Blecon Network

The fabric the system runs on

Blecon Network authenticates devices, calculates positions in real time and routes data through standard integrations. The platform layer underneath every Blecon asset tracking deployment.

Blecon Network architecture; the platform layer between Tags, Hotspots and Blecon Track

What Blecon Network does

Blecon Network is the platform layer behind every Blecon asset tracking deployment. It authenticates Tags and Hotspots, calculates position from the signals they report, synchronises time across the system and routes the resulting data to Blecon Track or to applications built on the Network API.
 
For a system-wide view of how Tags, Hotspots, Network and Track fit together, see how it works.
 

Position is calculated in the Network, not on the device

Hotspots report the Tag signals they observe; the Network calculates position from those reports. The same architecture handles indoor and outdoor coverage, without GPS or line-of-sight requirements.

Positioning logic lives centrally, so improvements ship without firmware updates at the edge. Time is synchronised across the system, so reports from different Hotspots reconcile against a single reference. That includes the offline records uploaded by logger Tags on return, which slot into the same timeline as live data.

 

Bluetooth positioning architecture: Tags broadcasting signals, Hotspots observing, the Blecon Network calculating position centrally

Identity and security live in the Network, not at the edge

Most BLE tracking systems push security to the gateway: keys to manage, firmware to patch, access to control at every installation. Blecon handles identity, authentication and encryption centrally, nothing security-critical lives on the device.

Cryptographic identity for every device

Cryptographic identity for every device

Every Tag and Hotspot carries a cryptographically signed identity, managed centrally by the Network. Devices are authenticated before any data is accepted. Onboarding and decommissioning happen in one place, across every site.

End to end encryption from tag to cloud

End-to-end encryption between Tag and cloud

Data is encrypted from the Tag to the cloud. Hotspots carry the encrypted payload but can't decrypt it, they're transparent relays. A compromised Hotspot leaks nothing.

Encrypted advertising

Encrypted advertising

Blecon's NeoBeacon format uses AES-128 authenticated encryption and replay protection on every BLE frame. Device identifiers rotate, so signals can't be spoofed or replayed.

No security at the edge

Zero security configuration at the edge

Because security sits between the device and the cloud, there's nothing to configure, patch or protect on the Hotspot. No keys to manage, no certificates to rotate, no security firmware to keep current.

 

Open routing at the platform layer

Network events route out via standard cloud integrations; HTTP webhooks, AWS S3, SQS and EventBridge. Blecon Track consumes these events to drive its operational layer (zones, rules, alerts) and routes its own exception events to WMS, TMS or incident tools from there.

→ See the features

Enterprise deployments can also build directly on the Network API, with different event types routing to different destinations as needed.

Blecon Network event routing showing webhooks, AWS S3, SQS and EventBridge integrations
 

Managed across sites from one place

The Blecon Console manages the Network layer across every site from a single interface; creating networks, registering devices in bulk, configuring routing and monitoring activity. Each Network tunes independently for update frequency, accuracy targets and data collection windows.

 


Blecon Console interface managing networks, devices and routing across multiple sites

Blecon is designed for Builders

Blecon provides secure Hotspot and Network infrastructure services, supporting development with off-the-shelf or custom & embedded Beacons while giving you full control over where your data lands.

Blecon integrates effortlessly with any cloud service. Whether it’s a dedicated data platform, your backend on AWS, Azure, Google Cloud, or any other infrastructure you choose, you remain in full control of your data, infrastructure, and business logic.


Run a pilot in days, not months

An eval kit gets you everything you need to run a pilot. Tags, the platform and Blecon Agent for your devices.