| With the wide application of Bluetooth Technology, its security problems become increasingly obvious. The access without authorization of Bluetooth device comes into the focus of people's attention. The security problem can be solved by introducing access control technology.In this thesis, access control technology and Bluetooth protocol stack are deeply researched, Bluetooth access control mechanism is analyzed and its shortcomings are pointed out. Aiming at the problems of unhandy authority and low intensity of access control in Bluetooth, considering the characteristics of Bluetooth and its application, a role-based access control scheme is proposed, then the functional architecture and global scheme of the role-based access control system in Bluetooth is designed and the critical modules of this system are indicated.According to server applications of Bluetooth, coarse-grained access control mode is adopted in this thesis. By studying the current solutions for access control in Bluetooth, a protocol layer access control scheme is put forward to deal with the problem of control with delay. Combined with Bluetooth communication procedure, a protocol layer access control module is designed. The results demonstrate that this scheme can control sever applications of Bluetooth without delay and coarse-grained.Based on the study of coarse-grained control, file access procedure in Bluetooth device is analyzed, and then BLP model is studied thoroughly. A multilevel security policy model with user permission is presented to restrict user privilege and protect the confidentiality and integrity of file, as well as formation description and security analysis of this model are conducted further more. File access control scheme proposed in this thesis can be selected between this model and rigid BLP model by local device user. Combined with file service in Bluetooth, file access control module is designed. Experimental results indicate that this scheme can solve the problem of access without authority in file access procedure, and it not only guarantees the security of file, but also improves the flexibility of user control.Meanwhile, aiming at the existing problem in application of Bluetooth PC local area network, considering Bluetooth communication procedure, an access control scheme based on data packet is proposed and network access control module is designed. This module controls data only transmitted in Bluetooth, and does not affect those in other communication models in PC local area network. Experimental results show that this scheme can attain the anticipated control goal.On the basis of the critical modules, the role-based access control system in Bluetooth is implemented on both personal computer and the embedded platform. |
