View source for Zigbee

{{Short description|Low-power, low-bandwidth wireless mesh network}}
{{About|a wireless protocol|the fictional character|Zigby}}
{{Use mdy dates|date=November 2019}}
{{Infobox protocol
| name        = Zigbee
| image       = Zigbee logo.svg
| caption     = 
| standard    = [[IEEE 802.15.4]]
| developer   =  [[Connectivity Standards Alliance]]
| introdate   = {{Start date|2005|06|13}}
| industry    = Industrial, scientific, medical, and [[IoT]]
| range       = {{convert|10|to|100|m|ft|sp=us}}
| website     = {{URL|https://csa-iot.org/}}
}}

'''Zigbee''' is an [[IEEE 802.15.4]]-based [[specification]] for a suite of high-level [[communication protocol]]s used to create [[personal area network]]s with small, low-power [[digital radio]]s, such as for [[home automation]], medical device data collection, and other low-power low-bandwidth needs, designed for small scale projects which need wireless connection. Hence, Zigbee is a low-power, low-data-rate, and close proximity (i.e., personal area) [[wireless ad hoc network]].

The technology defined by the Zigbee specification is intended to be simpler and less expensive than other wireless [[personal area network]]s (WPANs), such as [[Bluetooth]] or more general wireless networking such as [[Wi-Fi]] (or [[Li-Fi]]). Applications include wireless light switches, [[home energy monitor]]s, traffic management systems, and other consumer and industrial equipment that requires short-range low-rate wireless data transfer.

Its low power consumption limits transmission distances to {{convert|10|–|100|meters|feet}} [[line-of-sight propagation|line-of-sight]], depending on power output and environmental characteristics.<ref name="specs">{{cite web |title=ZigBee Specification FAQ |url= http://www.zigbee.org/Specifications/ZigBee/FAQ.aspx |work=ZigBee.org |publisher=Zigbee Alliance |access-date=June 14, 2013 |url-status=dead |archive-url= https://web.archive.org/web/20130627172453/http://www.zigbee.org/Specifications/ZigBee/FAQ.aspx |archive-date=June 27, 2013}}</ref> Zigbee devices can transmit data over long distances by passing data through a [[mesh network]] of intermediate devices to reach more distant ones. Zigbee is typically used in low data rate applications that require long battery life and secure networking. (Zigbee networks are secured by 128-bit [[symmetric encryption]] keys.) Zigbee has a defined rate of up to {{val|250|ul=kbit/s}}, best suited for intermittent data transmissions from a sensor or input device.

Zigbee was conceived in 1998, standardized in 2003, and revised in 2006. The name refers to the [[waggle dance]] of honey bees after their return to the beehive.<ref>{{cite web|last=Gislason|first=Drew|url=https://www.eetimes.com/zigbee-applications-part-1-sending-and-receiving-data/|title=ZigBee Wireless Networking|website=EE Times|date=July 2, 2010 }}</ref>

== Overview ==
[[File:ETRX357 ZigBee module with size ref.JPG|thumb|right|A Zigbee module]]
Zigbee is a low-power [[wireless mesh network]] standard targeted at battery-powered devices in wireless control and monitoring applications. Zigbee delivers low-latency communication. Zigbee chips are typically integrated with radios and with [[microcontroller]]s.

Zigbee operates in the industrial, scientific and medical ([[ISM band|ISM]]) radio bands, with the {{val|2.4|ul=GHz}} band being primarily used for lighting and home automation devices in most jurisdictions worldwide. While devices for commercial utility metering and medical device data collection often use ''sub-GHz'' frequencies: (902-928&nbsp;[[MHz]] in North America, Australia, and Israel, 868-870&nbsp;MHz in Europe, 779-787&nbsp;MHz in China. With data rates varying from around {{nowrap|20 kbit/s}} for sub-GHz bands to around {{nowrap|250 kbit/s}} for the 2.4&nbsp;GHz band.

Zigbee builds on the [[physical layer]] and [[media access control]] defined in the [[IEEE 802.15.4]] standard for low-rate wireless personal area networks (WPANs). The Zigbee specification includes four additional key components: [[network layer]], [[application layer]], ''{{vanchor|Zigbee Device Objects}}'' (ZDOs) and manufacturer-defined application objects. ZDOs are responsible for tasks including keeping track of device roles, managing requests to join a network, and discovering and securing devices.

