https://today.ucsd.edu/story/a-simple-firmware-update-completely-hides-a-devices-bluetooth-fingerprint Skip to main content Menu * UC San Diego UC San Diego - Today Subscribe Magnifying glass icon * Research * People * Campus & Community * Arts & Culture * Voices A Simple Firmware Update Completely Hides a Device's Bluetooth Fingerprint The method is a fix to a vulnerability discovered by the same UC San Diego research team in 2022 Story by: * Ioana Patringenaru - ipatrin@ucsd.edu Published Date July 10, 2024 Story by: * Ioana Patringenaru - ipatrin@ucsd.edu Share This: * Twitter * Facebook * LinkedIn * Email Article Content A smartphone's unique Bluetooth fingerprint could be used to track the device's user-until now. A team of researchers have developed a simple firmware update that can completely hide the Bluetooth fingerprint, eliminating the vulnerability. The method was developed by a team of researchers at the University of California San Diego. The team discovered the vulnerability caused by Bluetooth fingerprints in a study they presented at the 2022 IEEE Security & Privacy conference. They presented the fix to this vulnerability two years later at the 2024 IEEE Security & Privacy conference. The math behind the update itself is complex but the implementation is not. "We assumed the strongest possible attack, a nation-state type of attacker that would know which algorithm we are using. They still failed," said Aaron Schulman, one of the paper's senior authors and a faculty member in the UC San Diego Department of Computer Science and Engineering. Researchers developed a firmware update that hides a device's Bluetooth fingerprint Mobile devices, including phones, smartwatches and fitness trackers, constantly transmit signals, known as Bluetooth beacons, at the rate of roughly 500 beacons per minute. These beacons enable features like Apple's "Find My"--a tracking service to find a lost device as well as COVID-19 tracing apps; and connect smartphones to other devices such as wireless earphones. The current approach taken by smartphone companies to make the devices hard to track by their Bluetooth signals is to randomly change the phone's identity, its MAC address. However, that doesn't address the physical-layer fingerprints inherent in each device's transmissions due to unique hardware imperfections. All wireless devices have small manufacturing imperfections in the hardware used to emit these beacons that are unique to each device. These fingerprints are an accidental byproduct of the manufacturing process. These imperfections in Bluetooth hardware result in unique distortions, which can be used as a fingerprint to track a specific device. The method the researchers developed uses several layers of randomization. The nature of the method is complex, but it's a bit like using several layers of contact lenses to mask a person's original eye color-and switching those layers repeatedly and randomly. This method would make it difficult to infer the person's true eye color-regardless of what the original color actually was. The UC San Diego researchers implemented a prototype of this new defense on the Texas Instruments CC2640 chipset currently used in a number of smart devices, such as fitness trackers, tags and lighting systems. They analyzed the impact of different parameters that affect the success of attacks to track and fingerprint a device in practical scenarios. The result of their tests shows that the adversary has to observe a device continuously for more than 10 days to achieve the same level of tracking accuracy as they could achieve within a minute without the firmware update. "This means that the fingerprints are no longer useful for the attacker to infer the identity of the device and the optimal attacker can barely do better than a random guess," said Professor Dinesh Bharadia, one of the paper's senior authors and a faculty member in the UC San Diego Department of Electrical and Computer Engineering. "You can't track the phone's fingerprint even if you're sitting right next to it, because both MAC and PHY identities keep changing," he added. Researchers are now looking for industry partners that can build this technology into their chipsets. "This defense can be rolled out incrementally, requiring only software modification on at least one widely-used Bluetooth Low Energy chipset," said Hadi Givehchian, the paper's first author and a Ph.D. student in the UC San Diego Department of Computer Science and Engineering. "But in order to deploy this defense widely, we need to partner with Bluetooth chip manufacturers." The team also believes that the method would work to obfuscate WiFi fingerprints. Practical