EnOcean PTM 215B User manual

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 1/85
Patent protected:
WO98/36395, DE 100 25 561, DE 101 50 128,
WO 2004/051591, DE 103 01 678 A1, DE 10309334,
WO 04/109236, WO 05/096482, WO 02/095707,
US 6,747,573, US 7,019,241
Observe precautions! Electrostatic sensitive devices!
PTM 215B Bluetooth®Pushbutton Transmitter Module
07.06.2019

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 2/85
REVISION HISTORY
The following major modifications and improvements have been made to this document:
Version
Author
Reviewer
Date
Major Changes
1.0
MKA
MK
14.10.2016
First release for DA-3 status
1.1
MKA
MKA
15.12.2016
Update for DB-4 status
1.2
MKA
MKA
25.01.2017
Added NFC reader information
Added instructions for validating the au-
thentication signature
1.3
MKA
MKA
17.03.2017
Added note on receiver configuration
1.4
MKA
MKA
30.03.2017
Added telegram parsing examples
1.5
MK
MKA
17.07.2017
R&TTE -> RED, max. transmit power
1.6
MK
MKA
11.10.2017
Added note regarding magnets or ferro-
magnetic materials near PTM 215B
1.7
MKA
MKA
21.12.2017
Added Australia certification
1.8
MKA
MKA
22.06.2018
Added Japan certification and changes
introduced in version DC-06
1.9
MKA
MKA
07.06.2019
Added DD-07 feature set
Added RPA Example
Published by EnOcean GmbH, Kolpingring 18a, 82041 Oberhaching, Germany
www.enocean.com, [e-mail], phone [phone]
© EnOcean GmbH, All Rights Reserved
The Bluetooth®word mark and logos are registered trademarks owned by the Bluetooth
SIG, Inc. and any use of such marks by EnOcean GmbH is under license. Other trademarks
and trade names are those of their respective owners.
Important!
This information describes the type of component and shall not be considered as assured
characteristics. No responsibility is assumed for possible omissions or inaccuracies. Circuitry
and specifications are subject to change without notice. For the latest product specifica-
tions, refer to the EnOcean website: http://www.enocean.com.
As far as patents or other rights of third parties are concerned, liability is only assumed for
modules, not for the described applications, processes and circuits.
EnOcean does not assume responsibility for use of modules described and limits its liability
to the replacement of modules determined to be defective due to workmanship. Devices or
systems containing RF components must meet the essential requirements of the local legal
authorities.
The modules must not be used in any relation with equipment that supports, directly or
indirectly, human health or life or with applications that can result in danger for people,
animals or real value.
Components of the modules are considered and should be disposed of as hazardous waste.
Local government regulations are to be observed. Packing: Please use the recycling opera-
tors known to you.

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 3/85
TABLE OF CONTENT
1. General description........................................................................................ 6
Basic functionality .........................................................................................6
Technical data............................................................................................... 7
Physical dimensions....................................................................................... 7
Environmental conditions ...............................................................................7
Packaging information.................................................................................... 7
Ordering information......................................................................................7
2. Functional information ................................................................................... 8
Device Overview ...........................................................................................8
Basic Functionality......................................................................................... 8
Block Diagram ..............................................................................................9
User Interface............................................................................................. 10
3. Telegram transmission ................................................................................. 11
Radio channel parameters ............................................................................ 11
Default radio transmission sequence .............................................................. 12
User-defined radio transmission sequences..................................................... 12
3.3.1 Supported radio transmission sequences .................................................... 13
3.3.2 Three channel radio transmission sequence ................................................ 13
3.3.3 Two channel radio transmission sequence................................................... 14
3.3.4 Single channel radio transmission sequence................................................ 14
4. Telegram format ......................................................................................... 15
Preamble.................................................................................................... 15
Access Address ........................................................................................... 15
Header....................................................................................................... 15
Source address ........................................................................................... 16
4.4.1 Static source address mode ...................................................................... 16
4.4.2 Resolvable private address mode............................................................... 17
Check Sum ................................................................................................. 18
Telegram payload........................................................................................ 19
4.6.1 Data telegram payload............................................................................. 19
4.6.2 Switch status encoding............................................................................. 20
4.6.3 Commissioning telegram payload .............................................................. 21
PTM 215B data telegram authentication ......................................................... 22
4.7.1 Authentication implementation.................................................................. 23
5. Commissioning............................................................................................ 24
NFC-based commissioning ............................................................................ 25
Camera-based commissioning....................................................................... 26
Radio-based commissioning.......................................................................... 26
5.3.1 Commissioning mode entry....................................................................... 26
5.3.2 Commissioning telegram transmission........................................................ 27
5.3.3 Exit from commissioning mode.................................................................. 27
5.3.4 Disable commissioning mode .................................................................... 27
Factory Reset.............................................................................................. 28
6. NFC interface.............................................................................................. 29
Using the NFC interface................................................................................ 29
NFC interface functions ................................................................................ 30
6.2.1 NFC interface state machine ..................................................................... 30

