<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-04161424</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-20T02:57:44+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">RSSI-based Fingerprinting of Bluetooth Low Energy Devices</title>
            <author role="aut">
              <persName>
                <forename type="first">Guillaume</forename>
                <surname>Gagnon</surname>
              </persName>
              <email type="md5">edc239c3c5106237edd6538f59275536</email>
              <email type="domain">courrier.uqam.ca</email>
              <idno type="idhal" notation="numeric">1270042</idno>
              <idno type="halauthorid" notation="string">2860963-1270042</idno>
              <affiliation ref="#struct-360045"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Sébastien</forename>
                <surname>Gambs</surname>
              </persName>
              <email type="md5">e139a2bdb910c24c43b575f98e8228ae</email>
              <email type="domain">uqam.ca</email>
              <idno type="idhal" notation="string">sebastien-gambs</idno>
              <idno type="idhal" notation="numeric">1449</idno>
              <idno type="halauthorid" notation="string">16618-1449</idno>
              <idno type="IDREF">https://www.idref.fr/181268973</idno>
              <affiliation ref="#struct-360045"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Mathieu</forename>
                <surname>Cunche</surname>
              </persName>
              <email type="md5">17994e4fc967ecd037e6542e6f53958f</email>
              <email type="domain">inria.fr</email>
              <idno type="idhal" notation="string">mathieu-cunche</idno>
              <idno type="idhal" notation="numeric">5208</idno>
              <idno type="halauthorid" notation="string">16283-5208</idno>
              <idno type="IDREF">https://www.idref.fr/144820390</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-0066-8612</idno>
              <affiliation ref="#struct-206120"/>
              <affiliation ref="#struct-219748"/>
              <affiliation ref="#struct-203831"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Mathieu</forename>
                <surname>Cunche</surname>
              </persName>
              <email type="md5">17994e4fc967ecd037e6542e6f53958f</email>
              <email type="domain">inria.fr</email>
            </editor>
            <funder ref="#projanr-55111"/>
            <funder ref="#projanr-69637"/>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2023-07-13 13:44:10</date>
              <date type="whenModified">2025-10-06 11:36:23</date>
              <date type="whenReleased">2023-07-13 13:50:13</date>
              <date type="whenProduced">2023-07-10</date>
              <date type="whenEndEmbargoed">2023-07-13</date>
              <ref type="file" target="https://inria.hal.science/hal-04161424v1/document">
                <date notBefore="2023-07-13"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-04161424v1/file/RSSI-Based%20Fingerprinting%20of%20Bluetooth%20Low%20Energy%20Devices.pdf" id="file-4161424-3623971">
                <date notBefore="2023-07-13"/>
              </ref>
              <ref type="annex" n="0" target="https://inria.hal.science/hal-04161424v1/file/RSSI-Based%20Fingerprinting%20of%20Bluetooth%20Low%20Energy%20Devices%20%281%29.pdf" id="file-4161424-3623972">
                <date notBefore="2023-07-13"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="127360">
                <persName>
                  <forename>Mathieu</forename>
                  <surname>Cunche</surname>
                </persName>
                <email type="md5">17994e4fc967ecd037e6542e6f53958f</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-04161424</idno>
            <idno type="halUri">https://inria.hal.science/hal-04161424</idno>
            <idno type="halBibtex">gagnon:hal-04161424</idno>
            <idno type="halRefHtml">&lt;i&gt;SECRYPT 2023 - 20th International Conference on Security and Cryptography&lt;/i&gt;, Jul 2023, Rome, Italy. pp.1-12</idno>
            <idno type="halRef">SECRYPT 2023 - 20th International Conference on Security and Cryptography, Jul 2023, Rome, Italy. pp.1-12</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-4161424-3623971"/><ref corresp="#file-4161424-3623972"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="INRIA">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="INSA-LYON">Institut National des Sciences Appliquées de Lyon</idno>
            <idno type="stamp" n="INRIA-RHA">INRIA Grenoble - Rhône-Alpes</idno>
            <idno type="stamp" n="INRIA_TEST">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="TESTALAIN1">TESTALAIN1</idno>
            <idno type="stamp" n="INRIA2">INRIA 2</idno>
            <idno type="stamp" n="INRIA-RENGRE">INRIA-RENGRE</idno>
            <idno type="stamp" n="CITI" corresp="INSA-LYON">Centre of Innovation in Telecommunications and Integration of services</idno>
            <idno type="stamp" n="INSA-GROUPE">Groupe INSA</idno>
            <idno type="stamp" n="CYBERALPS">Grenoble Alpes Cybersecurity Institute</idno>
            <idno type="stamp" n="UDL">UDL</idno>
            <idno type="stamp" n="ANR">ANR</idno>
