{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,27]],"date-time":"2026-08-27T15:17:55Z","timestamp":1787843875741,"version":"build-2784847793"},"reference-count":55,"publisher":"MDPI AG","issue":"3","license":[{"start":{"date-parts":[[2022,1,27]],"date-time":"2022-01-27T00:00:00Z","timestamp":1643241600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["1560214 (NSF\/DOD) and 1950416 (NSF)"],"award-info":[{"award-number":["1560214 (NSF\/DOD) and 1950416 (NSF)"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000005","name":"United States Department of Defense","doi-asserted-by":"publisher","award":["1560214 (NSF\/DOD)"],"award-info":[{"award-number":["1560214 (NSF\/DOD)"]}],"id":[{"id":"10.13039\/100000005","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Since its inception in 2013, Bluetooth Low Energy (BLE) has become the standard for short-distance wireless communication in many consumer devices, as well as special-purpose devices. In this study, we analyze the security features available in Bluetooth LE standards and evaluate the features implemented in two BLE wearable devices (a Fitbit heart rate wristband and a Polar heart rate chest wearable) and a BLE keyboard to explore which security features in the BLE standards are implemented in the devices. In this study, we used the ComProbe Bluetooth Protocol Analyzer, along with the ComProbe software to capture the BLE traffic of these three devices. We found that even though the standards provide security mechanisms, because the Bluetooth Special Interest Group does not require that manufacturers fully comply with the standards, some manufacturers fail to implement proper security mechanisms. The circumvention of security in Bluetooth devices could leak private data that could be exploited by rogue actors\/hackers, thus creating security, privacy, and, possibly, safety issues for consumers and the public. We propose the design of a Bluetooth Security Facts Label (BSFL) to be included on a Bluetooth\/BLE enabled device\u2019s commercial packaging and conclude that there should be better mechanisms for informing users about the security and privacy provisions of the devices they acquire and use and to educate the public on protection of their privacy when buying a connected device.<\/jats:p>","DOI":"10.3390\/s22030988","type":"journal-article","created":{"date-parts":[[2022,1,27]],"date-time":"2022-01-27T22:01:57Z","timestamp":1643320917000},"page":"988","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":21,"title":["On the Security of Bluetooth Low Energy in Two Consumer Wearable Heart Rate Monitors\/Sensing Devices"],"prefix":"10.3390","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2801-1962","authenticated-orcid":false,"given":"Ye\u1e63em","family":"Kurt Peker","sequence":"first","affiliation":[{"name":"TSYS School of Computer Science, Columbus State University, Columbus, GA 31907, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gabriel","family":"Bello","sequence":"additional","affiliation":[{"name":"TSYS School of Computer Science, Columbus State University, Columbus, GA 31907, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2852-2041","authenticated-orcid":false,"given":"Alfredo J.","family":"Perez","sequence":"additional","affiliation":[{"name":"TSYS School of Computer Science, Columbus State University, Columbus, GA 31907, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2022,1,27]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"Perez, A.J., and Zeadally, S. (2021). Recent Advances in Wearable Sensing Technologies. Sensors, 21.","DOI":"10.3390\/s21206828"},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"106681","DOI":"10.1016\/j.buildenv.2020.106681","article-title":"A Scalable Bluetooth Low Energy Approach to Identify Occupancy Patterns and Profiles in Office Spaces","volume":"171","author":"Tekler","year":"2020","journal-title":"Build. Environ."