Control Strategy SimpleSecurePairing.Local

URI: CSG-SimpleSecurePairing-Local

Package: LocalDeviceConnectivity

< prev | next >

Description: Simple Secure Pairing (SSP) is used between RemoteHost and Host, following the Just Works association model with user confirmation at Host. This is effective in preventing spoofing in insecure locations, but depends on there being one secure location where the numerical comparison can be made safely, and then the result stored for subsequent use.

Blocked Threats (1)

I.Auth.HBISG.3

Spoofing a device RemoteHost in a Bluetooth pair with device Host in Space: an attacker with access to a location where Host is paired with RemoteHost, they can physically spoof the connection. This threat covers the case where the connection is freshly established in each location where it is needed.

Triggers Threats (1)

I.Auth.HBImSG.6

Spoofing a device RemoteHost in a Bluetooth pair with device Host in Space: an attacker with access to a location where Host is paired with RemoteHost can spoof the latter to the former. This threat captures the case where SSP is used with a one-sided user confirmation. In principle this can still be spoofed, but it would have to be done where the pair is established, which can be the most secure location they are used (not necessarily in Space where the attacker is present).