uart service security problem

[yiran]

I found in ble_app_uart example, any device with UART app can connect to uart service and send something to COM port or just block the connection of other devices.

So can I take some action to prevent specified devices connecting to my dongle running ble_app_uart？

[Stian Røed Hafskjold]

I believe what you want to do is to use the device manager to bond the device you connect, and then use whitelisting to only allow this device to be connected in the future.

You can read about the device manager here: Device manager

An example that demonstrates bonding and whitelisting is the ble_app_proximity example. This is documented here

[yiran]

My scenario is that some customers' mobile phones installing our app connect my two 51822 ble uart devices and send some text. I am afraid some bad guys will use similar app to keep connect to us to block our customers. The current strategy is allowing any phone to connect to us, but we will disconnect it automatically in two seconds, which is long enough for customer mobile phone sending text. But this action still reduce performance, and if crackers use many mobile phones connect to our system, like DDOS, our customers have no chance to establish connection.