187
1 SP9700 Protocol V1.04 Copyright © 2019 Skypatrol

SP9700 Protocol V1 - Skypatrolequipment.skypatrol.com/Documentacion Tecnica/SP9703/Skypatrol … · 3 Skypatrol SP9700 Protocol V1.04 Change log Date Version Change content 6/22/2017

  • Upload
    others

  • View
    10

  • Download
    0

Embed Size (px)

Citation preview

1

SP9700 Protocol

V1.04

Copyright © 2019 Skypatrol

2

Skypatrol SP9700 Protocol V1.04

Foreword

Skypatrol provides this document to describe the communication protocol format between Skypatrol vehicle

terminal, mobile terminal (Cell phone), and communication control center, with the aim of providing a basis for

engineers to design a uniform control commands for specific products. The Intended audiences of this document

are Skypatrol product development engineers.

In this document, vehicle terminal’s control and connection structure is descried. Data packet and command packet

formats between vehicle terminal, mobile terminal, communication commands and their scopes are clearly

defined. Privilege of different connection approaches (SMS, Cable, and GPRS/Wi-Fi/Bluetooth) and their functions

are clearly defined.

Copyright

This document is confidential, Skypatrol reserves all rights to this document and the information contained herein.

Any individual or organization is strictly prohibited to reproduction, use or disclosure to the third party without

permission. Otherwise, we hold the right to investigate the legal responsibility.

Company address: 3055NW 84th Avenue, Doral, FL 33122

Zip: 510663

Tel: + 1 786 3310000

E-mail: [email protected] Website: www.skypatrol.com

3

Skypatrol SP9700 Protocol V1.04

Change log

Date Version Change content

6/22/2017 V1.01 Initial version

11/9/2017

V1.02

1. Extend GPO command---new added parameter “2” and “3” for GPS enable way.

2. Make explanation for command SVP, DSM and PST.

3. Modify EPM command, only support 4 modes.

4. New added BLD command

13/1/2018

V1.03

1. Extend GPO command

2. SVP, DSM, PST command add description

3. Modify EPM command, only support 4 modes.

4. New added BLD command

5. Add DUO, ATP command

6. Add data type description

7. DOM command square wave parameter add description

28/4/2018

V1.04

1. 1. Extend GPO Command, GSM can be delayed to turn on. 2. Extend PST command, remove useless wake up source and fill in GSM sleep mode. 3. Modify PSS command-PSS0 part, remove the forth parameter 4. Modify event list, remove Bit16&Bit17 from device status 5. Add EPM mode 5 6. Modify PTH factory value to 100;36;10 7. Remove SOS event from the event list

4

Skypatrol SP9700 Protocol V1.04

FOREWORD ......................................................................................................................................................... 1

COPYRIGHT.......................................................................................................................................................... 1

1. GENERAL STRUCTURE ................................................................................................................................. 11

1.1 OVERVIEW ...................................................................................................................................................................................................... 11

1.2 SYSTEM FRAMEWORK .................................................................................................................................................................................... 11

1.3 PRODUCTS KEY FEATURES.............................................................................................................................................................................. 11

1.4 DEVICE HARDWARE TECHNOLOGY INDEX ..................................................................................................................................................... 12

2. CONVENTIONS AND ABBREVIATIONS .......................................................................................................... 15

3. COMMAND ................................................................................................................................................ 16

3.1 COMMAND SYNTAX ....................................................................................................................................................................................... 16

3.2 THE USE OF MULTIPLE COMMAND ................................................................................................................................................................ 18

3.3 COMMAND PERMISSION ............................................................................................................................................................................... 18

3.4 CONNECT TO COMPUTER ............................................................................................................................................................................... 19

3.4.1 Enter OEM permission ................................................................................................................................................. 19

3.4.2 Enter Admin permission .............................................................................................................................................. 19

3.5 ATTRIBUTES AND CONTROL FUNCTION OF THE DEVICE ................................................................................................................................. 19

3.5.1 Function introduction .................................................................................................................................................. 19

3.5.2 Detailed command....................................................................................................................................................... 19

3.5.2.1 Basic information configuration and query parameters of the device .................................................................................. 19

3.5.2.2 Configuration and query of sensor ........................................................................................................................................ 22

3.5.2.3 GSM/WCDMA/CMDA module ............................................................................................................................................... 23

3.5.2.4 Communication module Jamming detection ......................................................................................................................... 28

3.5.2.5 Communication module USSD ............................................................................................................................................... 29

3.5.2.6 GPS module ........................................................................................................................................................................... 29

3.5.2.7 AD/IO Module ........................................................................................................................................................................ 31

3.5.2.8 Device status detection ......................................................................................................................................................... 35

3.5.2.9 Device mileage management ................................................................................................................................................ 40

3.5.2.10 Privacy management ............................................................................................................................................................. 41

3.6 COMMAND PARAMETER SYSTEM FUNCTION .................................................................................................................................................43

3.6.1 Function introduction ................................................................................................................................................. 43

3.6.2 Detailed command ...................................................................................................................................................... 44

3.6.2.1 Reset to factory default (DFP) ................................................................................................................................................ 44

3.6.2.2 Recover the parameter except the specific command to default value (RPD) ...................................................................... 44

3.6.2.3 Set OEM password (OPW) ..................................................................................................................................................... 44

3.6.2.4 Administrator command mask (ACM) ................................................................................................................................... 44

3.6.2.5 User command mask (UCM) .................................................................................................................................................. 45

3.6.2.6 User command white list (CEN) ............................................................................................................................................. 45

3.6.2.7 User command black list (CDS) .............................................................................................................................................. 45

3.6.2.8 User command shortcut (USC) .............................................................................................................................................. 46

3.6.2.9 Load command list profile from computer to device (YSF) .................................................................................................... 46

5

Skypatrol SP9700 Protocol V1.04

3.6.2.10 Save command list profile from device to computer (YGF) ................................................................................................... 47

3.6.2.11 Load device existing command list profile (YCF) .................................................................................................................... 47

3.6.2.12 Generate and export the current profile (CTF) ...................................................................................................................... 47

3.6.2.13 Save current configuration as profile (SCF) ............................................................................................................................ 48

3.6.2.14 Load pre-saved configuration profile (RCF) ........................................................................................................................... 48

3.6.2.15 Query current command list profile (CFN) ............................................................................................................................. 48

3.7 TIME MANAGEMENT FUNCTION COMMAND .................................................................................................................................................49

3.7.1 Function introduction ................................................................................................................................................. 49

3.7.2 Detailed command ...................................................................................................................................................... 49

3.7.2.1 Time zone configuration (TZN) .............................................................................................................................................. 49

3.7.2.2 Daylight saving configuration (DST) ....................................................................................................................................... 49

3.7.2.3 Enable daylight saving feature (STO) ..................................................................................................................................... 50

3.7.2.4 Read the Greenwich Time (TIM) ............................................................................................................................................ 50

3.8 DEVICE POWER MANAGEMENT FUNCTION ....................................................................................................................................................51

3.8.1 Function introduction ................................................................................................................................................. 51

3.8.2 Detailed command ...................................................................................................................................................... 51

3.8.2.1 Power supply event (PTH) ...................................................................................................................................................... 51

3.8.2.2 Power saving mode parameter (PSS) ..................................................................................................................................... 51

3.8.2.3 Enable GSM/GPS/Bluetooth module (GPO) ........................................................................................................................... 54

3.8.2.4 (DSM) Deep Sleep Mode Configuration ................................................................................................................................. 54

3.8.2.5 (PST) Set deep sleep parameter configuration command ..................................................................................................... 55

3.9 DEVICE SYSTEM MAINTENANCE FUNCTION ...................................................................................................................................................57

3.9.1 Function introduction ................................................................................................................................................. 57

3.9.2 Detailed command ...................................................................................................................................................... 57

3.9.2.1 FOTA firmware upgrade file server (OAS) .............................................................................................................................. 57

3.9.2.2 Set FOTA file path (OAP) ........................................................................................................................................................ 58

3.9.2.3 Firmware upgrade command (FWU) ..................................................................................................................................... 58

3.9.2.4 Rollback to previous firmware version (FRC) ......................................................................................................................... 58

3.9.2.5 Abort ongoing upgrade process (FCL) .................................................................................................................................... 58

3.10 SP9700 FUNCTION COMMAND ....................................................................................................................................................................59

3.10.1 Function introduction ............................................................................................................................................. 59

3.10.2 Detailed command ................................................................................................................................................. 59

3.10.2.1 Set up time interval command for regularly visit SP9700 server (SPT) .................................................................................. 59

3.10.2.2 SP9700 server IP/dom

ain name, port setup command (RCS)....................................................................................................................................................... 59

3.10.2.3 SP9700 server access page path setup command (RCP) ........................................................................................................ 60

3.10.2.4 Immediate access SP9700 server command (LCS) ................................................................................................................. 60

3.10.2.5 Enable Bluetooth data upload (BLD) ...................................................................................................................................... 60

3.11 GEO-FENCE FUNCTION ...................................................................................................................................................................................61

3.11.1 Function introduction ............................................................................................................................................. 61

3.11.2 Detailed command ................................................................................................................................................. 61

3.11.2.1 Geo-fence configuration (GFS)............................................................................................................................................... 61

3.11.2.2 Enable Geo-fence (GOF) ........................................................................................................................................................ 64

6

Skypatrol SP9700 Protocol V1.04

3.11.2.3 Geo-fence mask (UFM) .......................................................................................................................................................... 65

3.11.2.4 Delete Geo-fence (GFC) ......................................................................................................................................................... 65

3.11.2.5 (GTT) Query Geo-fence status ............................................................................................................................................... 65

3.12 BLACK AND WHITE LIST PERMISSION MANAGEMENT FUNCTION ................................................................................................................. 66

3.12.1 Function introduction ............................................................................................................................................. 66

3.12.2 Detailed command ................................................................................................................................................. 66

3.12.2.1 Phone number white list (PWL) ............................................................................................................................................. 66

3.12.2.2 Query current position authorization list (QWL) ................................................................................................................... 67

3.12.2.3 SOS authorization list (SWL) .................................................................................................................................................. 67

3.13 DEVICE STATUS, EVENT AND DATA UPLOAD MANAGEMENT FUNCTION ...................................................................................................... 68

3.13.1 Function introduction ............................................................................................................................................. 68

3.13.2 Detailed command ................................................................................................................................................. 68

3.13.2.1 Query device status (STT) ...................................................................................................................................................... 68

3.13.2.2 Reset event report (ETC) ........................................................................................................................................................ 68

3.13.2.3 Query event report status (ETT) ............................................................................................................................................ 69

3.13.2.4 Rename event for user report (ENM) .................................................................................................................................... 69

3.13.2.5 Sub-event mask (ESM) ........................................................................................................................................................... 69

3.13.2.6 Device reaction for the triggered event (EUP) ....................................................................................................................... 70

3.13.2.7 Reset all event executive way (EUC) ...................................................................................................................................... 71

3.13.2.8 Event combination (ERL) ........................................................................................................................................................ 71

3.13.2.9 Report data string mask mode (ADM) ................................................................................................................................... 72

3.13.2.10 Sub-data type mask (SDM) ................................................................................................................................................ 74

3.13.2.11 Toggle configuration profile on condition (FRL) ................................................................................................................ 76

3.13.2.12 Toggle configuration profile on condition (FRS) ................................................................................................................ 77

3.13.2.13 Set triggered event & IO parameter (EOB) ........................................................................................................................ 78

3.13.2.14 Batch upload parameter (BDU) ......................................................................................................................................... 79

3.13.2.15 Dynamic upload mask (DNU) ............................................................................................................................................ 79

3.13.2.16 Fix-distance report and corner turning report (DIS).......................................................................................................... 80

3.13.2.17 Query current position (PRQ)............................................................................................................................................ 80

3.13.2.18 GPRS health detection upload mode (HDU) ..................................................................................................................... 81

3.14 GPRS CHANNEL FUNCTION ........................................................................................................................................................................... 82

3.14.1 Function introduction ............................................................................................................................................. 82

3.14.2 Detailed command ................................................................................................................................................. 82

