Specification Volume 0
`
`Master Table of
`Contents
`& Compliance
`Requirements
`
`Covered Core Package version:
`2.1 + EDR
`Current Master TOC issued:
`26 July 2007
`
`Cellspin Ex. 2006 - Pg. 1
`
`Petition for Inter Parties Review
`of U.S. Patent No. 9,258,698
`EXHIBIT
`
`Cellspin-2006
`
`IPR2019-00127
`
`exhibitsticker.com
`
`

`

`BLUETOOTH SPECIFICATION Version 2.1 + EDR [vol 0]
`
`page 2 of 74
`
`Revision History
`The Revision History is shown in the “Appendix” on page 41[vol. 0].
`
`Contributors
`The persons who contributed to this specification are listed in the Appendix.
`
`Web Site
`This specification can also be found on the official Bluetooth web site:
`http://www.bluetooth.com
`
`Disclaimer and Copyright Notice
`The copyright in these specifications is owned by the Promoter Members of
`Bluetooth SIG, Inc. (“Bluetooth SIG”). Use of these specifications and any
`related intellectual property (collectively, the “Specification”), is governed by the
`Promoters Membership Agreement among the Promoter Members and Blue-
`tooth SIG (the “Promoters Agreement”), certain membership agreements
`between Bluetooth SIG and its Adopter and Associate Members (the “Member-
`ship Agreements”) and the Bluetooth Specification Early Adopters Agreements
`(“1.2 Early Adopters Agreements”) among Early Adopter members of the unin-
`corporated Bluetooth special interest group and the Promoter Members (the
`“Early Adopters Agreement”). Certain rights and obligations of the Promoter
`Members under the Early Adopters Agreements have been assigned to Blue-
`tooth SIG by the Promoter Members.
`
`Use of the Specification by anyone who is not a member of Bluetooth SIG or a
`party to an Early Adopters Agreement (each such person or party, a “Mem-
`ber”), is prohibited. The legal rights and obligations of each Member are gov-
`erned by their applicable Membership Agreement, Early Adopters Agreement
`or Promoters Agreement. No license, express or implied, by estoppel or other-
`wise, to any intellectual property rights are granted herein.
`
`Any use of the Specification not in compliance with the terms of the applicable
`Membership Agreement, Early Adopters Agreement or Promoters Agreement
`is prohibited and any such prohibited use may result in termination of the appli-
`cable Membership Agreement or Early Adopters Agreement and other liability
`permitted by the applicable agreement or by applicable law to Bluetooth SIG or
`any of its members for patent, copyright and/or trademark infringement.
`
`26 July 2007
`
`Cellspin Ex. 2006 - Pg. 2
`
`

`

`BLUETOOTH SPECIFICATION Version 2.1 + EDR [vol 0]
`
`page 3 of 74
`
`THE SPECIFICATION IS PROVIDED “AS IS” WITH NO WARRANTIES
`WHATSOEVER, INCLUDING ANY WARRANTY OF MERCHANTABILITY,
`NONINFRINGEMENT, FITNESS FOR ANY PARTICULAR PURPOSE,
`SATISFACTORY QUALITY, OR REASONABLE SKILL OR CARE, OR ANY
`WARRANTY ARISING OUT OF ANY COURSE OF DEALING, USAGE, TRADE
`PRACTICE, PROPOSAL, SPECIFICATION OR SAMPLE.
`
`Each Member hereby acknowledges that products equipped with the Bluetooth®
`technology (“Bluetooth® Products”) may be subject to various regulatory controls
`under the laws and regulations of various governments worldwide. Such laws
`and regulatory controls may govern, among other things, the combination,
`operation, use, implementation and distribution of Bluetooth® Products.
`Examples of such laws and regulatory controls include, but are not limited to,
`airline regulatory controls, telecommunications regulations, technology transfer
`controls and health and safety regulations. Each Member is solely responsible
`for the compliance by their Bluetooth® Products with any such laws and
`regulations and for obtaining any and all required authorizations, permits, or
`licenses for their Bluetooth® Products related to such regulations within the
`applicable jurisdictions. Each Member acknowledges that nothing in the
`Specification provides any information or assistance in connection with securing
`such compliance, authorizations or licenses. NOTHING IN THE
`SPECIFICATION CREATES ANY WARRANTIES, EITHER EXPRESS OR
`IMPLIED, REGARDING SUCH LAWS OR REGULATIONS.
`
`ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY
`INTELLECTUAL PROPERTY RIGHTS OR FOR NONCOMPLIANCE WITH
`LAWS, RELATING TO USE OF THE SPECIFICATION IS EXPRESSLY
`DISCLAIMED. BY USE OF THE SPECIFICATION, EACH MEMBER
`EXPRESSLY WAIVES ANY CLAIM AGAINST BLUETOOTH SIG AND ITS
`PROMOTER MEMBERS RELATED TO USE OF THE SPECIFICATION.
`
`Bluetooth SIG reserves the right to adopt any changes or alterations to the
`Specification as it deems necessary or appropriate.
`
`Copyright © 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007
`
`
`Ericsson AB,
`Lenovo,
`Intel Corporation,
`Microsoft Corporation,
`Motorola, Inc.,
`Nokia Corporation,
`Toshiba Corporation
`
`*Third-party brands and names are the property of their respective owners.
`
`26 July 2007
`
`Cellspin Ex. 2006 - Pg. 3
`
`

