50
QLn Series User Guide
enter passkey on one side), Just Works (no user confirma-
tion), and Out of Band (pairing info transmitted OOB, e.g. via
Near Field Communication).
Figure 30: Bluetooth Security Modes
Numeric Comparison:
designed for situaon where both
devices are capable of displaying a six-
digit number and allowing user to enter
"yes" or "no" response. During pairing,
user enters "yes" if number displayed
on both devices matches to complete
pairing. Diers from the use of PINs in
legacy (BT<=2.0) pairing because the
number displayed for comparison is not
used for subsequent link key
genera
on, so even if it is viewed or
captured by an aacker, it could not be
used to determine the resulng link or
encrypon key.
Passkey Entry:
designed for situaon
where one device has
input capability but no
display (e.g. keyboard),
while other device has a
display. The device with a
display shows a six-digit
number, then the user
enters this key on the
device with input. As with
numeric comparison, the
six-digit number is not
used in link key
generaon.
Just Works:
designed for situaon where
one (or both) of the pairing
devices has neither a display nor
keyboard for entering digits (e.g.
Bluetooth headset). It performs
authencaon step 1 in the
same manner as as numeric
comparison, but the user cannot
verify that both values match, so
MITM (man-in-the-mi ddle)
protecon is not provided. This
is the only model in SSP that
does not provide authencated
link keys.
Out of Band (OOB): designed
for devices that support a
wireless technology other than
Bluetooth (e.g. NFC)
for the
purposes of device discovery
and cryptographic value
exchange. In the case of NFC,
the OOB model allows devices
to pair securely by simply
tapping one device against the
other, followed by the user
accepng t
he pairing via a
single buon push. Security
against eavesdropping and
MITM aacks is dependant on
the OOB technology.
If a BT >/= 2.1 device is pairing with
a BT </= 2.0 device, it falls back to
BT 2.0 compability mode and
behaves the same as BT 2.0. If both
devices are BT >/= 2.1, Secure
Simple Pairing must be used
according to the BT spec.
Security Mode 1
If a BT >/= 2.1 device is pairing with
a BT </= 2.0 device, it falls back to
BT 2.0 compability mode and
behaves the same as BT 2.0. If both
devices are BT >/= 2.1, Secure
Simple Pairing must be used
according to the BT spec.
If a BT >/= 2.1 device is pairing with
a BT </= 2.0 device, it falls back to
BT 2.0 compability mode and
behaves the same as BT 2.0. If both
devices are BT >/= 2.1, Secure
Simple Pairing must be used
according to the BT spec.
Security Mode 2
Security Mode 3
Security Mode 4: Simple Secure Pairing
Each mode, except for Just Works, has Man-In-The-Middle
(MITM) protection, meaning no third device can view the data
being passed between the two devices involved. The SSP
mode is usually negotiated automatically based on the capa-
bilities of both the master and slave. Lower security modes
can be disabled via the bluetooth.minimum _ securi
ty _ mode SGD. The bluetooth.minimum _ security _
mode SGD sets the lowest security level at which the printer
will establish a Bluetooth connection. The printer will always
connect at a higher security level if requested by the master
device. To change the security mode and security settings in
the ZQ510 printer, use Zebra Setup Utilities.
To Next Page
Loading...
