An Overview on

BLUETOOTH
Jaap Haartsen
Ericsson Mobile Communications
The Netherlands

*Third party marks and brands are the property of their respective owners.
**The Bluetooth Specification is still preliminary.All information regarding
Bluetooth is subject to change without notice.
PHYSICAL INTEGRATION

Cell phone
PDA

communicator

storage
notebook

Jaap Haartsen, Ericsson Oct 1999 2

FUNCTIONAL INTEGRATION

headset

mobiele PDA
telefoon

extern
geheugen notebook

Jaap Haartsen, Ericsson Oct 1999 3

DESIGN GOALS

 low cost
 low energy consumption
 robust operation
 high aggregate capacity
 flexible usage
 multi-media support
 global usage

Jaap Haartsen, Ericsson Oct 1999 4

WHAT DOES BLUETOOTH DO?

Cable Replacement Personal Ad-hoc Networks

Data/Voice Access Points

Jaap Haartsen, Ericsson Oct 1999 5
Harald Blåtand “Bluetooth” II
King of Denmark 940-981

This is one of two Runic stones erected

in his capitol city of Jelling

 The stone’s inscription (“runes”) say:

 Harald christianized the Danes
 Harald made piece
 Harald thinks notebooks and cellular
phones should be seamlessly connected

Jaap Haartsen, Ericsson Oct 1999 6

GLOBAL INDUSTRY STANDARD
 Interoperability
 Special Interest Group
 5 promoters (ERICSSON, NOKIA, IBM, TOSHIBA, INTEL)
 over 1000 adopters

 Definition of radio en link protocol

 Definition of profiles
 License free

Jaap Haartsen, Ericsson Oct 1999 7

BLUETOOTH STACK

Applications
TCP/IP HID RFCOMM

ol
Au

nt r
Data
dio

Co
L2CAP
Link Manager
Baseband
RF RF

Jaap Haartsen, Ericsson Oct 1999 8

BLUETOOTH RF INTERFACE

 ISM band at 2.45 GHz

 79 carriers at 1 MHz spacing
 FHSS with nom. 1600 hops/s
 GFSK modulation
 1 Mb/s maximal

Jaap Haartsen, Ericsson Oct 1999 9

RECEIVER SPECIFICATIONS

 RXsens -70 dBm

 C/Ico-channel 11 dB
 PRadj._1MHz 0 dB
 PRadj._2MHz -30 dB
 PRadj._>2MHz -40 dB

Jaap Haartsen, Ericsson Oct 1999 10

TRANSMITTER SPECIFICATIONS

 PTX_nom 0 dBm
 PTX_max (power control) +20 dBm
 -20 dBc BW 1 MHz
 freq. accuracy ±75 kHz

Jaap Haartsen, Ericsson Oct 1999 11

BLUETOOTH STACK

Applications
TCP/IP HID RFCOMM

ol
Au

nt r
Data
dio

Co
L2CAP
Link Manager
BASEBAND
Baseband
RF

Jaap Haartsen, Ericsson Oct 1999 12

PICONET

slave 3
slave 1

master

slave 2

Jaap Haartsen, Ericsson Oct 1999 13

PHYSICAL CHANNEL
 master BD_ADDR  sequence

 master CLOCK  phase

slave 2
slave 1

master

slave 3
slave 4

Jaap Haartsen, Ericsson Oct 1999 14

HOP SELECTION

NATIVE CLK phase HOP

sequence

offset MASTER BD_ADDR

Jaap Haartsen, Ericsson Oct 1999 15

 HIGH CAPACITY

Freq.

time

Jaap Haartsen, Ericsson Oct 1999 16

ADDRESSING
 Bluetooth Device Address (BD_ADDR)
 48-bit IEEE 802 address
 24-bit lower address part (LAP)
 8-bit upper address part (UAP)

 Active Member Address (AM_ADDR)

 3-bit active slave address
 all-zero broadcast address

 Parked Member Address (PM_ADDR)

 8-bit parked slave address

Jaap Haartsen, Ericsson Oct 1999 17

CONNECTION ESTABLISHMENT

INQUIRY PAGE CONNECTION

Jaap Haartsen, Ericsson Oct 1999 18

INQUIRY

Jaap Haartsen, Ericsson Oct 1999 19

MAKING CONNECTIONS

D
slave D

slave C

A
master A

B
slave B

Jaap Haartsen, Ericsson Oct 1999 20

FH/TDD CHANNEL

f(2k) f(2k+1) f(2k+2)

master
t

slave
t

625 s

Jaap Haartsen, Ericsson Oct 1999 21

PACKET FORMAT

72 54 0-2745

access code packet header payload

Jaap Haartsen, Ericsson Oct 1999 22

ACCESS CODE

34 24 6
BCH LAP BRK

4 64 4
PREAMBLE SYNC WORD TRAILER

LSB MSB

Jaap Haartsen, Ericsson Oct 1999 23

PACKET HEADER
3 4 1 1 1 8
AM_ADDR TYPE FLOW ARQN SEQN HEC

parameter information

AM_ADDR slave active member address

TYPE payload type

FLOW LC flow control

ARQN ACK/NAK

SEQN retransmit ordering

HEC header error check

Jaap Haartsen, Ericsson Oct 1999 24

PHYSICAL LINK DEFINITION

SYNCHRONOUS CONNECTION-ORIENTED (SCO) LINK

 circuit switching
 symmetric, synchronous services
 slot reservation at fixed intervals