            <idno type="stamp" n="INRIA-LYS">INRIA-LYON</idno>
            <idno type="stamp" n="INRIA-CANADA">INRIA-CANADA</idno>
            <idno type="stamp" n="CYBERSCURITE">PEPR Cybersécurité</idno>
            <idno type="stamp" n="IPOP">IPOP</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Best paper award</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">RSSI-based Fingerprinting of Bluetooth Low Energy Devices</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Guillaume</forename>
                    <surname>Gagnon</surname>
                  </persName>
                  <email type="md5">edc239c3c5106237edd6538f59275536</email>
                  <email type="domain">courrier.uqam.ca</email>
                  <idno type="idhal" notation="numeric">1270042</idno>
                  <idno type="halauthorid" notation="string">2860963-1270042</idno>
                  <affiliation ref="#struct-360045"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Sébastien</forename>
                    <surname>Gambs</surname>
                  </persName>
                  <email type="md5">e139a2bdb910c24c43b575f98e8228ae</email>
                  <email type="domain">uqam.ca</email>
                  <idno type="idhal" notation="string">sebastien-gambs</idno>
                  <idno type="idhal" notation="numeric">1449</idno>
                  <idno type="halauthorid" notation="string">16618-1449</idno>
                  <idno type="IDREF">https://www.idref.fr/181268973</idno>
                  <affiliation ref="#struct-360045"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Mathieu</forename>
                    <surname>Cunche</surname>
                  </persName>
                  <email type="md5">17994e4fc967ecd037e6542e6f53958f</email>
                  <email type="domain">inria.fr</email>
                  <idno type="idhal" notation="string">mathieu-cunche</idno>
                  <idno type="idhal" notation="numeric">5208</idno>
                  <idno type="halauthorid" notation="string">16283-5208</idno>
                  <idno type="IDREF">https://www.idref.fr/144820390</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-0066-8612</idno>
                  <affiliation ref="#struct-206120"/>
                  <affiliation ref="#struct-219748"/>
                  <affiliation ref="#struct-203831"/>
                </author>
              </analytic>
              <monogr>
                <meeting>
                  <title>SECRYPT 2023 - 20th International Conference on Security and Cryptography</title>
                  <date type="start">2023-07-10</date>
                  <date type="end">2023-07-12</date>
                  <settlement>Rome</settlement>
                  <country key="IT">Italy</country>
                </meeting>
                <imprint>
                  <biblScope unit="pp">1-12</biblScope>
                </imprint>
              </monogr>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Bluetooth</term>
                <term xml:lang="en">RSSI</term>
                <term xml:lang="en">Fingerprinting</term>
                <term xml:lang="en">Privacy</term>
                <term xml:lang="en">Unlinkability</term>
                <term xml:lang="en">Bluetooth RSSI Fingerprinting Privacy Unlinkability</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halDomain" n="info.info-iu">Computer Science [cs]/Ubiquitous Computing</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>To prevent tracking, the Bluetooth Low Energy protocol integrates privacy mechanisms such as address randomization. However, as highlighted by previous researches address randomization is not a silver bullet and can be circumvented by exploiting other types of information disclosed by the protocol such as counters or timing. In this work, we propose a novel attack to break address randomization in BLE exploiting side information that has not been considered before: Received Signal Strength Indication (RSSI). More precisely, we demonstrate how RSSI measurements, extracted from received BLE advertising packets, can be used to link together the traces emitted by the same device or re-identify it despite address randomization. The proposed attack leverages the distribution of RSSI to create a fingerprint of devices. An empirical evaluation of the attack on various scenarios demonstrate its effectiveness. For instance in the static context, in which devices remain at the same position, the proposed approach yields a re-identification accuracy of up to 99%, which can even be boosted by increasing the number of receivers controlled by the adversary.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-360045" status="VALID">
          <idno type="IdRef">02801457X</idno>
          <idno type="ROR">https://ror.org/002rjbv21</idno>
          <orgName>Université du Québec à Montréal = University of Québec in Montréal</orgName>
          <orgName type="acronym">UQAM</orgName>
          <desc>
            <address>
              <addrLine>Université du Québec à Montréal CP 8888, succursale Centre-ville Montréal (Québec) H3C 3P8</addrLine>
              <country key="CA"/>
            </address>
            <ref type="url">http://www.uqam.ca/</ref>
          </desc>
