March 1999 doc.: IEEE 802.11-99/53 Bluetooth Architecture Overview James Kardach Principle Engineer Bluetooth SIG Program Manager Intel Corporation Copyright © 1998 Intel Corporation Submission Slide 1 Jim Kardach, Intel.
Download ReportTranscript March 1999 doc.: IEEE 802.11-99/53 Bluetooth Architecture Overview James Kardach Principle Engineer Bluetooth SIG Program Manager Intel Corporation Copyright © 1998 Intel Corporation Submission Slide 1 Jim Kardach, Intel.
March 1999 doc.: IEEE 802.11-99/53 Bluetooth Architecture Overview James Kardach Principle Engineer Bluetooth SIG Program Manager Intel Corporation Copyright © 1998 Intel Corporation Submission Slide 1 Jim Kardach, Intel Agenda • What does Bluetooth do for you? – Usage model • What is Bluetooth? – Compliance, compatibility • What does Bluetooth do? – Technical points • Who is Bluetooth? – History • Architectural Overview of Bluetooth What does Bluetooth do for you? Landline Cable Replacement Data/Voice Access Points Personal Ad-hoc Networks What is Bluetooth? Applications TCP/IP HID RFCOMM Application Framework and Support Data Host Controller Interface L2CAP Audio Link Manager LMP Baseband Link Manager and L2CAP Radio & Baseband RF • A hardware description • An application framework Latest Version on Bluetooth Website: www.Bluetooth.com What is Bluetooth? Software Applications TCP/IP HID RFCOMM Data L2CAP Audio Link Manager LMP Baseband RF • A hardware description • An application framework Modules Testing to Specification T e c h n o l o g y Certification T e c h n o l o g y Applications TCP/IP HID vCard vCal RFCOMM vCard Data IrOBEX vCal PPP IrOBEX PPP Audio TS0710 Ctrl L2CAPAudio Audio A Ctrl U D I O A U D I O TS0710 Link Manager Baseband RF Application Framework Application Layer Framework Certification Certification Certification Classes Lower Interface Service UDP UDP WAP WAP TCP/IP L2CAP TCP/IP LM L2CAP BB LM RF BB RF Still Img Still Img HID HID LMP vCard vCal UDP Service PPP IrOBEX vCard WAP vCalImages Still UDP PPP Ctrl Audio IrOBEX RFCOMM WAP TCP/IP Still Images HID Audio Ctrl RFCOMM TCP/IP HID Certification Class Application Framework Class BT.OBEX Layer Certification Classes BT.OBEX Type IrOBEX IrOBEX PPP RFCOMM Type RFCOMM IrOBEX TCP/IP IrOBEX HID PPP RFCOMM L2CAP RFCOMM L2CAP TCP/IP L2CAP L2HID CAP 2 L CAP 2 L CAP L2CAP L2CAP BT.vCard BT.vCal BT.UDP Certification BT.PPPClass BT.OBEX BT.vCard BT.WAP BT.vCal BT.SImg BT.UDP BT.PPP BT.AudioCtrl BT.OBEX BT.TS0710 BT.WAP BT.TCP/IP BT.SImg BT.HID BT.PPP Lower Interface BT.TS0710 Class BT.TS0710 BT.OBEX BT.TCP/IP BT.OBEX BT.HID BT.PPP 2 BT.TS0710 BT.L CAP-A 2 BT.TS0710 BT.L CAP-D 2 BT.TCP/IP BT.L CAP-D 2 BT.HID BT.L CAP-D 2 BT.L CAP-A 2 BT.L CAP-D BT.L2CAP-D BT.L2CAP-D BT.AudioCtrl BT.TS0710 BT.TCP/IP BT.HID Basic Layer Certification Classes Lower Interface Class Audio Data 2 L CAP LM BT.LM-A BT.LM-D LM BB BT.BB-A BT.BB-D Lower Interface Service BB RF BT.RF BT.RF Type Class RF Air Audio Data A unit that supports both audio and data gets the certification class A and D. 2 Example: L CAP BT.BB-A,D LM BT.LM-A BT.LM-D LM BB BT.BB-A BT.BB-D BB RF BT.RF BT.RF RF Air - Service Certification Class Type Basic Layer Certification BT.LAudio Basic Layer Certification Classes CAP-A Data 2 BT.L CAP-D BT.LM-A BT.LM-D Certification Class BT.BB-A BT.BB-D BT.RF BT.RF Audio Data 2 2 BT.L CAP-A BT.L CAP-D BT.LM-A BT.LM-D BT.BB-A BT.BB-D BT.RF BT.RF 2 A unit that supports both audio and data gets the certification class A and D. Example: BT.BB-A,D • Bluetooth devices will be tested against the specification What does Bluetooth Do? Topology Supports up to 7 simultaneous links Flexibility Data rate Goes through walls, bodies, cloths... Line