iOS上的蓝牙“带外”（OOB）配对？ [英] Bluetooth “out of band” (OOB) pairing on iOS?

问题描述

我需要将蓝牙设备与iOS设备安全配对，
我知道在蓝牙4.0和4.1中，有三种配对方法：Just Works，Passkey Entry和带外（OOB）。

I need to securely paired a bluetooth device to an iOS device, I know that in Bluetooth 4.0 and 4.1 there is three way to do the pairing : Just Works, Passkey Entry and Out Of Band (OOB).

我们需要使用最高的安全配对协议，它被认为是带外（OOB）方法。

We need to use the highest security paring protocol, which it found to be the Out Of Band (OOB) method.

我知道苹果使用OOB方法将苹果手表与iPhone配对，至少他们在 iOS安全指南（在第22页末）。

I know that apple used the OOB method for pairing the apple watch to an iPhone, at least they say so in the iOS Security Guide (at the end of the page 22).

所以我想知道苹果是否提供了任何API我可以用来将设备与OBB方法配对，或者也可以建议我使用其他任何安全方法。

So I'm wondering is there any API from apple that I can use for pairing my device with the OBB method, or maybe you can suggest me any other secure method.

非常感谢您的帮助，我们非常感谢！

Thank you so much for your help, it's highly appreciated !

推荐答案

Core Bluetooth中唯一可用的绑定（配对）方法是密钥输入。

The only available bonding (pairing) method in Core Bluetooth is passkey entry.

Apple Watch使用OO一种技术，涉及由手机的摄像头捕获的图像，并具有备用密码，但这不适用于其他应用程序。

The Apple Watch uses an OOB technique involving an image captured by the phone's camera with a fallback to passkey, but this is not available to other apps.

如果您的设备有显示屏并且可以生成一个随机密钥，那么就安全性而言，此技术与OOB几乎相同。如果您的设备没有显示器，则安全性取决于密码的共享方式（例如，固定密码（例如，所有设备的密码都为0000），不是很安全。不干胶标签上每个设备的随机密码更安全）

If your device has a display and can generate a random passkey then this technique is much the same as OOB in terms of security. If your device doesn't have a display then the security depends on how the passkey is shared (e.g. fixed passkey such as 0000 for all devices, not very secure. Random passkey for each device on a sticker is more secure)

这篇关于iOS上的蓝牙“带外”（OOB）配对？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！