Security; Security Mode 3 (Link Level Encryption); Bluetooth Configuration - Motorola MC9190-G User Manual

4 - 2 MC9190-G User Guide
NOTE It is not recommended to perform Bluetooth wireless technology inquiry when high rate 802.11b operation is
required.

Security

The current Bluetooth specification defines security at the link level. Application-level security is not specified. This
allows application developers to define security mechanisms tailored to their specific need. Link-level security
occurs between devices, not users, while application-level security can be implemented on a per-user basis. The
Bluetooth specification defines security algorithms and procedures needed to authenticate devices, and if needed,
encrypt the data flowing on the link between the devices. Device authentication is a mandatory feature of Bluetooth
while link encryption is optional.
Pairing of Bluetooth devices is accomplished by creating an initialization key that is used to authenticate the
devices and create a link key for them. Entering a common PIN number in the devices being paired generates the
initialization key. The PIN number is never sent over the air. By default, the Bluetooth stack responds with no key
when a key is requested (it is up to user to respond to the key request event). Authentication of Bluetooth devices
is based-upon a challenge-response transaction. Bluetooth allows for a PIN number or passkey that is used to
create other 128-bit keys used for security and encryption. The encryption key is derived from the link key used to
authenticate the pairing devices. Also worthy of note is the limited range and fast frequency hopping of the
Bluetooth radios that makes long-distance eavesdropping difficult.
Recommendations are:
•
Perform pairing in a secure environment
•
Keep PIN codes private and don't store the PIN codes in the MC9190-G
•
Implement application-level security.
The Microsoft stack supports Smart-pairing. For detailed information, refer to the Microsoft MSDN.

Security Mode 3 (Link Level Encryption)

The MC9190-G supports Security Level 3 (Link Level Encryption). Link level encryption is the data security process
of encrypting information at the data link level as it is transmitted between two devices.
When using Microsoft Bluetooth Stack, set the link level encryption using an API call, API CALL GOES HERE.
Refer to the Microsoft MSDN for more information.
When using StoneStreet One Bluetooth Stack, set Encrypt Link On All Outgoing Connections checkbox in the
Settings > Security tab. Alternately set link level encryption using an API call, CALL GOES HERE. Refer to the
Motorola EMDK for more information.

Bluetooth Configuration

By default, the MC9190-G is configured to using the Microsoft stack. Refer to the MC9190-G Integrator Guide, for
information on switching between the Microsoft Bluetooth stack and the StoneStreet One Bluetooth stack.
Table 4-1 list the services supported by the StoneStreet One Bluetooth stack and the Microsoft Bluetooth stack.