A Location Privacy Analysis of Bluetooth Mesh
A Location Privacy Analysis of Bluetooth Mesh
复制标题
蓝牙 Mesh 的位置隐私分析
DOI：
10.1145/3339252.3340507
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
J. Steffan
中科院分区：
文献类型：
--
作者：
Matthias Caesar;J. Steffan
先前的研究表明，低功耗蓝牙信标可以实现非常精确的室内定位。这就引出了一个问题，即蓝牙Mesh网络是否会无意中达到同样的目的，从而导致意外的位置隐私侵犯。我们分析了典型的蓝牙Mesh安装广播的信息，并表明它确实可以被潜在的恶意智能手机应用程序利用，以便在建筑物内定位智能手机用户。这是由每个网格节点定期发出的唯一广告地址促进的。此外，我们表明，在网状网络的一侧实现地址随机化完全阻止了这种类型的定位，而不会对网状网络的功能产生负面影响。
Previous research demonstrated that Bluetooth Low Energy beacons enable very accurate indoor positioning. This leads to the question whether a Bluetooth Mesh network could inadvertently serve the same purpose, leading to unexpected location privacy violations. We analyze the information broadcasted by a typical Bluetooth Mesh installation and show that it can indeed be utilized by a potentially malicious smartphone app in order to localize a smartphone user within a building. This is facilitated by the unique advertising address regularly emitted by each mesh node. Further, we show that implementing address randomization on the side of the mesh network completely prevents this type of positioning without having a negative impact on the functioning of the mesh network.