Bluetooth

transcript

PART 1)

Bluetooth?

HagallBerkanan

Develoed in 1994Jaap Haartsen and Sven Mattison

Ericsson Mobile platform. Lund, Sweden

In 1998Ericsson, Nokia, IBM, Intel and Toshiba join Special Interest Group (SIG)

Origin

• Bluetooth old version of Old Norse Blatonn or Danish Blatand.

• Tenth-century king Harald I Baltand of Denmark– United devided Danish tribes

into a single Kingdom.

Version Data Rate SpecificationBluetooth 2.0 + EDR 3 Mb/s

Data transfer rate is 2.1 Mb/s

Lower power consumption

Bluetooth 2.1 + EDR 3 Mb/s

Extended inquiry response

Sniff subbroting

Encryption pause resume

Secure simple paring NFC cooperation

Short range wireless

Bluetooth 3.0 28 Mb/s Very fast High quality

Versions

What is Bluetooth?

• A hardware description• An application framework

Application Framework and Support

Link Manager and L2CAP

Radio & Baseband

Host Controller Interface

RFBaseband

AudioLink Manager LMPL2CAP

TCP/IP HID RFCOMM

Applications

What is Bluetooth?

• A hardware description• An application framework

Modules

Software

RFBaseband

AudioLink Manager LMPL2CAP

TCP/IP HID RFCOMM

Applications

• FHSS-CDMA• GFSK

– Chops up Data and transmits up to 79 frequency (channels)

• Data rate at 1 Mb/s to 480Mb/s– Unlicensed– Secure– Replacing short-range wireless application

• Frequency of 2.4 GHz• Developed by Special Interest Group (SIG)

Specification

• Low power Consumption• Short range

– Class & Range• 100m Class 1• 10m Class 2• 1m Class 3

• Low-cost transceiver microchip• Transmits 720 kilobits per second• Peripherals at distances up to 30 ft

FHSS and DSSS Power Spectral Densities

2.400 GHz

t0 t2t1

FHSS Networks are Frequency Agile2.4835 GHz

2.400 GHz

DSSS Networks typically use 3 fixed non-overlapping Channels2.4835 GHz

Interference Model

1.94 dwell periods

625 sec

259 sec

BT Transmission slots

1500 byte DSSS Hi Rate Packet(1210 sec)

•The basic piconet physical channel is divided into time slots, each 625 μs in length.

•The time slots are numbered according to the most significant 27 bits of the Bluetooth clock CLK28-1 of the piconet master.

•The slot numbering ranges from 0 to 227-1 and is cyclic with a cycle length of 227. The time slot number is denoted as k.

Collision Analysis for a Multi-Bluetooth Picocells Environment - byTing-Yu Lin and Yu-Chee Tseng

Bluetooth RF Specifications

Specified for low cost, single chip implementation– Noise floor margin for substrate noise and low

current LNA– Linearity set by near-far problem– In-band image allows low-cost low IF– VCO phase noise enables integrated VCO– TX-RX turn around time enables single synthesizer– 2.4 ISM band chosen for global use and process

capabilities

Basic Baseband Protocol

• Spread spectrum frequency hopping radio– 79/23 one MHz channels– Hops every packet

• Packets are 1, 3 or 5 slots long– Frame consists of two packets

• Transmit followed by receive– Nominally hops at 1600 times a second (1 slot packets)

O neSlot

Packet

T hree S lot P acket

Fram e

M aster

S lave

625 usO ne S lot

fk fk+1

O neSlo t

Packe t

Fram e

M aster

S lave

625 usO ne S lo t

fk fk+1

O neSlot

Packet

Network Topology• Radio Designation– Connected radios can be master

or slave– Radios are symmetric (same radio

can be master or slave) • Piconet

– Master can connect to 7 simultaneous or 200+ active slaves per piconet

– Each piconet has maximum capacity (1 MSPS)

• Unique hopping pattern/ID

• Scatternet– High capacity system

• Minimal impact with up to 10 piconets within range

– Radios can share piconets!

The Piconet

• All devices in a piconet hop together– In forming a piconet, master gives slaves its clock and device ID

• Hopping pattern determined by device ID (48-bit)• Phase in hopping pattern determined by Clock

• Non-piconet devices are in standby• Piconet Addressing

– Active Member Address (AMA, 3-bits)– Parked Member Address (PMA, 8-bits)

Functional Overview• Standby

– Waiting to join a piconet

• Inquire– Ask about radios to connect to

• Page– Connect to a specific radio

• Connected– Actively on a piconet (master

or slave)

• Park/Hold– Low Power connected states

Inquiry Page

ConnectedAMA

T ransm itdataAMA

T typ ical= 0.6s

T typ ical=2s

HO LDAMA

PAR KPMA

T typ ical= 2 m s T typ ica l=2 m s

R e leasesA M A

A dd ressLow Pow er

States

ActiveStates

Standby

ConnectingStates

UnconnectedStandby

Master Paging a slave

• Master pages slave (packet has slave ID) at slave page frequency (1 of 32)– Master sends page train of 16 most likely frequencies in slave hop set