The Zigbee network layer natively supports [[Star network|star]] and [[Tree network|tree]], and generic [[mesh networking]] topologies. Every network must have one coordinator device. Within star networks, the coordinator must be the central node. Both trees and meshes allow the use of Zigbee [[Routing|routers]] to extend communication at the network layer. Another defining feature of Zigbee is facilities for carrying out secure communications, protecting the establishment and transport of cryptographic keys, ciphering frames, and controlling devices. For this, it builds on the basic security framework defined in IEEE 802.15.4.

== History ==
Zigbee-style self-organizing [[Wireless ad hoc network|ad hoc digital radio networks]] were conceived in the 1990s. The IEEE 802.15.4-2003 Zigbee specification was ratified on December 14, 2004.<ref>{{cite book |title=ZigBee Document 053474r06, Version 1.0: ZigBee Specification |date=2004 |publisher=ZigBee Alliance}}</ref>  The [[Connectivity Standards Alliance]] (formerly Zigbee Alliance) announced availability of Specification 1.0 on June 13, 2005, known as the ''ZigBee 2004 Specification''.

=== Cluster library ===
In September 2006, the ''Zigbee 2006 Specification'' was announced, obsoleting the 2004 stack<ref>{{cite web |url= http://www.ieee802.org/15/pub/TG4.html |title=IEEE 802.15 |author=IEEE 802.15 WPAN Task Group 4 |date=November 27, 2019 |work=IEEE802.org |publisher=[[Institute of Electrical and Electronics Engineers]] |access-date=October 18, 2012}}</ref> The 2006 specification replaces the message and [[key–value pair]] structure used in the 2004 stack with a ''cluster library''. The library is a set of standardised commands, attributes and global artifacts organised under groups known as clusters with names such as Smart Energy, Home Automation, and '''{{vanchor|Zigbee Light Link}}'''.<ref name="nxp">{{Citation | title = ZigBee Cluster Library User Guide | publisher = NXP | url = https://www.nxp.com/docs/en/user-guide/JN-UG-3077.pdf |access-date=January 3, 2020}}.</ref>

In January 2017, Connectivity Standards Alliance renamed the library to ''Dotdot'' and announced it as a new protocol to be represented by an emoticon (''||:'')''.'' They also announced it will now additionally run over other network types using [[Internet Protocol]]<ref>{{Cite web |url= https://www.theregister.co.uk/2017/01/04/zigbee_announces_dotdot_app_layer/ |title=Dotdot. Who's there? Yet another IoT app layer |last=Corfield |first=Gareth |date=January 4, 2017 |work=[[The Register]] |access-date=January 18, 2017}}</ref> and will interconnect with other standards such as [[Thread (network protocol)|Thread]].<ref>{{Cite web |url= http://electronicdesign.com/communications/zigbee-dotdot-dashes-unify-connectivity-stacks |title=ZigBee DotDot Dashes to Unify Connectivity Stacks |work=ElectronicDesign.com |date=January 18, 2017 |access-date=January 18, 2017}}</ref> Since its unveiling, Dotdot has functioned as the default application layer for almost all Zigbee devices.<ref>{{Cite web |date=2022-03-07 |title=Who Made Matter? All you need to know about CSA |url=https://smarthomescene.com/blog/who-made-matter-all-you-need-to-know-about-csa/ |access-date=2024-03-08 |website=SmartHomeScene |language=en-US}}{{self-published inline|date=March 2024}}</ref>

=== Zigbee Pro ===
Zigbee Pro, also known as Zigbee 2007, was finalized in 2007.<ref>{{citation |publisher=EE Times Design |url=http://www.eetimes.com/design/industrial-control/4012932/What-does-ZigBee-Pro-mean-for-your-application- |title=What does ZigBee Pro mean for your application? |author=Jack Shandle |date=2007-11-27 |accessdate=2024-04-25}}</ref> A Zigbee Pro device may join and operate on a legacy Zigbee network and vice versa. Due to differences in routing options, a Zigbee Pro device must become a non-routing Zigbee End Device (ZED) on a legacy Zigbee network, and a legacy Zigbee device must become a ZED on a Zigbee Pro network.<ref>{{cite web |title=ZigBee vs ZigBee Pro—Difference between ZigBee and ZigBee Pro |url= http://www.rfwireless-world.com/Terminology/zigbee-vs-zigbee-PRO.html |work=RFWireless-World.com |date=2012}}</ref> It operates using the 2.4&nbsp;GHz ISM band, and adds a sub-GHz band.<ref>{{cite web |title=ZigBee Pro |url= https://www.zigbee.org/zigbee-for-developers/zigbee-pro/ |website=ZigBee.org |publisher=ZigBee Alliance |access-date=October 2, 2018 |url-status=dead |archive-url=https://web.archive.org/web/20191102191652/https://www.zigbee.org/zigbee-for-developers/zigbee-pro/ |archive-date=November 2, 2019}}</ref>