of sight or modified environment 1 MSPS, 720 Kbps Varies with use and cost Power 0.1 watts active power 0.05 watts active power or higher Size/Weight 25 mm x 13 mm x 2 mm, several grams Cost Long-term $5 per endpoint Size is equal to range. Typically 1-2 meters. Weight varies with length (ounces to pounds) ~ $3-$100/meter (end user cost) Range 10 meters or less Up to 100 meters with PA Intended to work anywhere in the world Range equal to size. Typically 1-2 meters Cables vary with local customs Very, link layer security, SS radio Secure (its a cable) Universal Security • Cable Replacement Each link requires another cable Who is Bluetooth? • Harald Blaatand “Bluetooth” II • King of Denmark 940-981 – Son of Gorm the Old (King of Denmark) and Thyra Danebod (daughter of King Ethelred of England) This is one of two Runic stones erected in his capitol city of Jelling (central Jutland) This is the front of the stone depicting the chivalry of Harald. The stone’s inscription (“runes”) say: Harald christianized the Danes Harald controlled Denmark and Norway Harald thinks notebooks and cellular phones should seamlessly communicate Architectural Overview Applications TCP/IP HID RFCOMM And a bit of this Data L2CAP Audio Link Manager Baseband RF LMP Cover This Bluetooth RF Specifications Specified for low cost, single chip implementation – Noise floor margin for substrate noise and low current LNA – Linearity set by near-far problem – In-band image allows low-cost low IF – VCO phase noise enables integrated VCO – TX-RX turn around time enables single synthesizer – 2.4 ISM band chosen for global use and process capabilities Frame Frame fk Master Basic Baseband Protocol One Slot Packet Master One Slot Packet Slave fk fk+1 Three Slot Packet One Slot Packet Slave 625 us One Slot fk+1 625 us One Slot • Spread spectrum frequency hopping radio – 79/23 one MHz channels – Hops every packet • Packets are 1, 3 or 5 slots long – Frame consists of two packets • Transmit followed by receive – Nominally hops at 1600 times a second (1 slot packets) Network Topology Connected radios can be master or • Radio Designation – slave – Radios are symmetric (same radio can be master or slave) S P M sb • Piconet – Master can connect to 7 simultaneous or 200+ active slaves per piconet – Each piconet has maximum capacity (1 MSPS) • Unique hopping pattern/ID • Scatternet – High capacity system • Minimal impact with up to 10 piconets within range – Radios can share piconets! M P S P sb S S The Piconet IDa IDd IDa IDd IDa D A P M IDe IDe sb E IDa IDb B IDb IDc S IDa IDc C • All devices in a piconet hop together – In forming a piconet, master gives slaves its clock and device ID • Hopping pattern determined by device ID (48-bit) • Phase in hopping pattern determined by Clock • Non-piconet devices are in standby sb M • Piconet Addressing – Active Member Address (AMA, 3-bits)P – Parked Member Address (PMA, 8-bits) or S IDa S Functional Overview • Standby Unconnected Standby Standby – Waiting to join a piconet tac h • Inquire • Page Ttypical=2s De – Ask about radios to connect to Connecting States Inquiry Page – Connect to a specific radio • Connected – Actively on a piconet (master or slave) Ttypical=0.6s Active States Transmit data AMA Connected AMA Ttypical=2 ms • Park/Hold – Low Power connected states Low Power States Releases AMA Address PARK PMA Ttypical=2 ms HOLD AMA March 1999 doc.: IEEE 802.11-99/53 Page and Inquire Scans Sleep Ttypical=11 ms 18 slots Ttypical=11 ms 18 slots Page Scan Page Scan Ttypical=1.25 Connected Ttypical=1.25 Inquire Scan Standby Inquire Scan Connected Ttypical=11 ms 18 slots Ttypical=11 ms 18 slots • A radio must be enabled to accept pages