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 4/85
6.2.2 IDLE state .............................................................................................. 31
6.2.3 READY 1 state......................................................................................... 31
6.2.4 READY 2 state......................................................................................... 31
6.2.5 ACTIVE state .......................................................................................... 31
6.2.6 Read command ....................................................................................... 32
6.2.7 Write command....................................................................................... 32
6.2.8 Password authentication (PWD_AUTH) command......................................... 33
Using TWN4 as USB NFC reader .................................................................... 34
6.3.1 Useful commands .................................................................................... 35
6.3.2 Translation into binary data ...................................................................... 35
Configuration memory organization ............................................................... 36
Memory Address Map................................................................................... 37
Public data ................................................................................................. 38
Protected Data ............................................................................................ 39
6.7.1 PIN Code................................................................................................ 40
6.7.2 Configuration of product parameters.......................................................... 40
6.7.3 Configuration register .............................................................................. 40
6.7.4 Source Address Write register ................................................................... 41
6.7.5 Security Key Write register ....................................................................... 41
6.7.6 Private Security Key mode........................................................................ 42
6.7.7 Product ID and Manufacturer ID Write register ............................................ 42
6.7.8 Optional Data register .............................................................................. 43
6.7.9 Variant register ....................................................................................... 44
6.7.10Radio channel selection registers ............................................................... 46
6.7.11Customer Data........................................................................................ 47
Private Data................................................................................................ 48
6.8.1 Security Key ........................................................................................... 48
6.8.2 Default Settings ...................................................................................... 48
7. Device integration ....................................................................................... 49
Mechanical Interface Characteristics .............................................................. 49
Mechanical Interface Drawings ...................................................................... 49
Product label............................................................................................... 55
7.3.1 Example for a product QR code ................................................................. 55
8. PTM 215B device label ................................................................................. 56
PTM 215B device label for products up to version DB-05 .................................. 56
8.1.1 Commissioning DMC structure................................................................... 57
PTM 215B device label for products starting with version DC-06 ........................ 58
8.2.1 QR Code format ...................................................................................... 58
9. Application information ................................................................................ 59
Transmission range ..................................................................................... 59
Receiver configuration.................................................................................. 60
10. Regulatory information................................................................................. 61
RED for European Market ........................................................................ 61
FCC (United States) Certificate................................................................. 62
10.2.1FCC (United States) Regulatory Statement ................................................. 63
IC (Industry Canada) Certificate............................................................... 64
10.3.1IC (Industry Canada) Regulatory Statement ............................................... 65
ACMA (Australia) Declaration of Conformity ............................................... 66
ARIB (Japan) Construction Type Conformity Certifaction.............................. 68

