nRF_BLE Security Definition

[Caleb Dueck]

I am trying to find where to implement secure communication between my BLE device (no display or input) and an Android tablet.

I am using the nRF_BLE library and am wondering where the security settings should be initialized? Does this occur at the time of pairing or afterwards?

What would be recommended for the most secure connection?

[Sigurd]

Hi,

I am using the nRF_BLE library

What library is this?

[Caleb Dueck]

Sorry for the ambiguity, It is the nRF5 SDK library.
www.nordicsemi.com/

[Sigurd]

The Peer Manager handles the security in the nRF5 SDK. See this link:

https://infocenter.nordicsemi.com/topic/sdk_nrf5_v17.1.0/lib_pm_usage.html

[Caleb Dueck]

Thank you! That link is very helpful.
I've been able to find that currently we are using Just Works bonding.

The device we've designed does not have a display or keyboard input.

I am wondering if there is a more secure way we could pair over BLE with an android tablet?

We are using a BMD 350 which  has a NFC-A tag interface. Would OOB pairing provide a more secure connection?

Datasheet for reference: https://www.u-blox.com/sites/default/files/BMD-350_DataSheet_UBX-19033354.pdf

[Sigurd]

The information at this link might provide some insights:
https://forum.digikey.com/t/a-basic-introduction-to-ble-4-x-security/12501

Caleb Dueck said:

Would OOB pairing provide a more secure connection?

Yes, if the OOB channel is secure.