Phone

    00852-6915 1330

Exploring Bluetooth Technologies, Pairing Mechanisms, and Security Modes

  • Contents

Overview: This article explores Bluetooth technologies, pairing mechanism advancements, and their IoT applications. It highlights security challenges and discusses Bluetooth's secure modes for reliable device communication.

 

 

What is Bluetooth?

The IEEE 802.15.1 standard is the foundation for Bluetooth, a wireless technology. It is utilized for short-range data exchange between stationary and mobile wireless devices and for constructing WPANs (Wireless Personal Area Networks). It was first developed in 1994 as a wireless substitute for RS-232 wires by the telecom provider Ericsson. It uses the FHSS (Frequency Hopping Spread Spectrum) transmission technology and the open, unlicensed 2.4 GHz ISM (Industrial, Scientific, and Medical) radio band to transmit packets while minimizing interference.

 

Over the past 20 years, Bluetooth has advanced from version 1.0 (1999) to version 5.2 (2019), introducing features like improved power efficiency, enhanced security, increased data speed, and extended range. These enhanced features made Bluetooth a significant technology for several IoT applications.

 

What are piconets and scatternets?

Bluetooth devices must be linked and verified to one another as part of the pairing authentication process. In the pairing process, the device that starts it is designated as the master, while the other devices that accept the pairing from the master are designated as slaves. A network structure known as a piconet, as shown in Fig. 1, is created when a specific number of slave devices are linked to a single master device. A scatternet, as shown in Fig. 1, is created when at least two piconets are connected.

image-Illustration of piconets and scatter nets

Fig. 1 Illustration of piconets and scatter nets Source: MDPI

 

Bluetooth Technologies

There are two primary types of Bluetooth technology:

  • Bluetooth Basic Rate (BR)/Enhanced Data Rate (EDR).
  • Bluetooth Low Energy (BLE)

 

Bluetooth Basic Rate (BR)/Enhanced Data Rate (EDR)

Bluetooth Basic Rate/Enhanced Data Rate (BR/EDR), often referred to as Classic Bluetooth. The Bluetooth system functions within the 2.4 GHz ISM band. There are 79 channels in the Bluetooth ISM band, each with a frequency of 1 MHz. The two data transmission modes of classic Bluetooth are as follows:

  • Basic rate
  • Enhanced data rate

 

Basic Rate (BR) employs a shaped, binary Frequency Modulation (FM) to reduce transceiver complexity. BR employs Gaussian Frequency Shift Keying (GFSK) as its modulation, providing a data rate of 1 Mbit/s.

 

Enhanced Data Rate (EDR), which employs Phase Shift Keying (PSK) modulation and has two additional variants: π/4-Differential Quadrature Phase Shift Keying (DQPSK) and Differential Phase Shift Keying (DPSK). It supports data rates of up to 2 Mbit/s and 3 Mbit/s.

 

Applications

Classic Bluetooth devices have high-throughput connections.

  • Additionally, any 3G/4G equipped smartphone can serve as a hotspot and give neighboring Bluetooth-connected devices access to the Internet through Bluetooth tethering.
  • Another example of classic Bluetooth products is wireless keyboards that may be connected to a laptop or smartphone.
  • Bluetooth-enabled car stereos that transmit audio wirelessly, allowing hands-free communication.
  • File transfers between any two Bluetooth-enabled devices are another common usage.
  • Bluetooth headsets are a gadget that gains a lot from BR/EDR.

 

It generally consumes more power than Bluetooth Low Energy, making it less suitable for battery-powered devices. It primarily supports point-to-point communication.

 

Bluetooth Low Energy (BLE)

Bluetooth Low Energy (BLE), or Bluetooth smart, is an improved version of classic Bluetooth. It also operates in the 2.4 GHz ISM band but uses 40 channels with a bandwidth of 2 MHz each. BLE achieves efficiency by using fewer channels for discovery, which leads to the establishment of rapid connections. The channel spacing of 2 MHz lowers the need for RF filtering.

 

It offers a maximum data rate of 1 Mbit/s, with options for higher rates in newer specifications like Bluetooth 5 BLE, which employs an energy-efficient approach to maintain connectivity while reducing active radio usage. It supports a variety of network topologies, including point-to-point, broadcast, and mesh networks, enabling large-scale device networks.

