Pairing and Bonding Method in nrf51822

RE: Pairing and Bonding Method in nrf51822

Basprog — Thu, 15 Nov 2018 12:22:39 GMT

Dear Petter, what is more meaningful to protect peripheral against hostile centrals: direct advertising or whitelist? Also could you kindly review pros and cons of both approaches? Use case is as above: peripheral is intended to be connected to the only central.

About the same question for protecting a central against hostile peripherals: filter or whitelist?

BTW you wrote "Then disable pairing/bonding". I guess this is done by pm_sec_params_set(bond = 0). Can it be called at any time?

RE: Pairing and Bonding Method in nrf51822

Petter Myhre — Wed, 06 Dec 2017 16:00:14 GMT

For whitelisting this might be helpful. There are also a lot of questions about it in here.

This might also be helpful. I would also consider buying a book, for example this one.

RE: Pairing and Bonding Method in nrf51822

Hust — Wed, 06 Dec 2017 09:30:13 GMT

Excuse me, since I am a newbie in this BLE, can you please provide me some sources to look for understanding of whitelist and pairing, bonding? how to advertising with and without whitelist?

RE: Pairing and Bonding Method in nrf51822

Hust — Tue, 05 Dec 2017 14:47:05 GMT

Thank you for your helpful response. I will try it and notify you about the result.

RE: Pairing and Bonding Method in nrf51822

Petter Myhre — Tue, 05 Dec 2017 14:38:15 GMT

Yes, it is possible.

First advertise without whitelist.

Smart phone A connects and does just works bonding. (You have to do this in a safe environment to not be vulnerable to passive eavesdropping and MTIM attacks.)

Then disable pairing/bonding.

If you get disconnected, advertise with whitelist (to filter out connection requests from unfamiliar centrals).

(Be aware that a hostile central can use the address of the trusted central to get through the whitelist and connect, but it will not be able to pair/bond (when this is disabled). However, you will have to detect this and disconnect.)

If the bond is deleted, enable pairing/bonding and advertise without whitelist.

On program startup check if a device is bonded, if it is, disable pairing/bonding and advertise with whitelist, if not advertise without whitelist.