Skip to content
This repository has been archived by the owner on Sep 10, 2018. It is now read-only.

Latest commit

 

History

History
157 lines (142 loc) · 5.85 KB

README.md

File metadata and controls

157 lines (142 loc) · 5.85 KB
Raw

IronE

Notifications for Nokia Steel HR.

About

This app tried to extend notifications for the Nokia Steel HR to be received from any application and is now obsolete with latest firmware.

Findings

Poking around logs and Bluetooth protocol captures I was able to gather some information on device communication and BtLE services.

Services

Type UUID Description
Service 00001800-0000-1000-8000-00805f9b34fb Generic access
Characteristic 00002a00-0000-1000-8000-00805f9b34fb Device name
Characteristic 00002a01-0000-1000-8000-00805f9b34fb Appearance
Characteristic 00002a04-0000-1000-8000-00805f9b34fb Peripheral Preferred Connection Parameters
Service 00001801-0000-1000-8000-00805f9b34fb Generic attribute
Characteristic 00002a05-0000-1000-8000-00805f9b34fb Service Changed
Descriptor 00002902-0000-1000-8000-00805f9b34fb Client Characteristic Configuration
Service 00000020-5749-5448-0037-000000000000 Proprietary
Characteristic 00000021-5749-5448-0037-000000000000 Proprietary
Descriptor 00002902-0000-1000-8000-00805f9b34fb Client Characteristic Configuration
Characteristic 00000022-5749-5448-0037-000000000000 Proprietary
Characteristic 00000023-5749-5448-0037-000000000000 Proprietary
Descriptor 00002902-0000-1000-8000-00805f9b34fb Client Characteristic Configuration
Characteristic 00000024-5749-5448-0037-000000000000 Proprietary
Descriptor 00002902-0000-1000-8000-00805f9b34fb Client Characteristic Configuration

Judging by my observations, 00000023-5749-5448-0037-000000000000 is used for various kinds of device setup and communication. Except for "get me device information" (which seems to return a MAC address), all commands (e.g. "enable notifications", "tell me your current notification setup") require authentication by the client using a challenge-response procedure with a secret that was probably configured during initial device pairing and setup.

Gatt Server

Type UUID Description
Service 00001811-0000-1000-8000-00805f9b34fb Alert Notification Service
Characteristic 00002A46-0000-1000-8000-00805f9b34fb New Alert

To send a notification to the device 00002A46-0000-1000-8000-00805f9b34fb has to be provided as a GATT server by the app which the watch will connect to.