Obfuscation of BLE Physical-Layer Fingerprints on Mobile Devices University of California San Diego: Hadi Givehchian, Nishant Bhaskar, Alexander Redding, Aaron Schulman, Department of Computer Science and Engineering Han Zhao, Dinesh Bharadia, Department of Electrical and Computer Engineering In 2022, a team of engineers at the University of California San Diego has demonstrated for the first time that the Bluetooth signals emitted constantly by our mobile phones have a unique fingerprint that can be used to track individuals' movements. In 2024, they published a fix to the vulnerability. Share This: * Twitter * Facebook * LinkedIn * Email You May Also Like How Much Risk are Humans Willing to Take When Interacting With Robots? Health & Behavior How Much Risk are Humans Willing to Take When Interacting With Robots? Irene Su Receives Award for a Novel Study on Fertility Preservation for Young Cancer Patients Health & Behavior Irene Su Receives Award for a Novel Study on Fertility Preservation for Young Cancer Patients William Kuperman: 1943-2024 In Memoriam William Kuperman: 1943-2024 Stem Cell-Derived Therapy Shows Promise Against Treatment-Resistant Liver Cancer Health & Behavior cancer cell Irene Su Receives Award for a Novel Study on Fertility Preservation for Young Cancer Patients Health & Behavior Irene Su Receives Award for a Novel Study on Fertility Preservation for Young Cancer Patients William Kuperman: 1943-2024 In Memoriam William Kuperman: 1943-2024 Stem Cell-Derived Therapy Shows Promise Against Treatment-Resistant Liver Cancer Health & Behavior cancer cell How Much Risk are Humans Willing to Take When Interacting With Robots? Health & Behavior How Much Risk are Humans Willing to Take When Interacting With Robots? Stay in the Know Keep up with all the latest from UC San Diego. Subscribe to the newsletter today. Email [ ] Please provide a valid email address. Subscribe Subscription Notification Close Confirmation Thank you! You have been successfully subscribed to the UC San Diego Today Newsletter. Contact Information UC San Diego Homepage 9500 Gilman Drive, La Jolla, CA 92093-0021 (858) 534-2230 Site Directory * Media Resources & Contacts * Newsletter * Emergency Status * Disability Resources * Principles of Community * Equity, Diversity and Inclusion * University Communications * Key Issues Follow Us on Social Media * Facebook * Twitter * Youtube * Instagram * LinkedIn * Tiktok Divisions & Schools * Arts and Humanities * Biological Sciences * Division of Extended Studies * Division of Graduate Education and Postdoctoral Affairs * Division of Undergraduate Education * Halicioglu Data Science Institute * Jacobs School of Engineering * Physical Sciences * Rady School of Management * School of Global Policy & Strategy * School of Medicine * Scripps Institution of Oceanography * Skaggs School of Pharmacy * Social Sciences * Wertheim School of Public Health (c) 2021 Regents of the University of California. All rights reserved. Terms of Use | Accessibility | Privacy | Feedback Category navigation with Social links X icon Close * Research Right pointing chevron Research Right pointing chevron Right pointing chevron Back + The Arts + Business & Economics + Health & Behavior + Humanities + Politics & Society + Science & Environment + Technology & Engineering All Research Collapse Research navigation * People Right pointing chevron People Right pointing chevron Right pointing chevron Back + Awards & Accolades + In Memoriam + Milestones + Profiles All People Collapse People navigation * Campus & Community Right pointing chevron Campus & Community Right pointing chevron Right pointing chevron Back + At Work + Athletics + Campus News + Giving + Student Life All Campus & Community Collapse Campus & Community navigation * Arts & Culture Right pointing chevron Arts & Culture Right pointing chevron Right pointing chevron Back + Books & Culture + Events & Happenings + Visual & Performing Arts All Arts & Culture Collapse Arts & Culture navigation * Voices Right pointing chevron Voices Right pointing chevron Right pointing chevron Back + Insights & Experts + Opinion + Q&A All Voices Collapse Voices navigation * Visual Storytelling Visual Storytelling For Media: * Media Resources & Contacts Right pointing chevron Newsletter Right pointing chevron Signup to get the latest UC San Diego newsletters delivered to your inbox. Magazine Right pointing chevron Award-winning publication highlighting the distinction, prestige and global impact of UC San Diego. Follow Us: * Facebook * Twitter * Youtube * Instagram * LinkedIn * Tiktok UC San Diego Homepage X icon Close Close X icon Search UC San Diego Today [ ] Search Search