== Use cases ==
Zigbee protocols are intended for embedded applications requiring [[Low-power electronics|low power consumption]] and tolerating low [[Bit rate|data rates]]. The resulting network will use very little power—individual devices must have a battery life of at least two years to pass certification.<ref>{{cite web|url=http://www.microcontroller.com/news/atmel_microcontrollers_avr.asp|title=New Atmel Microcontrollers Target Low-Power ZigBee |archive-url=https://web.archive.org/web/20061213103105/http://www.microcontroller.com/news/atmel_microcontrollers_avr.asp|archive-date=December 13, 2006}}</ref><ref>{{cite web |url=https://www.eetimes.com/the-importance-of-sleep-mode-power-consumption-in-zigbee-802-15-4-applications/ |title=The Importance of sleep mode power consumption in ZigBee/802.15.4 applications |date=2006-09-11 |access-date=2024-04-25}}</ref>{{dubious|ZigBee certification|date=April 2024}}

Typical application areas include:
* [[Home automation]]<ref>{{cite web | url=http://www.osgi.org/wiki/uploads/CommunityEvent2012/Developing%20Applications%20for%20Your%20Smart%20Home%20with%20QIVICON_Kai%20Kreuzer%20Jochen%20Hiller%20Andreas%20Kraft.pdf|title=Developing Applications for Your Smart Home with QIVICON.|archive-url= https://web.archive.org/web/20140327042857/http://www.osgi.org/wiki/uploads/CommunityEvent2012/Developing%20Applications%20for%20Your%20Smart%20Home%20with%20QIVICON_Kai%20Kreuzer%20Jochen%20Hiller%20Andreas%20Kraft.pdf |archive-date=March 27, 2014|website=osgi.org|date=March 27, 2014}}</ref><ref>{{cite journal |last=Bellido-Outeirino |first=Francisco J.|s2cid=695261| title=Building lighting automation through the integration of DALI with wireless sensor networks |journal=IEEE Transactions on Consumer Electronics |date=February 2012 |volume=58 |issue=1 |pages=47–52 |doi=10.1109/TCE.2012.6170054 |bibcode=2012ITCE...58...47B }}</ref>
* [[Wireless sensor network]]s
* [[Industrial control system]]s
* Embedded sensing<ref>{{cite web |title=What's so good about ZigBee networks? |url= http://www.daintree.net/downloads/whitepapers/mesh-networking.pdf |work=Daintree.net |publisher=[[Daintree Networks]] |access-date=January 19, 2007}}</ref>
* Medical data collection
* Smoke and intruder warning
* [[Building automation]]
* Remote wireless microphone configuration<ref>{{cite web |work=TVTechnology.com |date=January 21, 2011 |access-date=May 17, 2017 |last=Kontney |first=Jack |title=Shure debuts game-changing Axient wireless solution |url= http://www.tvtechnology.com/audio-etc./0193/shure-debuts-game-changing-axient-wireless-solution/262751 |archive-url= https://web.archive.org/web/20171103052220/http://www.tvtechnology.com/audio-etc./0193/shure-debuts-game-changing-axient-wireless-solution/262751 |archive-date=November 3, 2017 |url-status=dead}}</ref>

Zigbee is not for situations with high mobility among nodes. Hence, it is not suitable for tactical ad hoc radio networks in the battlefield, where high data rate and high mobility is present and needed.{{citation needed|date=January 2019}}<ref>{{Cite book|last=Manoj|first=K S|title=Industrial Automation with SCADA: Concepts, Communications and Security|publisher=Notion Press|year=2019|isbn=978-1-68466-829-8|location=Chennai}}</ref>

== Application profiles ==
The first Zigbee application profile, Home Automation, was announced November 2, 2007.{{Citation needed|date=January 2017}} Additional application profiles have since been published.