`

`BLUETOOTH SPECIFICATION Version 2.1 + EDR [vol 0]
`
`page 4 of 74
`
`26 July 2007
`
`Cellspin Ex. 2006 - Pg. 4
`
`

`

`Master Table of Contents & Compliance Requirements
`Part A
`
`MASTER TABLE OF CONTENTS
`
`This table of contents (TOC) covers the
`entire Bluetooth Specification.
`In addition each volume has a TOC and
`each part of a volume is preceded by a
`detailed TOC.
`
`Cellspin Ex. 2006 - Pg. 5
`
`

`

`BLUETOOTH SPECIFICATION Version 2.1 + EDR [vol 0]
`
`page 6 of 74
`
`Master Table of Contents
`
`26 July 2007
`
`Cellspin Ex. 2006 - Pg. 6
`
`

`

`BLUETOOTH SPECIFICATION Version 2.1 + EDR [vol 0]
`
`page 7 of 74
`
`Master Table of Contents
`
`THE BLUETOOTH SPECIFICATION MASTER TABLE OF
`CONTENTS
`
`In the following Master Table of Contents:
`• The TOC for each Volume starts at the top of a page.
`• The Volume number in black is followed by the Volume name in red.
`
`Note: Each Volume is a self contained book which is published and updated
`separately and is equipped with a TOC of its own. However, this Master TOC is
`also revised as soon as any of the other Volumes are updated.
`• A Volume contains one or more Parts (A, B, etc.); each Part can be viewed
`independently and has its own TOC.
`
`Red or blue text on the following pages indicates hypertext links that take you
`directly to the indicated section, on condition that you have access to a com-
`plete specification.
`
`26 July 2007
`
`Cellspin Ex. 2006 - Pg. 7
`
`

`

`BLUETOOTH SPECIFICATION Version 2.1 + EDR [vol 0]
`
`page 8 of 74
`
`Master Table of Contents
`
`26 July 2007
`
`Cellspin Ex. 2006 - Pg. 8
`
`

`

`BLUETOOTH SPECIFICATION Version 2.1 + EDR [vol 0]
`
`page 9 of 74
`
`Specification Volume 0
`Master Table of Contents & Compliance Requirements
`
`Part A
`MASTER TABLE OF CONTENTS
`The Bluetooth Specification Master Table of Contents ..............................7
`
`Part B
`BLUETOOTH COMPLIANCE REQUIREMENTS
`Contents ........................................................................................................33
`1
`Introduction ........................................................................................35
`2
`Scope ..................................................................................................36
`3
`Definitions...........................................................................................37
`3.1
`Types of Bluetooth Products ......................................................37
`Core Configurations...........................................................................39
`4.1
`Specification Naming Conventions ............................................39
`4.2
`EDR Configurations ...................................................................39
`
`4
`
`Part C
`APPENDIX
`Contents ........................................................................................................43
`1
`Revision History.................................................................................45
`1.1
`[Vol 0] Master TOC & Compliance Requirements......................45
`1.2
`[Vol 1] Architecture & Terminology Overview .............................45
`1.3
`[Vol 2 & 3] Core System Package .............................................46
`1.4
`[Vol 4] Transport Layers .............................................................48
`Contributors........................................................................................49
`2.1
`[Vol 0] Master TOC & Compliance Requirements......................49
`2.2
`[Vol 1] Architecture &Terminology Overview ..............................49
`2.3
`[Vol 2] Core System Package, Controller...................................52
`2.4
`[Vol 3] Core System Package, Host...........................................66
`2.5
`[Vol 4] Host Controller Interface [Transport Layer].....................71
`
`2
`
`26 July 2007
`
`Cellspin Ex. 2006 - Pg. 9
`
`

