# US 12,003,992 B2 · Passive determination of pairing and channel parameters for short-range wireless communications > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,003,992 B2 - Document ID: US12003992B2 - Status: Granted - Kind: B2 - Application number: 18/319,995 - Filed: 2023-05-18 - Published: 2023-09-14 - Granted: 2024-06-04 - Earliest claimed: 2020-02-09 - Assignees: Bastille Networks, Inc. - Applicants: Bastille Networks, Inc. - Inventors: Sebastian Balint Seeber - Web page: https://patentgrep.com/patent/US12003992B2 ## CPC - H04W 24/08: Testing, {supervising or monitoring} using real traffic - H04L 43/12: Network monitoring probes - H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication - H04W 12/037: of the control plane, e.g. signalling traffic - H04W 12/121: Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS] - H04W 12/50: Secure pairing of devices - H04W 64/00: Locating users or terminals {or network equipment} for network management purposes, e.g. mobility management - H04W 8/005: {Discovery of network devices, e.g. terminals} - H04W 16/18: Network planning tools - H04W 24/04: Arrangements for maintaining operational condition - H04W 84/20: Leader-follower arrangements - H04W 92/18: between terminal devices - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems and methods can support identifying pairings and channel parameters in short-range wireless communications such as Bluetooth low energy interfaces. Radio frequency sensors may be positioned within an electromagnetic environment where a master wireless device and a slave wireless device share short-range wireless communications. Signals transmitted between the master wireless device and the slave wireless device can be received by the radio frequency sensors. Inter-arrival times for packets within the received signals may be identified. Statistics of the inter-arrival times can be analyzed to identify connection intervals between the master wireless device and the slave wireless device, as well as back-to-back intervals exchanged within the connection intervals. Packet header contents may be used to reconcile the estimated timing parameters and time slots. Pairings between the master wireless device and the slave wireless device may be identified and tracked along with communication channel parameters. ## Claims ### Claim 1 A method comprising: positioning one or more radio frequency sensors within an electromagnetic environment where a master wireless device and a slave wireless device share a wireless communication interface; receiving, at the one or more radio frequency sensors, signals transmitted between the master wireless device and the slave wireless device over a wireless connection; identifying inter-arrival times for packets within the received signals; estimating communication time slots from identified back-to-back intervals that occur within connection intervals of the packets; and identifying packets within the wireless connection as being transmitted by the master wireless device or the slave wireless device. ### Claim 2 (depends on 1) The method of claim 1, wherein the wireless connection is associated with one of a Bluetooth interface, wireless USB interface, a ZigBee interface, and a personal area network interface. ### Claim 3 (depends on 1) The method of claim 1, wherein analyzing statistics of the inter-arrival times comprises histogram analysis. ### Claim 4 (depends on 1) The method of claim 1, further comprising classifying pairings between the master wireless device and the slave wireless device. ### Claim 5 (depends on 1) The method of claim 1, further comprising geo-locating one of the master wireless device and the slave wireless device. ### Claim 6 (depends on 1) The method of claim 1, further comprising identifying security threats associated with the wireless connection. ### Claim 7 (depends on 1) The method of claim 1, wherein data payload associated with the wireless connection remains encrypted. ### Claim 8 (depends on 1) The method of claim 1, wherein classifying one or more security threats is carried out without decrypting encrypted data payloads associated with the wireless connection. ### Claim 9 (depends on 1) The method of claim 1, wherein receiving signals comprises leveraging software-defined radio to support various communication channel parameters. ### Claim 10 (depends on 1) The method of claim 1, further comprising: analyzing statistics of the inter-arrival times to identify connection intervals between the master wireless device and the slave wireless device; and tracking the wireless connection between the master wireless device and the slave wireless device. ### Claim 11 A system comprising: one or more sensor antennas; one or more radio frequency sensors configured to receive signals over a wireless connection associated with a wireless communication interface between a master wireless device and a slave wireless device; and a signal analysis system comprising a processor configured to: identify inter-arrival times for packets within the received signals; estimate communication time slots from identified back-to-back intervals that occur within connection intervals of the packets; identify pairings between the master wireless device and the slave wireless device within the wireless connection; and present identified pairings to an operator console. ### Claim 12 (depends on 11) The system of claim 11, wherein the wireless communication interface comprises a Bluetooth low-energy interface. ### Claim 13 (depends on 11) The system of claim 11, wherein the wireless communication interface is one of a wireless USB interface, a ZigBee interface, and a personal area network interface. ### Claim 14 (depends on 11) The system of claim 11, wherein analyzing statistics of the inter-arrival times comprises histogram analysis. ### Claim 15 (depends on 11) The system of claim 11, wherein the processor is further configured to classify channel timing parameters between the master wireless device and the slave wireless device. ### Claim 16 (depends on 11) The system of claim 11, wherein the processor is further configured to geo-locate one of the master wireless device and the slave wireless device. ### Claim 17 (depends on 11) The system of claim 11, wherein data payload associated with the wireless connection remains encrypted. ### Claim 18 (depends on 11) The system of claim 11, wherein classifying one or more security threats is carried out without decrypting encrypted data payloads associated with the wireless connection. ### Claim 19 (depends on 11) The system of claim 11, wherein the one or more radio frequency sensors comprise software-defined radio receivers operable to support a variety of communication parameters. ### Claim 20 A non-transitory computer-readable medium storing computer-executable instructions that, when executed by at least one processor, cause the at least one processor to perform operations of: positioning one or more radio frequency sensors within an electromagnetic environment where a master wireless device and a slave wireless device share a wireless communication interface; receiving, at the one or more radio frequency sensors, signals transmitted between the master wireless device and the slave wireless device over a wireless connection; identifying inter-arrival times for packets within the received signals; estimating communication time slots from identified back-to-back intervals that occur within connection intervals of the packets; and identifying packets within the wireless connection as being transmitted by the master wireless device or the slave wireless device.