Is it possible to connect without using GATT ?

[Roger Clark]

Is it possible to receive connections without setting up a GATT service

For security reasons, I would prefer if generic apps and also the new Web BLE API could make connections to my BLE device.

I would prefer to just advertise a service and handle the connections at a lower level using a custom protocol

Is this possible using S130 SD2.0.1 (SDK 12.0.1) nRF51822 ?

[Petter Myhre]

I'm sorry, I don't understand what you mean. Are you asking if you must add services to be able to establish a connection? What do you mean with handle the connections at a lower level? What lower level is this? Please elaborate?

[Roger Clark]

Hi Petter

I think basically I was thinking about whether I could bypass the GAP and GATT, and implement private protocols instead.

But in retrospect, as I need to connect via iOS, I don't think iOS will allows this with its BLE API.

My main concern is the new Web BLE API, Which will mean that any random phone etc can connect without needing a custom App.

Hence I was trying to think of a way that would prevent the Web BLE devices connecting and hence taking power, and effectively performing a Denial Of Service on our devices, by causing them all to go flat really quickly.

Unfortunately I can't use while-listing etc as multiple legitimate apple devices will connect to our product, and it would not be possible to pre-program the devices with a list.

[Petter Myhre]

As far as I know, that is not possible.

I'm not sure what your product is, but maybe you can limit the advertising (and connection requests listening) somehow? Maybe you can activate advertising with a button? Or maybe by movement (if you have an accelerometer)? Maybe you could stop advertising for a certain time if many unwanted devices tries to connect?

[Roger Clark]

Petter,

Thanks for the suggestions.

We have a accelerometer and also a button (in some optional configurations).

I think the best solution may be to change the advertising data after a connection has been made, so that the device is not connectable for a suitable period, e.g. 15 minutes or perhaps an hour.

As in normal operation, the device would only be connected to quite infrequently e.g. once per week to make changes to its configuration.