`

`BLUETOOTH SPECIFICATION Version 2.1 + EDR [vol 0]
`
`page 10 of 74
`
`Specification Volume 1
`Architecture & Terminology Overview
`
`Table of Contents ...........................................................................................5
`
`2
`
`3
`
`Part A
`ARCHITECTURE
`Contents ........................................................................................................11
`1
`General Description...........................................................................13
`1.1 Overview of Operation ...............................................................13
`1.2
`Nomenclature ............................................................................15
`Core System Architecture.................................................................20
`2.1 Core Architectural Blocks ..........................................................23
`Data Transport Architecture..............................................................26
`3.1 Core Traffic Bearers...................................................................27
`3.2
`Transport Architecture Entities...................................................31
`3.3
`Physical Channels .....................................................................33
`3.4
`Physical Links ............................................................................38
`3.5
`Logical Links and Logical Transports.........................................40
`3.6
`L2CAP Channels .......................................................................49
`Communication Topology.................................................................50
`4.1
`Piconet Topology .......................................................................50
`4.2 Operational Procedures and Modes ..........................................52
`Secure Simple Pairing Overview ......................................................57
`5.1
`Security Goals ...........................................................................57
`5.2
`Passive Eavesdropping Protection ............................................57
`5.3 Man-In-The-Middle Protection ...................................................58
`5.4
`Association Models....................................................................59
`
`4
`
`5
`
`Part B
`ACRONYMS & ABBREVIATIONS
`Contents ........................................................................................................64
`1
`List of Acronyms and Abbreviations ...............................................65
`
`Part C
`CORE SPECIFICATION
`CHANGE HISTORY
`Contents ........................................................................................................75
`1
`Deprecated Features .........................................................................76
`
`26 July 2007
`
`Cellspin Ex. 2006 - Pg. 10
`
`

`

`BLUETOOTH SPECIFICATION Version 2.1 + EDR [vol 0]
`
`page 11 of 74
`
`2
`
`3
`
`4
`
`Changes from V1.1 to V1.2................................................................77
`2.1
`New Features.............................................................................77
`2.2
`Structure Changes .....................................................................77
`2.3
`Deprecated Features list............................................................77
`2.4
`Changes in Wording...................................................................78
`2.5
`Nomenclature Changes .............................................................78
`Changes from V1.2 to V2.0 + EDR ....................................................79
`3.1
`New Features.............................................................................79
`3.2
`Deprecated Features .................................................................79
`Changes from v2.0 + EDR to v2.1 + EDR .........................................80
`4.1
`New features..............................................................................80
`4.2
`Deprecated Features .................................................................80
`
`Part D
`MIXING OF SPECIFICATION VERSIONS
`Contents ........................................................................................................83
`1
`Mixing of Specification Versions ......................................................84
`1.1
`Features and their Types ...........................................................85
`
`Part E
`IEEE LANGUAGE
`Contents ........................................................................................................89
`1
`Use of IEEE Language .......................................................................91
`1.1
`Shall ...........................................................................................91
`1.2 Must ...........................................................................................92
`1.3 Will .............................................................................................92
`1.4
`Should........................................................................................92
`1.5 May ............................................................................................92
`1.6
`Can ............................................................................................93
`
`26 July 2007
`
`Cellspin Ex. 2006 - Pg. 11
`
`