• Slave ID sent twice a transmit slot on slave page frequency• Master listens twice at receive slot for a response

– If misses, master sends second train on remaining 16 frequencies• Slave listens for 11 ms (page scan)

– If correlater triggers, slave wakes-up and relays packet at response frequency– Master responds with FHS packet (provides master’s Device ID and Clock)– Slave joins piconet

fmfk+2

Master

fk+1fk

ID c ID c

f’k+1f’k

ID c IDc

IDaID a

Packet Types/Data Rates

0000000100100011

NULLPOLLFHSDM1

0100010101100111

HV1HV2HV3

2DV1000

1001101010111100

DM3DH33

110111101111

DM5DH54

TYPESEGMENT ACL link

SCO link

TYPE symmetric

asymmetric

Data Rates (Kbps)Packet Types

Mobile = Battery life•Low power consumption*– Standby current < 0.3 mA

3 months– Voice mode 8-30 mA

75 hours– Data mode average 5 mA

(0.3-30mA, 20 kbit/s, 25%) hours

•Low Power Architecture– Programmable data length (else radio sleeps)– Hold and Park modes 60 µA

• Devices connected but not participating• Hold retains AMA address, Park releases AMA, gets PMA address• Device can participate within 2 ms

* Estimates calculated with 600 mAh battery and internal amplifier, power will vary with implementation

Bluetooth Security• Provides link layer security between any two Bluetooth

radios– Authentication (E1 algorithm)

• Challenge/Response system– Encryption (privacy)

• Encrypts data between two devices• Stream cipher with E0 algorithm

– Key management and usage• Configurable Encryption key length (0-16 bytes)

– Government export regulations– Radio negotiate key size

• Key generation with E2-E3 algorithms– Authentication and Encryption keys

Bluetooth Radio Modules• Complete radio on a module

– Designed to meet “Limited Module Compliance” requirements• Pre-certified to meet global regulatory requirements • Allows devices assembled with modules to be “self-certified”

– USB or Serial Interface– Solder-ball connections– External Antennae

CompactFLASH

CardProduction

Module

25 mm dia 17x33mm 19x35mm 25x25mm 36x43mm

The international 2.4 GHz ISM band

• Requirements

– Channel bandwidth limited to 1 MHz

– Spectrum spreading must be employed

– Multiple uncoordinated networks may exist and cause interference

– Microwave ovens also use this band

– 2.4 GHz IC electronics must run at high current levels

• Bluetooth solution

– 1 Mb/s symbol rate exploits maximum channel bandwidth

– Fast frequency hopping and short data packets avoids interference

– CVSD voice coding enables operation at high bit error rates

– Air interface tailored to minimize current consumption

– Relaxed link budget supports low cost single chip integration

Bluetooth is global• One version for the world

– Architecture compliant with global emission rules (2.4 GHz ISM band)

• Working through FCC, EC, MPT for spectrum and power harmonization

– Architecture compliant and safe for use on airlines

• Working with FAA, JAA, FCC, airplane manufacturers and airlines

– Reviewing security architecture with affected countries

Example Software Implementation

• PC Windows* example supporting the Bluetooth usage model– WDM Driver

• Windows* 2000• Windows 98*

Bluetooth Adviser

Speaker Phone

Still Image (User mode

driver)

COMM apps & Obex

HID class driver

Still ImageDriver

StreamingClass Driver

HID minidriver

Audio minidriver

RF Bus Driver (RFBD)

kernel

RF Bus Driver Interface

NDISminiport(Access Points)

Network Transport Protocols

USB Minidriver

USB Interface &Host Controller

PC Card Interface &Host Controller

SYSTEM BUS

MS USB Driver Stack

Bluetooth LM

Bluetooth Baseband

Bluetooth LM

Bluetooth Baseband

PC Card driver

TS 07.10

VirtualCOMM

PortEmulation

NDISminiport(PAN)

HCI Driver

Networking Apps

RFCOMM

PART 2)Facts & Trends

Pairing• SMS• Setting up connection.

– Inquire for an access with other device• Device name• Device class• List of services• Technical information

• Only available to connect to one device– Preventing for connect with other while being use

• Inquires for an address– 48-bit address

• Not shown in inquires• Other readable name set by user.