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 5/85
11. Product history............................................................................................ 69
A. Parsing PTM 215B radio telegrams................................................................. 70
Data telegram example ................................................................................ 70
A.1.1 BLE frame structure ............................................................................. 70
A.1.2 EnOcean data telegram payload structure............................................... 70
Commissioning telegram example ................................................................. 71
A.2.1 BLE frame structure ............................................................................. 71
A.2.2 EnOcean commissioning telegram payload structure ................................ 71
B. Address resolution for resolvable private addresses (RPA) ................................ 72
B.1.1 RPA resolution flow.................................................................................. 72
B.1.2 Address resolution example ...................................................................... 73
C. Authentication of PTM 215B data telegrams .................................................... 74
C.1 Algorithm input parameters ...................................................................... 74
C.1.1 Constant input parameters ....................................................................... 74
C.1.2 Variable input parameters ........................................................................ 75
C.1.3 Obtaining the security key ........................................................................ 76
C.1.3.1 Obtaining the security key via NFC interface ................................................... 76
C.1.3.2 Obtaining the security key via the product DMC code....................................... 77
C.1.3.3 Obtaining the security key via a commissioning telegram ................................. 78
C.1.4 Internal parameters................................................................................. 78
C.1.5 Constant internal parameters.................................................................... 79
C.1.6 Variable internal parameters..................................................................... 79
C.2 Algorithm execution sequence................................................................... 80
C.3 Examples ............................................................................................... 81
C.3.1 Data telegram without optional data .......................................................... 81
C.3.2 Data telegram with 1 byte optional data..................................................... 83
C.3.3 Data telegram with 2 byte optional data..................................................... 84
C.3.4 Data telegram with 4 byte optional data..................................................... 85

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 6/85
1. General description
Basic functionality
PTM 215B enables the realization of energy harvesting wireless switches for lighting, build-
ing or industrial automation control systems using Bluetooth®low energy technology.
PTM 215B is mechanically compatible with the established PTM 210 form factor enabling
quick integration into a wide range of designs. Key applications are wall-mounted or porta-
ble switches either with up to two rockers or up to four push buttons.
PTM 215B pushbutton transmitters are self-powered (no batteries) and fully maintenance-
free. They can therefore be used in all environments including locations that are difficult to
reach or within hermetically sealed housings. The required energy is generated by an elec-
tro-dynamic energy transducer actuated by an energy bow located on the left and right of
the module. This energy bow which can be pushed from outside the module by an appro-
priate pushbutton or switch rocker.
When the energy bow is pushed down or released, electrical energy is created and a radio
telegram according to the Bluetooth®low energy standard is transmitted. This radio tele-
gram transmits the status of all four contact nipples at the moment when the energy bow
was pushed down or released.
PTM 215B radio telegrams are protected with AES-128 security based on a device-unique
private key.
Figure 1 –PTM 215B Product Outline
PTM 215B is available in the following variants:
PTM 215B
Stand-alone module without additional components
EWSSB / EWSDB
PTM 215B integrated into European-style single / double rocker wall switch housing
ESRPB / EDRPB
PTM 215B integrated into US-style single or double rocker pad housing
The term “PTM 215B” as used in this document applies to all product variants unless other-
wise mentioned.

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 7/85
Technical data
Antenna
Integrated PCB antenna
Max. transmit power measured
0.4dBm / 1.1mW
Communication Range (guidance only)
75 m ideal line of sight / 10 m indoor environment
Communication Standard
Bluetooth Low Energy (BLE)
Radio Frequency (min / max)
2402 MHz / 2480 MHz
Radio Channels (default)
CH 37 / 38 / 39 (2402 MHz / 2426 MHz / 2480 MHz)
Advertising Events per press or release
(min / max)
2 / 3
Data Rate and Modulation (default)
1 Mbit/s GFSK
Configuration Interface
NFC Forum Type 2 Tag (ISO/IEC 14443 Part 2 and 3)
Device Identification
Unique 48 Bit Device ID (factory programmed)
Security
AES128 (CBC Mode) with Sequence Code
Power Supply
Integrated Kinetic Energy Harvester
Button Inputs
Up to four buttons or two rockers
Physical dimensions
Module Dimensions
40.0 x 40.0 x 11.2 mm
Module Weight
20 g +/- 1g
Environmental conditions
Operating Temperature
-25°C ... 65°C
Storage Temperature
-25°C ... 65°C
Humidity
0% to 95% r.h. (non-condensing)
Packaging information
Packaging Unit 100 units
Packaging Method Tray / Box (10 units per tray, 10 trays per box)
Ordering information
Type
Ordering Code
Frequency
PTM 215B
S3221-A215
2.4 GHz (Bluetooth Low Energy)

