強化的藍牙安全機制

An Enhanced Bluetooth Security Protocol

葉慈章(Tzu-Chang Yeh) ； 彭建仁(Jian-Ren Peng)

《明新學報》 34卷2期 (2008/08) Pp. 253-265

https://doi.org/10.29688/MHJ.200808.0017

摘要

藍牙是一種短距離無線通訊技術，應用於各種數位裝置間的連接與資料傳輸，使各種數位裝置真正擺脫了電纜的束縛。藍牙原先多應用於手機、耳機間，目前已普遍應用於PDA與個人電腦上；隨著機密資料傳輸的增加，藍牙安全的重要性也隨之提升。然而，由於藍牙的身分鑑別和金鑰的建立過程中，許多資訊是以明文方式傳遞，所以惡意的第三者因此可以假冒藍牙裝置通過鑑別，也可推導出通訊的加密金鑰，進而監聽傳送的資料。
本篇論文先介紹並仔細分析藍牙現有的安全機制，接下來探討其安全上的問題，最後並提出我們的改善機制，以有效提升安全性，讓藍牙技術可以安心地被應用於安全需求性較高的應用上。

關鍵字

藍牙 ； 身分鑑別 ； 安全

並列摘要

Bluetooth, a short range wireless communication standard, has made possible a number of digital devices totally free from being bonded to wires and cables. Its application which used to serve mostly cell phones and headsets has widely extended to PCs and PDAs. Given the data transferred has come to a greater degree of sensitivity, security issues involving Bluetooth transmission have raised many concerns. However, during the authentication and key exchange process of Bluetooth communication, a lot of information is transferred in plaintext, which allows a malicious third party to spoof the legal Bluetooth device to make it through the authentication, or to deduce the encryption key to eavesdrop the transferring data.
This paper will introduce and analyze the security mechanism of Bluetooth first, then discuss the security drawbacks on this mechanism, and finally an improved scheme is proposed that could be applied in high security demanding applications.

並列關鍵字

Bluetooth ； Authentication ； Security

參考文獻

禹帆(1991)。無線藍牙技術。臺北市:文魁資訊。

李純譯、周開波譯、童兆豐譯(1993)。無線通訊技術：探索藍牙。臺北市:五南。

林俊宏編譯(1993)。藍牙：無線連結技術。臺北市:全華。

曾煜棋編著、潘煜鉉編著、林致宇編著(2006)。無線區域及個人網路：隨意及感測器網路之技術與應用。臺北市:加樺國際。

Chen, J. J.,Adams, C.(2004).Short-range Wireless Technologies with Mobile Payments Systems.ICEC '04 International Conference on Electronic Commerce.(ICEC '04 International Conference on Electronic Commerce).