This post is older than 2 years and might not be relevant anymore
More Info: Consider searching for newer posts

BLE mac address whitelist

Hi Nordicsemi, I am working on peripheral BLE device, the device accessible from smartphone i am also writing the smartphone app, i want just my app to be able to connect and unpack data from the peripheral deice so i have few questions about BLE security:

1- Did there is a option to let just specific app to connect to my device?

2- Did the whitelist option save the mac address of the device?

3- Did the mac address from 2 is just the BLE mac or the device mac address?

Thanks.

Parents
  • Hi Jack,

    1. I don't think it's possible unless you implement an extra whitelisting or controlling on application layer. One simple way is to require the app to send a "password" in a time window says 10 seconds after connection or the peripheral will disconnect. The peripheral should not disclose any data until the password is written.

    2. Yes, if the central use public/static address. If the central uses Resolvable random address, the peripheral will store the IRK to resolve.

    3. They are the same, at least on our chip.

Reply
  • Hi Jack,

    1. I don't think it's possible unless you implement an extra whitelisting or controlling on application layer. One simple way is to require the app to send a "password" in a time window says 10 seconds after connection or the peripheral will disconnect. The peripheral should not disclose any data until the password is written.

    2. Yes, if the central use public/static address. If the central uses Resolvable random address, the peripheral will store the IRK to resolve.

    3. They are the same, at least on our chip.

Children
No Data
Related