FIELD OF THE DISCLOSURE

The present disclosure relates to a user-specific, automated Bluetooth pairing of devices using a pre-stored private key in a first device and downloading a public key at a second device. In this manner, the public/private keys may be used to pair the first device with the second device without using a media access control (MAC) address or a universally unique identifier (UUID).

BACKGROUND OF THE DISCLOSURE

Currently when pairing two devices using Bluetooth technology, one device is in advertising mode and one device is in scanning mode. The advertising mode allows a device to transmit advertisement packets via the appropriate channels to pair with a device in scanning or initiator mode. The device in scanning or initiator mode scans the appropriate channels for advertising packets and, upon detection of a packet, may send out a connection request. An advertising packet, or advertising channel packet data unit (PDU), may include identifiers such as a media access control (MAC) address and/or a universally unique identifier (UUID).

However, simply using a MAC address and/or a UM does not provide a secure way of connecting two devices such that the connection is user-specific and not simply a generic connection between two devices. In this manner, a Bluetooth or Bluetooth Low Energy (BLE) connection is not a secure connection. Moreover, not all devices provide access to a MAC address for pairing purposes due to techniques that may be used in MAC address spoofing.

Additionally, current key generation, such as that used in Transport Layer Security (TLS) requires significant processing needs that small electronic devices with limited battery power are unable to mirror.

These and other drawbacks exist.

SUMMARY OF THE DISCLOSURE

Various embodiments of the present disclosure provide a user-specific, automated Bluetooth pairing of devices using a pre-stored private key in a first device and downloading a public key in a second device. In this manner, the public/private keys may be used to pair the first device with the second device without using a MAC address or a UUID.

As referred to herein, first device may include a device including a Bluetooth or BLE antenna to connect to a second device via a Bluetooth or BLE connection. The first device may include a preprogrammed microcontroller, secure element which may contain a microprocessor, applet, and/or memory, which may include preprogrammed data. Preprogrammed data may include a private ky to be used for Bluetooth/BLE connections.

A first device also may store instructions to encrypt and/or encode data being transmitted from the first device. A first device may store instructions to decrypt and/or decode data received at the first device. A first device may store encryption/encoding/decryption/decoding instruction in a secure element or a secure microprocessor. For example, where a first device includes an EMV chip, encryptions/encoding/decryption/decoding instructions may be stored within the EMV chip. A first device may store instructions to validate a public/private key handshake between the first device and a second device to pair the first device and second device via a Bluetooth/BLE connection.

As referred to herein, a backend system may include a system associated with the preprogramming of the microcontroller. For example, a backend system may generate a private/public key pair and associate the private/public key pair with a particular account. A backend system may store preprogrammed data such as private keys, UUIDs, and/or other device identifiers that may be associated with a particular account. The backend system may store public keys, account numbers, account names, user names, passwords, and other account data associated with a particular account. The storage may associate the private keys, other device identifiers, public keys, account numbers, account names, user names, passwords, and/or other account data. A backend system may store any data as a hash value.

As referred to herein, a second device may include a device able to connect with the first device via a Bluetooth or BLE connection. The second device may include a microprocessor, microcontroller, or other memory programmed to allow a user to log into an account, connect with a backend system to retrieve a public key associated with the account, and validate an advertising PDU using public/private key encryption technology.

In an example embodiment, a first device storing a private key may enter advertising mode to create a Bluetooth/BLE connection. An advertising packet (e.g., advertising PDU) may be transmitted (e.g., in encrypted format). A second device may enter scanning or initiator mode and may receive the advertising packet. A second device may request that a user log into an account associated with the first device (e.g., a customer account, a financial account, an employee account, and/or the like) in order to initiate a Bluetooth/BLE connection. A second device user may enter login credentials via the second device, which may then be transmitted to a backend system. A backend system may receive and validate the login credentials and, in response, transmit a public key to the second device. The public key may be transmitted in an encrypted format. A second device may receive the public key and may use the public key to perform a public/private key handshake in order to validate the first device. The handshake may then be validated by the first device.