The '''{{Visible anchor|Zigbee Smart Energy 2.0}}''' specifications define an [[Internet Protocol]]-based [[communication protocol]] to monitor, control, inform, and automate the delivery and use of energy and water. It is an enhancement of the Zigbee Smart Energy version 1 specifications.<ref>{{cite web |url= http://www.zigbee.org/Standards/ZigBeeSmartEnergy/Overview.aspx |title=ZigBee Smart Energy Overview |work=ZigBee.org |publisher=Zigbee Alliance |access-date=October 18, 2012 |url-status=dead |archive-url= https://web.archive.org/web/20120920003633/http://www.zigbee.org/Standards/ZigBeeSmartEnergy/Overview.aspx |archive-date=September 20, 2012}}</ref> It adds services for [[plug-in electric vehicle]] charging, installation, configuration and firmware download, prepay services, user information and messaging, load control, [[demand response]] and common information and application profile interfaces for wired and wireless networks. It is being developed by partners including:
* HomeGrid Forum responsible for marketing and certifying ITU-T [[G.hn]] technology and products
* [[HomePlug Powerline Alliance]]
* International Society of Automotive Engineers [[SAE International]]
* [[IPSO Alliance]]
* SunSpec Alliance
* [[Wi-Fi Alliance]]
Zigbee Smart Energy relies on Zigbee IP, a network layer that routes standard IPv6 traffic over IEEE 802.15.4 using [[6LoWPAN]] header compression.<ref>{{cite web |title=ZigBee IP and 920IP |url=http://www.zigbee.org/zigbee-for-developers/network-specifications/zigbeeip/ |work=ZigBee.org |publisher=Zigbee Alliance |access-date=June 4, 2016 |archive-date=June 11, 2016 |archive-url=https://web.archive.org/web/20160611064419/http://www.zigbee.org/zigbee-for-developers/network-specifications/zigbeeip/ |url-status=dead }}</ref><ref>{{cite web|title=ZigBee IP: Smart Grid, Meet the Internet of Things |url= http://greentechadvocates.com/2013/04/04/zigbee-ip-smart-grid-meet-the-internet-of-things/ |work=GreenTechAdvocates.com |publisher=GreenTech Advocates |access-date=June 4, 2016}}</ref>

In 2009, the Radio Frequency for Consumer Electronics Consortium (RF4CE) and Connectivity Standards Alliance (formerly Zigbee Alliance) agreed to deliver jointly a standard for radio frequency remote controls. Zigbee RF4CE is designed for a broad range of consumer electronics products, such as TVs and set-top boxes. It promised many advantages over existing remote control solutions, including richer communication and increased reliability, enhanced features and flexibility, interoperability, and no line-of-sight barrier.<ref>{{cite web |title=Introducing ZigBee RF4CE |url= http://www.daintree.net/downloads/whitepapers/zigbee-rf4ce-intro.pdf |work=Daintree.net |publisher=[[Daintree Networks]] |access-date=May 4, 2009}}</ref> The Zigbee RF4CE specification uses a subset of Zigbee functionality allowing to run on smaller memory configurations in lower-cost devices, such as remote control of consumer electronics.

== Radio hardware ==
The radio design used by Zigbee has few [[analog circuit|analog]] stages and uses [[digital circuit]]s wherever possible. Products that integrate the radio and microcontroller into a single module are available.<ref>{{cite web |url= http://www.microchip.com/design-centers/wireless-connectivity/embedded-wireless/802-15-4/hardware/zigbit-modules |title=Zigbit Modules MCU Wireless- Microchip Corporation |work=Microchip.com |publisher=Microchip Technologies |access-date=January 14, 2018}}</ref>

The Zigbee qualification process involves a full validation of the requirements of the physical layer. All radios derived from the same validated [[Mask set|semiconductor mask set]] would enjoy the same RF characteristics. Zigbee radios have very tight constraints on power and bandwidth. An uncertified physical layer that malfunctions can increase the power consumption of other devices on a Zigbee network. Thus, radios are tested with guidance given by Clause 6 of the 802.15.4-2006 Standard.<ref>{{Cite web |date=2022-05-13 |title=What is Zigbee - Meshreen |url=https://www.meshreen.com/what-is-zigbee/ |access-date=2024-03-08 |language=zh-TW}}</ref>

This standard specifies operation in the unlicensed 2.4 to 2.4835&nbsp;GHz<ref>{{cite book |editor-last1=Wang |editor-first1=Chonggang |editor-first2=Tao |editor-last2=Jiang |editor-first3=Qian |editor-last3=Zhang |url=https://books.google.com/books?id=uP8MAwAAQBAJ&dq=ZigBee+network+protocols+and+applications+wang&pg=PP1|title=ZigBee network protocols and applications|date = March 12, 2014|publisher = CRC Press|isbn = 9781439816011}}</ref> (worldwide), 902 to 928&nbsp;MHz (Americas and Australia) and 868 to 868.6&nbsp;MHz (Europe) [[ISM band]]s. Sixteen channels are allocated in the 2.4&nbsp;GHz band, spaced 5&nbsp;MHz apart, though using only 2&nbsp;MHz of bandwidth each. The radios use [[direct-sequence spread spectrum]] coding, which is managed by the digital stream into the modulator.  [[Binary phase-shift keying]] (BPSK) is used in the 868 and 915&nbsp;MHz bands, and [[offset quadrature phase-shift keying]] (OQPSK) that transmits two bits per symbol is used in the 2.4&nbsp;GHz band.