`

`BLUETOOTH SPECIFICATION Version 2.1 + EDR [vol 0]
`
`page 12 of 74
`
`Specification Volume 2
`Core System Package
`[Controller volume]
`
`Table of Contents ...........................................................................................5
`
`4
`
`Part A
`RADIO SPECIFICATION
`Contents ........................................................................................................27
`1
`Scope ..................................................................................................29
`2
`Frequency Bands and Channel Arrangement.................................31
`3
`Transmitter Characteristics ..............................................................32
`3.1
`Basic Rate .................................................................................33
`3.2
`Enhanced Data Rate .................................................................35
`Receiver Characteristics ...................................................................41
`4.1
`Basic Rate .................................................................................41
`4.2
`Enhanced Data Rate .................................................................43
`Appendix A .........................................................................................46
`5.1
` Nominal Test Conditions ...........................................................46
`5.2
` Extreme Test Conditions...........................................................47
`Appendix B .........................................................................................48
`Appendix C .........................................................................................49
`7.1
`Enhanced Data Rate Modulation Accuracy ...............................49
`
`5
`
`6
`7
`
`Part B
`BASEBAND SPECIFICATION
`Contents ........................................................................................................55
`1
`General Description...........................................................................59
`Bluetooth Clock..........................................................................60
`1.1
`1.2
`Bluetooth Device Addressing.....................................................62
`1.3
`Access Codes............................................................................63
`Physical Channels .............................................................................64
`2.1
`Physical Channel Definition .......................................................65
`2.2
`Basic Piconet Physical Channel ................................................65
`2.3
`Adapted Piconet Physical Channel............................................70
`2.4
`Page Scan Physical Channel ....................................................71
`2.5
`Inquiry Scan Physical Channel ..................................................75
`2.6
`Hop Selection ............................................................................77
`Physical Links ....................................................................................90
`
`3
`
`2
`
`26 July 2007
`
`Cellspin Ex. 2006 - Pg. 12
`
`

`

`BLUETOOTH SPECIFICATION Version 2.1 + EDR [vol 0]
`
`page 13 of 74
`
`4
`
`5
`
`6
`
`7
`
`8
`
`Link Supervision.........................................................................90
`3.1
`Logical Transports .............................................................................91
`4.1 General ......................................................................................91
`4.2
`Logical Transport Address (LT_ADDR)......................................91
`4.3
`Synchronous Logical Transports................................................92
`4.4
`Asynchronous Logical Transport................................................92
`4.5
`Transmit/Receive Routines ........................................................93
`4.6
`Active Slave Broadcast Transport..............................................98
`4.7
`Parked Slave Broadcast Transport ............................................99
`Logical Links ....................................................................................100
`5.1
`Link Control Logical Link (LC)..................................................100
`5.2
`ACL Control Logical Link (ACL-C) ...........................................100
`5.3
`User Asynchronous/Isochronous Logical Link (ACL-U)...........100
`5.4
`User Synchronous Data Logical Link (SCO-S) ........................101
`5.5
`User Extended Synchronous Data Logical Link (eSCO-S) ......101
`5.6
`Logical Link Priorities ...............................................................101
`Packets..............................................................................................102
`6.1 General Format........................................................................102
`6.2
`Bit Ordering..............................................................................103
`6.3
`Access Code............................................................................104
`6.4
`Packet Header .........................................................................109
`6.5
`Packet Types ........................................................................... 111
`6.6
`Payload Format........................................................................121
`6.7
`Packet Summary......................................................................127
`Bitstream Processing ......................................................................129
`7.1
`Error Checking .........................................................................130
`7.2
`Data Whitening.........................................................................133
`7.3
`Error Correction........................................................................134
`7.4
`FEC Code: Rate 1/3.................................................................134
`7.5
`FEC Code: Rate 2/3.................................................................135
`7.6
`ARQ Scheme ...........................................................................136
`7.7
`Erroneous Synchronous Data Reporting .................................144
`Link Controller Operation................................................................145
`8.1 Overview of States ...................................................................145
`8.2
`Standby State...........................................................................146
`8.3
`Connection Establishment Substates ......................................146
`8.4
`Device Discovery Substates ....................................................155
`8.5
`Connection State......................................................................160
`8.6
`Active Mode .............................................................................161
`8.7
`Sniff Mode................................................................................175
`8.8
`Hold Mode................................................................................178
`
`26 July 2007
`
`Cellspin Ex. 2006 - Pg. 13
`
`