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Filippoupolitis, A., Oliff, W., and Loukas, G. (2016, January 27\u201328). Occupancy detection for building emergency management using BLE beacons. Proceedings of the International Symposium on Computer and Information Sciences, Krakow, Poland.","DOI":"10.1007\/978-3-319-47217-1_25"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Choi, M., Park, W.K., and Lee, I. (2015, January 9\u201312). Smart office energy management system using bluetooth low energy based beacons and a mobile app. Proceedings of the 2015 IEEE International Conference on Consumer Electronics (ICCE), Las Vegas, NV, USA.","DOI":"10.1109\/ICCE.2015.7066499"},{"key":"ref_5","unstructured":"(2022, January 16). Bluetooth Resources. Available online: https:\/\/www.bluetooth.com\/bluetooth-resources\/?types=news_article."},{"key":"ref_6","unstructured":"Bluetooth Special Interest Group (2022, January 16). Core Specification 4.0. Available online: https:\/\/www.bluetooth.com\/specifications\/specs\/core-specification-4-0\/."},{"key":"ref_7","unstructured":"Silicon Labs (2022, January 16). Understanding Bluetooth 4.1, 4.2, and Beyond. Available online: https:\/\/community.silabs.com\/s\/share\/a5U1M000000knuTUAQ\/understanding-bluetooth-41-42-and-beyond?language=en_US."},{"key":"ref_8","unstructured":"Bluetooth Special Interest Group (2022, January 16). Core Specification 5.2. Available online: https:\/\/www.bluetooth.com\/specifications\/specs\/core-specification-5-2\/."},{"key":"ref_9","unstructured":"Bluetooth Special Interest Group (2022, January 16). Bluetooth Core Specification Version 5.3 Feature Enhancements. Available online: https:\/\/www.bluetooth.com\/bluetooth-resources\/bluetooth-core-specification-version-5-3-feature-enhancements\/."},{"key":"ref_10","unstructured":"Bluetooth Special Interest Group (2022, January 16). Core Specification 4.1. Available online: https:\/\/www.bluetooth.com\/specifications\/specs\/core-specification-4-1\/."},{"key":"ref_11","unstructured":"Spill, D. (2022, January 25). Bluetooth Packet Sniffing Using Project Ubertooth. Available online: https:\/\/2012.ruxcon.org.au\/assets\/rux\/Spill-Ubertooth.pdf."},{"key":"ref_12","unstructured":"Ryan, M. (2013, January 13). Bluetooth: With Low Energy Comes Low Security. Proceedings of the 7th USENIX Workshop on Offensive Technologies, Washington, DC, USA."},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Willingham, T., Henderson, C., Kiel, B., Haque, M.S., and Atkison, T. (2018, January 29\u201331). Testing vulnerabilities in Bluetooth low energy. Proceedings of the ACMSE 2018 Conference, Richmond, KY, USA.","DOI":"10.1145\/3190645.3190693"},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"308","DOI":"10.1016\/j.cose.2017.03.008","article-title":"Security threats in Bluetooth technology","volume":"74","author":"Hassan","year":"2017","journal-title":"Comput. Secur."},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Albazrqaoe, W., Huang, J., and Xing, G. (2016, January 26\u201330). Practical Bluetooth traffic sniffing: Systems and privacy implications. Proceedings of the 14th Annual International Conference on Mobile Systems, Applications, and Services MobiSys\u201916, New York, NY, USA.","DOI":"10.1145\/2906388.2906403"},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Chen, H., Faruque, M., and Chou, P. (2016, January 2\u20137). Security and privacy challenges in IoT-based machine-to-machine collaborative scenarios. Proceedings of the 2016 International Conference on Hardware\/Software Codesign and System Synthesis (CODES+ISSS), Pittsburgh, PA, USA.","DOI":"10.1145\/2968456.2974008"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Lonzetta, A.M., Cope, P., Campbell, J., Mohd, B.J., and Hayajneh, T. (2018). Security Vulnerabilities in Bluetooth Technology as Used in IoT. J. Sens. Actuator Netw., 7.","DOI":"10.3390\/jsan7030028"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Ray, A., Raj, V., Oriol, M., Monot, A., and Obermeier, S. (2018, January 9\u201313). Bluetooth Low Energy Devices Security Testing Framework. Proceedings of the 2018 IEEE 11th International Conference on Software Testing, Verification and Validation (ICST), V\u00e4ster\u00e5s, Sweden.","DOI":"10.1109\/ICST.2018.00045"},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Das, A., Pathak, P., Chuah, C., and Mohapatra, P. (2016, January 23\u201324). Uncovering privacy leakage in BLE network traffic of wearable fitness trackers. Proceedings of the HotMobile \u201916: 17th International Workshop on Mobile Computing Systems and Applications, New York, NY, USA.","DOI":"10.1145\/2873587.2873594"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Snader, R., Kravets, R., and Harris, A. (2016, January 30). CryptoCoP: Lightweight, Energy-Efficient Encryption and Privacy for Wearable Devices. Proceedings of the 2016 Workshop on Wearable Systems and Applications, New York, NY, USA.","DOI":"10.1145\/2935643.2935647"},{"key":"ref_21","unstructured":"Hilts, A., Parsons, C., and Knockel, J. (2022, January 15). Every Step You Fake: A Comparative Analysis of Fitness Tracker Privacy and Security. Available online: https:\/\/openeffect.ca\/reports\/Every_Step_You_Fake.pdf."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Zhang, Q., and Liang, Z. (2017, January 14\u201316). Security analysis of bluetooth low energy based smart wristbands. Proceedings of the 2017 2nd International Conference on Frontiers of Sensors Technologies (ICFST), Shenzhen, China.","DOI":"10.1109\/ICFST.2017.8210548"},{"key":"ref_23","unstructured":"Cyr, B., Horn, W., Miao, D., and Specter, M. (2022, January 15). Security Analysis of Wearable Fitness Devices (Fitbit). Available online: https:\/\/media.kasperskycontenthub.com\/wp-content\/uploads\/sites\/43\/2015\/03\/20082016\/17-cyrbritt-webbhorn-specter-dmiao-hacking-Fitbit.pdf."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"99","DOI":"10.1109\/TMSCS.2015.2498605","article-title":"Privacy and Security in Internet of Things and Wearable Devices","volume":"1","author":"Arias","year":"2015","journal-title":"IEEE Trans. Multi-Scale Comput. Syst."},{"key":"ref_25","unstructured":"Rose, A., and Ramsey, B. (2022, January 15). Picking Bluetooth Low Energy Locks from a Quarter Mile Away. Available online: https:\/\/av.tib.eu\/media\/36217."},{"key":"ref_26","unstructured":"Cauquil, D. (2022, January 21). BTLEJuice, un Framework D\u2019interception Pour le Bluetooth Low Energy. Available online: https:\/\/www.slideshare.net\/NetSecureDay\/nsd16-btle-juice-un-framework-dinterception-pour-le-bluetooth-low-energy-damien-cauquil."},{"key":"ref_27","unstructured":"Jasek, S. (2022, January 15). Blue Picking\u2013Hacking Bluetooth Smart Locks. Available online: http:\/\/conference.hitb.org\/hitbsecconf2017ams\/materials\/D2T3%20-%20Slawomir%20Jasek%20-%20Blue%20Picking%20-%20Hacking%20Bluetooth%20Smart%20Locks.pdf."},{"key":"ref_28","unstructured":"Tan, V. (2022, January 15). Hacking BLE Bicycle Locks for Fun and a Small Profit. Available online: https:\/\/av.tib.eu\/media\/39752."},{"key":"ref_29","unstructured":"Gullberg, P. (2022, January 15). Denial of Service Attack on Bluetooth Low Energy. Available online: https:\/\/www.researchgate.net\/publication\/317063884."