The raw, over-the-air data rate is {{nowrap|250 kbit/s}} per [[Communication channel|channel]] in the 2.4&nbsp;GHz band, {{nowrap|40 kbit/s}} per channel in the 915&nbsp;MHz band, and {{nowrap|20 kbit/s}} in the 868&nbsp;MHz band. The actual data throughput will be less than the maximum specified bit rate because of the [[Overhead (computing)|packet overhead]] and processing delays. For indoor applications at 2.4&nbsp;GHz transmission distance is 10–20&nbsp;m, depending on the construction materials, the number of walls to be penetrated and the output power permitted in that geographical location.<ref>{{cite web|last=Egan|first=David|url=http://www.elp.com/articles/powergrid_international/print/volume-17/issue-12/features/zigbee-propagation-for-smart-metering.html?goback=%2Egde_127437_member_195983370|title=ZigBee Propagation for Smart Metering Networks|website=Electric Light & Power|volume=17|issue=12}}</ref> The output power of the radios is generally 0–20&nbsp;[[dBm]] (1–100&nbsp;mW).

== Device types and operating modes ==
There are three classes of Zigbee devices:
* '''Zigbee coordinator (ZC)''': The most capable device, the coordinator forms the root of the network tree and may bridge to other networks. There is precisely one Zigbee coordinator in each network since it is the device that started the network originally (the Zigbee LightLink specification also allows operation without a Zigbee coordinator, making it more usable for off-the-shelf home products). It stores information about the network, including acting as the trust center and repository for security keys.<ref>{{cite web |url=http://sensor-networks.org/index.php?page=1010510536 |first1=Alberto |last1=Bielsa |first2=David |last2=Gascón |title=Triple Security in ZigBee: Link, Network and Application layer Encryptions |work=Sensor-Networks.org |publisher=Wireless Sensor Networks Research Group |date=April 15, 2010 |access-date=October 18, 2012 |archive-date=March 26, 2015 |archive-url=https://web.archive.org/web/20150326170032/http://www.sensor-networks.org/index.php?page=1010510536 |url-status=dead }}</ref><ref>{{cite web |url=http://sensor-networks.org/index.php?page=0903503549 |first=David |last=Gascón |title=Security in 802.15.4 and ZigBee networks |publisher=Wireless Sensor Networks Research Group |work=Sensor-Networks.org |date=February 5, 2009 |access-date=October 18, 2012 |archive-date=May 11, 2012 |archive-url=https://web.archive.org/web/20120511122428/http://www.sensor-networks.org/index.php?page=0903503549 |url-status=dead }}</ref>
* '''Zigbee router (ZR)''': As well as running an application function, router devices can act as intermediate routers, passing data on to other devices. These types of Zigbee products are typically mains-powered so they are always available on the network. Zigbee Router devices are sometimes called Zigbee repeaters or Zigbee range extenders.
* '''Zigbee end device (ZED)''': Contains just enough functionality to talk to the parent node (either the coordinator or a router); it cannot relay data from other devices. This relationship allows the node to be asleep a significant amount of the time thereby giving long battery life. These types of Zigbee device products are often battery-powered. A ZED requires the least amount of memory and thus can be less expensive to manufacture than a ZR or ZC.

The current Zigbee protocols support beacon-enabled and non-beacon-enabled networks.

In non-beacon-enabled networks, an unslotted [[CSMA/CA]] channel access mechanism is used. In this type of network, Zigbee routers typically have their receivers continuously active, requiring additional power.<ref>{{cite web |last=Ergen |first=Sinem Coleri |url=http://pages.cs.wisc.edu/~suman/courses/707/papers/zigbee.pdf |title=ZigBee/IEEE 802.15. 4 Summary |language=en |website= |publisher=UC Berkeley Т. 10. – №. 17. С. 11 |date=2004 |access-date=2021-07-20}}</ref> However, this allows for heterogeneous networks in which some devices receive continuously while others transmit when necessary. The typical example of a heterogeneous network is a [[wireless light switch]]: The Zigbee node at the lamp may constantly receive since it is reliably powered by the mains supply to the lamp, while a battery-powered light switch would remain asleep until the switch is thrown. In this case, the switch wakes up, sends a command to the lamp, receives an acknowledgment, and returns to sleep. In such a network the lamp node will be at least a Zigbee router, if not the Zigbee coordinator; the switch node is typically a Zigbee end device.

