nRF8001 Bonding procedures

Question

Hi, 
 I've studied the "ble_HID_template.ino" example and I've come up with some doubts and need some clarifications in some points, they are listed below: 
 1 - Does nRF8001 D support Out of Band (OOB) Pairing? From the nRFgo Studio I can check only "Just works" and "Passkey". 
 2 - Can I change the security settings, from the initial ones configured in nRFgo Studio, dynamically? I am asking this because my product will have no I/O capabilities and after the first device bond and configure it (Just works pairing), then it is suppose to work with Out of Band (OOB) Pairing for the next devices (the first device will be able to configure it and create keys for the next devices). 
 3 - What is the content of the DynamicData stored in the nRF8001 (Data retrieved using the ReadDynamicData command) ? It is just bond related information (Like shared keys, device address and etc...). How big can it be? and how many bond device addresses can it store? (I need to fit it to my MCU EEPROM, since I am using it for other purposes as well) 
 4 - If I define the minimum and maximum encryption key size to 16 (or some other number) can I deduce the size of the DynamicData block? 
 Now for the BLE HID Template
5 - From my understanding the "lib_aci_bond" is to create bonds with new devices and "lib_aci_connect" is to connect to previously bonded devices. Is this correct? 
 6 - The only thing that I could differentiate that will define that "lib_aci_connect" will only connect to previously bonded devices is the variable "aci_state.bonded" when it's equal to "ACI_BOND_STATUS_SUCCESS". Is this correct? How different is the behavior of "lib_aci_connect" when you have security enabled or not? Does this behavior of only accepting previously bonded device is because of security enabled configuration or aci_state.bonded variable? 
 7 - When can I consider that the data packets exchanged between the paired devices are encrypted? After receiving a "ConnectedEvent" ? 
 Sorry for the long post, I couldn't figure out this answers by my own. 
 Thanks in advance!

David Edwin · Accepted Answer

Let me work through this one by one. 
 
 
 Does nRF8001 D support Out of Band (OOB) Pairing?
OOB is not supported. OOB is typically used with NFC for standard laptops. 
 
 
 Can I change the security settings, from the initial ones configured in nRFgo Studio, dynamically?
Changing IO capabilites on the fly is odd as the keys would already have been exchanged, so the link security level is already fixed when the keys are stored on the Central.
You can change the IO capability by editing the Setup data that has been created and regenerating the CRC for it. Make sure that this is what you really want to do.
 Modify nRF8001 Setup example and doc .
The BLEPeripheral Arduino project also has some good examples for the Setup and DynamicData. 
 
 
 What is the content of the DynamicData stored in the nRF8001 (Data retrieved using the ReadDynamicData command) ? How big can it be?
This contains the state information of the Client Configuration Characteristic Descriptors and the keys. When you generate the services.h file , you will see "ublue_setup.gen.out.txt", which provides some indication of the size. However you will need to verify the size on your nRF8001 Setup by looking at the actual number of ReadDynamicData messages before you freeze the space requirements.
You can store as many bonds as your storage allows.
 Dynamic data interface over ACI.txt 
 
 
 You can reduce the size of the dynamic data by skipping some of the stored keys but you will need to match the sizes by padding the dynamic data when doing WriteDynamicData.
Ideally keep the key size to 16. 
 
 
 "lib_aci_bond" is to create bonds with new devices and "lib_aci_connect" is to connect to previously bonded devices. Is this correct?
Correct 
 
 
 Does this behavior of only accepting previously bonded device is because of security enabled configuration or aci_state.bonded variable?
This because of the security enabled configuration. If security is enabled then data will be transmitted only on the secured link. A Credit event will arrive when the data is successfully transmitted. 
 
 
 When can I consider that the data packets exchanged between the paired devices are encrypted? After receiving a "ConnectedEvent" ?
Typically the link will be encrypted when the central initiates the encryption, the data will be transmitted after the link is encrypted and a Credit Event will be sent back if the data was transmitted successfully on the security params that were set or a PipeErrorEvent may result due to a failure. 
 
 
 Edit: Added links and text files for modifying the Setup and DynamicData

nRF8001 Bonding procedures

Top Replies