BLE connection with pin code

RE: BLE connection with pin code

Roei — Tue, 23 Mar 2021 11:12:15 GMT

Hi,

Issue is resolved. The problem was that physical layer update event handler was under #ifdef, so that code was disabled. After removing #ifdef - everything works.

Thanks for your support!

RE: BLE connection with pin code

run_ar — Tue, 23 Mar 2021 10:58:08 GMT

Didn't you already say (in original post) that this works with android? strange thing is I though android also waited for insufficient authentication before pairing. But that could vary from implementation to implementation.

RE: BLE connection with pin code

run_ar — Tue, 23 Mar 2021 10:56:22 GMT

You should check that the phone is not able to update the cccd handle, nor read nor write to the characteristics without pairing. Prior to pairing the gatt server should reply with att error insufficient authentication.

RE: BLE connection with pin code

run_ar — Tue, 23 Mar 2021 10:54:57 GMT

Nus service is enough as long as you have configured the security settings correctly. Maybe you could add your settings her?

RE: BLE connection with pin code

Roei — Thu, 18 Mar 2021 08:45:35 GMT

Hi,

I've tried to change to SEC_MITM and added pin code to the example by using sd_ble_opt_set(BLE_GAP_OPT_PASSKEY, ...). Still doesn't initiate secured connection with passkey, only regular connection (via NRF connect).

Can you please help me?

Thanks

RE: BLE connection with pin code

Roei — Wed, 17 Mar 2021 16:31:50 GMT

In addition - should I add any special service to my application, in order to make it work? I'm using only device information service and NUS service. Is that enough?

Thanks

RE: BLE connection with pin code

Roei — Wed, 17 Mar 2021 15:50:52 GMT

I will try.

What do I expect to see with the sniffer?

Thanks

RE: BLE connection with pin code

run_ar — Wed, 17 Mar 2021 13:59:54 GMT

Can you capture a sniffer trace of the on air traffic, to see if pairing is triggered?

RE: BLE connection with pin code

Roei — Wed, 17 Mar 2021 13:19:19 GMT

Hi,

I've already done that with Rx and Tx characteristics - still doesn't work. I'm using BLE_GAP_CONN_SEC_MODE_SET_LESC_ENC_WITH_MITM to protect write and read permissions.

Any other ideas?

Thanks

RE: BLE connection with pin code

run_ar — Wed, 17 Mar 2021 12:59:06 GMT

Hi,

The "insufficient authentication" error will be sent automatically by the Softdevice if the peer tries to read/write a characteristic that is configured to require a higher security level. So you need to configure the security level for the characteristic you want to " protect" by requiring pairing and entering a pin.

From the heart rate example:

    // Here the sec level for the Heart Rate Service can be changed/increased.
    hrs_init.hrm_cccd_wr_sec = SEC_JUST_WORKS;
    hrs_init.bsl_rd_sec      = SEC_JUST_WORKS;

    err_code = ble_hrs_init(&m_hrs, &hrs_init);
    APP_ERROR_CHECK(err_code);

Notice that the required security level is just works in this case. You should probably require SEC_MITM since you are using a PIN.

RE: BLE connection with pin code

Roei — Tue, 16 Mar 2021 10:02:26 GMT

Hi,

Any news? I'm still having those issues.

Thanks!

RE: BLE connection with pin code

Roei — Thu, 11 Mar 2021 12:16:23 GMT

In addition - I couldn't find any insufficient authentication error in heart rate example. Can you please help me?

RE: BLE connection with pin code

Roei — Thu, 11 Mar 2021 11:43:18 GMT

Hi,

Thanks for your help!

Right now, I'm using sd_ble_gatts_characteristic_add(), in order to add RX, TX and device information service. Read and write permissions are BLE_GAP_CONN_SEC_MODE_SET_LESC_ENC_WITH_MITM.

Is that good enough? Do I need to add more characteristics with another security level, in order to make the IOS trying to read and initiate pairing process?

Thanks!

RE: BLE connection with pin code

run_ar — Thu, 11 Mar 2021 10:14:44 GMT

Hi,

If you look at the heart rate example in the sdk. this will send and incufficient authentication error to the phone once the iPhone tries to write to the cccd of the heart rate characteristic. this causes the iphone to start the pairing process.

So the phone will need to try to write to a characteristic in one of the peripherals services. So configure security on the peripheral. For details on how to configure the characteristics please take a look at our tutorial section here: https://devzone.nordicsemi.com/nordic/short-range-guides/b/bluetooth-low-energy

RE: BLE connection with pin code

Roei — Wed, 10 Mar 2021 15:07:30 GMT

Hi,

Thanks for your response!

Who should try to read/write to a characteristic with higher security level? The mobile?

Where should I enable notification or increase security level? On NRF device side or mobile side?

Can you please give me an example?

Thanks!

RE: BLE connection with pin code

run_ar — Wed, 10 Mar 2021 14:44:24 GMT

iOS will wait with pairing until you try to read/write to a characteristic that requires a higher security level. Did you try to enable notification for one of the characteristics? If that does not trigger pairing it means you need to increase the security level for your characteristics.

RE: BLE connection with pin code

Roei — Wed, 10 Mar 2021 11:35:01 GMT

I will give some more details.

When start advertising via nrf device and trying to connect via nrf connect app - I have the pin code window on my android mobile, but not on my IOS mobile. I understand that in IOS it's different, as I need to transmit my services in order to make it happen in IOS.

Am I right?