3.14.2.1 GPRS main server (SVR) ......................................................................................................................................................... 82

3.14.2.2 GPRS backup server (BSV) ...................................................................................................................................................... 83

3.14.2.3 GPRS server report interval mode (SVP) ................................................................................................................................ 83

3.14.2.4 Server shift configuration (SVT) ............................................................................................................................................. 84

3.14.2.5 Heartbeat packet (HBI) .......................................................................................................................................................... 85

3.14.2.6 Offline data report mode (EFM) ............................................................................................................................................ 85

3.14.2.7 UDP response mechanism (ACK) ........................................................................................................................................... 86

3.14.2.8 Power compensation value (PCO) ......................................................................................................................................... 86

3.15 SMS CHANNEL COMMAND ........................................................................................................................................................................... 87

3.15.1 Function introduction ............................................................................................................................................. 87

7

Skypatrol SP9700 Protocol V1.04

3.15.2 Detailed command ................................................................................................................................................. 87

3.15.2.1 Reset SMS counter (SCC) ....................................................................................................................................................... 87

3.15.2.2 Query SMS counter (SCR) ...................................................................................................................................................... 87

3.15.2.3 SMS server report interval mode (SSP) .................................................................................................................................. 87

3.15.2.4 User phone number (UNO) .................................................................................................................................................... 88

3.15.2.5 User password (UPW) ............................................................................................................................................................ 88

3.15.2.6 User report interval (USP) ...................................................................................................................................................... 89

3.15.2.7 SMS server number configuration (SSN) ................................................................................................................................ 90

3.15.2.8 SMS forwarding (SMT) ........................................................................................................................................................... 90

3.15.2.9 Map hyper link (URL) ............................................................................................................................................................. 91

4. STIPULATIONS OF PROTOCOL ..................................................................................................................... 92

4.1 PROTOCOL INTRODUCTION ............................................................................................................................................................................ 92

4.1.1 Information exchange channels between the device and external information is shown as below: ......................... 92

4.1.2 There are two communication protocol encoding formats supported by the device ................................................. 93

4.1.3 There are two types of information interaction between the device and the external device: .................................. 93

4.1.4 Upload data conditions: ............................................................................................................................................... 93

4.2 UPLOAD CONFIGURATION .............................................................................................................................................................................. 94

4.2.1 Server data configuration ............................................................................................................................................ 94

4.2.1.1 Master data configuration ..................................................................................................................................................... 94

4.2.1.2 Sub data configuration .......................................................................................................................................................... 94

4.2.1.3 Dynamic upload ..................................................................................................................................................................... 95

4.2.1.4 Health data upload ................................................................................................................................................................ 95

4.2.1.5 Request immediate upload .................................................................................................................................................... 95

4.3 ASCII ENCODING ............................................................................................................................................................................................96

4.3.1 Protocol format ........................................................................................................................................................... 96

4.3.1.1 ASCII general symbol ............................................................................................................................................................. 96

4.3.1.2 Escape character set .............................................................................................................................................................. 96

4.3.2 Command interactive protocol format ....................................................................................................................... 96

4.3.2.1 USB channel protocol format................................................................................................................................................. 96

4.3.2.2 SMS server, GPRS server, Bluetooth server protocol format ................................................................................................. 96

4.3.2.3 User mobile SMS protocol format ......................................................................................................................................... 97

4.3.3 Data report protocol format ....................................................................................................................................... 98

4.3.3.1 Single packet structure analysis ............................................................................................................................................. 98

4.3.3.2 The batch data packets .......................................................................................................................................................... 99

4.3.3.3 Connect the data packet (heartbeat) ................................................................................................................................... 100

4.3.3.4 SYS sub-packet ..................................................................................................................................................................... 100

4.3.3.5 GPS sub-packet .................................................................................................................................................................... 100

4.3.3.6 GSM sub-packet ................................................................................................................................................................... 101

4.3.3.7 COT sub-packet .................................................................................................................................................................... 102

4.3.3.8 ADC sub-packet .................................................................................................................................................................... 102

4.3.3.9 DTT sub-packet .................................................................................................................................................................... 103

4.3.3.10 ETD sub-packet .................................................................................................................................................................... 104

8

Skypatrol SP9700 Protocol V1.04

4.4 HEX ENCODING ........................................................................................................................................................................................... 105

4.4.1 Protocol format ......................................................................................................................................................... 105

4.4.1.1 HEX General Symbols ........................................................................................................................................................... 105

4.4.1.2 Escape character set ............................................................................................................................................................ 105

4.4.1.3 Data verification .................................................................................................................................................................. 105

4.4.2 Data report format .................................................................................................................................................... 105

4.4.2.1 Single packet structure analysis ........................................................................................................................................... 107

4.4.2.2 The batch data packet ......................................................................................................................................................... 109

4.4.2.3 Connect the data packet (heartbeat packet) ....................................................................................................................... 112

4.4.2.4 SMS forwarding packet ........................................................................................................................................................ 112

4.4.2.5 SYS sub packet ..................................................................................................................................................................... 112

4.4.2.6 GPS sub packet .................................................................................................................................................................... 113

4.4.2.7 GSM sub packet ................................................................................................................................................................... 114

4.4.2.8 COT sub packet .................................................................................................................................................................... 116

4.4.2.9 ADC sub packet .................................................................................................................................................................... 117

4.4.2.10 DTT sub packet .................................................................................................................................................................... 118

4.4.2.11 ETD sub packet .................................................................................................................................................................... 119

4.5 SERIAL PASS-THROUGH DATA PACKET ........................................................................................................................................................ 122

4.5.1 Device to server ........................................................................................................................................................ 122

4.5.2 Server to device ........................................................................................................................................................ 124

4.5.3 Serial port configuration ........................................................................................................................................... 124

4.6 CONNECT DATA PACKET .............................................................................................................................................................................. 124

4.7 DATA PACKING PROCESS ............................................................................................................................................................................. 126

5. DEVICE FUNCTION AND CONFIGURATION ................................................................................................. 127

5.1 EVENT MANAGEMENT AND CONFIGURATION ............................................................................................................................................ 127

5.1.1 Event introduction .................................................................................................................................................... 127

5.1.2 Single event and combination event ......................................................................................................................... 127

5.1.3 Name event ............................................................................................................................................................... 127

5.1.4 Event disable ............................................................................................................................................................. 127

5.1.5 Modes of event action execution ............................................................................................................................. 128

5.1.6 Query and clear for event status .............................................................................................................................. 128

5.2 GEO-FENCE MANAGEMENT AND CONFIGURATION .................................................................................................................................... 129

5.2.1 Geo-fence introduction ............................................................................................................................................. 129

5.2.2 Enable Geo-fence ...................................................................................................................................................... 129

5.2.3 Set Geo-fence ............................................................................................................................................................ 129

5.2.4 Geo-fence information query ................................................................................................................................... 130

5.3 PROFILE MANAGEMENT .............................................................................................................................................................................. 130

5.3.1 Profile command list configuration ........................................................................................................................... 130

5.3.1.1 Introduction ......................................................................................................................................................................... 130

5.3.1.2 Upload and download of profile .......................................................................................................................................... 130

5.3.1.3 Toggle command list profile on conditions .......................................................................................................................... 130

9

Skypatrol SP9700 Protocol V1.04

5.3.1.4 Name and toggle of command list profile ............................................................................................................................ 131

5.3.1.5 Command list profile query ................................................................................................................................................. 131

5.3.1.6 Export the current profile .................................................................................................................................................... 131

5.3.2 Save and load of current configuration .................................................................................................................... 132

5.3.2.1 Introduction ......................................................................................................................................................................... 132

5.3.2.2 Save current configuration as profile ................................................................................................................................... 132

5.3.2.3 Load pre-saved configuration file ........................................................................................................................................ 132

5.3.2.4 Export the current configuration file ................................................................................................................................... 132

5.4 DATA TRANSMIT AND RECEIVE CHANNEL ................................................................................................................................................... 132

5.4.1 Channel introduction ................................................................................................................................................ 132

5.4.2 SMS channel ................................................................................................................................................................ 133

5.4.2.1 Data format of channel support protocol ............................................................................................................................ 133

5.4.2.2 User SMS data report mode ................................................................................................................................................ 133

5.4.2.3 Data upload configuration ................................................................................................................................................... 136

5.4.3 GPRS channel ............................................................................................................................................................ 138

5.4.3.1 Data format of channel support protocol ............................................................................................................................ 138

5.4.3.2 Channel data upload configuration ..................................................................................................................................... 138

5.4.4 Bluetooth channel ..................................................................................................................................................... 140

5.4.4.1 Data format of channel support protocol ............................................................................................................................ 140

5.4.4.2 Channel data upload configuration ..................................................................................................................................... 140

5.5 GSM CONFIGURATION ............................................................................................................................................................................... 142

5.5.1 Balance query ......................................................................................................................................................... 142

5.5.2 SMS counter ............................................................................................................................................................ 142

5.5.3 Other information setting and query ........................................................................................................................ 142

5.6 TIME ZONE, DAYLIGHT SAVING TIME AND PRIVACY CONFIGURATION ........................................................................................................ 143

5.6.1 Time configuration .................................................................................................................................................... 143

5.6.2 Daylight saving configuration .................................................................................................................................... 143

5.6.3 Privacy configuration ................................................................................................................................................ 144

5.7 SP9700 CONFIGURATION .......................................................................................................................................................................... 145

5.8 DEVICE BEHAVIOR AND MILEAGE CONFIGURATION ................................................................................................................................... 146

5.8.1 Static time configuration ........................................................................................................................................... 146

5.8.2 Emergency behavior Configuration........................................................................................................................... 146

5.8.3 Accident configuration .............................................................................................................................................. 146

5.8.4 Parking status configuration ..................................................................................................................................... 147

5.8.5 Speed configuration .................................................................................................................................................. 147

5.8.6 Idle and tow configuration ........................................................................................................................................ 147

5.8.6.1 Idle monitoring configuration .............................................................................................................................................. 147

5.8.6.2 Tow monitoring configuration ............................................................................................................................................. 148

5.8.7 Configuration of engine running time statistics ........................................................................................................ 148

5.8.8 Mileage configuration ............................................................................................................................................... 148

5.9 WHITE LIST CONFIGURATION ...................................................................................................................................................................... 149

1

0

Skypatrol SP9700 Protocol V1.04

5.9.1 Phone number white list configuration for obtaining location ................................................................................. 149

5.9.2 Emergency/SOS accident white list configuration .................................................................................................... 149

5.10 SMS FORWARDING CONFIGURATION ........................................................................................................................................................ 149

5.11 GPS CONFIGURATION ................................................................................................................................................................................. 150

5.11.1 AGPS configuration ............................................................................................................................................... 150

5.11.2 GPS information query and filter configuration ................................................................................................... 150

5.12 ANTI-JAMMING CONFIGURATION............................................................................................................................................................... 150

5.13 I/O PORT CONFIGURATION ......................................................................................................................................................................... 150

5.13.1 Input interface configuration ............................................................................................................................... 150

5.13.1.1 Analog input voltage query and generate event configuration ........................................................................................... 151

5.13.1.2 Digital input status query and configuration ....................................................................................................................... 151

5.13.2 Output port configuration ..................................................................................................................................... 151

5.14 POWER CONFIGURATION ............................................................................................................................................................................ 152

5.14.1 Battery configuration ............................................................................................................................................ 152

5.14.2 Normal mode ........................................................................................................................................................ 152

5.14.3 Power saving mode .............................................................................................................................................. 152

5.14.3.1 GSM module power saving .................................................................................................................................................. 152

5.14.3.2 GPS module power saving ................................................................................................................................................... 152

5.14.3.3 Toggle profile mode power saving ....................................................................................................................................... 153

5.14.4 Deep sleep mode................................................................................................................................................... 153

6. DEVICE TYPICAL APPLICATION CASES ........................................................................................................ 154

7. ACK RESPONSE EXPLANATION .................................................................................................................. 155

7.1 ACK RESPONSE CHART ................................................................................................................................................................................ 155

7.2 ACK RESPONSE FUNCTION EXPLANATION .................................................................................................................................................. 155

