Tracking down private resolvable addresses

RE: Tracking down private resolvable addresses

tesc — Thu, 06 Sep 2018 15:18:12 GMT

Hi,

That is correct. The whole purpose of the resolvable address is that only bonded devices will know what device it is. It is a privacy feature, so that the device cannot be tracked.

Regards,
Terje

RE: Tracking down private resolvable addresses

Matthew K — Thu, 06 Sep 2018 14:36:48 GMT

Thanks for your reply!

Just to recap, without bonding with a peripheral,

there is no way to tell it is the same peripheral or not after the private resolvable address has changed, right?

RE: Tracking down private resolvable addresses

Matthew K — Thu, 06 Sep 2018 14:36:11 GMT

Thanks for your reply!

Just to recap, without bonding with a peripheral,

there is no way to tell it is the same peripheral or not after the private resolvable address has changed, right?

RE: Tracking down private resolvable addresses

Aleksander Nowakowski — Thu, 06 Sep 2018 13:23:30 GMT

Hello,

On Android it is the system that manages bonding. No bonding information, none of the keys, are available. There is no API to get this kind of data from the phone. The only methods related to bonding are createBond(), added in API 19 (KitKat) and removeBond() (which has to be invoked with reflections).

Also, scanning returns only 48 bits of Bluetooth address, so you are loosing the public-private address type information. Without it you don't know the address type, as it may be public address and those types you wrote don't apply.

On bonded devices the getAddress() method returns resolved address if it could have been resolved, at least I think so.

Besides, the code of nRF Connect is not available (for Android and iOS), as stated on the GitHub page you pointed to. If you want, you may write a plugin to nRF Connect for PC. COde for this app is available on GitHub: https://github.com/NordicSemiconductor/pc-nrfconnect-ble

RE: Tracking down private resolvable addresses

tesc — Thu, 06 Sep 2018 13:03:57 GMT

Hi,

I do not have an answer to 3), but:

1) The resolvable random address can only be resolved using the IRK. You will get the IRK as part of bonding.

2) Figuring out if the address is a known resolvable random address can only be done by checking against the list of known IRKs. Our SoftDevices does this automatically, providing in the advertising report event a flag peer_addr.addr_id_peer signalling if it is a resolved address. The two-bit fields that you refer to are actually part of the address itself. For the fourth type of address, "Public Device Address", those two bits are the two most significant bits of the company_id part of the address.

Regards,
Terje