Security apparatus and method during BLUETOOTH pairing

• US 20070032195A1
• Filed: 10/10/2006
• Published: 02/08/2007
• Est. Priority Date: 09/12/2001
• Status: Abandoned Application

• Current Assignee: Agere Systems Incorporated (Broadcom, Inc.)
• Original Assignee: Agere Systems Incorporated (Broadcom, Inc.)
• Inventors: Mooney, Philip, Kurisko, Mark
• Application Number:
  US11/544,729
• Publication Number:
  US 20070032195A1
• Time in Patent Office: Days
• US Class Current: 455/41.200
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 52/50 at the moment of starting communication in a multiple access environment
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A BLUETOOTH device is provided wherein the output RF transmission power level during pairing is purposefully reduced from otherwise conventional or normal communication levels to a low power level, greatly reducing the range of possible interception. Security can be improved even more by further reducing the transmit power even below that defined for a class 2 radio to an extremely low power level. After the link keys have been passed and/or other pairing processes, the BLUETOOTH devices may safely return to normal power levels to continue communications. Thus, a BLUETOOTH device is forced to radiate in low power when pairing is performed. The user(s) may be directed to co-locate the pairing BLUETOOTH devices in any appropriate manner, e.g., through a display prompt on the BLUETOOTH device. In an alternative embodiment, a BLUETOOTH device may be required to transmit data keys (e.g., a link key) and/or other pairing operations over a temporary wired connection (or temporary line-of-sight or near line-of-sight connection such as infrared) to another BLUETOOTH device.

Claims

1-18. -18. (canceled)

19. A method of providing security during a pairing operation of a wireless network device, comprising:

receiving data at said wireless network device associated with network establishment during network establishment, said data received over a physical front end during said pairing operation; and

once said pairing operation is completed, switching to a wireless front end to wirelessly communicate data between said wireless network device and a network.

20. The method of providing security during a pairing operation of a wireless network device according to claim 19, wherein:

said physical front end is a wired front end.

21. The method of providing security during a pairing operation of a wireless network device according to claim 19, wherein:

said data includes link key information.

22. The method of providing security during a pairing operation of a wireless network device according to claim 19, wherein:

said wireless network device is a BLUETOOTH piconet device.

23. A method for securely transmitting a data key from a wireless network device, comprising:

transmitting with a physical front end of said wireless network device said data key to another network device during a pairing operation; and

after said data key has been transmitted, switching to an RF front end of said wireless network device to transmit wirelessly.

24. The method for securely transmitting a data key from a wireless network device according to claim 23, wherein:

said wireless network device is a piconet network device.

25. The method for securely transmitting a data key from a wireless network device according to claim 23, wherein:

said physical front end is a infrared connection.

26. The method for securely transmitting a data key from a wireless network device according to claim 23, wherein:

said wireless network device is a BLUETOOTH piconet device.

27. The method for securely transmitting a data key from a wireless network device according to claim 23, wherein:

said physical connection is a wired connection.

28. The method for securely transmitting a data key from a wireless network device according to claim 25, wherein:

said infrared connection transmits said data key along a directed path towards another wireless network device.

29. Apparatus for providing security during a pairing operation of a wireless network device, comprising:

means for receiving data at said wireless network device associated with network establishment during network establishment, said data received over a physical front end during said pairing operation; and

means for switching to a wireless front end to wirelessly communicate data between said wireless network device and a network once said pairing operation is completed.

30. The apparatus for providing security during a pairing operation of a wireless network device according to claim 29, wherein:

said network establishment is a pairing operation.

31. The apparatus for providing security during a pairing operation of a wireless network device according to claim 29, wherein:

said data is a link key.

32. The apparatus for providing security during a pairing operation of a wireless network device according to claim 29, wherein:

said wireless network device is a BLUETOOTH piconet device.

33. Apparatus for securely transmitting a data key from a wireless network device, comprising:

means for transmitting with an physical front end of said wireless network device said data key to another network device during a pairing operation; and

means for switching to an RF front end of said wireless network device to transmit wirelessly after said data key has been transmitted.

34. The apparatus for securely transmitting a data key from a device according to claim 33, wherein:

said physical front end is an infrared front end.

35. The apparatus for securely transmitting a data key from a device according to claim 33, wherein:

said wireless network device is a BLUETOOTH piconet device.