Origianl Passkey

[Yuichi]

Hi

I'd like to realize below function for our product.

1. The product has static passkey in factory.
2. A user who use the product will pair with his smartphone using the factory static passkey.
3. Then the user update the static passkey to arbitrary passkey.
4. In result pairing with the product will be restricted/protected.

Is that possible? And our product is No-Input and No-Output device.

Are there points to be noted?

Thanks

[Hung Bui]

@Haruthakop: There is only one try per connection. So it will take some time before the attacker can burst force to bond with a device that it doesn't have the visual of the passkey. You can control the number of try (connect- bond-disconnect) in the application.

However, the problem here is eavesdropper, who can sniff the passkey pairing transmission between 2 devices and can try all of 1.000.000 possibilities passkey in a fraction of a second to decrypt the transmission between 2 device.

Next time please don't post your question inside another question. Please create your own question.