– Appear when being scan

Pairing• Legacy pairing

– Available for devices earlier than 2.1• Limited input devices

– Hand free• Numeric input devices

– Mobile phone• Alpha-numeric input device

– PC, Smartphone

Pairing• Secure simple pairing

– Requirement of 2.1 or later version• Justwork

– No user interaction required– Headsets

• Numeric comparison– Binary input(yes/no)– 6-digits passkey

• Passkey entry– Display and input key

• MITM– Man In The Middle

Health concern•Bluetooth uses the microwave radio frequency

•Between 2.4 GHz and 2.4835 GHz •Maximum power output are

•100 mW for Class 1• 2.5 mW for Class 2•1 mW for Class 3

•Same level power output as mobile phone for class 1•Less dangerous for class 2 and 3

Bluetooth and Hacking• A2DPS

• Bluejacking

• Bluesnarfing

• Bluebugging

BLUETOOTH SPECIFICATION Version 3.0 + HS [Vol 0Bluetooth Compliance Requirements1 INTRODUCTIONThe Bluetooth Qualification Program Reference Document (PRD) is the primaryreference document for the Bluetooth Qualification Program and definesits requirements, functions, and policies. The PRD is available on the BluetoothWeb site.Passing the Bluetooth Qualification Process demonstrates a certain measureof compliance and interoperability, but because products are not tested forevery aspect of this Bluetooth Specification, qualification does not guaranteecompliance. Passing the Bluetooth Qualification Process only satisfies onecondition of the license grant. The Member has the ultimate responsibility toensure that the qualified product complies with this Bluetooth Specification andinteroperates with other products.

TYPES OF BLUETOOTH PRODUCTS

Bluetooth Product – Any product containing an implementation of Bluetooth wireless technology. All Bluetooth Products shall be one of the following:

• Bluetooth End Product• Bluetooth Host Subsystem Product• Bluetooth Controller Subsystem Product• Bluetooth Profile Subsystem Product• Bluetooth Component Product• Bluetooth Development Tool• Bluetooth Test Equipment

Bluetooth End Product - An implementation of Bluetooth wireless technology that implements, at a minimum, all mandatory requirements in Radio, Baseband, Link Manager, Logical Link Control and Adaptation Protocol, Service Discovery Protocol and Generic Access Profile parts of the Specification.Bluetooth Subsystem Product - An implementation of Bluetooth wireless technologythat implements only a portion of the Specification, in compliance withsuch portion of the Specification, and in accordance with the mandatoryrequirements as defined herein. Bluetooth Subsystem Products can be qualifiedsolely for distribution and the use of Bluetooth wireless technology in BluetoothSubsystem Products require such Bluetooth Subsystem Products to becombined with a complementary Bluetooth End Product or one or more complementaryBluetooth Subsystem Products such that the resulting combinationsatisfies the requirements of a Bluetooth End Product. There are three types ofBluetooth Subsystem Products as defined below:• Bluetooth Host Subsystem Product – A Bluetooth Subsystem Product containing,at a minimum, all the mandatory requirements defined in the HostController Interface, Logical Link Control and Adaptation Protocol, ServiceDiscovery Protocol and Generic Access Profile parts of this Specification,but none of the protocols below Host Controller Interface (HCI). In addition,a Bluetooth Host Subsystem Product may contain, at a minimum, all themandatory requirements defined in one or more of the protocols and profilesabove HCI.

• Bluetooth Controller Subsystem Product – A Bluetooth Subsystem Productcontaining, at a minimum, all the mandatory requirements defined by theBluetooth Radio, Baseband, Link Manager, HCI and optionally any of theAMP Protocol Adaptation Layer parts of this Specification, but none of theProtocols and Profiles above HCI.• Bluetooth Profile Subsystem Product – A Bluetooth Subsystem Product containing,at a minimum, all the mandatory requirements defined in one ormore of the profile specifications.Bluetooth Component Product - An implementation of Bluetooth wireless technology,which does not meet the requirements of a Bluetooth End Product orBluetooth Subsystem product, but implements, at a minimum, all the mandatoryrequirements, if any, of either one or more of any of the protocol and profileparts of the Specification in compliance with such portion of the Specification.Bluetooth Component Products can be qualified solely for distribution and theuse of the Bluetooth wireless technology in Bluetooth Component Productsrequire such Bluetooth Component Products to be incorporated in BluetoothEnd Products or Bluetooth Subsystem Products.Bluetooth Development Tool - An implementation of Bluetooth wireless technology,intended to facilitate the development of new Bluetooth designs. BluetoothDevelopment Tools can be qualified solely for distribution and the use ofthe Bluetooth wireless technology in development of new Bluetooth Products.Bluetooth Test Equipment - An implementation of Bluetooth wireless technology,intended to facilitate the testing of new Bluetooth Products. Bluetooth TestEquipment can be qualified solely for distribution and the use of the Bluetoothwireless technology in testing of new Bluetooth Products. Where necessary,Bluetooth Test Equipment may deviate from the Specification in order to fulfillthe test purposes in the Bluetooth Test Specifications.

