Method and apparatus for ensuring security of users of short range wireless enable devices
View Patent ↗Master and slave Bluetooth-enabled devices communicate with other by sending messages using a carrier frequency that is constantly hopping from one frequency to another. In the prior art, each frequency in the sequence of frequencies, known as a hopping sequence, is determined as a known function of the master's Bluetooth address (BD_ADDR) and a universal time parameter. A computer-strong eavesdropper who is listening to one or more frequency bands over a period of time and within range of a user's piconet could determine the BD_ADDR of the user's device by comparing a detected hopping sequence with the hopping sequence associated with each possible BD_ADDR. Once the BD_ADDR of a user's device is determined, the user's location can thereafter be tracked as he moves from location to location using that device. To prevent this, the hopping sequence is determined as a known function of the master's BD_ADDR, a universal time parameter and a seed, which is a random or pseudo-random number communicated between the master to the slave and which is changed each time a new session begins on one of the user's devices operating on the piconet. The eavesdropper is then impeded from associating a detected pattern of channel usage with a particular master's BD_ADDR and its user.
1. A method for use by a device operating on a network over which multiple devices belonging to a defined set communicate with each other by transmitting and receiving messages, the method comprising:
transmitting the messages at a frequency that hops from one frequency to another over time in accordance with a predictable pseudo-random hopping sequence that determines each frequency in the hopping sequence from a particular identifier associated with one of the devices and a universal time parameter;
characterized in that:
each frequency in the hopping sequence is determined from a known function of the particular identifier, the universal time parameter, and a seed that is changed over time and that further randomizes the hopping sequence from the predictable pseudo-random hopping sequence that which would otherwise be determined from the particular identifier and the universal time parameter alone, whereby a pattern of changing transmit frequencies that is detected in messages received by a device outside the defined set is impeded from being associated with the particular identifier associated with one of the devices within the set.
2. The method of claim 1 wherein the seed is changed periodically.
3. The method of claim 1 wherein the seed is changed aperiodically.
4. The method of claim 1 wherein the seed is changed when a new session begins on one of the devices in the set.
5. The method of claim 1 wherein the known function is a one-way function.
6. The method of claim 1 wherein the seed is at least a first random or pseudo-random number.
7. The method of claim 4 wherein the seed is at least a first random or pseudo-random number that determines in part the sequence of frequencies in the hopping sequence used for transmitting messages within a current session.
8. The method of claim 6 wherein the seed is a combination of the first random or pseudo-random number and at least a second random or pseudo-random number that determined in part the sequence of frequencies in the hopping sequence used for transmitting messages within at least one previous session.
9. The method of claim 6 wherein the random or pseudo-random number is received in an encrypted form by the device from one of the other devices in the set, and the encrypted random or pseudo-random number is decrypted before being used as the seed.
10. A method for use in a Bluetooth-enabled device operating on a wireless network over which multiple Bluetooth-enabled devices within a defined set communicate with each other by transmitting and receiving messages to and from a master device within the set, the method comprising:
transmitting the messages at a frequency that hops from one frequency to another over time in accordance with a predictable pseudo-random hopping sequence that determines each frequency within the hopping sequence from a Bluetooth address (BD_ADDR) associated with the master device and a universal time parameter;
characterized in that:
each frequency in the hopping sequence is determined from a known function of the master device's BD_ADDR, the universal time parameter, and a seed that is changed over time and that further randomizes the hopping sequence from the predictable pseudo-random hopping sequence that which would otherwise be determined from the master device's BD_ADDR and the universal time parameter alone, whereby a pattern of changing transmit frequencies that is detected in messages received by a device outside the defined set is impeded from being associated with the master device's BD_ADDR.
11. The method of claim 10 wherein the seed is changed periodically.
12. The method of claim 10 wherein the seed is changed aperiodically.
13. The method of claim 10 wherein the seed is changed when a new session begins on one of the devices in the set.
14. The method of claim 10 wherein the known function is a one-way function.
15. The method of claim 10 wherein the seed is at least a first random or pseudo-random number.
16. The method of claim 13 wherein the seed is at least a first random or pseudo-random number that determines in part the sequence of frequencies in the hopping sequence used for transmitting messages within a current session.
