Body Area Networks: Smart IoT and Big Data for Intelligent Health Management. 14th EAI International Conference, BODYNETS 2019, Florence, Italy, October 2-3, 2019, Proceedings

Research Article

Cybersecurity Assessment of the Polar Bluetooth Low Energy Heart-Rate Sensor

Download
247 downloads
  • @INPROCEEDINGS{10.1007/978-3-030-34833-5_20,
        author={S. Soderi},
        title={Cybersecurity Assessment of the Polar Bluetooth Low Energy Heart-Rate Sensor},
        proceedings={Body Area Networks:  Smart IoT and Big Data for Intelligent Health Management. 14th EAI International Conference, BODYNETS 2019, Florence, Italy, October 2-3, 2019, Proceedings},
        proceedings_a={BODYNETS},
        year={2019},
        month={11},
        keywords={Bluetooth BLE Security Sensor MitM Heart-rate WBAN Privacy},
        doi={10.1007/978-3-030-34833-5_20}
    }
    
  • S. Soderi
    Year: 2019
    Cybersecurity Assessment of the Polar Bluetooth Low Energy Heart-Rate Sensor
    BODYNETS
    Springer
    DOI: 10.1007/978-3-030-34833-5_20
S. Soderi1,*
  • 1: Unknown
*Contact email: soderi@ieee.org

Abstract

Wireless communications among wearable and implantable devices implement the information exchange around the human body. Wireless body area network (WBAN) technology enables non-invasive applications in our daily lives. Wireless connected devices improve the quality of many services, and they make procedures easier. On the other hand, they open up large attack surfaces and introduces potential security vulnerabilities. Bluetooth low energy (BLE) is a low-power protocol widely used in wireless personal area networks (WPANs). This paper analyzes the security vulnerabilities of a BLE heart-rate sensor. By observing the received signal strength indicator (RSSI) variations, it is possible to detect anomalies in the BLE connection. The case-study shows that an attacker can easily intercept and manipulate the data transmitted between the mobile app and the BLE device. With this research, the author would raise awareness about the security of the heart-rate information that we can receive from our wireless body sensors.