1. High-Level Architectural Paradigm: The Dual-Mode Standard
Modern Bluetooth architecture (post-Bluetooth 4.0) operates on a Dual-Mode paradigm, encompassing two distinct operational radios within a single silicon footprint:
- Bluetooth Classic (BR/EDR): Optimized for continuous, high-throughput data streaming (e.g., A2DP audio, file transfer).
- Bluetooth Low Energy (BLE): Engineered for intermittent, low-power, small-payload data transmission (e.g., IoT sensors, wearables, beacons).
While they share the 2.4 GHz ISM band and underlying silicon, their upper protocol stacks diverge significantly to serve their respective use cases.
Table 1: Architectural Distinctions Between BR/EDR and BLE
2. The Host-Controller Architecture
The defining characteristic of the modern Bluetooth system architecture is the strict demarcation between the Controller and the Host, communicating via the Host Controller Interface (HCI).
2.1. The Controller (Lower Stack)
The Controller is typically implemented in dedicated silicon (the Bluetooth chip) and handles the time-critical, low-level radio operations.
- Radio (RF): Manages the analog transmission and reception in the 2.4 GHz band.
- Baseband / Link Layer (LL): Executes Adaptive Frequency Hopping (AFH), time-division duplexing (TDD), and packet framing. It manages the state machine (Standby, Advertising, Scanning, Initiating, Connected).
- Link Manager Protocol (LMP) / LL Control Protocol: Handles link setup, power control, encryption, and negotiation of physical layer parameters between peer controllers.
2.2. The Host (Upper Stack)
The Host is generally implemented in the host processor's software (e.g., the OS Bluetooth stack, such as BlueZ or the Windows Bluetooth stack). It manages high-level data routing, security policies, and application interfaces.
- Logical Link Control and Adaptation Protocol (L2CAP): Provides channel multiplexing, segmentation and reassembly (SAR) of large packets, and protocol multiplexing.
- Service Discovery / Attribute Protocols: SDP (Classic) or ATT/GATT (BLE).
- Security Manager Protocol (SMP): Governs pairing, bonding, and key generation.
2.3. Host Controller Interface (HCI)
HCI is the standardized boundary between Host and Controller. It defines a set of commands, events, and data formats.
- Transport Layers: HCI can be transported over physical buses such as USB, UART, or SDIO.
- Data Channels: ACL data (bulk), Synchronous data (ISO/SCO for audio), and Command/Event channels.
3. The Physical Layer (PHY) and Baseband Architecture
The physical architecture of Bluetooth relies on a robust, interference-resistant foundation in the 2.400 GHz to 2.4835 GHz ISM band.
3.1. Frequency Hopping and Modulation
To mitigate narrowband interference and multipath fading, Bluetooth utilizes Adaptive Frequency Hopping (AFH).
- BR/EDR: Divides the band into 79 channels (1 MHz spacing). The radio hops up to 1,600 times per second. Modulations include:
- Basic Rate (BR): Gaussian Frequency Shift Keying (GFSK) at 1 Mbps.
- Enhanced Data Rate (EDR): -DQPSK (2 Mbps) and 8DPSK (3 Mbps).
- BLE: Divides the band into 40 channels (2 MHz spacing). Hops slower, dictated by connection intervals. Modulations include:
- LE 1M / 2M PHY: GFSK at 1 Mbps and 2 Mbps.
- LE Coded PHY (Long Range): Employs Forward Error Correction (FEC) with coding schemes S=2 and S=8, yielding effective data rates of 500 kbps and 125 kbps, drastically increasing receiver sensitivity and range.
3.2. Time-Division Duplexing (TDD) and TDMA
Bluetooth utilizes a Time-Division Duplex (TDD) scheme where transmission and reception occur on the same frequency but at different times. The channel time is divided into 625 $\mu$s slots. Within a connected Piconet, Time-Division Multiple Access (TDMA) is used, where the Master dictates the transmission schedule for all Slaves.
4. Deep Dive: Bluetooth Low Energy (BLE) Architecture
BLE is an asymmetric architecture designed to minimize power consumption. The radio remains in a deep sleep state for the majority of the time, waking only for microsecond intervals to transmit or receive.
4.1. The LE Link Layer State Machine
The LE Link Layer operates in five primary states:
- Standby: Radio off; device idle.
- Advertising: Broadcasting unidirectional packets (ADV_IND, ADV_NONCONN_IND) at defined intervals.
- Scanning: Listening for advertising packets.
- Initiating: Sending connection requests to specific advertisers.
- Connected: Synchronized data exchange using connection events.
4.2. Generic Attribute Profile (GATT) Architecture
Unlike Classic Bluetooth, which relies on serial port emulation (RFCOMM), BLE data is structured hierarchically using the Attribute Protocol (ATT) and GATT.
