Constant Android Bluetooth Pairing Requests for ALREADY PAIRED device after new Android security update

RE: Constant Android Bluetooth Pairing Requests for ALREADY PAIRED device after new Android security update

Einar Thorsrud — Tue, 03 Aug 2021 12:36:58 GMT

Hi,

Thanks for the information. We have not been able to reproduce this issue, though there is clearly something there. I suspect there must be something else needed to trigger this, in addition to Android 11 and just works pairing. Please let me know if you make any progress or if you can provide firmware for a DK that can be used to reproduce this issue with a specific Android device.

RE: Constant Android Bluetooth Pairing Requests for ALREADY PAIRED device after new Android security update

veletron — Wed, 21 Jul 2021 10:43:50 GMT

Sorry, I got bogged down with other stuff. Issue occurs on Android 11 no matter whether the bonding was done b4 the 10-->11 update or otherwise. EG, fresh clean phone already running android 11, install app, pair with device, appears under 'paired devices' but every time you leave and then come back into range you get another pairing request despite the identity of the device not having changed and the keys exchanged during the initial pairing being identical to current. If I get time I'll try adding MITM to the peripheral and see if that 'fixes' it, seems that this is an ill-thought-out security fix in android to prevent tracking on 'Just Works' Mode1 level 2 devices.

RE: Constant Android Bluetooth Pairing Requests for ALREADY PAIRED device after new Android security update

Einar Thorsrud — Thu, 01 Jul 2021 12:17:30 GMT

Hi Karen,

I have not come across this issue before, but if someone else has on this forum it would good with some feedback.

It would be good to understand what actually happens here. Is it possible for you to make a sniffer trace? Also, what is the behavior like if you delete the bond on both the nRF and Android, and then bond again? Does the issue reappear, or does it only apply to devices that were bonded before the Android phone was updated?

Einar