This study presents an in-depth analysis of the security landscape in Bluetooth Low Energy (BLE) tracking systems, with a particular emphasis on Apple AirTags and Samsung SmartTags, including their cryptographic frameworks. Our investigation traverses a wide spectrum of attack vectors such as physical tampering, firmware exploitation, signal spoofing, eavesdropping, jamming, app security flaws, Bluetooth security weaknesses, location spoofing, threats to owner devices, and cloud-related vulnerabilities. Moreover, we delve into the security implications of the cryptographic methods utilized in these systems. Our findings reveal that while BLE trackers like AirTags and SmartTags offer substantial utility, they also pose significant security risks. Notably, Apple's approach, which prioritizes user privacy by removing intermediaries, inadvertently leads to device authentication challenges, evidenced by successful AirTag spoofing instances. Conversely, Samsung SmartTags, designed to thwart beacon spoofing, raise critical concerns about cloud security and user privacy. Our analysis also highlights the constraints faced by these devices due to their design focus on battery life conservation, particularly the absence of secure boot processes, which leaves them susceptible to OS modification and a range of potential attacks. The paper concludes with insights into the anticipated evolution of these tracking systems. We predict that future enhancements will likely focus on bolstering security features, especially as these devices become increasingly integrated into the broader IoT ecosystem and face evolving privacy regulations. This shift is imperative to address the intricate balance between functionality and security in next-generation BLE tracking systems.

翻译：本研究深入分析了蓝牙低功耗（BLE）追踪系统的安全态势，特别聚焦于Apple AirTags与Samsung SmartTags，包括其密码学框架。我们的研究涵盖广泛的攻击向量，例如物理篡改、固件利用、信号欺骗、窃听、干扰、应用程序安全漏洞、蓝牙安全弱点、位置欺骗、对所有者设备的威胁以及与云相关的漏洞。此外，我们深入探讨了这些系统中所用密码学方法的安全含义。研究结果显示，尽管AirTags和SmartTags等BLE追踪器提供了显著效用，但它们也带来了重大的安全风险。值得注意的是，苹果公司通过移除中介来优先考虑用户隐私的方法，无意中导致了设备认证挑战，成功的AirTag欺骗实例即为明证。相反，旨在阻止信标欺骗的Samsung SmartTags则引发了关于云安全与用户隐私的关键担忧。我们的分析还凸显了这些设备因设计上注重电池寿命而面临的限制，特别是缺乏安全启动过程，这使得它们容易受到操作系统修改及一系列潜在攻击。论文最后对这些追踪系统的预期演进提出了见解。我们预测，未来的改进将可能侧重于增强安全特性，尤其是在这些设备日益融入更广泛的物联网生态系统并面临不断演变的隐私法规之际。这种转变对于平衡下一代BLE追踪系统中功能性与安全性之间的复杂关系至关重要。