In beacon-enabled networks, Zigbee routers transmit periodic beacons to confirm their presence to other network nodes. Nodes may sleep between beacons, thus extending their battery life. Beacon intervals depend on data rate; they may range from 15.36 milliseconds to 251.65824 seconds at {{nowrap|250 kbit/s}}, from 24 milliseconds to 393.216 seconds at {{nowrap|40 kbit/s}} and from 48 milliseconds to 786.432 seconds at {{nowrap|20 kbit/s}}. Long beacon intervals require precise timing, which can be expensive to implement in low-cost products.

In general, the Zigbee protocols minimize the time the radio is on, so as to reduce power use. In beaconing networks, nodes only need to be active while a beacon is being transmitted. In non-beacon-enabled networks, power consumption is decidedly asymmetrical: Some devices are always active while others spend most of their time sleeping.

Except for Smart Energy Profile 2.0, Zigbee devices are required to conform to the IEEE 802.15.4-2003 Low-rate Wireless Personal Area Network (LR-WPAN) standard. The standard specifies the lower [[Protocol layering|protocol layers]]—the [[physical layer]] (PHY), and the [[media access control]] portion of the [[data link layer]]. The basic channel access mode is [[carrier-sense multiple access with collision avoidance]] (CSMA/CA). That is, the nodes communicate in a way somewhat analogous to how humans converse: a node briefly checks to see that other nodes are not talking before it starts. CSMA/CA is not used in three notable exceptions:
* Message acknowledgments.
* Beacons are sent on a fixed-timing schedule.
* Devices in beacon-enabled networks that have low-latency, real-time requirements may also use guaranteed time slots.

=== Network layer ===
The main functions of the [[network layer]] are to ensure correct use of the [[MAC sublayer]] and provide a suitable interface for use by the next upper layer, namely the application layer. The network layer deals with network functions such as connecting, disconnecting, and setting up networks. It can establish a network, allocate addresses, and add and remove devices. This layer makes use of star, mesh and tree topologies.

The data entity of the transport layer creates and manages [[protocol data unit]]s at the direction of the application layer and performs routing according to the current topology. The control entity handles the configuration of new devices and establishes new networks. It can determine whether a neighboring device belongs to the network and discovers new neighbors and routers.

The routing protocol used by the network layer is [[AODV]].<ref>{{cite journal |title=A review of current routing protocols for ad hoc mobile wireless networks |journal= IEEE Personal Communications|publisher=[[Institute of Electrical and Electronics Engineers]] |doi=10.1109/98.760423 |year=1999 |last1=Royer |first1=Elizabeth M. |last2=Chai-Keong Toh |volume=6 |issue=2 |pages=46–55 |bibcode= 1999IPerC...6...46R|citeseerx=10.1.1.11.8637 }}</ref>  To find a destination device, AODV is used to broadcast a route request to all of its neighbors. The neighbors then broadcast the request to their neighbors and onward until the destination is reached. Once the destination is reached, a route reply is sent via unicast transmission following the lowest cost path back to the source. Once the source receives the reply, it updates its routing table with the destination address of the next hop in the path and the associated path cost.

=== Application layer ===
The application layer is the highest-level layer defined by the specification and is the effective interface of the Zigbee system to its end users. It comprises the majority of components added by the Zigbee specification: both ZDO (Zigbee device object) and its management procedures, together with application objects defined by the manufacturer, are considered part of this layer. This layer binds tables, sends messages between bound devices, manages group addresses, reassembles packets, and transports data. It is responsible for providing service to Zigbee device profiles.

=== Main components ===
The ''ZDO'' (Zigbee device object), a protocol in the Zigbee protocol stack, is responsible for overall device management, security keys, and policies. It is responsible for defining the role of a device as either coordinator or end device, as mentioned above, but also for the discovery of new devices on the network and the identification of their offered services. It may then go on to establish secure links with external devices and reply to binding requests accordingly.

The application support sublayer (APS) is the other main standard component of the stack, and as such it offers a well-defined interface and control services. It works as a bridge between the network layer and the other elements of the application layer: it keeps up-to-date [[binding table]]s in the form of a database, which can be used to find appropriate devices depending on the services that are needed and those the different devices offer. As the union between both specified layers, it also routes messages across the layers of the [[protocol stack]].

