. In MITM, attacker secretly reads and interprets the messages from the sender and delivers the message to the reader after interpreting it. But, if the attacker is listening to the devices during the pairing process itself, then pairing methods canвЂ™t assure the safety against the attack! Pairing procedures are the well-known techniques to avoid the eavesdropping issues and encrypt the messages before exchange. If unencrypted message or unsigned messages are used in communication, hacker can get direct access to all the confidential data exchanged between the devices. Since eavesdropping does not affect the normal communication between the devices, chances of user noticing eavesdropping attempt are extremely low. Using a 2.4GHZ channel sniffer, one can listen to all the communication between BLE devices without the consent of communicating devices. Passive eavesdropping is secretly listening to the private communication between two devices in real-time by un-authenticated third party devices (eavesdropping equipment). For example, if such devices with serious security flaws are deployed in military, it can reveal the secrets to the rivals. Sensitive data getting in to the hands of the wrong people without user consent may lead to significant damages. With hacking and cybercrime reported enormously all over the world, people are extremely concerned about the privacy. Below Figure 1 indicates how a LE device can be tracked by the hacker and steal sensitive data over a period of time across various geographical locations. Due to continuous advertisement, hackers can easily track the device and decode the broadcasting information using a sniffers or even smart phone. BLE devices are designed to broadcast MAC, UUID and service informationвЂ™s at a predefined interval.

Bluetooth 4.2 range Bluetooth#

While Bluetooth LE beacons bring lots of potential in the IOT design, security threats such as device tracking, eaves dropping, and man in the middle attack are increasing significantly. Like any other wireless technology, BLE is no exception from security threats. run on a small coin cell battery for years. Low power smart wearable devices available in market such as Bluetooth heart rate monitors, blood pressure monitors, fitness kit, smart watches etc. Device that acts always as peripheral can be designed with low memory, longer battery life and low power consumption. This will be a great advantage in case of single mode - peripheral only devices. Memory and processing power requirements of peripheral devices are much lower than the central. With expeditious growth in the IoT technology, Bluetooth Low Energy Module has become substantiate criterion for the smart devices.Д«luetooth specification supports the asymmetrical architecture of the LE devices. Bluetooth smart is primarily designed for low power embedded devices with limited computation capabilities. This paper describes the design considerations to secure the Bluetooth smart devices.Д«luetooth smart (also known as Bluetooth low energy or BLE) is introduced in the legacy Bluetooth 4.0 specification by Bluetooth special interest group. Bluetooth 4.2 core specification provides various methods to secure the communication between devices and establish trusted connections. Ravikiran HV, PathPartner Technology Pvt.Ltd.Д«luetooth Smart is an emerging short range wireless technology aimed for low power devices.