Hubble Network Platform Documentation
website·Indexed 34 days ago
https://hubble.com/docsDeveloper documentation for the Hubble Network, an IoT connectivity platform utilizing Bluetooth Low Energy (BLE) chips and a combined satellite and terrestrial gateway network. Includes guides for the Device SDK, Hubble CLI, cloud integration via OpenAPI, and security protocols for BLE advertisement encryption and EID rotation.
What's inside Hubble Network
- A Hubble scanner is a device with BLE scanning capabilities and internet access that performs three primary tasks: scanning for Hubble BLE advertisements (passive scanning), packaging the data with a timestamp and location, and delivering that data to the Hubble backend. The scanner does not connect to or interact with Hubble devices; it only listens for advertisements.
Overview of Hubble Connect mobile app
Hubble Connect is a mobile application that converts a mobile device into a scanning gateway on the Terrestrial Network. It is used for device testing and closed-loop connectivity within the Sandbox environment. The app is required to retrieve data in Sandbox.Overview of Hubble Satellite Network capabilities
Hubble's Satellite Network allows standard BLE devices to transmit up to 13 bytes of data from outdoor locations without gateways, cellular, or Wi-Fi. It uses the existing 2.4 GHz BLE radio. The network is designed for stationary or region-locked outdoor devices sending small, infrequent updates (e.g., asset tracking, environmental sensors). It is not suitable for real-time reporting, high-frequency data, large payloads, or indoor use.Overview of Satellite Network Regulatory Compliance in North America
Devices using the Hubble Satellite Network protocol for commercial deployment in the United States, Canada, and Mexico must obtain regulatory certification before commercial launch. This is the responsibility of the device manufacturer or operator (the 'responsible party'), not Hubble.
Note: The Hubble Terrestrial Network protocol uses standard Bluetooth® Low Energy (BLE) specifications and does not require this specific re-certification.
Overview of the Hubble Pilot Framework validation phases
Before ramping up production, the Hubble Network rollout follows four validation phases to ensure coverage, connectivity, and backend integration. This framework is optimized for asset tracking and micro-telemetry use cases.
Phase Goal Primary Tool Timing Coverage Validation Evaluate network coverage without updating devices Network Explorer Day 1 Technical Validation Confirm network connectivity via dev board firmware Dash Quick Start, GitHub Repo Week 1 Network Validation Measure live performance with real-world hardware Custom Hardware Weeks 2–3 Platform Validation Confirm backend ingestion via API/webhooks REST API + Webhooks Week 4 Ramp in Production Roll out connectivity across production devices Dashboard + Cloud API Post go/no-go Overview of the Hubble Terrestrial Network
The Hubble Terrestrial Network is a global infrastructure powered by Bluetooth® Low Energy (BLE) scanning gateways. It is designed to capture device broadcasts across diverse environments, including major cities, highways, ports, and rural regions.Overview of Hubble Network Encryption Concepts
The Hubble Network uses several cryptographic techniques to ensure confidentiality, integrity, and authenticity for BLE transmissions from anonymous devices:
- AES Encryption: Supports AES-256 (recommended) and AES-128 symmetric encryption.
- CMAC (Cipher-based Message Authentication Code): Used to generate a MAC to ensure data integrity and authenticity.
- KBKDF (Key-Based Key Derivation Function): Derives keys from a master key using a label, context, and counter, utilizing CMAC as the pseudorandom function (PRF) per NIST 800-108.
- Nonce Generation: A unique nonce is generated for every encryption operation via KBKDF (using the label "Nonce" and the current sequence number) to ensure the same plaintext produces different ciphertexts.
Understand the Hubble Terrestrial Network Advertising Packet structure
Hubble's Terrestrial Network uses Bluetooth Low Energy (BLE) advertising packets. The packet consists of three main components:
- Header: Defines the PDU Type (packet size and communication direction).
- Advertising Address: A 48-bit address. Hubble recommends using a Non-Resolvable Private Address (NRPA) for privacy and security.
- Advertising Payload: A standard BLE Advertising Data (AD) structure containing the Hubble Service UUID and Service Data.
Understand Hubble Network end-to-end data security
Hubble Network ensures data security from device broadcast to cloud storage using the following mechanisms:
- Device Anonymity: Achieved via KBKDF (Key-Based Key Derivation Function) and secure on-device key management.
- Transmission Encryption: Each transmission uses AES (Advanced Encryption Standard) counter mode.
- Integrity & Authenticity: CMAC (Cipher-based Message Authentication Code) provides message authentication. The backend validates sequence numbers to prevent replay attacks.
- Cloud Security: Data at rest is encrypted and protected by authentication-based access control.
Hubble Network Data Flow Overview
The Hubble Network operates as an IoT connectivity platform where tracked devices transmit encrypted payloads via BLE (Bluetooth Low Energy) advertisements. These advertisements are detected by a global network of scanning gateways (consisting of over 100 million scanners), which then forward the packets to the backend for processing.Manage Hubble Network Organization types
Hubble provides three organization environments based on the development stage:
- Sandbox: The default free environment for initial device activation. It is limited to packets captured locally via the Hubble Connect mobile app (phone acts as the gateway).
- Production Org: The live environment with full access to the global network (100M+ scanning gateways) for deployed devices.
- Staging Org: A siloed environment for testing hardware revisions or integrations. It has the same Live Network access as Production but uses a separate Org ID, separate user access, and separate API credentials.
Manage Bluetooth beacon production with an ODM
When using an Outsourced Design Manufacturer (ODM) to produce Bluetooth beacons with Hubble firmware, device ownership is determined by the devicekey(a unique identifier). To ensure devices are registered to the correct organization, provisioning should happen at the factory. This is critical because many firmware images do not support post-production key writes and it integrates better with existing factory flashing toolchains.