Detect / prevent the use of range extenders?

RE: Detect / prevent the use of range extenders?

Petter Myhre — Tue, 14 Nov 2017 15:09:41 GMT

I see. It is difficult to protect against such attacks when no user action is required to "open" the door, just proximity.

The minimum connection interval is 7.5 ms, so if a central does a read it would typically receive a response in a bit more than 7.5 ms, but by spec it can be up to 30 seconds before the transaction times out.

RE: Detect / prevent the use of range extenders?

JB21 — Tue, 07 Nov 2017 13:37:48 GMT

It's an access control system. That should only work within say 10 meters. Similar to touchless keys used by cars. And there criminals have used 2 extender units, one near the car the other near the owner with his key who sleeps in a hotel. Quite easy to open a car.

No, I'm not that worried about unauthenticated devices trying to connect. It has been taken care of.

Assume the central uses the shortest connection interval and does a characteristic read, then it should get a reply just an interval later (2.5 ms), right. Can one rely on that?

RE: Detect / prevent the use of range extenders?

Petter Myhre — Tue, 07 Nov 2017 12:09:47 GMT

Not that I'm aware. What kind of application is this? Could you elaborate? You are not worried that unauthenticated devices can connect? You are only worries about relay attacks?