 

Applications

 It includes capabilities for device positioning, such as presence detection and direction finding, which are unavailable in BR/EDR. They are suitable for devices requiring infrequent data transmission. Connected sensors in a building (home automation or home care), body-worn health or fitness sensors, heart rate monitors, and various metrology or industrial devices are all examples of BLE applications.

 

Bluetooth Security Challenges

Bluetooth devices are susceptible to malicious attacks, including

  • PIN cracking
  • MAC spoofing
  • Man-In-The-Middle attack
  • BlueJacking attack
  • BlueSnarfing attack
  • BlueBugging attack
  • Denial-of-Service attack
  • Fuzzing attack
  • BlueBorne

 

Bluetooth Security: Pairing Mechanism

  • Legacy pairing
  • Secure Simple Pairing
  • Secure Connections

 

Legacy pairing

The original pairing method was used in earlier Bluetooth 1.0 to 2.0 versions. It uses basic algorithms for key generation, simplifying the connection process between devices with limited computational capabilities. Devices exchange a Temporary Key (TK), which is then used to generate a Short Term Key (STK) to encrypt the connection. This process is susceptible to attacks if the TK is weak or predictable. It is vulnerable to various security threats, such as passive eavesdropping and MITM attacks.

 

Secure Simple Pairing

Secure Simple Pairing (SSP) was implemented in version 2.1 to improve security. The link key is generated using the Elliptic Curve Diffie-Hellman (ECDH) for key exchange. This link key is subsequently utilized to generate additional keys for encryption and authentication. The SSP pairing offers four flexible association modes: Numeric Comparison, Passkey Entry, Just Works, and Out of Band.

 

Secure Connections

They are an enhanced version of the Secure Simple Pairing mechanism, which employs both more robust algorithms and lengthier key sizes. Secure Connections employs AES-CTR for encryption, HMAC-SHA256 for authentication, and P-256-ECDH with HMAC-SHA256 for key generation. In addition, it has implemented the AES-CCM algorithm to provide message integrity services.

 

Security Modes

Bluetooth devices operate in different security modes, which dictate how security is enforced:

Security Mode 1:

It is a non-secure mode with no authentication or encryption.

Security Mode 2:

It provides service-level-enforced security where a centralized security manager controls access.

Security Mode 3:

Security Mode 4:

 

Users can better protect their Bluetooth communications from potential threats by understanding and implementing these security features and practices.

 

Summarizing the Key Points

  • Bluetooth technology has evolved significantly, enhancing power efficiency, data speed, and security, making it essential for various IoT applications and device connectivity in modern networks.
  • Understanding Bluetooth's security modes, from non-secure to robust encryption, helps users implement better protection against potential threats and malicious attacks on their devices.
  • Bluetooth Low Energy supports efficient communication with reduced power consumption, making it ideal for applications like health sensors, home automation, and large-scale device networks.

 

Reference

“Attacks and Defenses in Short-Range Wireless Technologies for IoT.” IEEE Access 8 (January 1, 2020): 88892–932. https://doi.org/10.1109/access.2020.2993553.

Zeadally, Sherali, Farhan Siddiqui, and Zubair Baig. “25 Years of Bluetooth Technology.” Future Internet 11, no. 9 (September 9, 2019): 194. https://doi.org/10.3390/fi11090194.

Rakesh Kumar, Ph.D.

Rakesh Kumar holds a Ph.D. in electrical engineering, specializing in power electronics. He is a Senior Member of the IEEE Power Electronics Society, Class of 2021. He writes high-quality, long-form technical articles for global B2B semiconductor brands. Feel free to reach out to him at rakesh.a@ieee.org! Checkout his complete portfolio @muckrack.com/rakesh-kumar-phd | @linkedin.com/in/rakesh-kumar-phd

Join our mailing list!

Be the first to know about new products, special offers, and more.

Leave a Reply

We'd love to hear from you! Feel free to share your thoughts and comments below. Rest assured, your email address will remain private.

Name *
Email *
Captcha *
Rating:

Kynix

  • How to purchase

  • Order
  • Search & Inquiry
  • Shipping & Tracking
  • Payment Methods
  • Contact Us

  • Tel: 00852-6915 1330
  • Email: info@kynix.com
  • Follow Us

authentication

Kynix

© 2008-2026 kynix.com all rights reserved.