User's Manual

3-25
3-3 Security
3-3.1 INTRODUCTION
3-3.1.1 Device Identity
Each Bluetooth device has a unique forty-eight-bit binary Bluetooth Device Address
(BDA) burned into its Read-Only Memory (ROM) during the manufacturing process.
This address cannot be changed by the end-user.
A device’s BDA is usually displayed in hexadecimal format. For example, a valid BDA
is 00:D0:B7:03:2E:9F.
Each Bluetooth device also has an operator-configurable, user-friendly name to help
distinguish it from other Bluetooth devices in the Bluetooth Neighborhood.
Valid user-friendly names include:
x Bob’s PC.
x Randy’s Laptop.
x John Q. Public’s PDA.
User-friendly names make it easer to recognize the devices in the Bluetooth
Neighborhood. However, because individuals other than the user can change the name, it
is not reliable for security purposes.
3-3.1.2 Security Levels
Bluetooth offers three primary levels of security:
x None—all Bluetooth devices are allowed to connect. This is the BTW default
security configuration. The Local Services and Client Applications do not require
Authorization, Authentication, or Encryption. Services are started automatically
at system start. The Medium security setting on the Configuration window
General tab allows the individual local services and client applications to
determine the actual level of security.
x Service Level—individual local services on your computer may be disabled. The
disabled services will not start automatically when your computer is started.
These services will not be available to any remote device. At the service level,
the following options may be set:
 Encryption—data will be sent using encrypted links. This provides
additional security.
 Authorization—authorization must be given to a remote device before it can
connect to a service on your computer. This is usually done by physically
clicking an on-screen button.
 Authentication—a remote device must provide a link key (like a password).
The link key is generated through the passkey process the first time the
remote device connects to your computer.
x Link Level—in BTW when security is configured as High, all devices
discovering your computer, regardless of which local service the remote device is
attempting to use, will be required to provide a link key.
 Authentication—a remote device must provide a link key. The link key is
generated through the passkey process the first time the remote device
connects to your computer.
Each Bluetooth-enabled device may handle security in a slightly different manner. Refer
to the user guide provided with a Bluetooth device for additional information.