Bluetooth low energy (BLE) advertising packet security
A metrology device may include a processor and a non-transitory computer-readable media storing instructions that, when executed by the processor, cause the processor to perform operations. The operations may include generating a challenge message, the challenge message including a challenge; issuing the challenge message in a scannable undirected advertising message; receiving from the field tool a response solution to the challenge message, the response solution being calculated based at least in part on the challenge and a challenge key associated with the challenge, and verifying the response solution based at least in part on a secure hash algorithm (SHA). The challenge key may include a fixed value specific to a manufacturer of the metrology device and known to the field tool and the metrology device.
1. A non-transitory computer-readable medium storing instructions that, when executed, cause a processor to perform operations, comprising:
generating, by a metrology device, a challenge message, the challenge message including a challenge key;
issuing, by the metrology device and via a network, the challenge message in a scannable undirected advertising message;
receiving, by the metrology device and from a field tool, a response solution to the challenge message, the response solution being calculated based at least in part on the challenge key; and
verifying, by the metrology device, the response solution based at least in part on a secure hash algorithm (SHA),
wherein the metrology device calculates the challenge key using the SHA based at least in part on inputs known to the metrology device and the field tool, the challenge key further including a fixed value provided to the metrology device during manufacturing of the metrology device by a manufacturer, and
wherein the fixed value is specific to the manufacturer of the metrology device and known to the field tool and the metrology device.
2. The non-transitory computer-readable medium of claim 1 , wherein the metrology device communicates with the field tool over a Bluetooth low-energy (BLE) network.
3. The non-transitory computer-readable medium of claim 1 , the operations further comprising broadcasting an advertisement of the metrology device.
4. The non-transitory computer-readable medium of claim 3 , the operations further comprising based at least in part on the response solution being verified, adding the field tool to a device list stored in memory accessible by the metrology device.
5. The non-transitory computer-readable medium of claim 3 , wherein the advertisement is broadcast based at least in part on instructions received from a headend device, an indication that communication with the headend device is lost, or combinations thereof.
6. The non-transitory computer-readable medium of claim 1 , further comprising:
sending a confirmation message to the field tool indicating that the response solution is verified as correct; and
sending a directed advertising message to a Bluetooth device address (BDA) of the field tool based at least in part on the response solution being verified, the directed advertising message including a BDA of the metrology device.
7. The non-transitory computer-readable medium of claim 6 , further comprising:
receiving a connection request from the field tool based on the directed advertising message sent to the BDA of the field tool;
verifying the BDA of the field tool; and
based on the verifying of the BDA of the field tool, pairing the metrology device and the field tool.
8. The non-transitory computer-readable medium of claim 1 , wherein the response solution includes a hash-based message authentication code (HMAC).
9. The non-transitory computer-readable medium of claim 1 , wherein the fixed value is provided to the metrology device during manufacturing by installation of software or firmware.
10. The non-transitory computer-readable medium of claim 9 , wherein the fixed value is included as code or within a lookup-table stored in memory of the metrology device.
11. A metrology device comprising:
a processor; and
a non-transitory computer-readable medium storing instructions that, when executed by the processor, cause the processor to perform operations comprising:
generating a challenge message, the challenge message including a challenge key;
issuing the challenge message in a scannable undirected advertising message;
receiving from a field tool a response solution to the challenge message, the response solution being calculated based at least in part on the challenge key; and
verifying the response solution based at least in part on a secure hash algorithm (SHA),
wherein the metrology device calculates the challenge key using the SHA based at least in part on inputs known to the metrology device and the field tool, the challenge key further including a fixed value provided to the metrology device during manufacturing of the metrology device by a manufacturer, and
wherein the fixed value is specific to the manufacturer of the metrology device and known to the field tool and the metrology device.
12. The metrology device of claim 11 , wherein the metrology device communicates with the field tool over a Bluetooth low-energy (BLE) network.
13. The metrology device of claim 11 , the operations further comprising broadcasting an advertisement of the metrology device.
14. The metrology device of claim 13 , the operations further comprising based at least in part on the response solution being verified, adding the field tool to a device list stored in memory accessible by the metrology device.
15. The metrology device of claim 13 , wherein the advertisement is broadcast based at least in part on instructions received from a headend device, an indication that communication with the headend device is lost, or combinations thereof.
16. The metrology device of claim 11 , further comprising:
sending a confirmation message to the field tool indicating that the response solution is verified as correct; and
sending a directed advertising message to a Bluetooth device address (BDA) of the field tool based at least in part on the response solution being verified, the directed advertising message including a BDA of the metrology device.
17. The metrology device of claim 16 , further comprising:
receiving a connection request from the field tool based on the directed advertising message sent to the BDA of the field tool;
verifying the BDA of the field tool; and
based on the verifying of the BDA of the field tool, pairing the metrology device and the field tool.
18. The metrology device of claim 11 , wherein the response solution includes a hash-based message authentication code (HMAC).
19. The metrology device of claim 11 , wherein the metrology device is a battery-powered device (BPD).
20. The metrology device of claim 11 , wherein the fixed value is provided to the metrology device during manufacturing by installation of software or firmware.
21. A method comprising:
generating, by a metrology device, a challenge message, the challenge message including a challenge key;
issuing, by the metrology device and via a network, the challenge message in a scannable undirected advertising message;
receiving, by the metrology device and from a field tool, a response solution to the challenge message, the response solution being calculated based at least in part on the challenge key; and
verifying, by the metrology device, the response solution based at least in part on a secure hash algorithm (SHA),
wherein the metrology device calculates the challenge key using the SHA based at least in part on inputs known to the metrology device and the field tool, the challenge key further including a fixed value provided to the metrology device during manufacturing of the metrology device by a manufacturer, and
wherein the fixed value is specific to the manufacturer of the metrology device and known to the field tool and the metrology device.
22. The method of claim 21 , wherein the fixed value is provided to the metrology device during manufacturing by installation of software or firmware.
23. The method of claim 21 , further comprising:
broadcasting an advertisement of the metrology device; and
based at least in part on the response solution being verified, adding the field tool to a device list stored in memory accessible by the metrology device,
wherein the advertisement is broadcast based at least in part on instructions received from a headend device, an indication that communication with the headend device is lost, or combinations thereof.
24. The method of claim 21 , further comprising:
sending a confirmation message to the field tool indicating that the response solution is verified as correct; and
sending a directed advertising message to a Bluetooth device address (BDA) of the field tool based at least in part on the response solution being verified, the directed advertising message including a BDA of the metrology device;
receiving a connection request from the field tool based on the directed advertising message sent to the BDA of the field tool;
verifying the BDA of the field tool; and
based on the verifying of the BDA of the field tool, pairing the metrology device and the field tool.
25. The method of claim 21 , wherein:
the response solution includes a hash-based message authentication code (HMAC), and
the metrology device is a battery-powered device (BPD).