7.3 UDP PACKET FORMAT WITH SEQ. VALUE .................................................................................................................................................. 156

7.3.1 HEX packet .............................................................................................................................................................. 156

7.3.2 ASCII packet ............................................................................................................................................................ 156

7.4 ACK RESPONSE PACKET FORMAT ............................................................................................................................................................... 156

7.5 PACKET IDENTIFICATION ID ......................................................................................................................................... 156

7.5.1 Explanation ............................................................................................................................................................. 156

7.5.2 Identification ID add to agreement ........................................................................................................................... 156

7.5.2.1 ASCII format: ........................................................................................................................................................................ 156

7.5.2.2 HEX format:.......................................................................................................................................................................... 157

7.6 CONFIGURATION EXAMPLE ......................................................................................................................................................................... 157

8. APPENDIXES ............................................................................................................................................. 158

8.1 APPENDIX1. DEVICE EVENT ID TABLE ..................................................................................................................................................... 158

8.2 APPENDIX2. DEVICE STATUS INFORMATION TABLE ................................................................................................................................ 160

8.3 APPENDIX3. DEVICE I/O INFORMATION TABLE ...................................................................................................................................... 161

1

1

Skypatrol SP9700 Protocol V1.04

8.4 APPENDIX4. GEO-FENCE INFORMATION TABLE ...................................................................................................................................... 162

8.5 APPENDIX5. OEM COMMAND AND AUTHORIZATION ............................................................................................................................ 163

8.6 APPENDIX6. CONFIGURATION COMMAND AND AUTHORIZATION ......................................................................................................... 165

8.7 APPENDIX7. PUBLIC COMMAND AND AUTHORIZATION ......................................................................................................................... 167

8.8 APPENDIX8. FIRMWARE UPGRADE ......................................................................................................................................................... 169

8.8.1 Remote upgrade (FOAT) ........................................................................................................................................... 169

8.8.2 HyperTerminal update (The firmware version can be same as the device fixed version) ........................................ 171

8.9 APPENDIX9. DEVICE LED INDICATOR STATUS (GSM, GPS, POWER)................................................................................ 173

12

Skypatrol SP9700 Protocol V1.04

1. General structure

1.1 Overview:

SKYPATROL is a multi-purpose with low power consumption and high waterproof GPS tracking product, built in

Bluetooth 4.0, 5500Mah rechargeable lithium battery, 4*CR123A and American Boston battery are available.

1.2 System framework

1.3 Products key features

Double - GPRS server

Double - user, USB, Bluetooth can be configured

Multi-level permission management, including OEM, administrators and users

Flexible configuration for uploading data content, TXT, HEX format can be set, batch processing and off-line data

processing

The upload mode of main & backup GPRS server, SMS server, Bluetooth server and double- users can be configure

flexibly.

Fix-time, fix-distance, fix-angle, event, dynamic upload

Flexible configuration of single event, combination event and the resulting execution of the action

28 polygons and 128 round Geo-fence, which can be related to speed, time and Horizontal Factor

Configuration command files to read, import and toggle to achieve different scenarios using different configuration

Available for local and remote upgrade

Available for configuring request location information of the white list

13

Skypatrol SP9700 Protocol V1.04

Anti-Jamming

Time automatic calibration, time zone & daylight saving time setting

Private-hour management

3-axis acceleration sensor to achieve detection of motion, emergency driving behavior (harsh brake, harsh

acceleration, harsh-turning) and accident (turn- over or collision)

SMS forwarding

AGPS

Over speed detection, mileage statistics, engine running time statistics

Tow, Idle detection

Power detection and low power processing, multilevel power management

Working status and parameter query

Remote configuration

1.4 Device hardware technology index

Specification

Size 96(L)*50(W)*31.5(H)mm

Weight 140g(Contained lithium battery)

160g(Contained dry battery CR123A)

Working

environment

Working

temperature

-40 ~ +60°C (with CR123 Battery)

-10 ~ +50°C (with CR123A Battery)

Humidity 100%RH @ 50°C non-condensing

Water-proof

and dust-proof

IP6-7

Dust-proof: dust tight

Completely prevent the intrusion of foreign objects, and can

completely prevent dust intrusion IP6

Water-proof: Short immersion temperature and pressure, when the

shell is temporarily immersed in 1M deep water

will not cause harmful effectsIP-7

Shock / impact U.S. Military Standards 202G and 810F, SAE J1455

EMC/EMI SAE J1113; FCC–Part 15B

RoHS Compliant (Optional)

USB Micro USB 2.0

CPU ARM Cortex M3

14

Skypatrol SP9700 Protocol V1.04

Bluetooth 4.0

Communication

modes

GPRS/EDGE and TCP/UDP/SMS

Flash Memory 4Mbit (8000 records)

Power

Operating Voltage Battery pack, power adapter

Replaceable Battery CR123 x 4 (6000mAh)

Rechargeable

Battery LI-PO (4000mAh) (Optional)

Battery Recharging Range is 0 to +45ºC

Consumption

Sleep mode 150µA 3.5V

Power saving mode 300µA 3.5V

Active tracking 100mA 3.5V

Communication

Data Support SMS, TCP, UDP

GSM/GPRS Quad

Band

850/900/1800/1900 MHz

3G Dual Band US 850/1900 MHz (Optional)

3G Dual Band EU 900/2100 MHz (Optional)

GSM/GPRS Output

Power

Class 4 (2W) for 850 / 900 bands

Class 1 (1W) for 1800 / 1900 bands

GSM/GPRS Fallback GPRS Class 10

HSPA Data Rate 5.76Mbps UL/7.2Mbps DL (Optional)

SIM Card 1.8/3.3 V

GPS/GLONASS

Location Technology

50 Channel Ublox GPS (with SBAS) GPS L1 C/A Code

SBAS, WAAS, EGNOS, MSAS

Assist GPS Supported

Sensitivity -162 dBm

Accuracy SBAS 2.0m CEP

Detector

Built-in detector

3D sensor

Drive behavior (harsh turning, harsh acceleration,

harsh brake, collision), Motion alarm

Input/output

Status LEDs 3 LED GPS, Cellular, Power

Light Sensor Built-in Detect Detach

Charging Cord Two point charging Cord

Digital Inputs 1 Digital input (Optional)

Connectors, SIM

Card Access

Connector Type 4 Pin

Serial to USB 1 USB (configuration/debug/optional)

Power Switch Device Power ON/Off Switch

GPS Antenna Internal

GSM Antenna Internal

SIM Card Internal (optional)

15

Skypatrol SP9700 Protocol V1.04

2. Conventions and abbreviations

Abbr. Description

PC Personal Computer

GPRS General Packet Radio Service

EDGE Enhanced Data Rate for GSM Evolution

GSM Global System for Mobile Communication

TD-SCDMA Time Division-Synchronous Code Division Multiple Access

WCDMA Wideband Code Division Multiple Access

CDMA2000 Code Division Multiple Access 2000

2G 2-Generation wireless telephone technology

3G 3rd-Generationwireless telephone technology

WLAN Wireless LAN

IP Internet Protocol

UDP User Datagram Protocol

RTP Real-time Transport Protocol

RTCP Real-time Transport Control Protocol

RTSP Real-Time Streaming Protocol

RSVP Resource Reservation Protocol

XML Extensible Markup Language

ADSL Asymmetric Digital Subscriber Line

LAN local area network

DHCP Dynamic Host Configuration Protocol

APN Access Point Network

ASCII American National Standard Code for Information Interchange

HDOP Horizontal Dilution of Precision

VDOP Vertical Dilution of Precision

ICCID Integrate circuit card identity

SMS Short Message Service

UTC Coordinated Universal Time

16

Skypatrol SP9700 Protocol V1.04

3. Command

We can configure the device by configure software, users, SMS server, Bluetooth server and GPRS server. The

configuration software is used by USB line connecting with PC.

3.1 Command syntax

Command system supports single command and multiple commands composite.

A command consists of the following parts: <command word>, <command block number>, <parameter>. <Command

word> is required. <Command block number> and <parameter> are optional. Supporting multiple <parameter> :

Send: <command word> [<command block number>] [;][[[[< parameter 1>] ;< parameter 2>] ;< parameter…>] ;<

parameter n>]

Reply: <command word> [<command block number>] [[[[:< parameter 1>] ;< parameter 2>] ;< parameter…>] ;<

parameter n>]

Command format agreed as follows:

1. Sending <command word>, <parameter> use “;” as a separator.

2. Replying command uses “:” as a separator.

3. Different <parameter> uses”;” as a separator.

4. After <Command word> is followed by <command block number> which means command support group

(optional).

5. After <command word> is directly followed by ";" and without any parameters which means removal of

parameters (optional).

Example:

(Single parameter) UNO; +8601234567891, Set UNO for “+8601234567891”

<command word> Separator Parameter

Send UNO ; +8601234567891

Reply UNO : +8601234567891

(Multiple parameters) SVR; 114.142.154.28; 3032; 0; 0

<command

word>

Sepa

rator

Para.1 Sepa

rator

Para.2 Sepa

rator

Para.3 Sepa

rator

Para.4 Sepa

rator

Para.5

Send SVR ; 114.142.1

54.28

; 3032 ; Null ; 0 ; 0

Reply SVR : 114.142.1

54.28

; 3032 ; Null ; 0 ; 0

17

Skypatrol SP9700 Protocol V1.04

(Query Parameter) BSV

<command

word>

Sepa

rator

Para.1 Sepa

rator

Para.2 Sepa

rator

Para.3 Sepa

rator

Para.4 Sepa

rator

Para.5

Send BSV

Reply BSV : 114.142.1

54.28

; 3032 ; Null ; 0 ; 0

(Delete Parameter) SVR;

<command word> Separator

Send SVR ;

Reply SVR :

(Set parameter groups) EUP28; 4; 1; 1; 1. Set the 28th. Group parameter of EUP for “4; 1; 1; 1”

<comman

d word>

<command

black

number>

Sepa

rator

Para.

1

Separa

tor

Para.3 Sepa

rator

Para.3 Separator Para.4

Send EUP 28 ; 4 ; 1 ; 1 ; 1

Reply EUP 28 : 4 ; 1 ; 1 ; 1

(Query parameter groups) EUP28

<comman

d word>

<command

black

number>

Sepa

rator

Para.

1

Separa

tor

Para.3 Sepa

rator

Para.3 Separator Para.4

Send EUP 28

Reply EUP 28 : 4 ; 1 ; 1 ; 1

18

Skypatrol SP9700 Protocol V1.04

3.2 The use of multiple command

If need multiple configurations, we can use command merge mode. It is to add multiple commands (maximum five

commands, length less than 200 bytes) in the command field, separator "," is used among different commands. The

total length of sending and replying command cannot exceed 512 bytes.

When all commands in field are wrong will return "ERR" information. When part of command error then will respond

to the correct command. Such as send command 1, command 2, command 3 at the same time, if command 2 error,

it will return to command 1 & command3 information. The concrete syntax is as follows:

Send:<command word 1>[<command block number 1>][;][[[[<parameter 1>];<parameter

2>];<parameter…>];<parameter n>][,<command word 2>[<command block number 2>][;][[[[<parameter

1>];<parameter 2>];<parameter…>];<parameter n>]]

Reply:<command word 1>[<command block number 1>][[[[:<parameter 1>];<parameter

2>];<parameter…>];<parameter n>][,<command word 2>[<command block number 2>][;][[[[<parameter

1>];<parameter 2>];<parameter…>];<parameter n>]]

Example:

Multiple-command NAM, UNO;+8601234567891, ADS;1;8

Command

word1

Separato

r

Para. 1

Separato

r

Command word 2 Separato

r

Para. 2

Separato

r

Command word 3

Separato

r

Para. 3(1)

Separato

r

Para.

3(2)

Send NAM , UNO ; +8601234567891 , ADS ; 1 ; 8

Reply NAM : SP9703 , UNO : +8601234567891 , ADS : 1 ; 8

3.3 Command permission

There are three levels of command: OEM permission, administrator permission and user permission.

No. Command authorization Valid command list

1 OEM OEM command list, Configuration command list, Public command list.

2

Admin Configuration command list, Public command list, part of OEM command by ACM

command authorization.