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 8/85
2. Functional information
Device Overview
The pushbutton transmitter module PTM 215B from EnOcean enables the implementation of
wireless remote controls without batteries. It transmits Bluetooth Low Energy (BLE) data
telegrams where the required energy is provided by a built-in electro-dynamic energy gen-
erator.
The outer appearance of PTM 215B is shown on the picture below.
Figure 2 –Electro-dynamic powered pushbutton transmitter module PTM 215B
Basic Functionality
PTM 215B devices contain an electro-dynamic energy converter which is actuated by an
energy bow (1). This bow is pushed by an appropriate push button, switch rocker or a simi-
lar construction mounted onto the device. An internal spring will release the energy bow as
soon as it is not pushed down anymore.
When the energy bow is pushed down, electrical energy is created and a BLE radio tele-
gram is transmitted which identifies the action (pressed or not pressed) and the status of
the four button contacts (2). Releasing the energy bow similarly generates energy which is
used to transmit a different radio telegram.
It is therefore possible to distinguish between radio telegrams sent when the energy bar
was pushed and radio telegrams sent when the energy bar was released.
By identifying these different telegrams types and measuring the time between pushing
and releasing of the energy bar, it is possible to distinguish between “Long” and “Short”
button contact presses. This enables simple implementation of applications such as dim-
ming control or blinds control including slat action.
(2) Button contacts
for switch rocker
identification
(1) Energy bow
on both device sides
Snap-in and
rotation axis for
pushbuttons or
switch rocker

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 9/85
Block Diagram
Figure 3 –Functional block diagram of PTM 215B
Energy Bow / Power Generator
Converts the motion of the energy bow into electrical energy
Power Converter
Converts the energy of the power generator into a stable DC supply voltage for the device
electronics
Processor
Determines the status of the button contacts and the energy bow, encodes this status into
a data word, generates the proper radio telegram structure and sends it to the radio
transmitter
RF transmitter
Transmits the data in the form of a series of short 2.4 GHz Bluetooth Low Energy radio
telegrams using the integrated antenna
NFC interface
Allows reading and writing certain product parameters using an NFC compliant reader /
writer supporting NFC Forum Type 2 tags (as specified by ISO/IEC 14443 Part 2 and 3).
Processor
Energy
Bow
Power
Converter
Data
DC Power
Pushed
/
Released
Ant
N
S
Processor
Button Contacts
Energy
Bow
Power
Converter
Data
DC Power
Push / Release
Detection
Antenna
N
S
N
S
NFC
RF Transmitter

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 10/85
User Interface
PTM 215B devices provide four button contacts. They are grouped into two channels
(Channel A and Channel B) each containing two button contacts (State O and State I).
The state of all four button contacts (pressed or not pressed) is transmitted together with a
unique device identification (48 Bit device ID) whenever the energy bow is pushed or re-
leased.
Figure 4 below shows the arrangement of the four button contacts and their designation:
Figure 4 –Button contact designation
O
I
BA
CHANNEL
STATE
O
I
BA
CHANNEL
STATE