or inquires – Consumes 18 slots every 1.25 s (or so) for each scan • slot is 0.625 ms Submission Slide 15 Jim Kardach, Intel March 1999 doc.: IEEE 802.11-99/53 Inquiring for Radios IDd IDa D A IDb B IDc C • Radio Wants to find other radios in the area Submission Slide 16 Jim Kardach, Intel March 1999 doc.: IEEE 802.11-99/53 Inquiring for Radios IDd IDa D INQ A INQ IDb Inquire INQ B IDc C • Radio Wants to find other radios in the area – Radio A issues an Inquire (pages with the Inquire ID) • Radios B, C and D are doing an Inquire Scan Submission Slide 17 Jim Kardach, Intel March 1999 doc.: IEEE 802.11-99/53 Inquiring for Radios IDd IDa D A IDb IDb B IDc C • Radio Wants to find other radios in the area – Radio A issues an Inquire (pages with the Inquire ID) • Radios B, C and D are doing a Inquire Scan – Radio B recognizes Inquire and responds with an FHS packet • Has slave’s Device ID and Clock Submission Slide 18 Jim Kardach, Intel March 1999 doc.: IEEE 802.11-99/53 Inquiring for Radios IDd IDb IDa D INQ A INQ IDb Inquire INQ B IDc C • Radio Wants to find other radios in the area – Radio A issues an Inquire (pages with the Inquire ID) • Radios B, C and D are doing a Inquire Scan – Radio B recognizes Inquire and responds with an FHS packet • Has slave’s Device ID and Clock Submission Slide 19 Jim Kardach, Intel March 1999 doc.: IEEE 802.11-99/53 Inquiring for Radios IDd IDb IDa IDd D A IDc IDb B IDc C • Radio Wants to find other radios in the area – Radio A Issues an Inquire (again) – Radios C and D respond with FHS packets • As radios C & D respond simultaneously packets are corrupted and Radio A won’t respond • Each radio waits a random number of slots and listens Submission Slide 20 Jim Kardach, Intel March 1999 doc.: IEEE 802.11-99/53 Inquiring for Radios IDd IDb IDa D INQ A INQ IDb Inquire INQ B IDc C • Radio Wants to find other radios in the area – Radio A Issues an Inquire (again) Submission Slide 21 Jim Kardach, Intel March 1999 doc.: IEEE 802.11-99/53 Inquiring for Radios IDd IDb IDa D A IDc IDb B IDc C • Radio Wants to find other radios in the area – Radio A Issues an Inquire (again) – Radios C respond with FHS packets Submission Slide 22 Jim Kardach, Intel March 1999 doc.: IEEE 802.11-99/53 Inquiring for Radios IDd IDb IDa IDc D INQ A INQ IDb Inquire INQ B IDc C • Radio Wants to find other radios in the area – Radio A Issues an Inquire (again) Submission Slide 23 Jim Kardach, Intel March 1999 doc.: IEEE 802.11-99/53 Inquiring for Radios IDd IDb IDa IDc IDd D A IDb B IDc C • Radio Wants to find other radios in the area – Radio A Issues an Inquire (again) – Radios D respond with FHS packets Submission Slide 24 Jim Kardach, Intel March 1999 doc.: IEEE 802.11-99/53 Inquiring for Radios IDd IDb IDa IDc D A IDd IDb B IDc C • Radio Wants to find other radios in the area – Radio A Issues an Inquire (again) – Radios D respond with FHS packets – Radio A now has information of all radios within range Submission Slide 25 Jim Kardach, Intel March 1999 doc.: IEEE 802.11-99/53 Inquiry Procedure fk fk+1 f’k f’k+1 fk+4 IDa INQUIRER INQ INQ IDb INQ fk+1 IDb STANDBY FHS 625 s • Inquiry has unique device address (all BT radio use) – Unique set of “Inquiry” hop frequencies • Any device can inquire by paging the Inquiry address • Correlater hit causes slave to respond with FHS packet – Device ID – Clock Submission Slide 26 Jim Kardach, Intel March 1999 doc.: IEEE 802.11-99/53 Inquiry Procedure 1.25ms INQUIRER train A A A A A B A A A 10 ms STANDBY scan fk A sleep RAND1 fk fk+1 A A sleep RAND2 FHS 11.25 ms • fk+1 fk+2 A A FHS Multiple slaves are expected to respond – Correlater hit causes slave to • respond with FHS packet • Wait a random number