3 User Public command list, part of Admin command by UCM command authorization.

Permission level:

User permission (user mobile phone number)

Admin permission (SMS server, GPRS server,Bluetooth server)

OEM permission (configuration tool)

19

Skypatrol SP9700 Protocol V1.04

3.4 Connect to Computer

3.4.1 Enter OEM permission

To use command in this document to configure and interactive with device:

Connect device with computer via USB cable and run serial communication software.

Input ^O (Ctrl + O) 3 times continuously, you will find “Please Input Password:” on software window.

Input OEM configuration password “0123456789” (default) and press enter, if the Password is correct, you will find

“Cable Port in OEM Mode” on software window.

Use commands in this document to configure the device.

Exit way: Press ESC for 3 times, then it will show “Cable port in NORMAL mode!”

3.4.2 Enter Admin permission

Connect device with computer via USB cable and run serial communication software.

Input ^O (Ctrl +S) 3 times continuously and enter configuration mode, device shows “Cable port in CONFIG mode!”(If

can’t enter, press ESC for 3 times, then try again). After entering admin configuration mode, you can configure

device via those commands.

Exit way: Press ESC for 3 times, then it will show “Cable port in NORMAL mode!”

3.5 Attributes and control function of the device

3.5.1 Function introduction

The function is inherent by device itself, containing device name, device model, hardware and firmware version,

device IMEI No., authorization information, device reset control, device status, USB mode, network status

information, network configuration, jamming detection, USSD, GPS filter, AGPS, AD, IO and other basic functions.

3.5.2 Detailed command

3.5.2.1 Basic information configuration and query parameters of the device

3.5.2.1.1 Query & set device name (NAM)

Command word Format Reply

NAM NAM;SP9703NS

NAM

NAM:SP9703NS

NAM:SP9703NS

Permission OEM command □ Configuration command □ Public

Explanation Format: NAM;<name>

<Name>: 1-15 characters, escape characters are unavailable.

Note: Reset to factory default will not reset device name.

Factory default: Skypatrol device model No., e.g.: SKYPATROL

20

Skypatrol SP9700 Protocol V1.04

3.5.2.1.2 Query licensed status (CHC)

Command word Format Reply

CHC CHC CHC:1

Permission OEM command □ Configuration command □ Public

Explanation This command is to query current licensed status.

Reply format: CHC:<Licensed status>

<Licensed status>:

“1”: Licensed

“0”: No licensed

3.5.2.1.3 Query of firmware version and hardware version (VER)

Command word Format Reply

VER VER VER:V1.02-US;V1.00

Permission OEM command □ Configuration command □ Public

Explanation Format: VER;<hardware version>;<firmware version>

<hardware version>: 8bytes

Note: There is a character that indicates the type of GPS module (Ublox or Telit) followed

hardware version, explanation as below:

-U: GPS module is U-blox

-T: GPS module is Telit.

<Firmware version>: length 5bytes, the second parameter is “V1.00”

Factory default:

3.5.2.1.4 Query device model (PTY)

Command word Format Reply

PTY PTY PTY:SKYPATROL

Permission OEM command □ Configuration command □ Public

Explanation This command is to query current device model name.

Reply format: PTY:SKYPATROL

21

Skypatrol SP9700 Protocol V1.04

3.5.2.1.5 System restart (RST)

Command word Format Reply

RST RST RST

Permission OEM command □ Configuration command Public □

Explanation This command is to reset the device.

Format: RST

Note:

1, Send reset command, the device will reply after receiving the command, and then reset the

device.

2, Send reset command, the device will check whether it is sending SMS, whether it is sending

GPRS data, if SMS or GPRS sending is still in non-idle status after 60 seconds, then forced to reset.

Factory default:

3.5.2.1.6 USB port output mode (UGP)

Command word Format Reply

UGP UGP;3 UGP:3

UGP UGP:3

Permission OEM command Configuration command □ Public □

Explanation This command is to set USB output working mode.

Format: UGP;<Parameter>

<Parameter>: range is “0 to 6”. “0”: Normal

“1”:GSM Trace

“2”:GPS information output “3”Debug, :Print device system information

“4”:Factory mode

“5”:Factory testing mode “6”:Print device reporting data over GPRS

Head Content Coded Example

SER: Heartbeat ASCII

SER: GPRS packet ASCII

SER: Serial link packet Raw

ADM: SMS server message ASCII

US0: User0 message ASCII

US1: User1 message ASCII

PRQ: SMS from User ASCII

Factory default: UGP; 0

22

Skypatrol SP9700 Protocol V1.04

3.5.2.2 Configuration and query of sensor

3.5.2.2.1 Choose device working mode DMD

Command word Format Reply

DMD Setting:

DMD;1

Query:

DMD

Setting reply:

DMD:1

Query reply:

DMD:1

Explanation Function: device in favor of 12 working mode, range from 0 to 11. User can use this

command to configure working mode as need.

Format: DMD;<Working mode>

Parameter explanation:

<Working mode>: range from 0 to 11.

3.5.2.2.2 Query 3 axis acceleration sensor calibration status (CAC)

Command word Format(Query) Reply

CAC CAC CAC:1

Permission OEM command □ Configuration command Public □

Explanation Function: query calibrate status of 3-axis accelerate sensor

Reply format: CAC:<Static calibration status>

<Static calibration status>:

0: No static calibration

1: Static calibration

Note:

Static calibration is performed by the device automatically. Only after the device has achieved a

static calibration then can monitor the accident and emergency behaviors.

3.5.2.2.3 Set the temperature of high/low temperature alarm TMP

Command word Format Reply

TMP Setting:

TMP;100;-10;5

Query:

TMP

Setting reply:

TMP:100;-10;5

Query reply:

TMP:100;-10;5

23

Skypatrol SP9700 Protocol V1.04

Explanation Function: set the temperature of high/low temperature alarm, if the temperature reach or exceed

the preset value and the detection time reach the preset time value, then trigger temperature

alarm and upload data to server.

Format:

TMP;<upper limit alarm temperature>;<lower limit alarm temperature>;<detect time>

Parameter explanation:

<Upper limit temperature value>: high temperature alarm, range is 99.9-999.9, unit is ℃.

<Lower limit temperature alarm>: low temperature alarm, range is -99.9-999.9, unit is ℃.

<Detect time>: if temperature alarm is satisfied and maintaining time reach the preset detect

time, then trigger alarm., unit is second, range is 1 to 65535.

Factory setting:

TMP;100;-100;10

3.5.2.3 GSM/WCDMA/CMDA module

3.5.2.3.1 Query IMEI No. (MEI)

Command word Format Reply

MEI MEI MEI:356496042331108

Permission OEM command □ Configuration command □ Public

Explanation This command is to query GSM IMEI number.

Reply format: MEI:<IMEI number>

<IMEI number>: International Mobile Equipment Identity, the IMEI number is used by

GSM network to identify valid device, it is the electronic serial number consisting of 15 digits.

3.5.2.3.2 Query IMSI number of SIM card (MSI)

Command word Format Reply

MSI MSI MSI: 460079148126057

Permission OEM command □ Configuration command □ Public

Explanation Reply format: MSI:<IMSI number>

<IMSI number>: International Mobile Subscriber Identification Number

An IMSI is usually presented as a 15 digit long number, The first 3 digits are the mobile country

code (MCC), which are followed by the mobile network code (MNC), either 2 digits

(European standard) or 3 digits (North American standard). The length of the MNC depends on

the value of the MCC. The China MCC is define as 460; MNC is China Mobile Number, form by two

digits and for identifying the belonging mobile communicate network of user.

24

Skypatrol SP9700 Protocol V1.04

3.5.2.3.3 Query ICCID number of SIM card (CID)

Command word Format Reply

CID CID CID:89860090191149028638

Permission OEM command □ Configuration command □ Public

Explanation Each SIM is internationally Identifier by its integrated circuit card identifier (ICCID). ICCID is stored

in the SIM cards and is also engraved or printed on the SIM card body during a process called

personalization, total for 20digits, encoding format: XXXXXX 0MFSS YYGXX XXXXX, the first six

digits are operator code.

3.5.2.3.4 Query GSM signal strength (CSQ)

Command word Format Reply

CSQ CSQ CSQ:5

Permission OEM command □ Configuration command □ Public

Explanation Reply format: CSQ:<signal strength level>

<signal strength level>: range is “0 to 5”

3.5.2.3.5 Query GSM network status (REG)

Command word Format Reply

REG REG

REG1

REG:1

REG1:46000;2

Permission OEM command □ Configuration command □ Public

Explanation This command is to query GSM registration status.

Reply format: REG:<REG status>

Parameter definition:

REG1L<Operator code>; <system> the PLMN number and system of currently connect network,

specific please refer to PLM command. It will reply REG:;0 if not search the registered network.

<REG status>:

0:Fail to register, ME(Mobile Equipment) is not trying to register to any mobile network

1:Register successfully

2:Fail to register, but MS(Mobile Station) is trying to register to mobile network

3:Register intention is being rejected by mobile network

4:Unknown reason

5:Register to roaming network successfully

25

Skypatrol SP9700 Protocol V1.04

3.5.2.3.6 Query model and version of GSM module (GVR)

Command word Format Reply

GVR GVR GVR:AGS2-W,REVISION 00.020

Permission OEM command □ Configuration command □ Public

Explanation Format: GVR:AGS2-W,REVISION 00.020

Model: AGS2-W

Version: REVISION 00.020

3.5.2.3.7 Query GSM information (GSM)

Command word Format Reply

GSM GSM GSM:1;4;460;0;2503;962C;-55;460;0;2731;40F4;-85;460;0;2731;BB42;-

105;460;0;2731;436E;-64

Permission OEM command □ Configuration command □ Public

Explanation Refer to GSM data in “TXT format”.

3.5.2.3.8 SMS service center number (SCN)

Command word Format Reply

SCN SCN;+8613800200500 SCN:+8613800200500

SCN SCN:+8613800200500

Permission OEM command □ Configuration command Public □

Explanation This command is to change SMS center number.

Format: SCN;<Number>

20 digits, must with “+country code” in front of phone number, default no need to set this

number. Change to another SIM card device will automatically read renew SCN setting.

Note: “+” is a must for country code.

Factory default: SCN:

3.5.2.3.9 Query SIM card number (SIM)

Command word Format Reply

SIM SIM SIM:1471482111

Permission OEM command □ Configuration command □ Public

Explanation This command is to query SIM card number of device.

Format: SIM;<device SIM card number>

The number must be supported by SIM card, otherwise the returned value will be null.

26

Skypatrol SP9700 Protocol V1.04

3.5.2.3.10 Auto-unlock PIN of SIM card (PIN)

Command word Format Reply

Setting:

PIN;1234

Setting reply:

PIN;1234

Query:

PIN

Query reply:

PIN;1234

Permission OEM command □ Configuration command Public □

Explanation This command is to set PIN number of SIM card to automatically unlock SIM card.

Format:

PIN; <password>

<Password>:4 to 8 digits.

Factory default: PIN; 1234

3.5.2.3.11 SIM card balance notification (BLS)

Command word Format Reply

BLS Set SIM balance status regularly check:

BLS;*125#;1W;10

Cancel balance query:

BLS

Setting reply:

BLS:*125#;1W;10

Cancel reply:

BLS:;0M;0

Query setting:

BLS;

Query reply: BLS:*125#;1W;0

Immediately request to upload balance

information by SMS way:

BLS;*125#

Reply:

BLS:*125#

Permission OEM command □ Configuration command □ Public

Explanation This command is to set periodical balance notification and low balance event.

Format: BLS;<USSD command>;<Interval>;<Balance threshold>

<USSD command>: Varied with different carriers, maximum 15 bytes.

<Interval>: range “0D to 366D”, “0W to 48W”, “0M to 12M”. D=day, W=week, M=month

<Balance threshold>: range “0 to 65535”, “0” represent device will report current balance event

periodically according to <Interval>.

Note: If <Interval> and <Balance threshold> are missing then indicates the immediate report for

balance information.