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 11/85
3. Telegram transmission
Radio channel parameters
PTM 215B transmits Bluetooth Low Energy (BLE) advertising telegrams within the 2.4 GHz
radio frequency band (2402MHz … 2480MHz).
By default, PTM 215B will use the three BLE advertising channels (BLE Channel 37, 38 and
39) defined for transmission. The transmission of a radio telegram on these three advertis-
ing channels is called an Advertising Event.
Use of different radio channels within the frequency band from 2402 MHz to 2480 MHz is
possible, see chapter 6.7.10.
The initialization value for data whitening is set as follows:
For BLE channels is set according to specification (value = radio channel)
For the custom radio channels the initialization value is equal to the offset from
2400 MHz (e.g. value = 3 for 2403 MHz)
Table 1 below summarizes radio channels supported by PTM 215B.
Radio Channel
Frequency
Channel Type
BLE Radio Channels
37
2402 MHz
BLE Advertising Channel
0
2404 MHz
BLE Data Channel
1
2406 MHz
BLE Data Channel
…
10
2424 MHz
BLE Data Channel
38
2426 MHz
BLE Advertising Channel
11
2428 MHz
BLE Data Channel
12
2430 MHz
BLE Data Channel
…
36
2478 MHz
BLE Data Channel
39
2480 MHz
BLE Advertising Channel
Custom Radio Channels
40
2403 MHz
Custom Radio Channel
41
2405 MHz
Custom Radio Channel
…
77
2477 MHz
Custom Radio Channel
78
2479 MHz
Custom Radio Channel
Table 1 –PTM 215B supported radio channels

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 12/85
Default radio transmission sequence
PTM 215B transmits telegrams in its standard configuration by using so-called Advertising
Events.
An advertising event is defined as the transmission of the same radio telegram on all se-
lected radio channels (by default this would be on BLE Channel 37, 38 and 39) one after
another with minimum delay in between.
For reliability reasons, PTM 215B will send several (minimum two, maximum three) adver-
tising events for each button input. The resulting transmission sequence is shown in Figure
5 below.
The default interval between the advertising events is 20 ms. Starting with product version
DC-06 it is possible to reduce this interval to 10 ms via the NFC configuration interface. See
chapter 6.7.9 for details.
CH 37 CH 38 CH 39 INTERVAL
(20ms or 10ms)
INTERVAL
(20ms or 10ms)
CH 37 CH 38 CH 39 CH 37 CH 38 CH 39
Figure 5 –Default radio transmission sequence
User-defined radio transmission sequences
In certain situations it might be desirable to transmit radio telegrams on channels other
than the three advertising channels.
PTM 215B therefore allows to select the radio channels to be used for the transmission of
data telegrams and commissioning telegrams. The following transmission modes are sup-
ported:
Both commissioning telegrams and data telegrams are transmitted on the advertis-
ing channels as three advertising events. This is the default configuration and de-
scribed in chapter 3.2 above.
Commissioning telegrams are transmitted on the advertising channels as three ad-
vertising events while data telegrams are transmitted in a user-defined sequence as
described below.
Both commissioning and data telegrams are transmitted in a user-defined sequence
as described below.
The selection of the transmission mode is done using the VARIANT register of the NFC con-
figuration interface as described in chapter 6.7.9.