ASYNCHRONOUS CONNECTION-LESS (ACL) LINK

 packet switching
 (a)symmetric, asynchronous services
 polling access scheme

Jaap Haartsen, Ericsson Oct 1999 25

MIXED LINK EXAMPLE
SCO ACL SCO ACL ACL SCO SCO ACL
MASTER

SLAVE 1

SLAVE 2

SLAVE 3

Jaap Haartsen, Ericsson Oct 1999 26

MULTI-SLOT PACKETS
625 s

f(k) f(k+1) f(k+2) f(k+3) f(k+4) f(k+5)

f(k) f(k+3) f(k+4) f(k+5)

f(k) f(k+5)

Jaap Haartsen, Ericsson Oct 1999 27

PACKET TYPES

segment type SCO link ACL link

0000 NULL NULL
0001 POLL POLL
1
0010 FHS FHS
0011 DM1 DM1
0100 DH1
0101 HV1
0110 HV2
2
0111 HV3
1000 DV
1001 AUX1
1010 DM3
1011 DH3
3
1100
1101
1110 DM5
4
1111 DH5

Jaap Haartsen, Ericsson Oct 1999 28

DATA RATES

type symmetric asymmetric

DM1 108.8 108.8 108.8

DH1 172.8 172.8 172.8

DM3 258.1 387.2 54.4

DH3 390.4 585.6 86.4

DM5 286.7 477.8 36.3

DH5 433.9 723.2 57.6

Jaap Haartsen, Ericsson Oct 1999 29

AUTOMATIC RETRANSMISSION

A B B X C
MASTER

G F H
SLAVE 1

Z Z
SLAVE 2

NAK ACK

Jaap Haartsen, Ericsson Oct 1999 30

FAST ARQ

RX CRC check

ACK/NAK ACK/NAK

retransmission
TX
new

Jaap Haartsen, Ericsson Oct 1999 31

LINK CONTROL PACKETS

 ID packet
 NULL packet
 POLL packet
 FHS packet

Jaap Haartsen, Ericsson Oct 1999 32

FHS PACKET

 BD_ADDR
 DAC
 AM_ADDR
 class of device
 paging class
 real-time clock

Jaap Haartsen, Ericsson Oct 1999 33

OPERATIONAL STATES

 stand-by, scan
 page, inquiry
 connection
 active
 hold

 sniff
 park

Jaap Haartsen, Ericsson Oct 1999 34

HOLD MODE

ACL ACL ACL ACL ACL ACL ACL

MASTER

LOST

SLAVE 1

HOLD INTERVAL

SLAVE 2

Jaap Haartsen, Ericsson Oct 1999 35

SNIFF MODE

ACL ACL ACL

MASTER

LOST

SLAVE 1

SNIFF INTERVAL

SLAVE 2

Jaap Haartsen, Ericsson Oct 1999 36

PARK MODE
active slave

master

parked slaves

 BEACON
 PM_ADDR

Jaap Haartsen, Ericsson Oct 1999 37

BEACONS
PARK INTERVAL
BC ACL ACL BC
MASTER

SLAVE X

SLAVE 2

SLAVE Y

Jaap Haartsen, Ericsson Oct 1999 38

SCATTERNET

LAN
access point

mobile phone

headset
printer

master laptop
laptop
slave
mouse
master/slave

Jaap Haartsen, Ericsson Oct 1999 39

BLUETOOTH STACK

Applications
TCP/IP HID RFCOMM

ol
Au

nt r
Data
dio

Co
L2CAP
Link Manager LMP

Baseband
RF

Jaap Haartsen, Ericsson Oct 1999 40

LMP: PICONET MANAGEMENT

 attach and detach slaves

 master-slave switch
 establishing SCO and ACL links
 handling low-power modes

Jaap Haartsen, Ericsson Oct 1999 41

LMP: LINK CONFIGURATION

 supported features
 quality of service (packet types)
 power control

Jaap Haartsen, Ericsson Oct 1999 42

LMP: SECURITY

 authentication
 encryption
 key management

Jaap Haartsen, Ericsson Oct 1999 43

AUTHENTICATION
 To verify claimed identity
 Challenge-response system
 Algorithm E1:
 Input: RAND (128 bit), Claimant addr. (48 bit),
link key (128)
 Output: SRES (32 bit), ACO (96 bit)

 One-sided or mutual authentication

ACO = Authenticated Ciphering Offset

Jaap Haartsen, Ericsson Oct 1999 44

ENCRYPTION
 To prevent (un)intentional eavesdropping
 Stream ciphering
 Algorithm E0:
 Input: RAND (128 bit), master addr./clock,
Kc (128 bit)
 Output: cipher stream

