• State Suggested Answer
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 65 subscribers
  • Views 72 views
  • Users 0 members are here
Attachments (0)
Nordic Case Info
  • Case ID: 330583
Options

How can I add an enable button to NCS BLE DFU?

JY wu

I am using NCS SDK 2.6.1 , developing nrf52840 firmware, coding with zephyr.

I need BLE DFU function, so I add two lines to my prj.conf, following this URL: https://devzone.nordicsemi.com/guides/nrf-connect-sdk-guides/b/software/posts/ncs-dfu#mcetoc_1h90kb1ii2

What I added is:

#Enable MCUBOOT bootloader build in the application
CONFIG_BOOTLOADER_MCUBOOT=y
#Include MCUMGR and the dependencies in the build
CONFIG_NCS_SAMPLE_MCUMGR_BT_OTA_DFU=y

And the example code "ble_dfu_peripheral_lbs" work with Nrf connect device manager app (which I downloaded from Google app store) very fine.

But my issue is: In this case, everyone can upload their firmware code to our company's hardware, there are security risks.

By just adding these two lines, I found bootloader will accept Nrf connect device manager app connection and doing DFU without any security check.

I had developed nrf52 SDK before, in old SDK, users need to hold button 4 when power on, then nrf52840 can enter DFU mode.

But now, everyone has Nrf connect device manager app can upload code to my nrf52840 at any time without any key press.

Bootloader seems accept Nrf connect device manager app connections and commands automatically. 

Would you please help me to find out the way :

--> temporary disable bootloader to accept nrf connect device manager app's connection and commands until button pressed?

--> Or implement old nrf52 SDK DFU functions (not buttonless, we need button!) in nrf connect SDK v2.6.1 ?

 

Thank you very much.

Parents
  • 0

    Hello,

    I’m not entirely sure if I’ve understood your requirement correctly, but I’ll try to explain what I gather.

    Implementing Button Control for DFU

    • Use one button to enable DFU mode (allow firmware updates via BLE). 
    • Use another button to disable DFU mode (prevent firmware updates).
    • You are implementing this method to make a secure BLE OTA.

    AFAIK, with the nRF Connect SDK and BLE DFU, the device does not enter a special DFU mode per se. Instead, the firmware must support DFU over BLE, which is based on the BLE Simple Management Protocol (SMP). The bootloader handles entering a specific mode that allows the device to accept firmware images from a mobile application or peripheral.

    Therefore, you will likely need a combination of application logic and bootloader configuration.
    - Use a specific flash address to store the DFU state.
    - In the application code, handle button presses to update the DFU state.
    - In the bootloader code, check the DFU state from flash before allowing a DFU request.

    Note that implementing this method will involve updating the bootloader code, so you should consider the impact of each SDK update.

    Kind regards,

    Abhijith

Reply Children
No Data
Related