uart service security problem

RE: uart service security problem

Stian Røed Hafskjold — Wed, 26 Aug 2015 16:52:05 GMT

Okay, so these nRF51 devices are placed outside somewhere in a public place, where everyone are able to connect to them? I'm not quite sure what the general way to handle this scenario is, but I can ask around and come back to you tomorrow

RE: uart service security problem

yiran — Wed, 26 Aug 2015 15:19:04 GMT

My scenario is that some customers' mobile phones installing our app connect my two 51822 ble uart devices and send some text. I am afraid some bad guys will use similar app to keep connect to us to block our customers. The current strategy is allowing any phone to connect to us, but we will disconnect it automatically in two seconds, which is long enough for customer mobile phone sending text. But this action still reduce performance, and if crackers use many mobile phones connect to our system, like DDOS, our customers have no chance to establish connection.

RE: uart service security problem

Stian Røed Hafskjold — Tue, 25 Aug 2015 14:07:51 GMT

You cannot whitelist 10000 devices. You could maybe store 10000 addresses in flash, and filter on them after it has connected, and then disconnect it. But it would take up a lot of flash and would probably be too slow. What is the use case for this scenario?

RE: uart service security problem

yiran — Thu, 20 Aug 2015 09:20:08 GMT

it is better to allow 10000 specific devices and block every one else if I can. If it is impossible, black list mode is also ok

RE: uart service security problem

Stian Røed Hafskjold — Thu, 20 Aug 2015 08:26:57 GMT

So you want to allow every device to connect except a few ones you know the address of, or do you want to allow 10000 specific devices and block every one else?

RE: uart service security problem

yiran — Thu, 20 Aug 2015 01:07:57 GMT

At the beginning I considered whitelist mode, however whitelist seems not to work with UART service. What's more, the number of devices I want to store in white list will be more than 10,000, perhaps whitelist cannot have so large storage space.

RE: uart service security problem

Stian Røed Hafskjold — Wed, 19 Aug 2015 11:07:42 GMT

I believe what you want to do is to use the device manager to bond the device you connect, and then use whitelisting to only allow this device to be connected in the future.

You can read about the device manager here: Device manager

An example that demonstrates bonding and whitelisting is the ble_app_proximity example. This is documented here