Method and system for managing bluetooth communication using software or firmware filtering

• US 8,190,716 B2
• Filed: 12/11/2007
• Issued: 05/29/2012
• Est. Priority Date: 08/24/2007
• Status: Expired due to Fees

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Zhodzishsky, Victor
• Primary Examiner(s): SALAD, ABDULLAHI ELMI
• Application Number:
  US12/001,311
• Publication Number:
  US 20090055516A1
• Time in Patent Office: 1,631 Days
• Field of Search: 709220-223, 455 411- 412, 713/100
• US Class Current: 709/220
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 48/16 Discovering, processing access restriction or access information
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

Aspects of method and system for managing secure Bluetooth communication using software or firmware filtering are provided. In this regard, the IT or system administration may select one or more Bluetooth profiles for Bluetooth devices and inform the host software on the selection. The host software passes the information to host control interface (HCI). A Bluetooth security filter is integrated into the HCI to ensure a security policies set for the Bluetooth device. The Bluetooth security filter may be part of the Bluetooth host stack or the Bluetooth host controller stack. All HCI packets such as HCI commands, HCI events and HCI data packets are parsed in the Bluetooth security filter and act upon the policies determined by the IT or system administration.

Claims

1. A method for wireless communication, the method comprising:

receiving from a centralized network management entity, one or more messages by a Bluetooth device that enable managing secure communication by said Bluetooth device;

configuring by said Bluetooth device, a host control interface (HCI) of said Bluetooth device to enable or disable one or more security policies based on said received one or more messages to enable said secure communication; and

filtering one or more HCI packets based on said configuration via a firmware filter which is communicatively coupled to a HCI layer, and said firmware filter and said HCI layer are part of one of;

a Bluetooth host stack of said Bluetooth device and a Bluetooth host controller stack of said Bluetooth device.

2. The method according to claim 1, wherein said one or more security policies affects usage of one or more profiles and/or usage models.

3. The method according to claim 1, comprising controlling transmission and/or reception of information between said Bluetooth device and one or more other Bluetooth enabled devices based on said configuration.

4. The method according to claim 1, comprising filtering HCI Commands originating from a Bluetooth upper layer stack associated with said Bluetooth device based on said configuration.

5. The method according to claim 1, comprising filtering HCI events from a Bluetooth Controller Driver associated with said Bluetooth device based on said configuration.

6. The method according to claim 1, comprising filtering HCI data packets communicated to and from said Bluetooth device based on said configuration.

7. The method according to claim 1, wherein said centralized management entity comprises an administration console.

8. A system for processing signals, the system comprising:

one or more circuits for use in a Bluetooth device, said one or more circuits being operable to;

receive from a centralized network management entity, one or more messages that enable secure communication by said Bluetooth device;

configure a host control interface (HCI) of said Bluetooth device to enable or disable one or more security policies based on said received one or more messages to enable said secure communication; and

filter one or more HCI packets based on said configuration via a firmware filter which is communicatively coupled to a HCI layer, and said firmware filter and said HCI layer are part of one of;

a Bluetooth host stack of said Bluetooth device and a Bluetooth host controller stack of said Bluetooth device.

9. The system according to claim 8, wherein said one or more security policies affects usage of one or more profiles and/or usage models.

10. The system according to claim 8, wherein said one or more circuits controls transmission and/or reception of information between said Bluetooth device and one or more other Bluetooth enabled devices based on said configuration.

11. The system according to claim 8, wherein said one or more circuits are operable to filter HCI Commands originating from a Bluetooth upper layer stack associated with said Bluetooth device based on said configuration.

12. The system according to claim 8, wherein said one or more circuits are operable to filter HCI events from a Bluetooth Controller Driver associated with said Bluetooth device based on said configuration.

13. The system according to claim 8, wherein said one or more circuits are operable to filter HCI data packets communicated to and from said Bluetooth device based on said configuration.

14. The system according to claim 8, wherein said centralized management entity comprises an administration console.

15. A non-transitory computer-readable medium embodying a program executable in a computing device, the program comprising:

code that receives from a centralized network management entity, one or more messages that enable secure communication by a Bluetooth device;

code that configures a host control interface (HCI) of said Bluetooth device to enable or disable one or more security policies based on said received one or more messages to enable said secure communication; and

code that filters one or more HCI packets based on said configuration via a firmware filter which is communicatively coupled to a HCI layer, and said firmware filter and said HCI layer are part of one of;

a Bluetooth host stack of said Bluetooth device and a Bluetooth host controller stack of said Bluetooth device.

16. The non-transitory computer-readable medium according to claim 15, wherein said one or more security policies affects usage of one or more profiles and/or usage models.

17. The non-transitory computer-readable medium according to claim 15, wherein the program further comprises code that controls transmission and/or reception of information between said Bluetooth device and one or more other Bluetooth enabled devices based on said configuration.

18. The non-transitory computer-readable medium according to claim 15, wherein the program further comprises code that filters HCI Commands originating from a Bluetooth upper layer stack associated with said Bluetooth device based on said configuration.

19. The non-transitory computer-readable medium according to claim 15, wherein the program further comprises code that filters HCI events from a Bluetooth Controller Driver associated with said Bluetooth device based on said configuration.

20. The non-transitory computer-readable medium according to claim 15, wherein the program further comprises code that filters HCI data packets communicated to and from said Bluetooth device based on said configuration.