| Summary: | Asset tracking using Bluetooth Low Energy (BLE) beacons has attracted much attention after the release of the BLE protocol. However, the existing system is susceptible to hijacking and cloning of the BLE beacons. Therefore, this report presents a proposed solution to develop a secure and reliable asset tracking system using such device, in collaboration with MicroSec. It aims to secure the end-to-end communication channel between the BLE beacon and the web server. The project is consists of 3 subcomponents – BLE beacon CC2650STK SensorTag, Raspberry Pi and web server.
The security of the asset tracking system is done by adopting the concept of Public Key Infrastructure (PKI) using Public Key Encryption (PKE) and Elliptic Curve Cryptography (ECC), whereby it encrypts the information broadcasted by BLE beacon. The Raspberry Pi acts a gateway to pick up the encrypted message from the beacon via BLE and forward it to the web server for verification and authentication via TCP/IP socket connection. Thereafter, the received data can be displayed on a web interface. The proposed system therefore ensures the integrity and non-repudiation of the data broadcasted out by the BLE beacon and also prevents eavesdropping the communication channel.
|
|---|