BD_ADDR logs and privacy

Currently the log events for FIA_BLT_EXT.1/2/3 all require the full BD_ADDR (and in some cases the name) to be provided in the audit record. This has raised privacy concerns about the ability to track the devices that are being connected to (as seen with the COVID-19 tracing apps listing devices that were being contacted initially) and a need to further restrict the full information.

For Wi-Fi it is being allowed to use a mask of the AP MAC address, and the proposal here would be to do something similar, where a MAC address can be masked (say the last 2 or 3 octets) can be listed, for specifying connection attempts. Paired with a BT profile would seem to provide a good indicator of what type of device was being connected to.

The preference for the audit requirement would be to provide a selection (like with the Wi-Fi PP-Module update) that would provide the agility to choose either the MAC/name or the masked MAC/BT Profile as an option for the device being connected for all three SFR audit events.

Start by reviewing the FIA_BLT_EXT.1/2/3 audit requirements and the Wi-Fi PP-Module update referenced in the issue. Define how the audit requirement should offer either full MAC/name details or masked MAC and Bluetooth profile information for all three events.