Is NFC + static passkey bonding possible?

RE: Is NFC + static passkey bonding possible?

Petter Myhre — Tue, 21 Nov 2017 11:53:10 GMT

You may end up with Just Works even though you have set OOB and MITM. If both peers have set OOB it will be used, if one of them have not, IO capabilities will be used to determine if passkey entry can be done, if it can't, Just Works will be used. If this isn't acceptable you can reject the peer during pairing, or you can disconnect the link after pairing is done. I think this might be of help to you.

Even though pairing is complete, this doesn't necessarily mean that peer can access all your attributes, it depends on what security level you have set on them. Just works will result in security level 2, and if you have set security level 3 (Passkey entry or OOB) on your attributes the peer will still not be able to access them.

RE: Is NFC + static passkey bonding possible?

Fanis — Mon, 20 Nov 2017 17:29:50 GMT

I've just expected OOB and MITM options Turned on will give me more security when i switch to bonding mode with NFC (my application initializes static passkey bonding, but on button press i run pm_sec_params_set() with oob features to switch to bonding over NFC setup). For some reason in this state bonding doesn't use OOB_AUTH_KEY transmitted through NFC. Yes pairing request pops up when attaching Android phone, but actually any one else can pair to the device using it's BLE and with no password (similar to Just Works).

RE: Is NFC + static passkey bonding possible?

Petter Myhre — Mon, 20 Nov 2017 16:20:46 GMT

I'm having difficulties understand what you meant by your last comment. Is there still a problem?

RE: Is NFC + static passkey bonding possible?

Fanis — Sun, 19 Nov 2017 18:53:28 GMT

Thanks. It seems to work fine to readjust pm_sec_params_set() on the fly (while no connect) without reinitializing all the rest BLE stuff. But what i mentioned now is that actually when i switch for a short period to NFC connection mode with OOB=1, MITM=1 and BOND=1 parameters, it works more like Just works bonding. For example anyone can connect to the nrf peripheral and bond without password over BLE. Only use of NFC this way is only limited by quick popping up of pairing dialog without managing it manually.

RE: Is NFC + static passkey bonding possible?

Petter Myhre — Wed, 08 Nov 2017 11:46:45 GMT

I'm assuming you are making a peripheral device.

When the central sends a pairing request the Peer Manager must know if it is going to tell the central if OOB is supported or not. If OOB is supported by both sides, this is what shall be used, per spec. If OOB isn't supported by either side, IO capabilities will be checked to see if passkey entry can be performed.

You can tell the Peer Manager if OOB is supported or not by using pm_sec_params_set(). This can be called several times to set/unset OOB support.