`

`BLUETOOTH SPECIFICATION Version 2.1 + EDR [vol 0]
`
`page 14 of 74
`
`9
`
`Park State ................................................................................179
`8.9
`Audio.................................................................................................187
`9.1
`LOG PCM CODEC ..................................................................187
`9.2
`CVSD CODEC.........................................................................187
`9.3
`Error Handling..........................................................................190
`9.4 General Audio Requirements...................................................190
`List of Figures ..................................................................................191
`10
`List of Tables ....................................................................................194
`11
`Appendix A: General Audio Recommendations .....................................195
`Appendix B: Timers ...................................................................................199
`Appendix C: Recommendations for AFH Operation in Park, Hold, and Sniff
`......................................................................................................................201
`
`Part C
`LINK MANAGER PROTOCOL
`Contents ......................................................................................................205
`1
`Introduction ......................................................................................207
`2
`General Rules...................................................................................208
`2.1 Message Transport ..................................................................208
`2.2
`Synchronization .......................................................................208
`2.3
`Packet Format .........................................................................209
`2.4
`Transactions ............................................................................210
`2.5
`Error Handling.......................................................................... 211
`2.6
`Procedure Rules ......................................................................212
`2.7 General Response Messages .................................................213
`2.8
`LMP Message Constraints.......................................................213
`Device Features ...............................................................................214
`3.1 General Description .................................................................214
`3.2
`Feature Definitions...................................................................214
`3.3
`Feature Mask Definition...........................................................220
`3.4
`Link Manager Interoperability policy ........................................222
`Procedure Rules ..............................................................................223
`4.1
`Connection Control ..................................................................223
`4.2
`Security....................................................................................240
`4.3
`Informational Requests............................................................268
`4.4
`Role Switch..............................................................................274
`4.5 Modes of Operation .................................................................277
`4.6
`Logical Transports ...................................................................290
`4.7
`Test Mode ................................................................................298
`Summary...........................................................................................303
`5.1
`PDU Summary ........................................................................303
`
`3
`
`4
`
`5
`
`26 July 2007
`
`Cellspin Ex. 2006 - Pg. 14
`
`

`

`BLUETOOTH SPECIFICATION Version 2.1 + EDR [vol 0]
`
`page 15 of 74
`
`Parameter Definitions ..............................................................313
`5.2
`LMP Encapsulated...................................................................323
`5.3
`Default Values..........................................................................324
`5.4
`List of Figures...................................................................................325
`List of Tables ....................................................................................329
`
`6
`7
`
`2
`
`Part D
`ERROR CODES
`Contents ......................................................................................................333
`1
`Overview of Error Codes .................................................................335
`1.1
`Usage Descriptions..................................................................335
`1.2
`HCI Command Errors...............................................................335
`1.3
`List of Error Codes ...................................................................336
`Error Code Descriptions..................................................................338
`2.1
`Unknown HCI Command (0X01)..............................................338
`2.2
`Unknown Connection Identifier (0X02) ....................................338
`2.3
`Hardware Failure (0X03)..........................................................338
`2.4
`Page Timeout (0X04) ...............................................................338
`2.5
`Authentication Failure (0X05)...................................................338
`2.6
`PIN or key Missing (0X06) .......................................................338
`2.7 Memory Capacity Exceeded (0X07) ........................................338
`2.8
`Connection Timeout (0X08) .....................................................339
`2.9
`Connection Limit Exceeded (0X09)..........................................339
`2.10 Synchronous Connection Limit to a Device Exceeded (0X0A) 339
`2.11 ACL Connection Already Exists (0X0B)...................................339
`2.12 Command Disallowed (0X0C)..................................................339
`2.13 Connection Rejected due to Limited Resources (0X0D)..........339
`2.14 Connection Rejected due to Security Reasons (0X0E) ...........339
`2.15 Connection Rejected due to Unacceptable BD_ADDR (0X0F)340
`2.16 Connection Accept Timeout Exceeded (0X10) ........................340
`2.17 Unsupported Feature or Parameter Value (0X11)....................340
`2.18 Invalid HCI Command Parameters (0X12)...............................340
`2.19 Remote User Terminated Connection (0X13) ..........................340
`2.20 Remote Device Terminated Connection due to Low Resources
`(0X14) ......................................................................................341
`2.21 Remote Device Terminated Connection due to Power Off (0X15)
`.................................................................................................341
`2.22 Connection Terminated by Local Host (0X16)..........................341
`2.23 Repeated Attempts (0X17).......................................................341
`2.24 Pairing not Allowed (0X18).......................................................341
`2.25 Unknown LMP PDU (0X19) .....................................................341
`
`26 July 2007
`
`Cellspin Ex. 2006 - Pg. 15
`
`