- Client/Server Model: The peripheral (e.g., a heart rate monitor) acts as the GATT Server, holding data in a predefined database. The central (e.g., a smartphone) acts as the GATT Client, reading, writing, or subscribing to "Notifications/Indications".
- Data Structure:
- Profile: High-level use case (e.g., Cycling Power Profile).
- Service: A logical grouping of data (e.g., Heart Rate Service).
- Characteristic: The actual data value and its properties (Read, Write, Notify), identified by a 16-bit or 128-bit UUID.
- Descriptor: Metadata defining the characteristic's configuration (e.g., Client Characteristic Configuration Descriptor - CCCD).
5. Network Topologies and Isochronous Channels
The spatial and relational architecture of Bluetooth networks has evolved significantly to support complex audio and IoT ecosystems.
5.1. Piconet and Scatternet (Classic & Basic BLE)
- Piconet: A localized network consisting of one Master and up to seven active Slaves. The Master provides the clock and hopping sequence reference.
- Scatternet: A complex topology where a device acts as a Slave in one Piconet and a Master in another, bridging the networks. (Historically difficult to implement efficiently in Classic Bluetooth).
5.2. Isochronous Architecture (Bluetooth 5.2 / LE Audio)
The introduction of LE Audio fundamentally altered BLE topology by introducing time-bounded, synchronized data streams.
- Connected Isochronous Stream (CIS): A bidirectional, point-to-point synchronous link between a Central and a Peripheral. Timeouts and retransmissions are strictly bounded; if a packet is lost, the architecture discards it rather than delaying the stream, ensuring deterministic latency.
- Broadcast Isochronous Stream (BIS): A unidirectional, one-to-many broadcast topology (Auracast). A Broadcast Isochronous Group (BIG) allows an infinite number of Synchronized devices to receive the same audio stream simultaneously without forming individual point-to-point connections.
6. Security and Privacy Architecture
Bluetooth security architecture is managed primarily by the Security Manager Protocol (SMP) in BLE and the Link Manager in Classic.
6.1. Pairing and Bonding
- LE Secure Connections (LESC): Introduced in Bluetooth 4.2, LESC utilizes Elliptic Curve Diffie-Hellman (ECDH) over the P-256 curve for key generation. This effectively mitigates passive eavesdropping during the pairing phase.
- Association Models: Depending on the I/O capabilities of the devices, SMP selects one of four models: Just Works, Numeric Comparison, Passkey Entry, or Out of Band (OOB).
6.2. Privacy and Address Resolution
To prevent device tracking via static MAC addresses, BLE employs Resolvable Private Addresses (RPA).
- The device periodically randomizes its public MAC address.
- Only bonded devices possessing the shared Identity Resolving Key (IRK) can mathematically resolve the random address back to the device's true identity. This resolution can occur in the Host stack or offloaded to the Controller's White List for power efficiency.
7. Recent Architectural Evolutions (v5.4 and v6.0)
To remain relevant in the era of spatial computing and advanced IoT, the Bluetooth SIG has recently introduced profound architectural additions.
7.1. Periodic Advertising with Responses (PAwR) - Bluetooth 5.4
PAwR transforms BLE from a primarily unidirectional broadcast medium into a highly efficient, scalable, bidirectional star network.
- It allows a Central device to establish synchronized, time-slotted sub-events with hundreds of peripheral nodes.
- This architecture is foundational for Electronic Shelf Labels (ESL), enabling low-latency, bidirectional communication with thousands of battery-operated tags without the overhead of individual connection events.
7.2. Channel Sounding - Bluetooth 6.0
Bluetooth 6.0 introduces Channel Sounding, a massive architectural leap for secure ranging and spatial awareness.
- Mechanism: It measures the Phase-Based Ranging (PBR) and Round-Trip Timing (RTT) across multiple RF channels.
- Security Implications: By measuring physical properties of the radio wave across numerous frequencies, it mathematically detects and prevents "distance fraud" (e.g., relay attacks on digital car keys).
- Accuracy: Provides true distance measurement with centimeter-level accuracy, rivaling Ultra-Wideband (UWB) but utilizing the existing 2.4 GHz Bluetooth radio hardware.
8. Conclusion
The architecture of Bluetooth is a masterclass in adaptive engineering. By strictly enforcing the Host-Controller boundary via HCI, the SIG has allowed for continuous innovation in software without mandating total hardware obsolescence. The bifurcation of the protocol stack—maintaining the high-throughput, synchronous nature of BR/EDR alongside the hyper-efficient, state-driven architecture of BLE—ensures its dominance across both consumer multimedia and industrial IoT. With the advent of Isochronous channels for multi-stream audio and Channel Sounding for secure spatial awareness, Bluetooth has successfully evolved from a simple cable-replacement protocol into a foundational pillar of modern wireless system architecture.
