The Bluetooth Special Interest Group (SIG) promises to deliver several incremental but solid performance increases. They include such features as lower power consumption, much faster data transfer, a set of the government-approved security measures, and a new mechanism for privacy.

However, the biggest news about Bluetooth 4.2, especially for IoT device developers, is a newly created profile known as IPSP. It is designed to enable IPv6 for Bluetooth; wearable or IoT devices (based on Bluetooth Low Energy) no longer need to be paired with a smartphone or a tablet to connect to the cloud.

“IoT devices can directly go to the Internet, as long as there is a Bluetooth/WiFi-enabled routers or a set-top box installed in a home. Through this IP-supported profile, we are opening new doors for IoT developers, allowing them to design devices targeting specific applications.” – Mark Powell, executive director of the Bluetooth SIG.

Where’s mesh?

Conspicuously absent from the Blueooth 4.2 spec is mesh technology.Powell called it “a clear priority on the market” and “a big target” for SIG members. He would not offer a timeline for Bluetooth Mesh. “Our members, including CSR, Zuli, and Seed Labs, are all working on it. There are proof points out there.”

Beyond mesh development, the SIG is working on “longer-range Bluetooth” and “many more IoT profiles,” Powell said. “Expect the explosion of profiles,” including those for sports, fitness, and health.

Inside Bluetooth 4.2

Bluetooth 4.2 increases the speed and reliability of data transfer between Bluetooth Low Energy devices. It creates bigger packets, according to Powell, allowing devices to transfer data up to 2.5 times faster than with previous versions.

Increased data transfer speeds and packet capacity will reduce transmission errors, thus leading to lower battery consumption, according to the SIG.

Bluetooth 4.2 also beefs up Bluetooth’s security and privacy features. Newly introduced to Bluetooth Low Energy is the use of National Institute of Standards and Technology-approved algorithms for encryption and hash. “We are now using in Bluetooth Smart the same high-grade security already used by Bluetooth Classic,” Powell said.

Some vendors have been pretty vocal about Bluetooth Low Energy security. They say the biggest issue for the current version of Bluetooth Low Energy is “its security and pairing mechanism.” Mike Ryan, security engineer at iSEC Partners, agrees with that assessment. In an email exchange with EE Times this year, he sketched the following scenario.

When the key exchange is compromised, an attacker can impersonate either the BLE (Bluetooth Low Energy) master (car) or slave (keyfob/phone) *if* they rely on BLE’s built-in security and *if* the attacker is able to observe the user pairing with the phone. Such an attacker would be able to perform any action exposed via BLE.

Presumably, new security features in Bluetooth 4.2 will fix that key exchange weak link.

When asked why Bluetooth Low Energy didn’t come with the same level of security as Bluetooth Classic, Powell said, “We’ve always intended to do so. But from the project management point of view, we just had to do it on a slightly different timeline.”

Taking care of privacy

Privacy is another new element in Bluetooth 4.2. By constantly changing MAC addresses, the new spec makes it difficult for eavesdroppers to track a device through its Bluetooth connection.

Unless users give permission, Bluetooth devices won’t wake up every time they pass by a retail store with beacons. Powell offered an example: “You’ve already downloaded Macy’s apps with beacons on your smartphone.” In other words, you have whitelisted Macy’s. This allows your smartphone to get alerts when some special sales are going on at its stores. “But if you are passing by J.C. Penney, which is not whitelisted, your smartphone won’t get disturbed by J.C. Penney’s beacons. It can stay asleep.” Even better, this lowers smartphone power consumption.

The latest Bluetooth 4.2 and IPSP technical details, tools, and other information can be found.

(Credit: Web)