Factory default: BLS:; 0D;0

27

Skypatrol SP9700 Protocol V1.04

3.5.2.3.12 Set APN (APN)

Command word Format Reply

APN Setting:

APN;cmnet;usr;pw

APN;cmnet

Setting reply:

APN:cmnet;usr;pw

APN: cmnet;;

Query:

APN

Query reply:

APN:cmnet;;

Permission OEM command □ Configuration command Public □

Explanation This command is a must for GPRS connectivity.

Format:

①APN; <APN>;<user name;<password> ②APN;<APN>

<APN>: 1 to 64 characters

<user name>: 0 to 32 characters

<password>: 0 to 32 characters

②APN;<APN>

This command means that only set APN.

No SIM card is not allowed to use this command configuration APN

Note: Device already save some APN information, when the SIM card is recognized, it will fulfill

APN automatically. Use this command can only be configured with the SIM service provider APN,

the configuration of other service providers APN will lead to GPRS connection error.

Factory default: Null

3.5.2.3.13 APN information list (APL)

Command word Format Reply

APL APL;46000;cmnet;user;pw APL:46000;cmnet;user;pw

APL;46000 APL:46000;cmnet;user;pw

Permission OEM command Configuration command □ Public □

Explanation Automatically identify the APN command, when stored APN information from SIM card, the devic e according to MNC, MCC to get APN information.

Format: APL;<SIM card operator code>;<APN>;<user name>;<pw> <SIM card operator code>: Composed by MCC&MNC code, MCC code before MNC code MCC: 3 digits for country code, MNC:2 -3 digits for operator code <APN>: APN code, maximum 64 bytes <user name>: User name for APN, maximum 32 bytes <pw>: password for APN, maximum 32 bytes APL maximum storage is 4K bytes, if more than 4K, it will delete the first stored 20 messages.

Factory default: Chinese APN

28

Skypatrol SP9700 Protocol V1.04

3.5.2.3.14 Send AT command to GSM module (GAT)

Command word Format Reply

GAT Send AT command:

GAT;<AT command>

Reply:

GSM disable: GSM is off

GSN normal then print AT execute condition under

UGP;1

Permission OEM command Configuration command □ Public □

Explanation Format: GAT;<AT command>

<AT command>;

Specify AT mode here, tracker will print log accordingly if command is correct, otherwise will

return “GSM is off”.

Note: One AT command can only be executed at a time.

3.5.2.3.15 Enable AT mode of GSM module (GAM)

Command word Format Reply

GAM Enter AT mode:

GAM;1

Reply:

Success: GAM:1 Fail: GAM:0

Exit AT mode:

GAM; 0

Reply:

GAM: 0

Permission OEM command Configuration command □ Public □

Explanation 1. Enter AT mode:GAM;1

Suspend system operation related to GSM

2. Exit AT mode: GAM;0

Recover system operation related to GSM

3.5.2.4 Communication module Jamming detection

3.5.2.4.1 Toggle GSM anti-jamming feature (JAM)

Command word Format Reply

JAM JAM;0 JAM:0

JAM JAM:0

Permission OEM command □ Configuration command □ Public

29

Skypatrol SP9700 Protocol V1.04

Explanation This command is to toggle anti jamming feature.

Format: JAM;<Mode>

<Mode>

0: Disable anti-jamming

1: Enable anti-jamming

3.5.2.4.2 GSM Anti-Jamming configuration (JMP)

Command word Format Reply

JMP JMP;30;10;120 JMP:30;10;120

JMP JMP:30;10;120

Permission OEM command Configuration command □ Public □

Explanation This command is to set GSM jamming condition.

Format: JMP;<RSSI threshold>;<Enter jamming Counter>;<Leave jamming Counter>

<RSSI threshold>: GSM signal strength threshold to decide being jammed or not, range “20 to 50”.

When it’s in the no signal area, no jammer enable but jammer enter and leave wrong, need turn

up the parameters, default value is 30.

Note: If use Sierra HL6528, HL8548, this parameter is invalid, <RSSI threshold> is decided by

module.

<Enter jamming counter>: device will compare current RSSI with <RSSI threshold>, if bigger than

<RSSI threshold>, counter will accumulate 1, otherwise not. When the counter value over <enter

jamming counter>, device considers itself being jammed, range “5 to 600”.

<Leave jamming counter>: device will compare current RSSI with <RSSI threshold>, if smaller than

<RSSI threshold>, counter will accumulate 1, otherwise not. When the counter value over <Leave

jamming counter>, device considers itself not being jammed, range is “30 to 250”.

Factory default: JMP:30;15;120

3.5.2.5 Communication module USSD

3.5.2.5.1 Define separator in USSD (TSP)

Command word Format Reply

TSP TSP;0 TSP:0

TSP TSP:0

Permission OEM command □ Configuration command □ Public

30

Skypatrol SP9700 Protocol V1.04

Explanation This command is to define Thousand separators in USSD balance and check message for correct

balance display.

Format: TSP;<Mode>

<Mode>: Range is 0-3.

“0”: No thousand separator

“1”: Thousand separator is COMMA

“2”: Thousand separator is PERIOD

“3”: Thousand separator is SPACE

Factory default: TSP;0

3.5.2.6 GPS module

3.5.2.6.1 Discard GPS position by HDOP (HOP)

Command word Format Reply

HOP HOP;0

HOP;1;3

HOP:0

HOP:1;3.00

HOP HOP:1;3.00

Permission OEM command Configuration command □ Public □

Explanation This command is to set HDOP threshold to discard inaccurate GPS positions.

Format: HOP;<Para1>;<Para2>

<Para1>:

“0” disable HDOP filter, only need parameter 1

“1” enable HDOP filter, need to configure parameter 2.

<Para2>:

HDOP threshold, GPS position HDOP bigger than this value will be discarded, range is 2 – 10.

Factory default: HOP:0

3.5.2.6.2 A-GPS configuration (AGS)

Command word Format Reply

AGS AGS;[email protected];Moouaq AGS:[email protected];Moouaq

AGS AGS:[email protected];Moouaq

Permission OEM command Configuration command □ Public □

Explanation This command is to set username and password to connect with AGPS server.

Format: AGS; <User name>; <password>

<Username>: 48 bytes maximum.

<Password>: 12 bytes maximum

Factory default: AGS:[email protected];Moouaq

31

Skypatrol SP9700 Protocol V1.04

3.5.2.6.3 Set assist-GPS (AGP)

Command word Format Reply

AGP AGP;1 AGP:1

AGP AGP:1

Permission OEM command □ Configuration command Public □

Explanation This command is to toggle Assisted GPS feature.

Format: AGP;<mode>

<mode>:

“0”: disable A-GPS

“1”:enable A-GPS

Factory default: AGP;1

3.5.2.6.4 Query GPS information (GPS)

Command word Format Reply

GPS GPS GPS:A;7;N23.164415;E113.428702;0;0;30;4.84;4.71

Permission OEM command □ Configuration command □ Public

Explanation This command is to query GPS information.

Reply format: GPS:<information>

<Information>: Please refer to “TXT” of GPS data.

3.5.2.6.5 Query GPS initial fixed time (GFT)

Command word Format Reply

GFT GFT GFT:35

Permission OEM command □ Configuration command □ Public

Explanation “35”: Signal acquisition time from the device to boot to GPS first positioning time.

Range is “1 to 65535”, unit is “second”

3.5.2.7 AD/IO Module

3.5.2.7.1 Digital input configuration (DIM)

Command word Format Reply

DIM DIM;0 DIM:0

DIM DIM:0

Permission OEM command Configuration command □ Public □

32

Skypatrol SP9700 Protocol V1.04

Explanation Function: set working mode of digital input port IN1.

Format: DIM;<Mode>

<Mode>: Range is “0 to 3”.

0: Digital Input high and low level detection mode

1: ACC detection mode

2: Engine detection mode

3: SOS detection mode

Note: Only in the case of OUT1 is set to digital input, can DIM defined pattern be enabling.

Default: DIM:0

3.5.2.7.2 Set input/output mode (OTI)

Command word Format Reply

OTI OTI;1 OTI;1

OTI OTI;1

Permission OEM command Configuration command □ Public □

Explanation This command is to set input/output mode..

Format: OTI;<Mode Parameter>

Parameter definition:

<Mode parameter>: range from 0 to 1.

“0”:IO1 set as output mode

“1”:IO1 set as input mode

Factory default: OTI; 1

3.5.2.7.3 Set communicate parameter of extending serial port EPS

Common word Format Reply

EPS Setting:

EPS; 4; 0; 1; 0

Query:

EPS

Setting reply:

EPS: 4; 0; 1; 0

Query reply:

EPS:4;0;1;0

33

Skypatrol SP9700 Protocol V1.04

Explanation Function: set extending port communicate parameter

Format:

EPS;<baud rate index>;<data bit>;<stop bit>;<verification bit>

Parameter definition as follow shows:

Factory setting: EPS:4;0;1;0

Set extending port working mode EPM

Command word Format Reply

EPM Setting: Setting reply: EPM;1

Query: EPM

EPM:1 Query reply: EPM:1

Explanation Function: set extending port working mode Format: EPM;<Mode>

<mode>: extending port working mode 0: disable serial port 1: pass-through mode communicate with peripheral device, data packet interval is defined by hardware and can’t be set 2: pass-through mode communicate with peripheral device, while the data packet interval can be set 3: GARMIN protocol output 4: GPS data input port, this port input data can replace GPS fixed position data. 5: Configuration and debug mode<this mode only used for debugging mode>

Notice: please refer to command EPS for extending port parameter

Factory setting: EPM; 0

Baud rate index Data bit Stop bit Verification

bit

Baud rate Index

Baud rate 0: 8 bit mode 0:0.5 stop bit 0:not detect

1: 9 bit mode 1:1 stop bit 1:even-parity

0 600 2:1.5stop bit 2:odd parity

1 1200 3:2 stop bit

2 2400

3 4800

4 9600

5 14400

6 19200

7 38400

8 56000

9 57600

10 115200

34

Skypatrol SP9700 Protocol V1.04

3.5.2.7.4 Query Analogy-Digital Converter (ADC)

Command word Format Reply

ADC ADC ADC:3.8;3.7;12.0;

Permission OEM command □ Configuration command □ Public

Explanation Function: query ADC translate result

Reply format: ADC:<External battery voltage>;<battery voltage>;<device temperature>

<External power>:Unit is “V”

<Battery voltage>: unit is “V”

<Device temperature>: unit is ℃

3.5.2.7.5 Set parameter of digital output port (DOM)

Command word Format Reply

DOM DOM;2;0 DOM:2;0

DOM;2 DOM:2;0

Explanation Function: Configure output parameter of DO port in specified mode

Format: DOM[id];<mode>;<para1>;<para2>;<para3>;<para4>;<para5>

Parameter Definition:

[id]: DO output port, range: “0~”

“0”: Reserved

“1”: set “OUT 2” number as output port

<mode>: range: 2~7 (mode0/mode1 without parameter configuration), one output port could

have eight kinds of mode to output.

<para1>,<para2>,<para3>,<para4>,<para5>: set work mode and parameter of DO port, some

mode is without parameters, para numbers are different due to different mode

Mode definition 0: output low level, no need set parameters (no parameters)

Mode definition1: output high level, no need set parameters (no parameters)

Mode definition2: output rising edge, para1 is used to set low level duration, unit: ms, the

waveform can be set as follows: (1 parameter)

Mode definition3: output falling edge, prar1 is used to set high level duration, unit: ms, the

waveform can be set as follows: (1 parameter)

Mode definition4: output square wave, unit:ms, (5 parameters)

<para1>: Used to set high level time(duration 1), must be 10ms times.

