security - BLE Restricted Access -
i have designed ble peripheral product. there app developed (android, windows) writing firmware support app in blind.
we cannot have access peripheral not authorized. handle have password stored in firmware.
there 7 custom characteristics, 3 of disabled upon initial connection. password characteristic write of course, once correct password sent other characteristics enabled.
i have no experience ble until have no idea if scheme reasonable or not.
is there bettor way limit access?
thanks
rich
the bluetooth standard defines pairing/bonding concept corresponding encryption. based on specification doesn't seem fits needs.
you therefore have come on own. how secure make you. proposal simplest , unsecure way of doing it. secure thing can use protocol created these purposes (https://en.wikipedia.org/wiki/password-authenticated_key_agreement) create cryptographic key use authenticated encryption when later communicate device. decide way want go based on security level want.
Comments
Post a Comment