Introducing AES and ECDSA to BLE Communication for Enhanced Security

İngilizce (OpenAlex)

Bluetooth Low Energy (BLE) has recently seen widespread adoption among Internet of Things (IoT) applications, sensor networks, personal area networks, and automation systems, thanks to its “lightweight" nature and low energy consumption. However, it lacks the most advanced security measures, which raises security concerns for use in critical scenarios. This work aims to integrate higher security standards into the BLE protocol, namely by ensuring confidentiality via Advanced Encryption Standard (AES) and by enabling integrity and non-repudiation through the Elliptic Curve Digital Signature Algorithm (ECDSA). The proposed framework was validated and tested over a testbed containing ESP32s with a BLE module, a camera, and an LCD screen. While the communication and computation overhead increases due to cryptographic redundancies, optimization methods were offered to minimize the impact. Hence, the desired security levels in confidentiality, integrity, and non-repudiation were successfully achieved within an acceptable performance margin for most IoT setups, making BLE more useful in critical scenarios.