`

`BLUETOOTH SPECIFICATION Version 2.1 + EDR [vol 0]
`
`page 16 of 74
`
`2.26 Unsupported Remote Feature / Unsupported LMP Feature
`(0X1A)......................................................................................341
`2.27 SCO Offset Rejected (0X1B) ...................................................341
`2.28 SCO Interval Rejected (0X1C).................................................342
`2.29 SCO Air Mode Rejected (0X1D) ..............................................342
`2.30 Invalid LMP Parameters (0X1E) ..............................................342
`2.31 Unspecified Error (0X1F) .........................................................342
`2.32 Unsupported LMP Parameter Value (0X20) ............................342
`2.33 Role Change Not Allowed (0X21)............................................342
`2.34 LMP Response Timeout (0X22)...............................................342
`2.35 LMP Error Transaction Collision (0X23) ..................................343
`2.36 LMP PDU Not Allowed (0X24).................................................343
`2.37 Encryption Mode Not Acceptable (0X25).................................343
`2.38 Link Key Can Not be Changed (0X26) ....................................343
`2.39 Requested Qos Not Supported (0X27)....................................343
`2.40 Instant Passed (0X28) .............................................................343
`2.41 Pairing with Unit Key Not Supported (0X29)............................343
`2.42 Different Transaction Collision (0x2a)......................................343
`2.43 QoS Unacceptable Parameter (0X2C).....................................343
`2.44 QoS Rejected (0X2D) ..............................................................344
`2.45 Channel Classification Not Supported (0X2E).........................344
`2.46 Insufficient Security (0X2F)......................................................344
`2.47 Parameter out of Mandatory Range (0X30).............................344
`2.48 Role Switch Pending (0X32)....................................................344
`2.49 Reserved Slot Violation (0X34)................................................344
`2.50 Role Switch Failed (0X35) .......................................................344
`2.51 Extended Inquiry Response Too Large (0x36) .......................344
`2.52 Simple Pairing Not Supported By Host (0X37) ........................345
`2.53 Host Busy–Pairing(0X38) ........................................................345
`
`Part E
`HOST CONTROLLER INTERFACE FUNCTIONAL SPECIFICATION
`Contents ......................................................................................................349
`1
`Introduction ......................................................................................357
`1.1
`Lower Layers of the Bluetooth Software Stack ........................357
`Overview of Host Controller Transport Layer ...............................359
`Overview of Commands and Events..............................................360
`3.1 Generic Events ........................................................................361
`3.2
`Device Setup ...........................................................................361
`3.3 Controller Flow Control ............................................................362
`3.4 Controller Information ..............................................................362
`
`2
`3
`
`26 July 2007
`
`Cellspin Ex. 2006 - Pg. 16
`
`

`

`BLUETOOTH SPECIFICATION Version 2.1 + EDR [vol 0]
`
`page 17 of 74
`
`4
`
`5
`
`6
`
`Controller Configuration ...........................................................363
`3.5
`Device Discovery .....................................................................364
`3.6
`Connection Setup ....................................................................366
`3.7
`Remote Information..................................................................368
`3.8
`Synchronous Connections .......................................................369
`3.9
`3.10 Connection State......................................................................370
`3.11 Piconet Structure......................................................................371
`3.12 Quality of Service.....................................................................372
`3.13 Physical Links ..........................................................................374
`3.14 Host Flow Control.....................................................................375
`3.15 Link Information .......................................................................376
`3.16 Authentication and Encryption .................................................377
`3.17 Testing......................................................................................380
`3.18 Alphabetical List of Commands and Events ............................381
`HCI Flow Control ..............................................................................386
`4.1
`Host to Controller Data Flow