RE: How to know the bond has been removed in the peer device?

run_ar — Mon, 27 Aug 2018 07:24:59 GMT

Hi,

It is not possible to tell if someone has deleted the bond on the smart phone or if the peer device is an attacker that is using the same address as the bonded smart phone. However it is possible to allow re-pairing based on the device address, but that imposes a security risk as an attacker can use the same address to bond with your device. Anyway as long as you are aware of that, but still wants to allow re-pairing, I think it should be sufficient to changed this part of the code:

        case PM_EVT_CONN_SEC_CONFIG_REQ:
        {
            // Reject pairing request from an already bonded peer.
            pm_conn_sec_config_t conn_sec_config = {.allow_repairing = false};