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 13/85
3.3.1 Supported radio transmission sequences
PTM 215B supports the following user-defined sequences:
Three channel sequence
This sequence is similar to the default Advertising Event with the difference that the
user can select the radio channels to be used. The three channel sequence is de-
scribed in chapter 3.3.2 below.
Two channel sequence
In this sequence the radio telegram is transmitted using four transmissions on two
radio channels. It is described in chapter 3.3.3 below.
One channel sequence
In this sequence the radio telegram is transmitted using six transmissions on one
radio channel. It is described in chapter 3.3.4 below.
The selection of user-defined radio transmission sequences is made via the VARIANT register
of the NFC configuration interface, please see chapter 6.7.9.
3.3.2 Three channel radio transmission sequence
The three channel radio transmission sequence is similar to the default transmission se-
quence. The difference is that the radio channels (BLE Channel 37, 38 and 39 in the default
transmission sequence) can be selected using the registers TX_CHANNEL1, TX_CHANNEL2and
TX_CHANNEL3.
The PTM 215B telegram will in this mode be transmitted on the radio channel selected by
TX_CHANNEL1first, immediately followed by a transmission on the radio channel selected by
TX_CHANNEL2and a transmission on the radio channel selected by TX_CHANNEL3.
This transmission sequence will be sent three times in total as shown in Figure 6 below.
The default interval between the advertising events is 20 ms. Starting with product version
DC-06 it is possible to reduce this interval to 10 ms via the NFC configuration interface. See
chapter 6.7.9 for details.
TX_CHANNEL1 TX_CHANNEL2 TX_CHANNEL3 TX_CHANNEL1 TX_CHANNEL2 TX_CHANNEL3 TX_CHANNEL1 TX_CHANNEL2 TX_CHANNEL3
INTERVAL
(20ms or 10ms)
INTERVAL
(20ms or 10ms)
Figure 6 –Three channel radio transmission sequence
The format of TX_CHANNEL1, TX_CHANNEL2 and TX_CHANNEL3 is described in chapter 6.7.10.

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 14/85
3.3.3 Two channel radio transmission sequence
The two channel radio transmission sequence removes transmission on the third radio
channel (selected by TX_CHANNEL3) and instead repeats the transmission once more (four
times in total).
The PTM 215B telegram will in this mode be transmitted on the radio channel selected by
TX_CHANNEL1first, immediately followed by a transmission on the radio channel selected by
TX_CHANNEL2.
This transmission sequence will be sent four times in total as shown in Figure 7 below.
The default interval between the advertising events is 20 ms. Starting with product version
DC-06 it is possible to reduce this interval to 10 ms via the NFC configuration interface. See
chapter 6.7.9 for details.
TX_CHANNEL1 TX_CHANNEL2 TX_CHANNEL1 TX_CHANNEL2
INTERVAL
(20ms or 10ms) TX_CHANNEL1 TX_CHANNEL2
INTERVAL
(20ms or 10ms) TX_CHANNEL1 TX_CHANNEL2
INTERVAL
(20ms or 10ms)
Figure 7 –Two channel radio transmission sequence
The format of TX_CHANNEL1and TX_CHANNEL2 is described in chapter 6.7.10.
3.3.4 Single channel radio transmission sequence
The single channel radio transmission sequence removes transmission on the second and
third radio channel (selected by TX_CHANNEL2 and TX_CHANNEL3 respectively), i.e. all trans-
missions will be on the radio channel selected by TX_CHANNEL1.
The PTM 215B telegram will be sent six times on this radio channel as shown in Figure 8
below.
The default interval between the advertising events is 20 ms. Starting with product version
DC-06 it is possible to reduce this interval to 10 ms via the NFC configuration interface. See
chapter 6.7.9 for details.
TX_CHANNEL1 TX_CHANNEL1
INTERVAL
(20ms or 10ms) TX_CHANNEL1
INTERVAL
(20ms or 10ms) TX_CHANNEL1
INTERVAL
(20ms or 10ms) TX_CHANNEL1
INTERVAL
(20ms or 10ms) TX_CHANNEL1
INTERVAL
(20ms or 10ms)
Figure 8 –Single channel radio transmission sequence
The format of TX_CHANNEL1is described in chapter 6.7.10.