},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Lounis, K., and Zulkernine, M. (2019, January 23\u201325). Bluetooth Low Energy Makes \u201cJust Works\u201d Not Work. Proceedings of the 2019 3rd Cyber Security in Networking Conference (CSNet), Quito, Ecuador.","DOI":"10.1109\/CSNet47905.2019.9108931"},{"key":"ref_31","unstructured":"Janesko, J.A. (2018). Bluetooth Low Energy Security Analysis Framework. Technical Report RHUL-ISG-2018-5, Royal Holloway University of London. Available online: https:\/\/www.royalholloway.ac.uk\/media\/5615\/rhul-isg-2018-5-abstract-jenniferjanesko.pdf."},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Issoufaly, T., and Tournoux, P.U. (2017, January 19\u201321). BLEB: Bluetooth Low Energy Botnet for large scale individual tracking. Proceedings of the 2017 1st International Conference on Next Generation Computing Applications (NextComp), Mauritius.","DOI":"10.1109\/NEXTCOMP.2017.8016185"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Robles-Cordero, A.M., Zayas, W.J., and Peker, Y.K. (2018, January 10\u201313). Extracting the security features implemented in a Bluetooth LE connection. Proceedings of the 2018 IEEE International Conference on Big Data (Big Data), Seattle, WA, USA.","DOI":"10.1109\/BigData.2018.8622000"},{"key":"ref_34","unstructured":"PCMag (2022, January 15). The Best Heart Rate Monitors for 2022. Available online: https:\/\/www.pcmag.com\/picks\/the-best-heart-rate-monitors."},{"key":"ref_35","unstructured":"Healthline (2022, January 15). The 8 Best Heart Rate Monitors You Can Buy in 2022. Available online: https:\/\/www.healthline.com\/health\/fitness\/heart-rate-monitor#A-quick-look-at-the-best-heart-rate-monitors."},{"key":"ref_36","unstructured":"Polar Official Site (2022, January 15). Polar Devices & Phone Compatibility. Available online: https:\/\/www.polar.com\/ble\/."},{"key":"ref_37","unstructured":"Amazon (2022, January 15). Polar H7 Bluetooth Heart Rate Sensor & Fitness Tracker. Available online: https:\/\/www.amazon.com\/Polar-Bluetooth-Sensor-Fitness-Tracker\/dp\/B00FZX9CW4?th=1&psc=1."},{"key":"ref_38","unstructured":"(2022, January 15). Fitbit Charge 4 Review: A Better Fitness Tracker without the Bulk. Available online: https:\/\/www.cnet.com\/health\/fitness\/Fitbit-charge-4-review-better-fitness-tracker-built-in-gps-better-sleep-tracking-slim-design\/."},{"key":"ref_39","unstructured":"Walmart (2022, January 15). Fitbit Charge 4 (NFC) Activity Fitness Tracker, Black. Available online: https:\/\/www.walmart.com\/ip\/Fitbit-Charge-4-NFC-Activity-Fitness-Tracker-Black\/599342265."},{"key":"ref_40","unstructured":"Amazon (2022, January 15). Fitbit Charge 4 Fitness and Activity Tracker with Built-in GPS, Heart Rate, Sleep & Swim Tracking, Black\/Black, One Size (S & L Bands Included). Available online: https:\/\/www.amazon.com\/Fitbit-Fitness-Activity-Tracking-Included\/dp\/B084CQ41M2?th=1."},{"key":"ref_41","unstructured":"Amazon (2022, January 15). Multi-Device Keyboard, Bluebyte Full Size Bluetooth 4.0 LE & 2.4G Wireless Keyboard for Windows PC, Dual Mode 2.4G Wireless Bluetooth Keyboard for Computer Desktop Laptop Surface Tablet Smartphone. Available online: https:\/\/www.amazon.com\/Universal-Wireless-Bluetooth-Multi-Device-Ultra-Slim\/dp\/B073NZNFZG."},{"key":"ref_42","unstructured":"Walmart (2022, January 15). Multi-Device Keyboard, Bluebyte Full Size Bluetooth 4.0 LE & 2.4G Wireless Keyboard for Windows PC, Dual Mode 2.4G Wireless Bluetooth Keyboard for Computer Desktop Laptop Surface Tablet Smartphone. Available online: https:\/\/www.walmart.com\/ip\/Bluebyte-Multi-Device-Keyboard-Bluebyte-Full-Size-Bluetooth-4-0-Le-2-4G-Wireless-Keyboard-For-Windows-Pc-Dual-Mode-Computer-Desktop-Laptop-Surface-Ta\/758674807."},{"key":"ref_43","unstructured":"Food and Drug Administration (2021, December 30). FDA Issues Landmark Proposal to Improve Access to Hearing Aid Technology for Millions of Americans, Available online: https:\/\/www.fda.gov\/news-events\/press-announcements\/fda-issues-landmark-proposal-improve-access-hearing-aid-technology-millions-americans."