“手机+可穿戴设备”的低功耗蓝牙安全实验技术

Bluetooth Low Energy Security Experiment Technology of“Smart Phone+Wearable Device”

可穿戴技术创新驱动了以可穿戴设备为支点的新移动应用领域飞速发展,低功耗蓝牙作为其中的关键性技术成为近年来高校计算机类专业实验技术研究与实验教学改革关注的热点。针对当前教学缺乏低功耗蓝牙协议安全实验原理与实验技术的现状,通过深入而系统地分析低功耗蓝牙协议体系结构、工作原理和安全威胁构建起实验原理教学体系,进而提出了"手机+可穿戴设备"的新型实验技术并给出了协议测量和可视化分析等关键技术的实现方案。在此基础上,应用"手机+可穿戴设备"实现了真实环境下低功耗蓝牙协议通知、写请求和写响应等交互过程的安全性分析,并进一步通过报文窃听、伪造和篡改实现了重放攻击,为面向一流本科课程和"新工科"建设的实验教学改革创新提供了新的技术途径。

The innovation of wearable technology has driven the rapid development of new mobile application fields with wearable devices as the fulcrum.Bluetooth Low Energy has become a hot spot in experimental technology research and experimental teaching reform in college computer major as an important technology in recent years.In view of the current lack of Bluetooth Low Energy protocol security experiment principle and experiment technology,through an in-depth and systematic analysis of the Bluetooth Low Energy protocol architecture,working principle and security threats,an experimental principle teaching system is constructed,and then a new experimental technology of“smart phone+wearable device”is proposed,and the implementation scheme of key technologies including protocol measurement and visual analysis is presented.On this basis,the application of“smart phone+wearable device”realizes the security analysis of the interactive process including Notification,Write Request and Write Response in Bluetooth Low Energy protocol in actual environment,and further realizes the replay attack by packet eavesdropping,forgery and tampering,which provides a new technical approach to the reform and innovation of experimental teaching for the first-class undergraduate courses and construction of“Emerging Engineering Education”.