TD0645: Bluetooth audit details
Publication Date
2023.03.22
Protection Profiles
MOD_BT_V1.0
Other References
FAU_GEN.1/BT
Issue Description
Currently the log events for FIA_BLT_EXT.1/2/3 all require the full BD_ADDR (and in some cases the name) to be provided in the audit record. This has raised privacy concerns about the ability to track the devices that are being connected to (as seen with the COVID-19 tracing apps listing devices that were being contacted initially) and a need to further restrict the full information. Resolution
Table 2 is modified for FIA_BLT_EXT.1/2/3 as follows, with strikethrough denoting deletions and underline denoting additions:
Justification
See issue description. |