of slots • Wait for another Inquiry page and repeat • Master should end up with a list of slave FHS packets in area Submission Slide 27 Jim Kardach, Intel March 1999 doc.: IEEE 802.11-99/53 Inquire Summary • Paging radio Issues page packet with Inquire ID • Any radio doing an Inquire scan will respond with an FHS packet – FHS packet gives Inquiring radio information to page • Device ID • Clock IDa – If there is a collision then radios wait a random number of slots before responding to the page inquire • After process is done, Inquiring radio has Device IDs and Clocks of all radios in range Submission Slide 28 Jim Kardach, Intel March 1999 doc.: IEEE 802.11-99/53 Master Paging a Slave IDa IDc A IDc C • Paging assumes master has slaves Device ID and an idea of its Clock Submission Slide 29 Jim Kardach, Intel March 1999 Master Paging a Slave doc.: IEEE 802.11-99/53 IDa IDc A Page IDc IDc C • Paging assumes master has slaves Device ID and an idea of its Clock – A pages C with C’s Device ID Submission Slide 30 Jim Kardach, Intel March 1999 Master Paging a Slave doc.: IEEE 802.11-99/53 IDa IDc A IDc IDc C • Paging assumes master has slaves Device ID and an idea of its Clock – A pages C with C’s Device ID – C Replies to A with C’s Device ID Submission Slide 31 Jim Kardach, Intel March 1999 Master Paging a Slave doc.: IEEE 802.11-99/53 IDa IDc A IDa IDc C • Paging assumes master has slaves Device ID and an idea of its Clock – A pages C with C’s Device ID – C Replies to A with C’s Device ID – A sends C its DeviceSlideID Submission 32 and Clock (FHS Jim Kardach, Intel March 1999 Master Paging a Slave doc.: IEEE 802.11-99/53 IDa IDc A IDa IDc C • Paging assumes master has slaves Device ID and an idea of its Clock – A pages C with C’s Device ID – C Replies to A with C’s Device ID – A sends C its DeviceSlideID Submission 33 and Clock (FHS Jim Kardach, Intel March 1999 doc.: IEEE 802.11-99/53 fk f’k fk+1 f’k+1 fk+2 fk+2 Master Paging FHa slave Master IDa fm S IDc IDc IDc IDa IDc fk+1 Slave IDc 625 s • Master pages slave (packet has slave ID) at slave page frequency (1 of 32) – Master sends page train of 16 most likely frequencies in slave hop set • Slave ID sent twice a transmit slot on slave page frequency • Master listens twice at receive slot for a response – If misses, master sends second train on remaining 16 frequencies • Slave listens for 11 ms (page scan) – If correlater triggers, slave wakes-up and relays packet at response Submission frequency Slide 34 Jim Kardach, Intel March 1999 doc.: IEEE 802.11-99/53 1.25ms Paging Procedure FHS Pager train A A A A B B 10 ms CONNECTION scan fk Paged B sleep fk+1 B 11.25 ms • Each slave page scans on unique sequence of 32 channels fk – Master pages 16 most likely channels for entire sleep period (nominally 1.25 seconds) • If clocks are off, then second train sent on Submission Slide 35 Jim Kardach, Intel PHYSICAL LINK DEFINITION (II) March 1999 doc.: IEEE 802.11-99/53 SYNCHRONOUS CONNECTION-ORIENTED (SCO) LINK • circuit switching • symmetric, synchronous services • slot reservation at fixed intervals ASYNCHRONOUS CONNECTION-LESS (ACL) LINK Submission Slide 36 • packet switching Jim Kardach, Intel March 1999 doc.: IEEE 802.11-99/53 Packet Types SEGMENT 1 2 Data Rates (Kbps) Packet Types/Data Rates TYPE SCO link ACL link 0000 0001 0010 0011 NULL POLL FHS DM1 NULL POLL FHS DM1 0100 0101 0110 0111 1000 1001 symmetric asymmetric DM1 108.8 108.8 108.8 DH1 172.8 172.8 172.8 DM3 256.0 384.0 54.4 DH3 384.0 576.0 86.4 DM5 286.7 477.8 36.3 DH5 432.6 721.0 57.6 DH1 HV1 HV2 HV3 DV AUX1 3 1010 1011 1100 1101 DM3 DH3 4 1110 1111 DM5 DH5 Submission TYPE Slide 37 Jim Kardach, Intel Mobile = Battery life •Low power