Bluetooth Secure Simple Pairing with enhanced security level

摘要

Bluetooth version 5.0 introduced flexibility in SSP pairing protocol. It introduced P-192 elliptic curve for devices that support all versions before 4.0 and P-256 elliptic curve for devices that support 4.0, 4.1, 4.2, and 5.0 versions. Despite enhanced security level, there is a possibility of capturing the Input-Output capability and public keys during the initial phase of pairing and thus impersonating them. This paper introduces enhanced Bluetooth Secure Simple Pairing protocol by augmenting two new security levels. The protocol commits for public keys and IO capability. This ensures that the information reaches to the legitimate pairing devices. Thereby attempts to reduce Man-In-The-Middle attack in the initial phase and strengthen the link/session key.