Consider a system where two devices are connected via a wireless encrypted channel. The channel requires manual pairing and the data passed over the channel is also encrypted using an ephemeral symmetric key. Each exchange will occur within its own session.
How does the system authenticate the initial request for a session?
Is it adequate that the devices were manually paired to 'trust' a session initialisation request or are there more secure schemes that can be use to increase the odds that the session connection request is from a trusted source?