How to disable the bond and pair?

[eaglezcy]

Hi: Recently, I use the SDK --- "nRF51_SDK_8.1.0", the project is \Nordic\nRF51_SDK_8.1.0_b6ed55f\examples\ble_central, I modified the project to notify the data periodically，and it work well. but when I use sniffer to observe the communication process. I see the data of the notification is "Decrypted", So I want to disable the bond and pair, but don't know how to do it?? I set the define SEC_PARAM_BOND to "0", but it still decrypted, please tell me how to do it, thanks a lot. By the way, in this project, I do not know how this project to do the bond and pair, and I do not find the passkey, and do not know the process of bond and pair. Is the central or the peripheral erupt the bond and pair??

thanks a lot

[Petter Myhre]

Pairing is the process of creating one or more shared secret keys.

Bonding is the act of storing the keys created during pairing for use in subsequent connection in order to form a trusted pair.

If you disable bonding, pairing is still done, i.e. the link gets encrypted.

The peripheral has a GATT server with a characteristic value and a CCCD that requires the link to be encrypted for them to be written to. In services_init(), please change:

BLE_GAP_CONN_SEC_MODE_SET_ENC_NO_MITM(&attr_md.write_perm); to
BLE_GAP_CONN_SEC_MODE_SET_OPEN(&attr_md.write_perm); and
BLE_GAP_CONN_SEC_MODE_SET_ENC_NO_MITM(&cccd_md.write_perm); to
BLE_GAP_CONN_SEC_MODE_SET_OPEN(&cccd_md.write_perm);

The central has a GATT client that will receive BLE_GATT_STATUS_ATTERR_INSUF_AUTHENTICATION or BLE_GATT_STATUS_ATTERR_INSUF_ENCRYPTION if it tries to write to an attribute (the characteristic value and the CCCD are attributes) that requires encryption for it to be written to. Please see the BLE_GATTC_EVT_WRITE_RSP case in client_handling_ble_evt_handler(). If one of these are received, it will call dm_security_setup_req() which will call initiate_security_request(), which will call sd_ble_gap_authenticate(). sd_ble_gap_authenticate() will initate the pairing process.

For you it should be suffient to only make the changes in the peripheral to "disable pairing", but I added the central part as well.

[eaglezcy]

hi peter: thanks a lot! I have try your suggestion, and it works. but I still have one question. where is the passkey? where can I find the passkey? and how can I change the passkey from central?? Is there any example that have realize the function?? I can not find it in the sdk.

best regards!

[dcollier8]

This code is used in the BLE event handler from the BLE dispatch to get the passkey:

static void ble_evt_dispatch(ble_evt_t * p_ble_evt)

{    on_ble_evt(p_ble_evt);

... then in the above event handler:

static void on_ble_evt(ble_evt_t * p_ble_evt)

    switch (p_ble_evt->header.evt_id)
    {

        case BLE_GAP_EVT_PASSKEY_DISPLAY:
        {
            NRF_LOG_INFO("event recd: BLE_GAP_EVT_PASSKEY_DISPLAY\r\n");
            char passkey[PASSKEY_LENGTH+1];
            memcpy(passkey,p_ble_evt->evt.gap_evt.params.passkey_display.passkey,PASSKEY_LENGTH);
            passkey[PASSKEY_LENGTH] = 0;
            // Don't send delayed Security Request if security procedure is already in progress.
            err_code = app_timer_stop(m_sec_req_timer_id);
            APP_ERROR_CHECK(err_code);

            //APP_LOG("Passkey: %s\r\n",passkey);
           //orig: NRF_LOG_INFO(0,"Passkey: '%s'",passkey);
            NRF_LOG_INFO("Passkey: %s\r\n", nrf_log_push(passkey));

        }break;//BLE_GAP_EVT_PASSKEY_DISPLAY

Hope this helps !

Donzo