• State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Subscribers 71 subscribers
  • Views 4045 views
  • Users 0 members are here
Attachments (0)
Nordic Case Info
  • Case ID: 104613
Options
This post is older than 2 years and might not be relevant anymore
More Info: Consider searching for newer posts
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

white list creation

sruthiraj koodathil

hii....

i want to make my device connected through a secret pass code (may be six digit)..ie. my device get advertise then when master control panel discover my device and try to connect ,there should be an exchange of a secret key.. then only the services should be available for master control panel....

what methode should i use.? whether whitelist will be usefull?

i am totally unfamiliar with whitelist.. do you help me to create a white list

Parents
  • 0

    The purpose of the whitelist is to restrict connection and/or scanning from everyone everyone except pre-determined devices that you know the address or Identity Resolving Key (IRK) of. For practical purposes, this means only bonded devices that you have had contact with from before.

    For your scenario, you could look at enforcing encryption at the start of the connection and make use of the static passkey functionality to set a secret PIN code. If the database is security-with-MITM-protected, it will deny anything but discovery operations until security is set up.

    It is also possible to make a custom solution based on authorization. If your protected attributes require authorization, the app will be asked to authorize each read/write (as configured). You could then deny all operations until a particular blob of data is written to one of the characteristics, and make that "unlock" reading/writing for that particular link.

Reply
  • 0

    The purpose of the whitelist is to restrict connection and/or scanning from everyone everyone except pre-determined devices that you know the address or Identity Resolving Key (IRK) of. For practical purposes, this means only bonded devices that you have had contact with from before.

    For your scenario, you could look at enforcing encryption at the start of the connection and make use of the static passkey functionality to set a secret PIN code. If the database is security-with-MITM-protected, it will deny anything but discovery operations until security is set up.

    It is also possible to make a custom solution based on authorization. If your protected attributes require authorization, the app will be asked to authorize each read/write (as configured). You could then deny all operations until a particular blob of data is written to one of the characteristics, and make that "unlock" reading/writing for that particular link.

Children
No Data
Related
Terms of service