Low energy Bluetooth system with authentication during connectionless advertising and broadcasting
Validation information is communicated in a Bluetooth Low Energy (BLE) connected session. Validation data is generated using said validation information. An advertisement string is broadcast from the BLE device in a connectionless session along with said validation data.
1. The method to authenticate a Bluetooth Low Energy (BLE) connectionless communication, said method comprising:
providing a BLE device having a memory;
creating a secure, connected communication session with said BLE device;
communicating validation information in said connected session;
storing said validation information in said memory;
receiving, in a connectionless session, a BLE packet broadcast including an advertisement string and validation data; and
authenticating the source of said broadcast using said validation data contained in said BLE packet said validation information.
2. The method as in claim 1 wherein said authenticating is performed only once during said connectionless session.
3. The method as in claim 1 wherein said authenticating is performed a plurality of times at predetermined time intervals during said connectionless session.
4. The method as in claim 1 wherein said broadcast is received over an open channel.
5. The method as in claim 1 wherein said validation data is selected from a group consisting of: a sequence number and a shared key.
6. The method as in claim 1 wherein said authenticating comprises an Advanced Encryption Standard (AES) process.
7. The method as in claim 6 wherein said authenticating comprises a 4 AES process.
8. The method as in claim 1 wherein said authenticating comprises a Hash Based Message Authentication Code (HMAC) function.
9. The method as in claim 8 wherein said authenticating utilizes an SHA128 function.
10. A Bluetooth Low Energy (BLE) system comprising:
a BLE radio transceiver;
an electronic memory;
a microprocessor to connect said BLE transceiver in a connected session, the microprocessor to receive validation information in said connected session and to store the validation information in said electronic memory, the microprocessor to further receive a BLE packet containing an advertising string and validation data in a subsequent connectionless session, and to authenticate said broadcasted advertising string by comparing said stored validation information and said received validation data contained in BLE packet.
11. The BLE system as in claim 10 wherein the validation data is selected from the group consisting of a sequence number and an encrypted Bluetooth device (BD) address, and a hash value.
12. The BLE system as in claim 10 and further including an authentication chip electrically connected to said microprocessor.
13. A product including a non-transitory storage medium having stored thereon instructions that, when executed by a machine, result in:
creating a secure, connected Bluetooth low energy (BLE) communication link;
exchange validation information over said secure, connected communication link;
storing said validation information in said computer readable medium;
generating validation data using said validation information;
broadcasting a BLE packet containing an advertisement string and validating data from a BLE device in a connectionless session; and
Transmitting said validation data along with said advertisement string in a BLE Packet.
14. The product as in claim 13 wherein said non-transitory storage medium includes instructions for encrypting a plaintext message.
15. The product as in claim 13 wherein said non-transitory storage medium includes instructions for encrypting a Bluetooth Device (BD) address.