Security apparatus and method during BLUETOOTH pairing

• US 7,174,130 B2
• Filed: 09/12/2001
• Issued: 02/06/2007
• Est. Priority Date: 09/12/2001
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Agere Systems Incorporated (Broadcom, Inc.)
• Inventors: Mooney, Philip D., Kurisko, Mark A.
• Primary Examiner(s): Nguyen; Duc
• Assistant Examiner(s): Win; Aung T.
• Application Number:
  US09/949,673
• Publication Number:
  US 20030050009A1
• Time in Patent Office: 1,973 Days
• Field of Search: 455/41.1, 455/41.2, 455/41.3, 455/69, 455/410, 455/13.4, 455/117, 455/127.1, 455/127.5, 455/330, 455/278, 455/343.1, 455/522, 455/411, 713/300
• US Class Current: 455/41.2
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 52/50 at the moment of starting communication in a multiple access environment
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A BLUETOOTH device is provided wherein the output RF transmission power level during pairing is purposefully reduced from otherwise conventional or normal communication levels to a low power level, greatly reducing the range of possible interception. Security can be improved even more by further reducing the transmit power even below that defined for a class 2 radio to an extremely low power level. After the link keys have been passed and/or other pairing processes, the BLUETOOTH devices may safely return to normal power levels to continue communications. In an alternative embodiment, a BLUETOOTH device may be required to transmit data keys (e.g., a link key) and/or other pairing operations over a temporary wired connection (or temporary line-of-sight or near line-of-sight connection such as infrared) to another BLUETOOTH device.

Claims

1. A method of providing security during a pairing operation of a wireless network device, comprising:

entering a low power pairing mode within said wireless network device, said wireless network device comprised of said low power pairing mode and a high power communications mode;

receiving data associated with network establishment during said low power pairing mode; and

rejecting said received data if transmitted with said high power communications mode;

wherein said low power pairing mode is based upon a power level to allow close range communications with enhanced security.

2. The method of providing security during a pairing operation of a wireless network device according to claim 1, wherein:

said network establishment is a pairing operation.

3. The method of providing security during a pairing operation of a wireless network device according to claim 1, wherein:

said data includes link key information.

4. The method of providing security during a pairing operation of a wireless network device according to claim 1, wherein:

said wireless network device is a BLUETOOTH piconet device.

5. A method for securely transmitting a data key from a wireless network device, comprising:

transmitting with an RF front end of said wireless network device said data key to another network device during a pairing operation with a low power pairing mode;

rejecting received data if transmitted with a high power communications mode; and

after said data key has been transmitted, resetting said RF front end of said wireless network device to transmit with a high power communications mode.

6. The method for securely transmitting a data key from a wireless network device according to claim 5, wherein:

said wireless network device is a piconet network device.

7. The method for securely transmitting a data key from a wireless network device according to claim 5, wherein:

said low power level is lower than a lowest normal communication power level.

8. The method for securely transmitting a data key from a wireless network device according to claim 5, wherein:

said wireless network device is a BLUETOOTH piconet device.

9. The method for securely transmitting a data key from a wireless network device according to claim 5, wherein:

said RF front end is forced to transmit at said low power level during pairing operations between said wireless network device and said another wireless network device.

10. The method for securely transmitting a data key from a wireless network device according to claim 5, wherein:

said RF front end of said wireless network device transmits said data key along a directed path towards another wireless network device.

11. Apparatus for providing security during a pairing operation of a wireless network device, comprising:

means for entering a low power pairing mode within said wireless network device, said wireless network device comprised of said low power pairing mode and a high power communications mode;

means for receiving data during said low power pairing mode; and

means for rejecting said received data if transmitted with said high power communications mode;

wherein said low power pairing mode is based upon a power level to allow close range communications with enhanced security.

12. The apparatus for providing security during a pairing operation of a wireless network device according to claim 11, wherein:

said network establishment is a pairing operation.

13. The apparatus for providing security during a pairing operation of a wireless network device according to claim 11, wherein:

said data is a link key.

14. The apparatus for providing security during a pairing operation of a wireless network device according to claim 11, wherein:

said wireless network device is a BLUETOOTH piconet device.

15. Apparatus for securely transmitting a data key from a wireless network device, comprising:

means for transmitting with an RF front end of said wireless network device said data key to another network device during a pairing operation with a low power pairing mode;

rejecting received data if transmitted with a high power communications mode; and

means for resetting said RF front end of said wireless network device to transmit at with a high power communications mode after said data key has been transmitted.

16. The apparatus for securely transmitting a data key from a device according to claim 15, wherein:

said low power level is lower than a lowest normal communication power level.

17. The apparatus for securely transmitting a data key from a device according to claim 15, wherein:

said wireless network device is a BLUETOOTH piconet device.

18. The apparatus for securely transmitting a data key from a wireless network device according to claim 15, wherein:

said means for forcing said RF front end sets said RF front end to transmit at said low power level during pairing operations between said wireless network device and said another wireless network device.