Connection to device (peripheral) after smartphone (central) erased its bonding data.

RE: Connection to device (peripheral) after smartphone (central) erased its bonding data.

Marjeris Romero — Thu, 28 May 2020 14:16:33 GMT

Yes, it will always a trade-off between user-friendliness and security, it will depend on what you are more concerned about. Let me know if you have any more questions.

BR,

Marjeris

RE: Connection to device (peripheral) after smartphone (central) erased its bonding data.

Nathan O. — Tue, 26 May 2020 15:10:43 GMT

Hi Marjeris,

I actually managed to get my hands on a Galaxy S9 and I can confirm I do not have any pop-up on this smartphone with my own project. So you are right, it's probably a specific issue of my smartphone (the pop-up actually changed content since the last time I checked with an OS update of the phone).

Regarding the security of the repairing I see what you mean. For now, my customer does not want to implement any kind of factory reset on the device. I'll have to explaing this situation and raise the concern about the repairing. The device's input capability is also very limited so not sure how we could really handle a request to delete bonding information.

RE: Connection to device (peripheral) after smartphone (central) erased its bonding data.

Marjeris Romero — Tue, 26 May 2020 10:43:21 GMT

Hi Nathan,

There is one catch with repairing. Repairing is not secure, I have now updated my original post to reflect that.

If repairing is allowed anyone can just pretend it has the same MAC address and read all the data by bonding again.

It's recommended to instead remove the pairing info on both sides. This can also be done "remotely", like with a "restore factory defaults" setting in your device, or with a button for example...

So as you see, it would be a trade-off between security and user-friendliness... If you choose to allow repairing anyways, the user data should at least be removed so no one can get access to them.

Anyways, I just tested a modified version of the glucose example in the SDK, adding the event handling for PM_EVT_CONN_SEC_CONFIG_REQ in the PM handler so I can handle repairing, using my Samsung Galaxy S9 without seeing any pop-up window... so it may be a manufacturer dependent issue...

To be sure, you can do the same test I did, open the Glucose example from the SDK v16.0.0, add the 3 lines for repairing from the above post inside the pm_evt_handler() and test bonding and repairing with your phone to see if the issue still persists.

Best regards,

Marjeris

RE: Connection to device (peripheral) after smartphone (central) erased its bonding data.

Nathan O. — Tue, 19 May 2020 14:49:54 GMT

Thanks for your response.

I actually already have this configuration for handling SEC_CONFIG_REQ events.

Is it an expected behavior that the smartphone shows a popup asking for association request when this happens ?

On the first bonding procedure, I do not have any popup (Just Works pairing is done). I would like to avoid having this smartphone popup if possible. It is especially an issue as on one of my smartphone, this popup show as "association request with null" but that's probably a smartphone side issue.

RE: Connection to device (peripheral) after smartphone (central) erased its bonding data.

Marjeris Romero — Tue, 19 May 2020 14:11:00 GMT

Hi,

When you erase the bonding information from the smartphone it is also recommended to erase the bonding information on the nRF device too.

The peer manager which handles pairing requests will for security reasons* reject new pairing requests from an already bonded peer device. It sounds like this may be the problem here.

You may add the following event handling to the PM callback if you want to allow repairing:

      case PM_EVT_CONN_SEC_CONFIG_REQ: 
       {
            pm_conn_sec_config_t config = {.allow_repairing = true};
            pm_conn_sec_config_reply(p_evt->conn_handle, &config);
       }

The other alternative is to actually delete the bond from the nRF device. For the SDK examples, you can delete all bonds by pressing board button 2 while resetting the device.

NB:

* Note that this will enable a potential attacker to update an existing bond. So there is a trade-off between security and user-friendliness.

Best regards,

Marjeris