This post is older than 2 years and might not be relevant anymore
More Info: Consider searching for newer posts

Issue with connection kick

Hello, 

I have a security issue with a product with nr52840 because if a hacker connect to my device  with nrf toolbox for example, when i stop the bluetooth connexion on my device, it will reconnect automatically so i can't communicate with the device.

Is there a way to prevent connexion from a device if you know its mac adress for exemple?

Thank you.

Parents
  • Okay thank you Edvin this is really helpful,

    Is it possible that the program runs without a whitelist on the beginning and that we set a whitelist after when all the devices adresses authorized are known by the device ? 

  • Yes. That is in fact the common way to do that. But note that whitelisting is typically used together with bonding (storing connection encryption for future use). If you want to try it out, you can try to connect to the ble_app_gls example example from SDK17.0.2\examples\ble_peripheral\ble_app_gls folder. Note that the first time you connect, you need to enter a 6-digit passkey that is printed in the log from the nRF, while the next time you don't need to do that. After entering this passkey, only the bonded device will be able to connect, unless you press the button2 on the DK with a long press. Look at the implementation of the BSP_EVENT_WHITELIST_OFF.

    Alternatively you can delete the bonding information by holding button 2 is held while you power on or reset the device (or erase the flash on the nRF).

    Best regards,

    Edvin

Reply
  • Yes. That is in fact the common way to do that. But note that whitelisting is typically used together with bonding (storing connection encryption for future use). If you want to try it out, you can try to connect to the ble_app_gls example example from SDK17.0.2\examples\ble_peripheral\ble_app_gls folder. Note that the first time you connect, you need to enter a 6-digit passkey that is printed in the log from the nRF, while the next time you don't need to do that. After entering this passkey, only the bonded device will be able to connect, unless you press the button2 on the DK with a long press. Look at the implementation of the BSP_EVENT_WHITELIST_OFF.

    Alternatively you can delete the bonding information by holding button 2 is held while you power on or reset the device (or erase the flash on the nRF).

    Best regards,

    Edvin

Children
No Data
Related