        </org>
        <org type="researchteam" xml:id="struct-206120" status="VALID">
          <idno type="RNSR">201321065V</idno>
          <idno type="ROR">https://ror.org/02b3vs478</idno>
          <orgName>Privacy Models, Architectures and Tools for the Information Society</orgName>
          <orgName type="acronym">PRIVATICS</orgName>
          <date type="start">2014-01-01</date>
          <date type="end">2026-06-30</date>
          <desc>
            <address>
              <addrLine>Centre Inria de l'Université Grenoble Alpes655, avenue de l'Europe 38334 Saint Ismier CedexInria de Lyon56 Bd Niels Bohr69100 Villeurbanne</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/equipes/privatics</ref>
          </desc>
          <listRelation>
            <relation active="#struct-2497" type="direct"/>
            <relation active="#struct-300009" type="indirect"/>
            <relation active="#struct-203831" type="direct"/>
            <relation active="#struct-219748" type="indirect"/>
            <relation active="#struct-301088" type="indirect"/>
            <relation active="#struct-301232" type="indirect"/>
            <relation active="#struct-1096051" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-219748" status="VALID">
          <idno type="IdRef">052444724</idno>
          <idno type="ISNI">0000 0001 2292 0228</idno>
          <orgName>Institut National des Sciences Appliquées de Lyon</orgName>
          <orgName type="acronym">INSA Lyon</orgName>
          <date type="start">1957-03-18</date>
          <desc>
            <address>
              <addrLine>20 Avenue Albert Einstein, 69621 Villeurbanne cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.insa-lyon.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-301088" type="direct"/>
            <relation active="#struct-301232" type="direct"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-203831" status="VALID">
          <orgName>CITI Centre of Innovation in Telecommunications and Integration of services</orgName>
          <orgName type="acronym">CITI</orgName>
          <desc>
            <address>
              <addrLine>CITI Laboratory, INSA Lyon Domaine Scientifique de la Doua Batiment Claude Chappe 6 avenue des Arts 69621 Villeurbanne Cedex Phone +33 4 7243 6415 Fax +33 4 7243 6227 E-Mail citi@insa-lyon.fr</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.citi.insa-lyon.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-219748" type="direct"/>
            <relation active="#struct-301088" type="indirect"/>
            <relation active="#struct-301232" type="indirect"/>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-2497" status="VALID">
          <idno type="RNSR">199218244V</idno>
          <idno type="ROR">https://ror.org/00n8d6z93</idno>
          <orgName>Centre Inria de l'Université Grenoble Alpes</orgName>
          <desc>
            <address>
              <addrLine>Inovallée655 avenue de l'Europe38330 Montbonnot</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/centre/grenoble</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300009" status="VALID">
          <idno type="ROR">https://ror.org/02kvxyf05</idno>
          <orgName>Institut National de Recherche en Informatique et en Automatique</orgName>
          <orgName type="acronym">Inria</orgName>
          <desc>
            <address>
              <addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/en/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-301088" status="VALID">
          <idno type="ROR">https://ror.org/01rk35k63</idno>
          <orgName>Université de Lyon</orgName>
          <desc>
            <address>
              <addrLine>92 rue Pasteur - CS 30122, 69361 Lyon Cedex 07</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.universite-lyon.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-301232" status="VALID">
          <idno type="IdRef">162105150</idno>
          <orgName>Institut National des Sciences Appliquées</orgName>
          <orgName type="acronym">INSA</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-1096051" status="VALID">
          <idno type="RNSR">202224236C</idno>
          <idno type="ROR">https://ror.org/022gakr41</idno>
          <orgName>Centre Inria de Lyon</orgName>
          <desc>
            <address>
              <addrLine>Inria de Lyon / Bâtiment CEI-2 / Campus La Doua - Villeurbanne / 56, Boulevard Niels Bohr / CS 52132 / 69 603 Villeurbanne</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.inria.fr/fr/centre-inria-de-lyon</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
      </listOrg>
      <listOrg type="projects">
        <org type="anrProject" xml:id="projanr-55111" status="VALID">
          <idno type="anr">ANR-20-CYAL-0002</idno>
          <orgName>PIVOT</orgName>
          <desc>Conception et Intégration de la confidentialité et la vie privée dans l'IdO</desc>
          <date type="start">2020</date>
        </org>
        <org type="anrProject" xml:id="projanr-69637" status="VALID">
          <idno type="anr">ANR-22-PECY-0002</idno>
          <orgName>iPoP</orgName>
          <desc>interdisciplinary Project on Privacy</desc>
          <date type="start">2022</date>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>