Security & Scalability:
NAVIGATING THE BLUETOOTH
LE LANDSCAPE FOR RETAILR E S E A R C H MA D E AVAIL ABL E T HANKS T O OUR SPONSOR S

A Guide to Bluetooth LE & Unified IoT Management in RetailBluetooth Low Energy (Bluetooth LE) is not just a technology, but
an enabler of retailer’s digitalization of the store. While proprietary
networks alone can provide a number of functions, theirproprietary nature can also bring limitations when exploring newfunctionality. Bluetooth LE brings a breadth of new capabilities tocomplex retail environments that demand Electronic Shelf Labels(ESLs), Digital Shelf Systems (DSSs) and other IoT devices:• Faster image and data transmission: update the ESLs, DSSs andother IoT devices with a data rate up to four times faster thanexisting solutions.
• Channel hopping and proven communication protocol:
Bluetooth LE uses a sophisticated algorithm to avoid interference
and ensure reliable data transmission with an establishedcommunication protocol, used in billions of devices worldwide.
• Low battery usage: By its definition, Bluetooth LE is significantly
more energy efficient than other existing technologies.

But Bluetooth LE is not only about technical advantages. It
also enables new use cases that can transform your customer
experience and business operations, such as:• Locationing and geofencing-based use cases: Track thelocation and movement of your staff, and devices withinyour store, and trigger on-location actions, and operational
recommendations based on their proximity to specific products
or zones, facilitating in-store fulfillment and in-aisles initiatives.
• Proximity sensing with Bluetooth LE-enabled devices: With IoTs
relying on Bluetooth, you can detect proximity to a given productand send relevant information or cross-sell suggestions on the label
or on their mobile device as well as personalized promotions.
Bluetooth LE opens the door to building a standard-based unified
retail where IoT devices such as ESLs, Digital Shelf Systems orsensors from different vendors can communicate and consolidate
into one management platform, leveraging a common approachto communication. This can help you streamline your operations,
reduce costs, and enhance your security and scalability.

2Base Bluetooth LE A Flexible Framework to Build Upon
The Bluetooth LE standard provides a framework that defines thebase protocols and standards for data transmission and security.
However, it does not specify how to implement the higher-levelfeatures and functionalities that are necessary for creating aunified, scalable, and secure retail ecosystem.
One of the main question when using Bluetooth LE for ESLs, DSSsand IoTs is how to manage the communication between thousandsof devices and access points (APs) in a store. Bluetooth LE has afeature called Periodic Advertising with Responses (PAwR), whichallows the labels to send and receive data at predefined intervals,
minimizing power consumption and synchronizing IoT devices
to limit interferences. However, PAwR only covers how a label
communicates with one AP at a time. It does not define how thelabel establishes the connection with other APs in the store if it
is moved or out of range. This requires pairing again, which isimpractical for ESLs that can easily be relocated.
Another challenge is how to onboard and update the labels withthe latest pricing and promotional information. While Bluetooth
LE defines the base mechanism to connect IoTs one by one, it does
not specify how to perform the initial configuration and automatedonboarding of a large number of labels, which can be timeconsuming. Moreover, it does not prescribe compression standards
for image sending, which can influence the quality and speed of
the updates.

3

But most important of all the Bluetooth LE framework alone does
not address the security risks of transferring sensitive data beyond
the APs or upstream, which makes this part vulnerable to hacking
or interception via any number of endpoints. Bluetooth LE encrypts
the communication on the radio level, but not the entire data flowfrom the cloud to the label.
To overcome these limitations, retailers need to consider anaugmented implementation that leverages Bluetooth LE as afoundation and adds the necessary features and functionalities
to serve the specific needs of the retail industry. Such acomplementary layer should provide:• Full adherence, compliance, and compatibility with theestablished Bluetooth LE standard for Electronic Shelf Labels• Seamless and secure communication between the labels
and multiple APs, without requiring new pairing or anotheronboarding.
• A fast and simple onboarding process that can register andconfigure the labels in bulk, without manual intervention.
• A robust and efficient image compression algorithm thatcan deliver high-quality and consistent updates to the labels,
regardless of the content or size.
• An efficient management of IoTs’ battery life and power
consumption.
• An end-to-end encryption that protects the entire data
flow from the cloud to the label, preventing any unauthorizedaccess or tampering.
• A scalable and flexible architecture that can support
different store layouts, sizes, and locations, and integrate withvarious IoT devices and platforms.

4Introducing VusionOX Augmented Security With
End-to-End Encryption Protecting The Entire Ecosystem
In a world where cyber-attacks happen every 39 seconds1, leaving
security to chance is not an option. That’s why VusionGroup
designed VusionOX – an augmented implementation of BluetoothLE that provides end-to-end security to Bluetooth LE devices, such as
electronic shelf labels with encryption from the cloud to the edge.

