• State
  • Locked Locked
  • Replies 1 reply
  • Subscribers 52 subscribers
  • Views 378 views
  • Users 0 members are here
Support feedback
Options
Options
Similar topics

This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

Secured connection between smartphone+smartphone app and cc2541 Ble device

Parth Dholakiya
Expert 1245 points
Other Parts Discussed in Thread: CC2540

Hi,

I have designed a Ble device using CC2540 and I have used  "SimpleBlePeripheral" (BLE1.4.1 stack)project to develop my application  for home automation.I have also develope an iOS application to  communicate with my Ble device.I want to implement a security feature  in which ,My ble device(peripheral) should connect only to desired  users from their device using my app only.
I dont want to allow any other users to connect to my ble device using  any other app or even my app.
Please let me know how can i do this? I read about pairing process but  it does not restrict unwanted users to connect to my ble devices,but it  only encrypt the link and still the undesired user can access to the  services and characteristics of my device.

Ideally i need to disallow undesired users to connect to my ble device.  Only those users should be able to connect which might have some  personal hardcoded numeris password which my app will internally share  after connection.
Please let me know if there is any other method to implement the same?

Thanks in advance.

  • 0
    TI__Guru** 105180 points
    Hello Vidula,

    What you describe is not explicitly defined by the BLE specs as Pairing/Bonding can be initiated by any Central device. How you implement this behavior will need to be above BLE; i.e., above the GATT layer or done in your application. Some systems assume the first device to Pair is a trusted device, then once paired, do not allow any other device to connect/pair unless authorized by the initial device. Beyond that, your only option would be to use a shared secret that only your BLE device & smart device know. I would add some replay protection, i.e., one time codes.

    If you do decide to use Whitelists to filter on known BD ADDRs, please review this thread: e2e.ti.com/.../1428335

    Best wishes