=== Communication models ===
[[File:ZigBee node structure.png|thumb|Zigbee high-level communication model]]
An application may consist of communicating objects which cooperate to carry out the desired tasks. Tasks will typically be largely local to each device, such as the control of each household appliance. The focus of Zigbee is to distribute work among many different devices which reside within individual Zigbee nodes which in turn form a network.

The objects that form the network communicate using the facilities provided by APS, supervised by ZDO interfaces. Within a single device, up to 240 application objects can exist, numbered in the range 1–240. 0 is reserved for the ZDO data interface and 255 for broadcast; the 241-254 range is not currently in use but may be in the future.

Two services are available for application objects to use (in Zigbee 1.0):
* The ''[[Associative array|key-value pair]] service'' (KVP) is meant for configuration purposes. It enables the description, request and modification of object attributes through a simple interface based on get, set and event primitives, some allowing a request for a response. Configuration uses [[XML]].
* The ''message service'' is designed to offer a general approach to information treatment, avoiding the necessity to adapt application protocols and potential overhead incurred by KVP. It allows arbitrary payloads to be transmitted over APS frames.

Addressing is also part of the application layer. A network node consists of an IEEE 802.15.4-conformant radio [[transceiver]] and one or more device descriptions (collections of attributes that can be polled or set or can be monitored through events). The transceiver is the basis for addressing, and devices within a node are specified by an ''endpoint identifier'' in the range 1 to 240.

=== Communication and device discovery ===
For applications to communicate, the devices that support them must use a common application protocol (types of messages, formats and so on); these sets of conventions are grouped in ''profiles''. Furthermore, binding is decided upon by matching input and output {{clarify span|text=cluster identifiers |reason=First occurrence of this term and context doesn't give any clues what it means|date=December 2021}} unique within the context of a given profile and associated to an incoming or outgoing data flow in a device. Binding tables contain source and destination pairs.

Depending on the available information, device discovery may follow different methods. When the network address is known, the IEEE address can be requested using [[unicast]] communication. When it is not, petitions are [[broadcast]]. End devices will simply respond with the requested address while a network coordinator or a router will also send the addresses of all the devices associated with it.

This {{clarify span|text=extended discovery protocol|reason=First and only mention of discovery protocol in this article|date=January 2022}} permits external devices to find out about devices in a network and the services that they offer, which endpoints can report when queried by the discovering device (which has previously obtained their addresses). Matching services can also be used.

The use of cluster identifiers enforces the binding of complementary entities using the binding tables, which are maintained by Zigbee coordinators, as the table must always be available within a network and coordinators are most likely to have a permanent power supply. Backups, managed by higher-level layers, may be needed by some applications. Binding requires an established communication link; after it exists, whether to add a new node to the network is decided, according to the application and security policies.

Communication can happen right after the association. ''Direct addressing'' uses both radio address and endpoint identifier, whereas indirect addressing uses every relevant field (address, endpoint, cluster, and attribute) and requires that they are sent to the network coordinator, which maintains associations and translates requests for communication. Indirect addressing is particularly useful to keep some devices very simple and minimize their need for storage. Besides these two methods, ''broadcast'' to all endpoints in a device is available, and ''[[Multicast|group addressing]]'' is used to communicate with groups of endpoints belonging to a specified set of devices.

== Security services ==
As one of its defining features, Zigbee provides facilities for carrying out [[secure communication]]s, protecting the establishment and transport of [[cryptographic key]]s and encrypting data. It builds on the basic security framework defined in IEEE 802.15.4.

=== Basic security model ===
The basic mechanism to ensure confidentiality is the adequate protection of all keying material. Keys are the cornerstone of the security architecture; as such their protection is of paramount importance, and keys are never supposed to be transported through an [[insecure channel]]. A momentary exception to this rule occurs during the initial phase of the addition to the network of a previously unconfigured device. Trust must be assumed in the initial installation of the keys, as well as in the processing of security information. The Zigbee network model must take particular care of security considerations, as [[ad hoc network]]s may be physically accessible to external devices. Also, the state of the working environment cannot be predicted.

Within the protocol stack, different network layers are not cryptographically separated, so access policies are needed, and conventional design assumed. The open trust model within a device allows for key sharing, which notably decreases potential cost. Nevertheless, the layer which creates a frame is responsible for its security. As malicious devices may exist, every network layer payload must be ciphered, so unauthorized traffic can be immediately cut off. The exception, again, is the transmission of the network key, which confers a unified security layer to the grid, to a new connecting device.

