This post is older than 2 years and might not be relevant anymore
More Info: Consider searching for newer posts

Create white list during production process

Hi,

I need to make it possible to allow connection to one specific central device. This with the thought that the user doesn't want to be bothered with bonding the device in our use case. So the device should be pre-paired during the production process.

I would like fill the white list of a nrf51822 peripheral in the production process without making use of the radio. The examples that I have seen from Nordic will fill the white list after having a connection with the central device. Is it possible to fill the white list using only the Device Address of the central without having the need of a connection?

Parents
  • The definitely easiest way to do this would be to actually do the bonding as part of the production process. This would allow both the devices to store the proper encryption keys and system attributes as needed, and the devices will just work when they arrive in customer hands.

    If this is absolutely not an option, you will have to come up with some other scheme, but this may be a tricky. One possibility, if you use static addresses, could perhaps be to write the address of the Central somewhere in the Peripherals flash, and then hard-code this address to be used as a manual whitelist, all until a proper bond have been established. Anything involving sharing the actual keys may be tricky, since there is a relation between the root keys stored in the chip and the key generation. Just sharing the address should however be sufficient, if you can't do the bond in the production line.

Reply
  • The definitely easiest way to do this would be to actually do the bonding as part of the production process. This would allow both the devices to store the proper encryption keys and system attributes as needed, and the devices will just work when they arrive in customer hands.

    If this is absolutely not an option, you will have to come up with some other scheme, but this may be a tricky. One possibility, if you use static addresses, could perhaps be to write the address of the Central somewhere in the Peripherals flash, and then hard-code this address to be used as a manual whitelist, all until a proper bond have been established. Anything involving sharing the actual keys may be tricky, since there is a relation between the root keys stored in the chip and the key generation. Just sharing the address should however be sufficient, if you can't do the bond in the production line.

Children
Related