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 15/85
4. Telegram format
PTM 215B transmits Bluetooth Low Energy (BLE) radio telegrams in the 2.4 GHz band. For
detailed information about the Bluetooth Low Energy standard, please refer to the applica-
ble specifications.
Figure 9 below summarizes the BLE frame structure.
Figure 9 –BLE frame structure
The content of these fields is described in more detail below.
Preamble
The BLE Preamble is 1 byte long and identifies the start of the BLE frame. The value of the
BLE Preamble is always set to 0xAA.
Access Address
The 4 byte BLE Access Address identifies the radio telegram type. For advertising frames,
the value of the Access Address is always set to 0x8E89BED6.
Header
The BLE Header identifies certain radio telegram parameters. Figure 10 below shows the
structure of the BLE header.
Figure 10 –BLE header structure

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 16/85
Source address
The 6 byte BLE Source Address (MAC address) uniquely identifies each PTM 215B product.
PTM 215B supports two source address modes:
Static Source Address mode (default)
In this mode, the source address is constant (but its lower 32 bit can be configured
via NFC interface)
Resolvable Private Address mode (NFC configurable option)
In this mode, the source address changes for each transmission
By default PTM 215B uses Static Source Address mode. Private Resolvable Address mode
can be selected by setting the Private Source Address flag in the Configuration register
(see chapter 6.7.3) to 0b1.
These two address modes are described in the following chapters.
4.4.1 Static source address mode
By default, PTM 215B uses static source addresses meaning that the source address is con-
stant during normal operation. The static source address can be read and configured (writ-
ten) via NFC as described in chapter 6.
The structure of PTM 215B static addresses is as follows:
The upper 2 bytes of the source address are used to identify the device type and set
to 0xE215 for all PTM 215B devices (to designate EnOcean PTM 215 device type).
These two bytes cannot be changed.
The lower 4 bytes are uniquely assigned to each device. They can be changed using
the NFC configuration interface as described in chapter 0
Figure 11 below illustrates the static address structure used by PTM 215B.
Figure 11 –BLE static source address structure

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 17/85
4.4.2 Resolvable private address mode
For some applications it is desirable to obfuscate the origins of PTM 215B data telegrams in
order to prevent tracking of its radio transmissions. This can be achieved by using resolva-
ble private addresses (RPA) as defined in the Bluetooth Core Specification.
PTM 215B can be configured to use resolvable private addresses by setting the RPA ADDRESS
MODE flag within the Configuration register (described in chapter 6.7.3) to 0b1.
When using resolvable private addresses, the address used by PTM 215B is modified (rotat-
ed) according to a defined scheme which on one hand precludes determining the device
identity by unauthorized receivers while allowing authorized receivers (sharing a specific
security key with PTM 215B) to do so.
The shared security key –which has to be known by both PTM 215B and the authorized
receiver –is called the Identity Resolution Key (IRK). PTM 215B uses its device-unique ran-
dom key as identity resolution key. This key can be modified if needed via the NFC configu-
ration interface as described in chapter 6.7.5.
For each data telegram transmitted by PTM 215B (i.e. for every button push or release), a
new resolvable private address is generated. The 48 bit address field of such resolvable
private address is split into two sub-fields:
prand
This field contains a random number which always starts (two most significant bits)
with 0b10. The prand value is changed for each telegram that is transmitted.
Individual advertising events used to transmit one telegram (as described in chapter
3) use the same prand value.
hash
This field contains a verification value (hash) generated from prand using the IRK
The structure of a resolvable private address is shown in Figure 12 below.
Figure 12 –BLE resolvable private address structure
The prand value is encrypted using the IRK. The lowest 24 bit of the result (encrypted val-
ue) are then used as hash. The concatenation of 24 bit prand and 24 bit hash will be trans-
mitted as 48 bit private resolvable source address.
The receiver maintains a list of IRK for all transmitters that have been commissioned to
work with it.