<para2>: Used to set low level time(duration 2), must be 10ms times

<para3>:Used to set the number of square wave output, if set to 0 for the continuous output

<para4>: is start waveform of square wave (0 is low level, 1 is high level)

<para5> is over waveform of square wave (0 is low level, 1 is high level), unit: ms(5 parameters)

35

Skypatrol SP9700 Protocol V1.04

Mode definition5: output square wave, parameter is same as mode4 (5 parameters)

Mode definition6: output square wave, parameter is same as mode4(5 parameters)

Mode definition7: output square wave, parameter is same as mode4(5 parameters)

Notice: para1,para2 range is 0~99999999, para3 range is 0~65535

Default : all parameters are 0, example 0 port parameter is as below:

DOM:2;0

DOM:3;0

DOM:4;0;0;0;0;0

DOM:5;0;0;0;0;0

DOM:6;0;0;0;0;0

DOM:7;0;0;0;0;0

3.5.2.7.6 Output port speed condition (DOP)

Command word Format Reply

DOP DOP;40;40 DOP:40;40

DOP DOP:40;40

Permission OEM command Configuration command □ Public □

Explanation This command is to set DO output correlation speed.

Format: DOP;<Out1>;<Out2>;<Out3>

<OUT1>: OUT1 can update the output only when speed lower than OUT1 speed; (IO1 can normal

output when set as output mode, please refer to OTI)

<OUT2>:OUT2 can update the output only when speed lower than OUT2 speed.

Note:

Speed take from GPS location, it can update output when GPS invalid.

Factory default: DOP;40;40

3.5.2.7.7 Digital output specify wave shape (DOO)

Command word Format Reply

DOO DOO1;0 DOO1;0

Permission OEM command □ Configuration command □ Public

Explanation This command is to set specific mode when output is being activated.

Format: DOO;<Mode>

[id]: DO output port, range Is from 0-1.

“0”:set “OUT1” output port

“1”: set “OUT2” output port <Mode>: Set output mode, range is “0 to 7”(refer to DOM command)

Factory default:

36

Skypatrol SP9700 Protocol V1.04

3.5.2.8 Device status detection

3.5.2.8.1 Parking configuration (STP)

Command word Format Reply

STP STP;1800 STP:1800

Permission OEM command Configuration command □ Public □

Explanation This command is to set threshold duration from non-parking status to parking status.

Format: STP;<Duration time>

<Duration time>: Still duration time, range is “1 to 1800”, unit is “second”.

If device keeps still over this threshold value, vehicle will be considered as parking.

Factory default: STP;600

3.5.2.8.2 Toggle Tow detection feature (TOW)

Command word Format Reply

TOW TOW;0 TOW:0

TOW TOW:0

Permission OEM command □ Configuration command □ Public

Explanation This command is to toggle tow event detection.

Format: TOW;<Mode>

<Mode>

0: Disable Tow detection

1: Enable Tow detection

3.5.2.8.3 Harsh behavior configuration (BMS)

Command word Format Reply

BMS BMS;4;10;40 BMS:4;10;40

BMS BMS:4;10;40

Permission OEM command Configuration command □ Public □

37

Skypatrol SP9700 Protocol V1.04

Explanation Function: set the moving detection threshold of 3-axis accelerate sensor as 30mg, keep still for 10

sec, harsh brake judge threshold as 450 mg. if the accelerate wave cause by device moving is over

30mg then means device in moving status; if the accelerate wave smaller/ equal to 30mg and last

over 10 sec then means device in still status. The emergency driving behavior judgment is in that if

the accelerate value of judging axis is over setting threshold.

Format: BMS; <still time-Para>;<harsh behavior-Para>

<moving-Para>

Device motion status acceleration magnitude threshold, range is “1 to 200”, unit is 0.01g,

default:4

<still time-Para>

Device status from dynamic to static detection time , range is “0 to 255”, unit is second,

default:10

<harsh behavior-Para>:

Device harsh brake acceleration threshold, range is “1 to 200”, unit is 0.01g, default: 40

Factory default: BMS:4;10;40.

3.5.2.8.4 Enable driving behavior detection (BMO)

Command word Format Reply

BMO; 1; 1 BMO; 1; 1

BMO BMO; 1;1

Permission

Explanation This command is to toggle harsh event, motion event detection.

Format:

BMO; <Moving-enable>;<harsh behavior-enable>

<moving-enable>:

“0”: disable acceleration sensor dynamic and static detection

“1”: enable acceleration sensor dynamic and static detection.

<Harsh behavior-enable>:

“0”: disable acceleration sensor harsh brake detection.

“1”: enable acceleration sensor harsh brake detection.

Factory setting: BMO;1 ;1

38

Skypatrol SP9700 Protocol V1.04

3.5.2.8.5 Enable accident detection (AMO)

Command word Format Reply

AMO AMO;1;1 AMO:1;1

AMO AMO:1;1

Permission OEM command □ Configuration command Public □

Explanation This command is to toggle accident & turn over event.

Format: AMO; <collision enable>;<turn-over enable>

<collision_ enable>

“0”: Disable acceleration sensor collision detection.

“1”: Enable acceleration sensor collision detection.

Note: Acceleration sensor will judge front/rear collision by itself, side-collision will be considered

rear-collision.

<turn-over enable>

“0”: Disable acceleration sensor turn-over detection.

“1”: Enable acceleration sensor turn-over detection.

Factory default: AMO;1;1

3.5.2.8.6 Over speed mode configure (SPO)

Command word Format Reply

SPO SPO;0 SPO:0

SPO SPO:0

Permission OEM command □ Configuration command Public □

Explanation This command is to set over speed mode.

Format: SPO;<Mode>

<Mode>:

0: disable over speed event report

1: speed enters the range of <Max><Mini>

2: speed leaves the range of <Max><Mini>

3: speed enters or leaves the range of <Max><Mini>

39

Skypatrol SP9700 Protocol V1.04

Note:

(1) SPO;1: When ESM "event status sign 0" mask is valid, the mode can be set, otherwise can’t.

(2) SPO;2: When ESM "event status sign 1" mask is valid, the mode can be set, otherwise can’t.

(3) SPO;3: When ESM "event status sign 0" and "event status sign 1" mask are both valid, the

mode can be set, otherwise can’t.

Factory default: SPO:0

3.5.2.8.7 Over speed configuration (SPS)

Command word Format Reply

SPS SPS;100;1;10 SPS:100;1;10

SPS SPS:100;1;10

Permission OEM command □ Configuration command Public □

Explanation This command is to set speed range for over speed event.

Format: SPS;<Max>;<Mini>;<Duration time>

<Max>:Upper speed value, range is from”0 to 255”, unit is “km/h”

<Mini>:Lower speed value, range is from “0 to 255”, unit is “km/h”

<Duration time>: If current speed matches with over speed condition and last for a period, over

speed event report will be triggered. Range is “1 to 65535”, unit is “second”

Note: <max speed> must be more than<min speed>.

Factory default: SPS:100;0;10

3.5.2.8.8 Enable idle detection (ILO)

Command word Format Reply

ILO ILO;1 ILO:1

ILO ILO:1

Permission OEM command □ Configuration command Public □

Explanation This command is to toggle idle status detection.

Format: ILO;<Mode>

<Mode>:

“0”:disable

“1”:enable

Factory default: ILO; 0

40

Skypatrol SP9700 Protocol V1.04

3.5.2.8.9 Idle status configuration (ILS)

Command word Format Reply

ILS ILS;100;100 ILS:100;100

ILS ILS:100;100

Permission OEM command □ Configuration command Public □

Explanation This command is to set the detection time to enter & exit the idle status. Format: ILS;<Still time>;<Move time>

<Still time>: range is “1 to 65535”, unit is “second”, if device keeps stop for this long (IG on), will

be considered as idle.

<Move time>: range is “1 to 65535”, unit is “second”, if device moving again or IG off duration

over this value will be considered as Quit idle.

Factory default: ILS;100;100

3.5.2.8.10 Enable engine hour counter (ETO)

Command word Format Reply

ETO ETO;1 ETO:1

ETO ETO:1

Permission OEM command □ Configuration command Public □

Explanation This command is to toggle engine hour counter.

Format: ETO;<Mode>

<Mode>:

“0”: Disable

“1”: Enable

Factory default: ETO;0

3.5.2.8.11 Set engine hour counter (ETS)

Command word Format Reply

ETS ETS;88888:0:0 ETS:88888:0:0

ETS ETS:88888:0:0

Permission OEM command □ Configuration command Public □

41

Skypatrol SP9700 Protocol V1.04

Explanation This command is to set initial engine hour, device will accumulate based on this value.

Format: ETS;<Hour>;<Minute>;<Second>;<IO Port>

<Hour>: 5 digits maximum

<Minute>: 2 digits maximum

<Second>: 2 digits maximum

Range is “0:0:0 to 99999:0:0”, in first engine on, upload data regularly; and when engine off,

the<counter> of upload information will be accumulated on basis of this value.

<IO port>

“0”: set DI3 input port, this valid only valid when “AD1/IN1” set as digital input

“1”: set DI4 input port, the value only valid when “AD2/IN4” set as digital input.

“2”: configure ACC port as engine input port

3.5.2.8.12 Query engine running time (ERT)

Command word Format Reply

ERT ERT ERT:88888:00:00

Permission OEM command □ Configuration command □ Public

Explanation This command is to query engine accumulated running time.

Reply format: ERT;<Hour>:<Minute>:<Second>

<Hour>: 5 digits maximum

<Minute>: 2 digits maximum

<Second>:2 digits maximum

Range is “0:0:0 to 99999:00:00”

Factory default:

3.5.2.8.13 Accident detection configuration (AMS)

Command word Format Reply

AMS AMS;150;65 AMS:150;65

AMS AMS:150;65

Permission OEM command Configuration command □ Public □

Explanation Format: AMS;<collision threshold >;<turn-over threshold>

<collision threshold>: Crash (collision) acceleration magnitude threshold, range is “0 to 200”, unit is 0.01g, default:150 Note: Acceleration sensor itself will judge front or rear collision, side collision will be considered as rear.

<turn-over threshold>: Turn over acceleration magnitude threshold, range is “0 to 200”, unit is 0.01g, default: 90 Factory default: AMS:150;65

42

Skypatrol SP9700 Protocol V1.04

3.5.2.9 Device mileage management

3.5.2.9.1 Enable odometer counter (MGE)

Command word Format Reply

MGE MGE;1 MGE:1

MGE MGE:1

Permission OEM command □ Configuration command Public □

Explanation This command is to toggle mileage feature.

Format: MGE;<mode>

<mode>

“0”: Disable

“1”: Enable

Factory default: MGE:0

3.5.2.9.2 Odometer initial mileage (MGS)

Command word Format Reply

MGS MGS;1000 MGS:1000

MGS MGS:1000

Permission OEM command □ Configuration command Public □

Explanation This command is to set initial value of mileage, device will accumulate mileage based on this value

and report to server.

Format: MGS;<data>

<data>: Decimal, range is “0 to 4294967295”, unit is “meter”

3.5.2.9.3 Query mileage (MGR)

Command word Format Reply

MGR MGR MGR:1000

Permission OEM command □ Configuration command □ Public

Explanation This command is to query the current odometer mileage accumulation value.

Reply format: MGR;<parameter>

<parameter>: range is “0-4294967295”, unit is “meter”, Decimal

3.5.2.10 Privacy management

3.5.2.10.1 Private hour mode configuration (PVM)

Command word Format Reply

PVM PVM;3;7C;00:00-08:30;11:30-13:30;17:30-23:59 PVM:3;7C;00:00-08:30;11:30-13:30;17:30-23:59

PVM PVM:3;7C;00:00-08:30;11:30-13:30;17:30-23:59

43

Skypatrol SP9700 Protocol V1.04

Permission OEM command □ Configuration command Public □

Format: PVM;<mode><diid><workdaymask><hh1:mm1-hh2:mm2><hh1:mm1-

hh2:mm2><hh3:mm3-hh3:mm3>

4 kinds of private mode, each mode has different trigger condition and report different to server:

Mode Name Trigger condition Report data string

0 Disable As usual

1 Full manual If digital input is “true”, device

will switch to “Full manual”

private mode, otherwise as

usual

Not report GPS/GSM position,

Report device status (DTT)

2 Half manual If digital input is “true”, and

under private hour range,

device will switch to “Half

manual” private mode,

otherwise as usual

Not report GPS/GSM position,

Report device status (DTT)

3 Automatically According to private hour range

setting only, device will switch

to “Automatically” private

mode, otherwise as usual

Not report GPS/GSM position,

Report device status (DTT)

4 Automatically

private activity

According to private hour range

setting only, device will switch

to “Automatically” private

mode, otherwise as usual

Report as usual,

Report device status (DTT)

Note:

Can be 1 digital input pin, range is “0 3”, for high level , need to work in DIM; 0 mode

Workday mask, “1” is working day, “0” is private day.

