Anonymity properties of stored or transmitted data taken from
Bluetooth scansPASSAT 2009, Sunday, August 30, 2009, 9:00am-9:30am
Presented by David Evans
Abstract:
Modern consumer wireless devices are increasingly powerful, making them attractive to use as wireless sensor nodes. At the same time, many use protocol suites such as Bluetooth which require devices to reveal data that may make for unique device identifiers. This paper explores this quantitatively through scans covering several thousand devices in different urban locations. In measuring the anonymity afforded by the elements of a Bluetooth device profile, we find that (i) attributes such as the device class are poor for linking sightings of the same device; (ii) the device name can provide a surprising amount of anonymity but when it does not it can be a very effective key to link devices with individuals; and (iii) frequently users exhibit privacy-adverse behavior, such as placing telephone numbers in device names or using nicknames that are statistically rare.
