6. Bluetooth Security

6.3 Pairing and Authentication Procedures

LMP-Pairing is a procedure that authenticates two devices, based on a PIN, and subsequently creates a common link key that is used as the basis for a trusted relationship or a secure connection. This procedure consists of the steps (Figure 5): creation of an initialization key (based on a random number and PIN (PNBB here)), LMP-authentication based on the initialization key and creation of the common link key.

Figure 5: LMP-pairing flow-chart.

 

LMP-authentication (Figure 6) is a procedure for verifying the identity of a remote device. The procedure is based on a challenge-response mechanism using a random number, a secret key and the BD_ADDR of the non-initiating device. The secret key can be a previously exchanged link key or an initialization key created based on a PIN as used in pairing procedure.

Figure 6: LMP-authenticate procedure.