Bit0 Sunday

Bit1 Monday

Bit2 Tuesday

Bit3 Wednesday

Bit4 Thursday

Bit5 Friday

Bit6 Saturday

Bit7 Reserved

44

Skypatrol SP9700 Protocol V1.04

<mode>

0: Disable private hour mode

Command format: PVM;0

1: Full manual

Command format: PVM;1;<diid>

<diid>: Digital input channel, range is “0 to 3”

2: Half-manual

Command format: PVM;2;<diid>;<workday mask>;<hh1:mm1-hh2:mm2>..

<diid>: Digital input channel, range is “0 to 3”

<workday mask>: Working day mask

<hh1:mm1-hh2:mm2>: Private hour period on daily basis, 3 periods valid, at least set 1 period.

3: Automatically Command format: PVM;3;<workday mask>;<hh1:mm1-hh2:mm2>..

<workday mask>: Working day mask

<hh1:mm1-hh2:mm2>: Private hour period on daily basis, 3 periods valid, at least set 1 period.

4: Private activity

Command format: PVM;4;<workday mask>;<hh1:mm1-hh2:mm2>..

<workday mask>: Working day mask

<hh1:mm1-hh2:mm2>: Private hour period on daily basis, 3 periods valid, at least set 1 period.

Note: Privacy mode trigger special events (tow, GSM jamming, front-end collision, rear end

collision, turnover, external battery events), then the device will report location information as the

normal configuration.

Factory default: PVM;0

3.5.2.10.2 Digital output configuration (POB)

Command word Format Reply

POB POB;1;0;4;5 POB:1;0;4;5

POB POB:1;0;4;5

Permission OEM command □ Configuration command Public □

Explanation This command is to configure digital output for private mode or private activity.

Format:

FOB; <Enable mark>;<DO port>;<DO input mode>;<output interval>

Disable: POB;0

Enable: POB;1;<DOID>;<DO Mode>;<Interval>

<DOID>: Digital output channel ID, range is “0-2”

<DO Mode>: Digital output pin mode, range is “0 to 7”

<Interval>: Output interval, range is “0 to 65535”, unit is second

Factory default: POB;0

45

Skypatrol SP9700 Protocol V1.04

3.6 Command parameter system function

3.6.1 Function introduction

This function is mainly the inherent function of parameter system itself, including reset to factory default

configuration; all levels of permission to the password management, all levels of authority command mask

management, profile management, etc.

Configuration file: Currently device supports 7 profiles (0-6). 0: OEM default profile; 1-5: Customized profile; 6:

Export current profile. 0-5 profiles with maximum 4Kbytes, 5 profile with maximum 16Kbytes. Each command in the

profile is end with Carriage Return.

3.6.2 Detailed command

3.6.2.1 Reset to factory default (DFP)

Command word Format Reply

DFP DFP DFP

Permission OEM command Configuration command □ Public □

Explanation Device configuration will be reset.

Factory default:

3.6.2.2 Recover the parameter except the specific command to default value (RPD)

Command word Format Reply

RPD RPD RPD

Permission OEM command □ Configuration command □ Public

Explanation This command is to recover others command except NAM, HVR, SVR, BSV, PIN, SCN, and APN to

default value.

3.6.2.3 Set OEM password (OPW)

Command word Format Reply

OPW OPW;0123456789 OPW:0123456789

OPW OPW:0123456789

Permission OEM command Configuration command □ Public □

Explanation This password is for the accessibility of configuration software on computer.

Format: OPW;<PASSWORD>

Length is 10 digits fixed.

Factory default: 0123456789

46

Skypatrol SP9700 Protocol V1.04

3.6.2.4 Administrator command mask (ACM)

Command word Format Reply

ACM ACM;1F8 ACM:1F8

ACM ACM:FF3C06FFF8

Permission OEM command Configuration command □ Public □

Explanation Enable commands in OEM command list for administrator, except commands DFP/OPW/ACM.

Format: ACM;<Mask>

<Mask>: HEX, range is “0 to FFFFFFFFFFFFFFFF”, each one represents a command enable.

“0”: disable this command for administrator

”1”: enable this command for administrator

Refer to APPENDIX for OEM command list.

Factory default: ACM:3FFFFFFFF8

3.6.2.5 User command mask (UCM)

Command word Format Reply

UCM UCM;1FFFFFFFFFF UCM:1FFFFFFFFFF

UCM UCM: 7FFFFFFFDFF5F

Permission OEM command Configuration command □ Public □

Explanation Enable commands in user command list for user.

Format: UCM;<Mask>

<Mask>:HEX, range is “0 to FFFFFFFFFFFFFFFF”

“0”: disable this command for user

”1”: enable this command for user

Refer APPENDIX2 for user command list.

Factory default: UCM:7FFFFFFFDFF5F

3.6.2.6 User command white list (CEN)

Command word Format Reply

CEN CEN;PIN;SCN;APN;SVR;BSV;BDU;SVP;SSP;U

SP;SSN

CEN:PIN;SCN;APN;SVR;BSV;BDU;SVP;SSP;USP;SSN

CEN CEN:3FF

Permission OEM command Configuration command □ Public □

47

Skypatrol SP9700 Protocol V1.04

Explanation This command is to customize user command white list, 10 command words maximum, command

words in this command are available for user from admin command list. Through the UCM query

can check whether set successfully or not.

Format: CEN ;< Command word1> ;< Command word2> ;< Command word3>……..

Example:

CEN;PIN;SCN;APN;SVR;BSV;BDU;SVP;SSP;USP;SSN

CEN:PIN;SCN;APN;SVR;BSV;BDU;SVP;SSP;USP;SSN

Factory default:

3.6.2.7 User command black list (CDS)

Command word Format Reply

CDS CDS;PIN;SCN;APN;SVR;BSV;BDU;SVP;SSP;USP;

SSN

CDS:PIN;SCN;APN;SVR;BSV;BDU;SVP;SSP;USP;SS

N

UCM UCM:0

Permission OEM command Configuration command □ Public □

Explanation Opposite to command CEN, this command is used to forbidden commands for user from admin

list.

Format: CDS ;< Command word1> ;< Command word2> ;< Command word3>…

Example:

CDS;PIN;SCN;APN;SVR;BSV;BDU;SVP;SSP;USP;SSN

CDS:PIN;SCN;APN;SVR;BSV;BDU;SVP;SSP;USP;SSN

UCM

UCM:0

Factory default:

3.6.2.8 User command shortcut (USC)

Command word Format Reply

USC USC;N;NAM USC:N; NAM

USC USC:N;NAM

Permission OEM command □ Configuration command □ Public

48

Skypatrol SP9700 Protocol V1.04

Explanation This command is to set user command shortcut.

Format: USC[ID];<Parameter1>;<Command>

[ID]: range is “0 to 9”

<Parameter1>: English letter a-z or A-Z, without case sensitive

<Command>: If in the command there is character need to be converted, it is a must to add the”(”

before Symbol.

Short command length is 50bytes maximum, reply message length is 70bytes maximum.

Up to 10 short commands is supported (USC0 to USC9).

e.g.: set “B” as short command for PRQ/STP,

send: USC;A;PRQ(,STP(;600

“A”: Parameter 1

“PRQ(,STP(;600”: Parameter 2, a substitute command

So only sending command “password, A” equals to send commands PRQ and STP.

Note: Only support user authorization commands to set as short command. If command in

parameter 2 is not authorized to user, the message will return to “ERR”.

Factory default:

3.6.2.9 Load command list profile from computer to device (YSF)

Command word Format Reply

YSF YSF;1 YSF:1

Permission OEM command Configuration command □ Public □

Explanation Download command list profile (.txt) from computer to device flash storage, complying Ymodem

protocol.

Format: YSF;<ID>

<ID>: range is “0 to 10”

0: OEM default

1 to 5: for user customized

Note: Profile file must be less than 4096bytes, each command in profile must end with

Carriage Return, Line Feed (CRLF), and file name must be less than 31 characters.

Factory default: Null

3.6.2.10 Save command list profile from device to computer (YGF)

Command word Format Reply

YGF YGF;1 YGF:1

Permission OEM command Configuration command □ Public □

49

Skypatrol SP9700 Protocol V1.04

Explanation Download command list profile from device to computer, complying Ymodem protocol.

Format: YGF;<ID>

<ID>: range is “0 to 11”

0: OEM default

1 to 10: for user customized

11: export the last configuration profile generated by CTF

Factory default: Null

3.6.2.11 Load device existing command list profile (YCF)

Command word Format Reply

YCF YCF;1 YCF:1

Permission OEM command Configuration command □ Public □

Explanation This command is to execute existing command list profile from device.

Format: YCF;<ID>

<ID>: range is “0 to 10”

0: OEM default

1 to 10: for user customized

Factory default: Null

3.6.2.12 Generate and export the current profile (CTF)

Command word Format Reply

CTF CTF CTF, and use Hyper Terminal with Ymodem protocol

to receive the exported profile.

Permission OEM command Configuration command □ Public □

Explanation Export configuration information to the external FLASH profile 6, and the file is uploaded to the PC

through the Ymodem protocol.

Factory default:

3.6.2.13 Save current configuration as profile (SCF)

Command word Format Reply

SCF SCF;1 SCF:1

Permission OEM command □ Configuration command Public □

50

Skypatrol SP9700 Protocol V1.04

Explanation This command is to save all the parameters of the current system to an external FLASH, 3 profile

slots available.

Format: SCF;<Mode>

<Mode>: Range is “0 to 2”

Note: currently support tree backup maximum.

Factory default: Null

3.6.2.14 Load pre-saved configuration profile (RCF)

Command word Format Reply

RCF RCF;1 RCF:1

Permission OEM command □ Configuration command Public □

Explanation This command is to restore to the current parameter from the configuration parameter of the

external FLASH, it will cost some time and device will reboot when finished.

Format: RCF;<Mode>

<Mode>: Range is “0 to 2”

Factory default: Null

3.6.2.15 Query current command list profile (CFN)

Command word Format Reply

CFN CFN CFN:1

Permission OEM command □ Configuration command □ Public

Explanation This command is to query which profile is link with command FRL.

Reply format: CFN:<command list profile number>

<command list profile number>: range is “1 to 10”

3.7 Time management function command

3.7.1 Function introduction

This function is mainly for time management of the device, including time zone, daylight saving time and Greenwich

Time configuration etc.

3.7.2 Detailed command

3.7.2.1 Time zone configuration (TZN)

Command word Format Reply

TZN TZN;8:00 TZN:8:00

TZN TZN:8:00

Permission OEM command □ Configuration command Public □

51

Skypatrol SP9700 Protocol V1.04

Explanation This command is to set the local time zone, and display local time in the SMS.

Format: TZN;<Hour>:<Minute>

Range is “-13:00 to 13:00”, minus represents west zone, positive represents east zone.

Factory default: TZN:0:00

3.7.2.2 Daylight saving configuration (DST)

Command word Format Reply

DST Format1:

DST;03.27;10.01;00:00

Format2:

DST;03.F5;10.A0;00:00

Format1:

DST:03.27;10.01;00:00

Format2:

DST:03.F5;10.A0;00:00

Query:

DST

Format1:

DST:03.27;10.01;00:00

Format2:

DST:03.F5;10.A0;00:00

Permission OEM command □ Configuration command Public □

Explanation This command is to set daylight saving feature.

Format: DST;<Parameter1>;<Parameter2>;<Parameter3>

From the start date of <Parameter1> to the end date of <Parameter2> is defined as daylight

saving time. Start time and end time are decided by <Parameter3>.

Format 1: “DST; 03.27; 10.01; 00:00”:

<Parameter1> : “03.27”: Daylight saving time starts date. Format is “month month. day day”.

“03.27” represent March 27.

<Parameter2>: “10.01”: Daylight saving time ends date. Format is “month month. day day”.

