RE: Central to update bonding info when peripheral has deleted it.

Hung Bui — Thu, 01 Jul 2021 13:45:48 GMT

Hi,

On the central side, since there is most likely no security request from the peripheral, you can't use allow_repairing to allow a new bond.

You would need to catch PM_EVT_BONDED_PEER_CONNECTED event, to know that you have connected to a bonded peer. Then you will receive either PM_EVT_CONN_SEC_SUCCEEDED when the bonding is successful. Or PM_EVT_CONN_SEC_FAILED event when bonding is failed. In that case you would need to call pm_peer_delete() to delete the specific peer that you just connected. And then try to connect and bond again.

Note that this behavior is not suggested as it expose a risk that an attacker can pretend to be the peripheral and it has lost the bond information. You will then delete the original bond information and can cause it to unable to connect to the original peer or that the attacker can spoof that it's the original peer.

So usually it should involve the approval of the End User to delete the peer information (just like on the phone, you need to "Forget this device" before you can establish a new bond.