security - BLE Restricted Access -


i have designed ble peripheral product. there app developed (android, windows) writing firmware support app in blind.

we cannot have access peripheral not authorized. handle have password stored in firmware.

there 7 custom characteristics, 3 of disabled upon initial connection. password characteristic write of course, once correct password sent other characteristics enabled.

i have no experience ble until have no idea if scheme reasonable or not.

is there bettor way limit access?

thanks

rich

the bluetooth standard defines pairing/bonding concept corresponding encryption. based on specification doesn't seem fits needs.

you therefore have come on own. how secure make you. proposal simplest , unsecure way of doing it. secure thing can use protocol created these purposes (https://en.wikipedia.org/wiki/password-authenticated_key_agreement) create cryptographic key use authenticated encryption when later communicate device. decide way want go based on security level want.


Comments

Popular posts from this blog

angular - Ionic slides - dynamically add slides before and after -

minify - Minimizing css files -

Add a dynamic header in angular 2 http provider -