Analysis of the core framework of the standard
The ISO/IEC 14543-5-104:2024 standard builds a smart door lock management system based on the remote access server (RAS), and realizes the secure interaction between the Bluetooth smart door lock device (BSLD) and the cloud through the Bluetooth gateway (BGW). The standard adopts a layered security architecture:
| Security level | Technical implementation | Protection goal |
| Transport layer | HTTPS/XMPP over TLS | Anti-eavesdropping/man-in-the-middle attack |
| Data layer | AES128 CBC encryption | Data confidentiality protection |
| Authentication layer | Three-level authentication (user/RAS/device) | Identity legitimacy verification |
Technical specifications of key components
1. Remote Access Server (RAS)
As the core management node, RAS needs to implement:
- User Data Management Service (UDMS): Stores two-factor authentication information for mobile phone numbers/email addresses
- Device Data Management Service (DDMS): Maintains globally unique device identifiers (12-character MAC addresses)
- Security Authentication Service (SCS): Uses SASL mechanism for session authentication
2. Bluetooth Gateway (BGW)
As a HES gateway implementation, it must support:
- Bidirectional conversion between Bluetooth 4.0+ and TCP/IP protocol stack
- Real-time message routing function (see standard Figure 5 process)
- Comply with the interoperability requirements of ISO/IEC 18012-3
Device interaction process
Registration process
- RAC discovers BSLD through Bluetooth broadcast (obtains device unique identifier)
- RAS verifies device legitimacy (HTTP status code 0/1 mechanism)
- Key negotiation uses two-stage AES128-CBC encryption (standard 8.a/b clauses)
Control flow
Typical operation command format:
| Command ID(1B) | Type(1B) | Value(9B) | Check(1B) | Timestamp(4B) | |-----------|-----------|--------|-----------| | 0x03 | 0x01 | Operation code| XOR result| Unix time|
Implementation suggestions
Security enhancement measures
- It is recommended to add geo-fence detection function when deploying RAS
- BSLD should implement anti-replay attack mechanism (timestamp validity check)
- Access to the third-party service platform (TPSP) requires OAuth2.0 authorization
Interoperability test
Key points to verify:
- Coexistence of BSLDs from different manufacturers under the same BGW
- Data synchronization delay during RAS cluster deployment
- Backward compatibility of Bluetooth 5.0 and 4.2 devices
Technology evolution analysis
Major improvements of this standard compared to traditional door lock solutions:
- Architecture innovation: Use server centralized authentication mode instead of local storage key
- Protocol optimization: Define a 16-byte reduced instruction set to improve Bluetooth transmission efficiency
- Scalability: Support value-added services such as blockchain through TPSP interface (refer to ISO/IEC 14543-5-141)