consumption* – Standby current < 0.3 mA 3 months – Voice mode 8-30 mA 75 hours – Data mode average 5 mA (0.3-30mA, 20 kbit/s, 25%) 120 hours •Low Power Architecture – – Programmable data length (else radio sleeps) Hold and Park modes 60 µA • • • * Devices connected but not participating Hold retains AMA address, Park releases AMA, gets PMA address Device can participate within 2 ms Estimates calculated with 600 mAh battery and internal amplifier, power will vary with implementation Bluetooth Security • Provides link layer security between any two Bluetooth radios – Authentication (E1 algorithm) • Challenge/Response system – Encryption (privacy) • Encrypts data between two devices • Stream cipher with E0 algorithm – Key management and usage • Configurable Encryption key length (0-16 bytes) – Government export regulations – Radio negotiate key size • Key generation with E2-E3 algorithms – Authentication and Encryption keys • Complete radio on a module – Bluetooth Radio Modules Designed to meet “Limited Module Compliance” requirements • Pre-certified to meet global regulatory requirements • Allows devices assembled with modules to be “self-certified” – USB or Serial Interface – Solder-ball connections – External Antennae 25 mm dia 17x33mm 19x35mm 25x25mm 36x43mm March 1999 doc.: IEEE 802.11-99/53 The international 2.4 GHz ISM band • Requirements • Bluetooth solution – Channel bandwidth limited to 1 MHz – Spectrum spreading must be employed – Multiple uncoordinated networks may exist and cause interference – Microwave ovens also use this band – 2.4 GHz IC electronics must run at high current levels – 1 Mb/s symbol rate exploits maximum channel bandwidth – Fast frequency hopping and short data packets avoids interference – CVSD voice coding enables operation at high bit error rates – Air interface tailored to minimize current consumption – Relaxed link budget supports low cost single chip integration Submission Slide 41 Jim Kardach, Intel • One versionBluetooth for the world is global – Architecture compliant with global emission rules (2.4 GHz ISM band) • Working through FCC, EC, MPT for spectrum and power harmonization – Architecture compliant and safe for use on airlines • Working with FAA, JAA, FCC, airplane manufacturers and airlines – Reviewing security architecture with affected countries March 1999 doc.: IEEE 802.11-99/53 Software Goals • Good out of box experience – Should provide value with existing applications • Utilize existing APIs and protocols where possible – Should be introduced with hardware that provides value • Notebooks • Cellphones • Handhelds – Should support the usage model Submission • Data access points (POTs Slide 43 Modem, cellphone, …) Jim Kardach, Intel Bluetooth Adviser Speaker Phone Still Image (User mode driver) COMM apps & Obex Networking Apps Example Software Implementation user kernel RFCOMM • PC Windows* example supporting the Bluetooth usage model HID class driver Streaming Class Driver HID minidriver Audio minidriver Virtual COMM Port Emulation Still Image Driver TS 07.10 Network Transport Protocols NDIS miniport (Access Points) NDIS miniport (PAN) RF Bus Driver Interface – WDM Driver RF Bus Driver (RFBD) • Windows* 2000 • Windows 98* HCI Driver USB Minidriver MS USB Driver Stack PC Card driver SW HW SYSTEM BUS USB Interface & Host Controller PC Card Interface & Host Controller Bluetooth LM Bluetooth LM Bluetooth Baseband Bluetooth Baseband Summary • Bluetooth is a radio system (not a radio) – Hardware – Software framework – Interoperability requirements • Bluetooth Radio System is optimized for mobility – Primarily cable replacement • NOT a WLAN technology – Targeted for Global use by mobile users