IEEE 802.15 MeetingSeptember 11 - 17, 1999

Bluetooth Qualification Program

PART 3)

Global Market

Qualification vs. Type ApprovalBluetooth Devices

'Bluetooth License' 'License to sell'

Qualification Process Regulatory Type Approval

Complies with the specification ?

Qualification Program: Mission

• Protect the Bluetooth Brand by ensuring

– good performance of products– interoperability of products– clearly stated product capabilities

Compliance requirements

• Radio link• Protocols (lower layers)• Profiles• Capability information to end-users

Bluetooth SIG -PM

Bluetooth Qualification Review Board (BQRB)

Bluetooth Qualification Administrator (BQA)

Bluetooth TechnicalAdvisory Board (BTAB)

Manage/review/improve qualification process

Administration of qualification program

Checking declarations, review test reports

Recognized test facility for Bluetooth products

Know-how exchange & forum for problems related to testing and qualification

Bluetooth Qualification Test Facility (BQTF)

Bluetooth Qualification Body (BQB)

Authorization of the Program

Bluetooth Qualification Process

Manufacturer

QualifiedProductsDatabase

QualificationProgramDocuments

Test Sample& TCF

Test Report& TCF

Application& Declarationof Compliance

Pull Documentsfrom Web site

Insert into Database:Product Qualified!

PART 4) Ongoing project & H/W implementation

Kansas State UniversityProject Goal Bluetooth is a new standard developed jointly by a host of companies to provide low-cost (< $5 OEM target), high data-rate (approx 1Mb/s), short-range (< 30meters) communication links between consumer devices, ranging from desktop and portable computers to cellular phones and digital cameras. It operates in the 2.4 GHz ISM band using Frequency-Hopped Spread Spectrum (FHSS) FSK modulation, with transmit powers in the range of 0 dBm (1 milliwatt). A complete Bluetooth product would include an RF transceiver, digital packet and protocol processing circuits, and an associated host interface.

SPECIFICATIONSBluetooth 2.0+EDR USB ModuleQBTM400-02 (T6)

• Device Overall DescriptionThe QBTM400 is designed to provide Bluetooth2.0 + EDR function on asmall form factor. The Bluetooth function is based on CSR BlueCore4-ROMSingle Chip Bluetooth System, which implements the full speed class 2Bluetooth operations with full 7 slave Piconet support. The interface ofQBTM400 to host system is USB and full compliant with USB V1.1 andcompatible with USB V2.0 Full Speed (12Mbits/s).• BluetoothFeatures- CSR BlueCore4-ROM Single Chip Bluetooth System- Bluetooth 2.0 + EDR support- Full Speed Class 2 Bluetooth operation with full 7 slave Piconet support- Full Speed USB interface compliant with USB V1.1 and compatible withUSB V2.0- Printed PCB antenna on boardSpecification Compliance- Bluetooth Specification V1.1, V1.2, and V.2.0 compliantBluetooth Block Diagram

PART 5)MATLAB Simulink

ApplicationBluetooth Full Duplex Voice and Data Transmission

PART 6) Race

Bluetooth CurrentBLUETOOTH TECHNOLOGY GETS FASTER WITH BLUETOOTH 3.0

Tokyo, Japan – April 22, 2009

Bluetooth Core Specification Version 3.0 High Speed Bluetooth 3.0 gets its speed from the 802.11 radio protocol.

Inclusion of 802.11 Protocol Adaptation Layer (PAL) -> increased throughput of data transfers at the approximate rate of 24

In addition, mobile devices including Bluetooth 3.0 will realize increased power savings due to enhanced power control built in.

Target Markets•Telecommunications

Bluetooth Headsets Bluetooth Enabled Phone

• Networking

Target Markets• Industrial

When you arrive at the office..

When you are in a meeting.. When inspecting equipments..

Target Markets• Automotive Car Remote by Bluetooth

• Medical

Bluetooth enabled Sphygmomanometer

Target Markets• Vertical Markets • (Hotels, Airports)

You arrive at the airport.. You are sitting or waiting in the lounge

Bluetooth Devices

Bluetooth PrinterBluetooth Keyboard

Bluetooth MP3 Player

Bluetooth Ultra Mobile PC

Bluetooth CameraBluetooth Projector

Bluetooth Future• Mike Foley, executive director of

The Bluetooth SIGOutlet-Free Houses:“I thought this was about as wireless power was going until I visited the Ministry of Internal

Affairs and Communications in Tokyo. There, I was told of a project they are working on dubbed "Wall outlet-free houses" to deliver power throughout the house”

Predicting the Winner• “I think the results will be determined “on the court.”

This is exactly why the members of the Bluetooth SIG continue to enhance the specifications and thus the technology to ensure it is the best solution for new use cases such as health and fitness, RF remote controls, home energy management and more. As such, you’ll keep seeing new and exciting Bluetooth products hitting the market as the technology continues to win on the court.”