17. The method of claim 15 wherein the seed is a combination of the first random or pseudo-random number and at least a second random or pseudo-random number that determined in part the sequence of frequencies in the hopping sequence used for transmitting messages within at least one previous session.
18. The method of claim 15 wherein the random or pseudo-random number is received in an encrypted form by the device from one of the other devices in the set, and the encrypted random or pseudo-random number is decrypted before being used as the seed.
19. Apparatus for use in a device operating on a network over which multiple devices belonging to a defined set communicate with each other by transmitting and receiving messages, the apparatus comprising:
means for transmitting the messages at a frequency that hops from one frequency to another over time in accordance with a predictable pseudo-random hopping sequence; and
means for determining each frequency in the hopping sequence from a known function of a particular identifier associated with one of the devices in the set, a universal time parameter, and a seed that is changed over time and that further randomizes the hopping sequence from the predictable pseudo-random hopping sequence that would otherwise be determined from the particular identifier and the universal time parameter alone, whereby a pattern of changing transmit frequencies that is detected in messages received by a device outside the defined set is impeded from being associated with the particular identifier associated with one of the devices within the set.
20. The apparatus of claim 19 wherein the seed is changed periodically.
21. The apparatus of claim 19 wherein the seed is changed aperiodically.
22. The apparatus of claim 19 wherein the seed is changed when a new session begins on one of the devices in the set.
23. The apparatus of claim 19 wherein the known function is a one-way function.
24. The apparatus of claim 19 wherein the seed is at least a first random or pseudo-random number.
25. The apparatus of claim 22 wherein the seed is at least a first random or pseudo-random number that determines in part the sequence of frequencies in the hopping sequence used for transmitting messages within a current session.
26. The apparatus of claim 24 wherein the seed is a combination of the first random or pseudo-random number and at least a second random or pseudo-random number that determined in part the sequence of frequencies in the hopping sequence used for transmitting messages within at least one previous session.
27. The apparatus of claim 24 wherein the random or pseudo-random number is received in an encrypted form by the device from one of the other devices in the set, and the processor decrypts the encrypted random or pseudo-random number.
28. Apparatus for use in a Bluetooth-enabled device operating on a wireless network over which multiple Bluetooth-enabled devices within a defined set communicate with each other by transmitting and receiving messages to and from a master device within the set, the apparatus comprising:
means for transmitting the messages at a frequency that is hops from one frequency to another over time in accordance with a predicable pseudo-random hopping sequence; and
means for determining each frequency in the hopping sequence from a known function of a Bluetooth address (BD_ADDR) associated with the master device, a universal time parameter, and a seed that is changed over time and that further randomizes the hopping sequence from the predictable pseudo-random sequence that would otherwise be determined from the master device's BD_ADDR and the universal time parameter alone, whereby a pattern of changing transmit frequencies that is detected in messages received by device outside the defined set is impeded from being associated with the master device's BD_ADDR.
29. The apparatus of claim 28 wherein the seed is changed periodically.
30. The apparatus of claim 28 wherein the seed is changed aperiodically.
31. The apparatus of claim 28 wherein the seed is changed when a new session begins on one of the devices in the set.
32. The apparatus of claim 28 wherein the known function is a one-way function.
33. The apparatus of claim 28 wherein the seed is at least a first random or pseudo-random number.
34. The apparatus of claim 31 wherein the seed is at least a first random or pseudo-random number that determines in part the sequence of frequencies in the hopping sequence used for transmitting messages within in a current session.
35. The apparatus of claim 33 wherein the seed is a combination of the first random or pseudo-random number and at least a second random or pseudo-random number that determined in part the sequence of frequencies in the hopping sequence used for transmitting messages within at least one previous session.
36. The apparatus of claim 33 wherein the random or pseudo-random number is received in an encrypted from by the device from one of the other devices in the set, and the processor decrypts the encrypted random or pseudo-random number.