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 18/85
Whenever the receiver receives a data telegram with a resolvable private address (identi-
fied by the most significant bits of the address field being set to 0b10), it will itself generate
a 24 bit hash from the 24 bit prand sequentially using each IRK known to it (i.e. the IRK of
each device that has been learned into it).
If an IRK matches (i.e. when prand is encoded with the IRK then the result matches hash),
then the receiver has established the IRK used by the transmitter and thereby the identity
of the transmitter.
So conceptually the IRK takes the role of the device address of the transmitter while prand
and hash provide a mechanism for the receiver to select the correct IRK among the set of
IRK known to it.
This mechanism is illustrated in Figure 13 below.
Figure 13 –Resolving private addresses
Refer to Appendix B for an example of resolving a resolvable private address.
Note that commissioning telegrams (as described in chapter 5.3.2) always use static source
addresses (as described in chapter 4.4.1) since they establish the device identity and con-
tain the IRK in the payload.
Check Sum
The 3 byte BLE Check Sum is used to verify data integrity of received BLE radio telegrams.
It is calculated as CRC (cyclic redundancy check) of the BLE Header, Source Address and
Payload fields.

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 19/85
Telegram payload
PTM 215B can transmit two types of telegrams:
Data telegrams
The payload of data telegrams contains the switch status together with optional data
(if applicable), the current sequence counter value and the resulting authentication
signature
Commissioning telegrams
The payload of commissioning telegrams contains the private security key as well as
the current value of the sequence counter and the device address
The payload structure of both telegram types is described in the following chapters.
4.6.1 Data telegram payload
The payload of data telegrams is 13 … 17 bytes long (depending on the size of the Optional
Data field) and consists of the following fields:
Length (1 byte)
The Length field specifies the combined length of the following fields. The content of
the field depends on the size of the Optional Data field (which can be 0 / 1 / 2 or 4
byte). The resulting Length setting would be 12 / 13 / 14 or 16 byte (0x0C / 0x0D /
0x0E / 0x10) respectively
Type (1 byte)
The Type field identifies the data type used for this telegram. For PTM 215B data
telegrams, this field is always set to 0xFF to designate manufacturer-specific data
field
Manufacturer ID (2 byte)
The Manufacturer ID field is used to identify the manufacturer of BLE devices based
on assigned numbers. EnOcean has been assigned 0x03DA as manufacturer ID code.
The Manufacturer ID can be changed via the NFC configuration interface as de-
scribed in chapter 6.7.7.
Sequence Counter (4 byte)
The Sequence Counter is a continuously incrementing counter used for security
processing. It is initialized to 0at the time of production and incremented for each
telegram (data telegram or commissioning telegram) sent.
Switch Status (1 byte)
The Switch Status field reports the button action. The encoding of this field is de-
scribed in chapter 4.6.2.
Optional Data (0 / 1 / 2 or 4 byte)
PTM 215B provides the option to transmit additional user-defined data within each
data telegram as described in chapter 6.7.8.

USER MANUAL
PTM 215B –BLUETOOTH®PUSHBUTTON TRANSMITTER MODULE
© 2019 EnOcean | www.enocean.com F-710-017, V1.0 PTM 215B User Manual | v1.9 | June 2019 | Page 20/85
Security Signature (4 byte)
The Security Signature is used to authenticate PTM 215B radio telegrams as de-
scribed in chapter 4.6.3
Figure 14 below illustrates the data telegram payload.
Figure 14 –Data telegram payload structure
4.6.2 Switch status encoding
The Switch Status field within the data telegram payload identifies the PTM 215B action
(button push or release).
PTM 215B uses the following sequence to identify and transmit button contact status:
1. Determine direction of the energy bar movement (Push Action or Release Action)
2. Read input status of all button contacts
3. Calculate data payload
4. Calculate security signature
In PTM 215B, the type of action (Press Action or Release Action) is indicated by Bit 0 (Ener-
gy Bar). If a button contact has been actuated during Press Action or Release Action then
this is indicated by the according status bit set to ‘1’.
Note that all contacts that were pressed during Press Action will be released during Release
Action. The case of continuing to hold one (or several) button contacts during Release Ac-
tion is mechanically not possible.
The switch status encoding used by PTM 215B is shown Figure 15 in below.
Figure 15 - PTM 215B button action encoding