BLUETOOTH STANDARD & THE VUSIONOX IMPLEMENTATION

Encryption is the process of transforming data into a format thatcan only be read by authorized parties who have the right key todecrypt it. This protects the data from being accessed or modified
Bluetooth LE
by anyone else, such as hackers, competitors, or malicious insiders.

Core Speciﬁcations

There are two main types of encryption: Symmetric encryption• STANDARDIZED Bluetooth Protocol
employs a single key for both encryption and decryption,• Periodic Advertising with Responses (PAwR)• Addressing schemes,
prioritizing speed but necessitating secure key distribution.
On commands & parametersfor Bluetooth-LE connection to the Access Points
the other hand, asymmetric encryption provides a• higher
level of & encryption security
Base-level communication
through AES-CCM algorithm from the IoT to thesecurity with distinct keys for encryption and decryption,
making it
Access Point
more challenging for unauthorized parties to intercept or decipher
the encrypted data.
HO W D O E S I T WORK?
VusionOX uses cloud-to-edge end-to-end asymmetric encryption,backed by hardware-based security. This means that the data isencrypted at the source, in the cloud or in the edge device, andremains encrypted throughout the entire transmission, until itreaches the destination. No one can access or alter the data intransit, at the cloud, the AP or radio level.
1. https://www.watchguard.com/wgrd-news/blog/there-was-cyberattack-every-39-seconds-2023

VusionOX

Source: IHL Group• Cloud-to-Edge End-to-End Security
safeguarding pricing and sensitive datatransmissions• Hardware-Based Security assymmetric dataencryption• Scalability through optimized pairing andonboarding for retail environments• Power Saving Optimization for maximizing
ESLs battery life
• Plug-n-Play Bridge to the VusionCloudIoT Platform

PLUS• Standardized Bluetooth Protocol• Periodic Advertising with Responses (PAwR)• Addressing schemes, commands and parametersfor Bluetooth-LE connection to the Access Points• Base-level communicatoin & encryption security
through AES-CCM algorithm from the IoT to theAccess PointVusion

Bluetooth LE
Core Speciﬁcations• Cloud-to-Edge End-to-E
safeguarding pricing andtransmissions• Hardware-Based Securi
encryption• Scalability through optim
onboarding for retail envi
• Power Saving Optimizat
ESLs battery life
• Plug-n-Play Bridge to th
IoT Platform• STANDARDIZED Bluetooth Protocol• Periodic Advertising with Responses (PAwR)• Standardized Bluetooth P• Periodic Advertising with+• Addressing schemes, commands & parametersfor Bluetooth-LE connection to the Access Points• Base-level communication & encryption security
through AES-CCM algorithm from the IoT to theAccess Point

PLUS• Addressing schemes, comfor Bluetooth-LE connect• Base-level communicatoi
through AES-CCM algorit
Access Point5

The hardware-based security is provided in the Qualcomm® Rootof Trust which is a secure element embedded in the Qualcomm®
chipsets powering our Electronic Shelf Labels, and Digital Shelf
Systems. The secure element is a tamper-resistant component
that stores and protects sensitive data, such as cryptographic
keys, certificates, and credentials. It also performs cryptographic
operations, such as encryption, decryption, signing, and verification.
Each IoT device, like ESLs or DSSs, is assigned a unique identifier during
the manufacturing process. This unique identifier is derived from thesecure element within the Qualcomm® chipsets and used to encrypt
data packets, making them verifiable and resistant to replication.
We have also added an extra software layer of security through
VusionOX, which creates a secure pipe that wraps the information
stream and adds additional headers and footers that contain
information such as sequence numbers, checksums, andtimestamps. This ensures that the data is not only encrypted, butalso protected from replay attacks, packet loss, or corruption.
WH AT ARE T HE BEN EF IT S?
Our system offers several benefits for retailers and consumers who use
our Electronic Shelf Labels, Digital Shelf Systems and other IoT devices.
• It entirely complies with the established Bluetooth LE standard
bringing full compatibility with the Bluetooth LE ecosystem,
while adding a complementary layer of security and optimizing
scalability for retail.

• It protects the confidentiality, integrity, and availability of thedata, ensuring that it is not accessed, modified, or disrupted byunauthorized parties.
• It prevents data breaches, cyberattacks, or fraud, which could
result in financial losses, reputational damage, or legal liabilities.
With our best in-class solution combining VusionGroup’s IoT,
VusionCloud and the Qualcomm® technologies, accessing
contextual real-time data, analytics, and positioning capabilities
can become a reality for your operation.
VusionOX
Cloud-to-Edge
Security

