Application controlled auth

[Victor Nascimento]

I was wondering if its possible to do a "Create new user" function, so the new bonded devices are accepted only if the first connected master tells the peripheral to.

For example:

• Admin (person) power up the peripheral.

• Peripheral starts connectable advertising (with no restriction).

• Admin (device) bonds with peripheral.

• Peripheral stores connected device as 'Admin' role.

• Peripheral changes advertising mode to whitelist immediately.

• Admin send "Be connectable" command.

• Peripheral changes advertising mote to "Any connection"

• New user connects a device and bonds with peripheral.

• Peripheral changes advertising mode to whitelist immediately.

Problems so far: Lost admin

Is this a good security scheme?

[Charles Manning]

What is Admin? Is it communicating via BTLE?

A central cannot initiate a conversation with a peripheral. Only the peripheral can do that by advertising. Therefore there is no way to tell a peripheral to turn on.

[Victor Nascimento]

Edited the question so it makes more sense.