 LFSR restart for every slot

 Encrytion of payload only
 Point-to-point or point-to-multipoint

Jaap Haartsen, Ericsson Oct 1999 45

KEY TYPES

Link
Linkkeys
keys
Encryption
Encryptionkey
key

Temporary
Temporary Semi-permanent
Semi-permanent

Master
Master Unit
Unit Combination
Combination Initialization
Initialization
Key
Key Key
Key Key
Key Key
Key

Jaap Haartsen, Ericsson Oct 1999 46

BLUETOOTH STACK

Applications
TCP/IP HID RFCOMM

ol
Au

nt r
Data
dio

Co
L2CAP
L2CAP
Link Manager
Baseband
RF

Jaap Haartsen, Ericsson Oct 1999 47

LOGICAL LINK CONTROL &
ADAPTATION PROTOCOL

 multiplexing
 segmentation & reassembly
 quality of service
 groups

Jaap Haartsen, Ericsson Oct 1999 48

PROTOCOL ARCHITECTURE
 Connection-oriented:
 channel ID used to label connection
 channel assumed full-duplex
 QoS flow specification assigned to each direction

 Datagram based, no streams

 packet boundaries are preserved

 Relies on baseband layer for data integrity and

delivery in order
 Connectionless:
 supports group abstraction

Jaap Haartsen, Ericsson Oct 1999 49

PACKET FORMAT

Length DCID Payload

(16 bits) (16 bits) (0-65535 bytes)

 Short L2CAP Packet Header (low overhead)

 Length (of payload)
 Destination Channel ID
 Payload:
 Data received from and sent to the network layer
 Maximum transmission unit (MTU) limits payload sizes

Jaap Haartsen, Ericsson Oct 1999 50

SEGMENTATION & REASSEMBLY

L2CAP packet
L2CAP
L2CAP Payload
Header

Baseband packet
Access Code Header Payload
CRC
(72) (54) Header

 Use logical channel information from Baseband to

determine start of an L2CAP packet

Jaap Haartsen, Ericsson Oct 1999 51

 SAR EXAMPLE
Source Destination
Datagram Datagram
1 to 1 mapping
L2CAP Packet L2CAP Packet

Intermediate
Transport f1 f2 f3 f4 f1 f2
(e.g. HCI)

Baseband DH5 DH1 DH5 DH1 DH5 DH1 DH5 DH1

Packets

Jaap Haartsen, Ericsson Oct 1999 52

QUALITY OF SERVICE
Application Application
Configuration Request

L2CAP Link Configuration: L2CAP

Scheduling of QoS Negotiation Scheduling of
L2CAP messages L2CAP messages

HCI HCI
QoS Parameter

Link Manager / Link Manager /

Link Controller Polling Link Controller
Polling (BB) Polling (BB)

Jaap Haartsen, Ericsson Oct 1999 53

SOFTWARE STACK

WAE vCard/vCal Audio

Still Image Printing

WAP OBEX

HID TCP/UDP RFCOMM

Service Discovery IP TCS

L2CAP

Host Controller Interface

Jaap Haartsen, Ericsson Oct 1999 54

HOST CONTROL INTERFACE (HCI)
Bluetooth Host

Host Drives and Applications

 Host Controller
Interface (HCI) Bluetooth HCI driver
provides a common Bluetooth HCI Transport driver
interface between the (USB, PC Card, PCI)

Bluetooth Host and the Transport Bus

Bluetooth Module HCI
HCI Transport Firmware

Bluetooth Host Controller

Link Manager

Bluetooth Baseband

Bluetooth Radio
Bluetooth Module

Jaap Haartsen, Ericsson Oct 1999 55

HOST CONTROLLER TRANSPORTS
 HCI-USB
 Notebook integration
 PC add-on

 HCI-UART
 HCI-RS232
 Others will be defined as needed
 PCI, 1394, LPC

Jaap Haartsen, Ericsson Oct 1999 56

PROFILES
 Represents default solution for usage model

 Vertical slice through the protocol stack

 Basis for interoperability and logo
requirements
 Each Bluetooth device supports one or more
profiles

Jaap Haartsen, Ericsson Oct 1999 57

PROTOCOLS AND PROFILES
applications

protocols

profiles
unit A unit B

Jaap Haartsen, Ericsson Oct 1999 58

BLUETOOTH PROFILES

Generic Access Profile

TCS-BIN-based Profiles

Service Discovery Cordless Phone Intercom Profile

Application Profile Profile

Serial Port Profile

Generic Object Exchange
Dial-up Networking Profile
Profile
File Transfer
Fax Profile Profile

Object Push Profile

Headset Profile

Synchronization
LAN Access Profile Profile

Jaap Haartsen, Ericsson Oct 1999 59

CONCLUSIONS

 World standard for ad-hoc connectivity

 Specification 1.0 release July 1999
 First products Q499/Q100
 IEEE 802.15 PAN standardization ongoing

Jaap Haartsen, Ericsson Oct 1999 60