VUSION
CLOUD

00101
10110
01001
11011

ACCESS
POINT

Bluetooth LEStandard

End-to-End
Security=100% DATAINTEGRITY

00101
10110
01001
11011

IN-STORE
IoT6

How VusionOX & Qualcomm ® Bluetooth ® SoC
Enable Rapid Scalability For Retailers
One of the main challenges that retailers face when adopting
electronic shelf labels (ESLs), Digital Shelf Systems (DSS) and other
Internet of Things (IoT) devices is scalability. How can they install,
manage, and update tens of thousands or even millions of IoT
devices across multiple stores without compromising performance,security, or efficiency? How can they ensure a smooth and seamless
transition from legacy systems to digital solutions?
With over 30 years of expertise in ESL technology, VusionGroup has
unique know-how that enables retailers to go digital efficiently andeffectively. By leveraging a strategic partnership with Qualcomm
Technologies, Inc., VusionGroup offers retailers a comprehensive
solution for contextual real-time data, analytics, and positioning
capabilities, that can be scaled rapidly and reliably.
EdgeSense™, the latest innovation from VusionGroup, is poweredby the Qualcomm® ultra-low power Bluetooth® Low Energy SoC.
This Bluetooth solution enables EdgeSense™ to communicate withthe VusionCloud Retail IoT Platform via the VusionOX Bluetooth
LE implementation, which offers several advantages over otherwireless protocols.

7First, VusionOX allows for multipoint connectivity, meaning thateach ESL or EdgeSense™ rail can be paired with multiple accesspoints (APs) in the backend. This eliminates the need for manual
pairing of each IoT with a single AP, which can be time-consuming
and impractical. Instead, through the onboarding process, eachin-store device is paired with one AP, and the VusionCloud IoT
Platform manages the rest of the connection of the ESL or DSS
through the entire store through backend management. This
optimizes the AP to which the IoT connects for better performanceand reliability.
Second, VusionOX enables dynamic grouping of IoT based on smart
assignment algorithms. This means that the VusionCloud Platform
can create and manage subgroups of IoT according to various criteria,such as location, product category, promotion status, or update
frequency. This allows for faster and more efficient data transmission
and updates, as well as targeted marketing and personalization. For
example, the VusionCloud Platform can push price updates only tothe IoT that are part of a promotion or send personalized offers to theIoT that are near a customer’s smartphone.
Third, VusionOX ensures optimal battery usage and longevity
for in-store devices. VusionGroup’s ESLs and DSSs have a built-insystem that enables power saving and optimizes battery usage
before the onboarding phase, throughout the process and theirentire lifecycle. Out of manufacturing, all IoTs are set to a dormant
mode that saves battery life prior to onboarding. In this mode, IoTs
listen in low power mode until receiving dedicated packets sentby the APs at a regular interval. Once activated, the IoTs enter theonboarding mode, where they communicate with the APs and theVusionCloud Platform to complete the installation process. Afterthe onboarding is done, the IoTs enter their low power operationalmode, where they receive and display data.
By using VusionOX, ESLs and DSSs, can be onboarded quickly andeasily, without compromising performance or battery life. A store
with 100,000 tags can be brought online in approximately 30
minutes, and the IoTs can last up to 15 years on battery dependingon their usage.
With the VusionOX Bluetooth LE implementation, leveraging
Qualcomm Technologies powered SoC , retailers can scale theirdigital transformation across multiple stores and locations, andbenefit from real-time and dynamic pricing, location-basedexperiences, advanced analytics, and personalized promotions.
The solution is not only scalable, but also secure, dependable,and compliant with the highest standards of data protectionand privacy. By partnering with VusionGroup and Qualcomm
Technologies, retailers can unlock the full potential of IoT anddeliver superior value to their customers and stakeholders.

8To Bluetooth & Beyond, Next Gen Retail is Here
Bluetooth LE is not just wireless technology. It is a game-changer
for the retail industry, enabling new levels of connectivity,interactivity, and intelligence across the entire store ecosystem.
With Bluetooth LE you can unify all your sensors, ESLs, DSSs, IoT
devices, and mobile applications under one secure and scalable
environment and create a seamless and engaging shopping
experience for your customers.
But not all Bluetooth implementations are created equal. In a world
where cyber-attacks happen every 39 seconds, leaving security tochance is not an option. You need a solution that protects yourdata, your devices, and your reputation, while allowing you toscale up to meet the growing demands of your business. You needa solution that is designed by experts in Bluetooth technology
and retail innovation. You need the VusionGroup and Qualcomm
Technologies’ powered solution.

With the ability to leverage your existing architecture,
unparalleled scalability, and management, the Qualcomm
Technologies and VusionGroup solution stands far above
the competition.
Take the first step towards transforming your business today.
Scan the QR Code to learn more.
Scan the QR Code to learn more.

Security and scalability are the pillars of going digital in retail.
Digitalizing stores is a huge undertaking and choosing partners
with proven expertise to deliver such innovative technologies
at scale is critical to smooth sailing. Higher sales, better labor
utilization, targeted promotions, higher profits, and simplified
security are just a few of the advantages you can expect with thisnew solution.

9