},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"46","DOI":"10.1109\/MITP.2017.265105905","article-title":"Privacy issues and solutions for consumer wearables","volume":"20","author":"Perez","year":"2017","journal-title":"Professional"},{"key":"ref_45","doi-asserted-by":"crossref","first-page":"e15","DOI":"10.1002\/spy2.15","article-title":"A review and an empirical analysis of privacy policy and notices for consumer Internet of Things","volume":"1","author":"Perez","year":"2018","journal-title":"Secur. Priv."},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/2968215","article-title":"A survey of wearable biometric recognition systems","volume":"49","author":"Blasco","year":"2016","journal-title":"ACM Comput. Surv."},{"key":"ref_47","first-page":"255","article-title":"Wearable authentication: Trends and opportunities","volume":"58","author":"Bianchi","year":"2016","journal-title":"IT-Inf. Technol."},{"key":"ref_48","first-page":"286","article-title":"Security and privacy in ubiquitous sensor networks","volume":"14","author":"Perez","year":"2018","journal-title":"J. Inf. Process. Syst."},{"key":"ref_49","doi-asserted-by":"crossref","unstructured":"Blasco, J., and Peris-Lopez, P. (2018). On the feasibility of low-cost wearable sensors for multi-modal biometric verification. Sensors, 18.","DOI":"10.3390\/s18092782"},{"key":"ref_50","first-page":"1","article-title":"Leveraging user-related internet of things for continuous authentication: A survey","volume":"52","author":"Fuentes","year":"2019","journal-title":"ACM Comput. Surv."},{"key":"ref_51","doi-asserted-by":"crossref","unstructured":"Corn, B., Perez, A.J., Ruiz, A., Cetin, C., and Ligatti, J. (2020, January 2\u20134). An Evaluation of the Power Consumption of Coauthentication as a Continuous User Authentication Method in Mobile Systems. Proceedings of the 2020 ACM Southeast Conference, Tampa, FL, USA.","DOI":"10.1145\/3374135.3385304"},{"key":"ref_52","unstructured":"Rahman, M., Carbunar, B., and Banik, M. (2013). Fit and vulnerable: Attacks and defenses for a health monitoring device. arXiv."},{"key":"ref_53","unstructured":"Stute, M., Heinrich, A., Lorenz, J., and Hollick, M. (2021, January 11\u201313). Disrupting Continuity of Apple\u2019s Wireless Ecosystem Security: New Tracking, DoS, and MitM Attacks on iOS and macOS Through Bluetooth Low Energy, AWDL, and Wi-Fi. Proceedings of the 30th USENIX Security Symposium (USENIX Security \u201921), Vancouver, BC, Canada."},{"key":"ref_54","doi-asserted-by":"crossref","unstructured":"Cayre, R., Galtier, F., Auriol, G., Nicomette, V., Ka\u00e2niche, M., and Marconato, G. (2021, January 21\u201324). WazaBee: Attacking Zigbee networks by diverting Bluetooth Low Energy chips. Proceedings of the IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN), Taipei, Taiwan.","DOI":"10.1109\/DSN48987.2021.00049"},{"key":"ref_55","doi-asserted-by":"crossref","unstructured":"Kelley, P.G., Bresee, J., Cranor, L.F., and Reeder, R.W. (2009, January 15\u201317). A \u201cnutrition label\u201d for privacy. Proceedings of the 5th Symposium on Usable Privacy and Security, New York, NY, USA.","DOI":"10.1145\/1572532.1572538"}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/22\/3\/988\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T22:08:56Z","timestamp":1760134136000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/22\/3\/988"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,1,27]]},"references-count":55,"journal-issue":{"issue":"3","published-online":{"date-parts":[[2022,2]]}},"alternative-id":["s22030988"],"URL":"https:\/\/doi.org\/10.3390\/s22030988","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,1,27]]}}}