=== Security architecture ===
The Zigbee security architecture is based on CCM*, which adds encryption- and integrity-only features to [[CCM mode]].<ref name=ieee802154>{{cite web|url=http://standards.ieee.org/getieee802/download/802.15.4-2011.pdf |archive-url=https://web.archive.org/web/20130130080718/http://standards.ieee.org/getieee802/download/802.15.4-2011.pdf |url-status=dead |archive-date=January 30, 2013 |title=IEEE Standard for Local and metropolitan area networks&mdash;Part 15.4: Low-Rate Wireless Personal Area Networks (LR-WPANs) |date=2011-09-05 |publisher=[[IEEE Standards]] |access-date=2015-12-18 |page=229}}</ref> Zigbee uses 128-bit keys to implement its security mechanisms. A key can be associated either to a network, being usable by Zigbee layers and the MAC sublayer, or to a link, acquired through pre-installation, agreement or transport. Establishment of link keys is based on a master key which controls link key correspondence. Ultimately, at least, the initial master key must be obtained through a secure medium (transport or pre-installation), as the security of the whole network depends on it. Link and master keys are only visible to the application layer. Different services use different [[One-way encryption|one-way]] variations of the link key to avoid leaks and security risks.

Key distribution is one of the most important security functions of the network. A secure network will designate one special device, the ''trust center'', which other devices trust for the distribution of security keys. Ideally, devices will have the trust center address and initial master key preloaded; if a momentary vulnerability is allowed, it will be sent as described above. Typical applications without special security needs will use a network key provided by the trust center (through the initially insecure channel) to communicate.

Thus, the trust center maintains both the network key and provides point-to-point security. Devices will only accept communications originating from a key supplied by the trust center, except for the initial master key. The security architecture is distributed among the network layers as follows:
* The MAC sublayer is capable of single-hop reliable communications. As a rule, the security level it uses is specified by the upper layers.
* The network layer manages routing, processing received messages and is capable of broadcasting requests. If available, outgoing frames use the appropriate link key according to the routing. Otherwise, the network key is used.
* The application layer offers key establishment and transport services to both ZDO and applications.

According to the German computer e-magazine ''[[Heise Online]]'', Zigbee Home Automation 1.2 uses fallback keys for encryption negotiation which are known and cannot be changed. This makes the encryption highly vulnerable.<ref>{{cite web |url= http://heise.de/-3010287 |title=Deepsec: ZigBee macht Smart Home zum offenen Haus |language=de |work=Heise Online |publisher=[[Heinz Heise]] |date=November 21, 2015 |first=Daniel A. J. |last= Sokolov |access-date=November 27, 2019}}</ref><ref>{{citation |first=Tobias |last=Zillner |date=August 6, 2015 |title=Zigbee Exploited |url=https://www.blackhat.com/docs/us-15/materials/us-15-Zillner-ZigBee-Exploited-The-Good-The-Bad-And-The-Ugly-wp.pdf}}</ref> The Zigbee 3.0 standard features improved security features and mitigates the aforementioned weakness by giving device manufacturers the option of using a custom installation key that is then shipped together with the device, thereby preventing the network traffic from ever using the fallback key altogether. This ensures that all network traffic is securely encrypted even while pairing the device. In addition, all Zigbee devices need to randomize their network key, no matter which pairing method they use, thereby improving security for older devices. The Zigbee coordinator within the Zigbee network can be set to deny access to devices that do not employ this key randomization, further increasing security. In addition, the Zigbee 3.0 protocol features countermeasures against removing already paired devices from the network with the intention of listening to the key exchange when re-pairing.

== Simulation ==
Network simulators, like [[ns (simulator)|ns-2]], [[OMNeT++]], [[OPNET]], and [[NetSim]] can be used to simulate IEEE 802.15.4 Zigbee networks. These simulators come with open source [[C (programming language)|C]] or [[C++]] [[C++ Standard Library|libraries]] for users to modify. This way users can determine the validity of new algorithms before hardware implementation.

== See also ==
* [[Comparison of 802.15.4 radio modules]]
* [[Comparison of wireless data standards]]
* {{annotated link|Matter (standard)}}
* [[Wireless ad hoc network]]
* [[Z-Wave]]

== References ==
{{Reflist}}

== External links ==
* {{Official website|https://csa-iot.org}}

{{Wireless Sensor Network}}
{{Home automation}}
{{Automation protocols}}

[[Category:IEEE 802]]
[[Category:Home automation]]
[[Category:Building automation]]
[[Category:Personal area networks]]
[[Category:Mesh networking]]
[[Category:Computer-related introductions in 2004]]
[[Category:Wireless communication systems]]