Bluetooth Man-In-The-Middle attack based on Secure Simple Pairing using Out Of Band association model

摘要

As an interconnection technology, Bluetooth has to address all traditional security problems, well known from the distributed networks. Moreover, as Bluetooth networks are formed by the radio links, there are also additional security aspects whose impact is yet not well understood. In this paper, we propose a novel man-in-the-middle (MITM) attack against Bluetooth enabled mobile phone that support simple secure pairing( SSP). The SSP association models such as numeric comparison, just works and passkey entry are found to be not more secure. Here we propose the out of band (OOB) channeling with enhanced security than the previous methods.