Security/Protection Issues in Bluetooth
Original Post: Security/Protection (SIG Forum )
Date: 2000-06-09
The Bluetooth system handles the security of transmission
by using an authentication process to first setup up a connection. This
authentication process is based on a PIN number
For example if A wants to connect to B and it does not
have the correct PIN, then the authentication will fail. The only way A can
connect to B is that it knows the correct PIN to connect with. If you look at
P.154, it shows the need for an initialization key to begin with , for
establishing the connection and the PIN is needed to generate the initialisation
key as shown on p.153 and p175-176. (BT spec chapter 14, contains the
complete authentication procedure
Without knowing the PIN, one unit can't logon to the other
unit if Authentication is activated. To make matters easier , the PIN can
be stored somewhere inside the unit (in Memory/Hard Drive etc.) so if you wish t
to establish the connection, a user may not have to manually type in the PIN
(Note: the level of security is none in this case).
|
