This post is older than 2 years and might not be relevant anymore
More Info: Consider searching for newer posts

Issue with connection kick

Hello, 

I have a security issue with a product with nr52840 because if a hacker connect to my device  with nrf toolbox for example, when i stop the bluetooth connexion on my device, it will reconnect automatically so i can't communicate with the device.

Is there a way to prevent connexion from a device if you know its mac adress for exemple?

Thank you.

Parents
  • Hello,

    There is no such thing as a blacklist in BLE. However, you can check the BLE address of the connected device (which I assume is what you mean by MAC address) in the connection event. If this is not the device you want to connect to, you can disconnect from the device from within this event.

    There is however something called whitelisting in BLE. This is usually used together with something called bonding. But this would require you to know what device you want to connect to, by knowing the BLE address of that device. If so, you can add this address to the whitelist, and the peripheral will only accept connection requests from devices in the whitelist.

    If you do not use a whitelist when you advertise, then anyone can connect to the device, so the peripheral will have to decide whether or not to disconnect after the connection event.

    Best regards,

    Edvin

Reply
  • Hello,

    There is no such thing as a blacklist in BLE. However, you can check the BLE address of the connected device (which I assume is what you mean by MAC address) in the connection event. If this is not the device you want to connect to, you can disconnect from the device from within this event.

    There is however something called whitelisting in BLE. This is usually used together with something called bonding. But this would require you to know what device you want to connect to, by knowing the BLE address of that device. If so, you can add this address to the whitelist, and the peripheral will only accept connection requests from devices in the whitelist.

    If you do not use a whitelist when you advertise, then anyone can connect to the device, so the peripheral will have to decide whether or not to disconnect after the connection event.

    Best regards,

    Edvin

Children
No Data
Related