Bluetooth Secure Simple Pairing with enhanced security level

Samta Gajbhiye

doi:10.1016/j.jisa.2018.11.009

2019-02-01

PRE

DOI：10.1016/j.jisa.2018.11.009

原文链接

原文求助

摘要

En 中文

Bluetooth version 5.0 introduced flexibility in SSP pairing protocol. It introduced P-192 elliptic curve for devices that support all versions before 4.0 and P-256 elliptic curve for devices that support 4.0, 4.1, 4.2, and 5.0 versions. Despite enhanced security level, there is a possibility of capturing the Input-Output capability and public keys during the initial phase of pairing and thus impersonating them. This paper introduces enhanced Bluetooth Secure Simple Pairing protocol by augmenting two new security levels. The protocol commits for public keys and IO capability. This ensures that the information reaches to the legitimate pairing devices. Thereby attempts to reduce Man-In-The-Middle attack in the initial phase and strengthen the link/session key. (c) 2018 Elsevier Ltd. All rights reserved.

Keyword:

Secure Simple Pairing

Input-Output capability

Elliptic curve Diffie-lliptic Curve

Diffie-Hellman

Numeric Comparison

HMAC-SHA256

AES-CCM authentication-encryption