50

Skypatrol SP9700 Protocol V1.04

“10.01” represent October 1st.

<Parameter3>: “00:00”: start and end time (hour/min/sec), format is “hour hour: minute

minute”.”00:00” represent time is “00:00”

Format 2: “DST;03.F5;10.A0;00:00”:

<Parameter1>: “03.F5”: Daylight saving time start date, format is “month month. Week day of

week”. Week can be set “A B C D F”. “A” for the first week, “B” for the second week, and so on,

the fifth week or last week can use the “F” to represent. Day of week can be set to “0 1 2……6”.

Beginning on Sunday (“0” represent Sunday) to Saturday (“6” represent Saturday). ”03.F5”

represent Friday on the last week of march.

<Parameter2>: “10.A0”: Daylight saving time and date, format is same as para1. “10.A0”

represent Sunday on the first week of October

<Parameter3>: “00.00”: start and end time (hour/min/sec), format is “hour hour: minute

minute”.”00:00” represent time is “00:00”

Factory default: DST; 0

3.7.2.3 Enable daylight saving feature (STO)

Command word Format Reply

STO STO;1 STO:1

STO STO:1

Permission OEM command □ Configuration command Public □

Explanation This command is to toggle daylight saving feature.

Format: STO;<Parameter>

1: Enable

0: Disable

Factory default: STO:0

3.7.2.4 Read the Greenwich Time (TIM)

Command word Format Reply

TIM TIM TIM:13.06.27-05:31:31

Permission OEM command □ Configuration command □ Public

Explanation Format: TIM: yy.mm.dd-hh:mm:ss, with UTC time

Note: Before the first positioning, read out the value of TIM: 00.00.00-00:00:00, after positioning

successfully, the time will update the current UTC time.

Note: Device will update time as per GPS network time when fixed; otherwise this field will be

000000000000. After the success of fixed, the time to update for the current UTC time.

Factory default: Null

51

Skypatrol SP9700 Protocol V1.04

3.8 Device power management function

3.8.1 Function introduction

Device power management function is mainly for configuration of the battery low voltage feature and device

working mode.

3.8.2 Detailed command

3.8.2.1 Power supply event (PTH)

Command word Format Reply

PTH PTH;45;35;3 PTH:45;35;3

PTH PTH:45;35;3

Permission OEM command □ Configuration command Public □

Explanation This command is to set threshold value for low voltage event for external battery and backup

battery.

Format: PTH;<Parameter1>;<Parameter2>;<Duration time>

<Parameter1>: External battery threshold, range is “0 to 999”, unit is 100mV, i.e.:0V-99.9V

<Parameter2>: Backup battery threshold, range is “0 to 999”, unit is 100Mv, i.e.:0V-99.9V

<Duration time>: unit is second, range is “0 to 255”

Factory default: PTH:100;36;10

Extending port with parameter setting

Command word Format Reply

PKI Setting:

PKI;1;1;1

Query:

PKI

Setting reply:

PKI:1;1;1

Query reply:

PKI:1;1;1

Explanation Function: set the added data context of upload information in extending port

Format: PKI; <ID mark>;<time mark>;<location information mark>

Parameter definition:

<ID mark>: 0 disable to upload ID information; 1: enable to upload ID information

<Time mark>: 0: disable to upload time information; 1: enable to upload time

information

<Location mark>: 0: disable to upload location information; 1:enable to upload location

information.

Factory setting: PKI:1;1;1

52

Skypatrol SP9700 Protocol V1.04

3.8.2.2 Power saving mode parameter (PSS)

Command word Format Reply

PSS Setting:

PSS0; 0

Setting reply:

PSS0:0

Query:

PSS0

Query reply:

PSS0:0

Permission OEM command Configuration command □ Public □

Explanation Function: configure parameter of GSM、GPS and other modules’ power saving mode

Format: PSS<Module type>;<Toggle>;<Para1>;<Para2>;<Para3>;<Para4>

Can configure the module parameter in power saving mode as below:

Module Type Module Name

0 GSM module

1 GPS module

2 Bluetooth module

■ GSM module power saving parameter configure:

Close power saving mode :

Command :PSS0; 0

Set parameter of power saving mode:

Command format:PSS0;1;<no-reg>;<no-socket>;<slp>

<no-reg>:non- register overtime ,unit is second, range is 30~65535

<no-socket>:no data send and forward overtime , unit is second, range is 30~65535

<slp>:regular wakeup time value under power saving mode, unit is second, range is 30~65535

<parameter4>:device moving delay wakeup time value, unit is second, range is 0-65535

Explanation:

When there non-register overtime or data send and forward overtime, GSM module enters power

saving mode. In power saving mode, if detects data sending request, query balance request or

GPRS data request and (socket can be connect before device enter power saving mode or device

in moving status), then device will immediately wake up , or it will regular wake up as the setting

time. If configure parameter 4, and if the current device status is in regularly wakeup, and once

device moves, GSM module will first execute power saving mode and will wake up again if reach

the delay wakeup time.

■ GPS module power saving parameter configure:

Close power saving mode:

Command: PSS1; 0 Set parameter of power saving mode:

53

Skypatrol SP9700 Protocol V1.04

Command format of Power saving mode: PSS1;1;<no-fix>;<slp>

<no-fix>: non-locating overtime , unit is second, range is 30-65535

<slp>: regular wakeup time under non-register power saving mode, unit is second, range is 30-

65535

Explanation:

In parking status and (GPS non-locating overtime or has located), then device enters power saving

mode. When device enters power saving mode, if no locate then it will regular wakeup,

otherwise it will detects device status as non-parking status and wakeup .

■ Bluetooth power saving parameter configure:

PSS2;<regular awaking workday mask>;<regular awaking period1>;<regular awaking

period2>;<regular awaking period3>

<Workday mask>: HEX, definition is as below.

Bit0 Sunday

Bit1 Monday

Bit2 Tuesday

Bit3 Wednesday

Bit4 Thursday

Bit5 Friday

Bit6 Saturday

Bit7 Reserved

0: disable Bluetooth detect all the day

1: enable Bluetooth detect all the day

<Time period 1>:the first time period ,format:HH:MM-HH:MM

<Time period 2>: the second time period, format:HH: MM-HH: MM。

<Time period 3>: the third time period, format:HH: MM-HH: MM。

Notice: the end time must greater than the start time.

Device power saving mode explains:

1. No power saving mode:PSS0;0,PSS1;0

2. Power saving mode1: solely configure GSM、GPS power saving, no associated between GSM

power saving and GPS power saving. PSS0; 1; ,PSS1;1; .GPS enters power saving only in parking

status, and in moving status it will keep waking

Power saving mode 2: solely configure GSM、GPS power saving, GPS power saving associated with GSM power saving .PSS0; 1;...., PSS1;2;.... .

Factory default: PSS0;0 PSS1;300;600 PSS2;00;00:00-23:59;00:00-23:59;00:00-23:59

54

Skypatrol SP9700 Protocol V1.04

3.8.2.3 Enable GSM/GPS/Bluetooth module (GPO)

Command word Format Reply

GPO GPO;1;1;1 GPO:1;1;1

GPO GPO:1;1;1

Explanation This command is to control the Bluetooth module switch status.

Format: GPO;<enable GSM>;<enable GPS>;<enable Bluetooth>

<enable GSM>:

0: disable GSM module

1: enable GSM module 2~255 delay enableP GSM module time(minute)

<enable GPS>:

0: disable GPS module

1: enable GPS module

2: only GPS available

3: only GLONASS available

<enable Bluetooth>:

0: disable Bluetooth module

1: enable Bluetooth module

Explanation:

If configure GPS parameter as “1”, then not make parameter configuration for module and work

as the default mode (or the previous configured working mode); while module will be configured

when GPS parameter as “2” or “3”.

Factory default: GPO;1;1;1

3.8.2.4 (DSM) Deep Sleep Mode Configuration

Command word Format Reply

DSM Setting:

DSM;1;60

Query:

DSM

Setting reply:

DSM:1;60

Query reply:

DSM:1;60

Explanation Function: set up time parameter in deep sleep mode

Format: DSM; <Enable deep sleep mode>;<deep sleep mode time>

Parameter explanation:

<Enable deep sleep mode>:

0: disable sleep mode 1:enable sleep mode, the SVP will not work in this mode

55

Skypatrol SP9700 Protocol V1.04

<Deep sleep mode time>:

Unit is minute, range is from 30 to 65535(about 44 days)

Factory setting: DSM; 0

Explanation:

This command is much suitable for such data occasions that long standby, low frequency (for

instance, one data upload each day) for its high power saving level, the device only wakeup

regularly or connect to external power, if need more wakeup ways please refer to the PST

command.

3.8.2.5 (PST) Set deep sleep parameter configuration command

Command word Format Reply

PST PST;3; 3; 1 PST:3; 3; 1

PST PST:3; 3; 1

Explanation This command is to set deep sleep parameter.

Format: PST; <Deep sleep source>;<Wake up source>;<Delay time>

<Deep sleep source>: Hex, range is “0-FF”, each bit represents one sleep source.

Bit=0: Disable sleep source

Bit=1: Enable sleep source

Sleep source definition:

Sleep

source(bit)

Name Bit

Remarks 0 1

0 ACC off/IN low level/ACC

off

Disable

Enable Configuration according to

DIM command

1

IN high level

Disable

Enable Configuration according to

DIM command

2 External battery low

voltage

Disable

Enable Configuration according to

PTH command

3 Parking Disable Enable

4

Backup battery low voltage

Disable

Enable Configuration according to

PTH command

5 GSM sleep mode Disable Enable PSS0

6 Reserved

7 Reserved

56

Skypatrol SP9700 Protocol V1.04

<Wake up source>: Hex, range is “0-FF”, each bit represents one wake up source.

Bit=0: Disable wake up source

Bit=1: Enable wake up source

Wake up source definition:

Wake up

source(bit)

Name Bit

Remarks 0 1

0 Deep sleep timeout Disable Enable

1 Device enter moving status Disable Enable BMS

2 Connect to external power Disable Enable

3 Reserved

4 Heartbeat wake up Disable Enable HBI

5 DNU wake up Disable Enable DNU/SVP

6 Reserved

7 Reserved

<Delay time>:

When the conditions “ACC off/In low level/ACC off”, ”IN high level”for entering sleep mode

be triggered and lasts for the preset delay time the device will enter sleep mode. Range is 15-

65535, unit: second.

Note: 1. When any one of the sleep condition enables, then have to enable any one of the wake

up condition.

2. When the GSM sleep mode triggers into sleep, the PSS0 wake up interval setting should not

0, or enable DNU wake up source, or enable moving wake up source.at least one of the above

three conditions is satisfied and the GSM must be registered, then it will trigger into sleep.

3. This command can support multiple wakeup ways for device in deep sleep mode, its power saving

level is medium, so if user need to configure high power saving mode please refer to DSM comamdn

,and this command will be affected

57

Skypatrol SP9700 Protocol V1.04

3.9 evice system maintenance function

3.9.1 Function introduction

This function is mainly for firmware management, the device supports for local USB upgrade, remote GPRS upgrade

and BLE remote upgrade. Firmware upgrade has program backup, local upgrade and firmware over the air (FOTA)

function; it can call the previous backup firmware program when upgrading error. Command configuration

parameters will be automatically saved and restored, the newly added command or parameter if changed then

needs to re-configure.

3.9.2 Detailed command

3.9.2.1 FOTA firmware upgrade file server (OAS)

Command word Format Reply

OAS OAS;update.Skypatrolsystem.com;80

OAS:update.Skypatrolsystem.com;80

OAS OAS:update.Skypatrolsystem.com;80

Permission OEM command Configuration command □ Public □

Explanation This command is to set FOTA server IP and port, 63 characters maximum.

Format: OAS;<IP>;<PORT>

<IP/Domain>: IP of FOTA server

<Port>: Port of FOTA server

Factory default: OAS:update.Skypatrolsystem.com;80

3.9.2.2 Set FOTA file path (OAP)

58

Skypatrol SP9700 Protocol V1.04

Command word Format Reply

OAP OAP;/Skypatrol/SKYPATROL/V100/Release/SKYPATROL. txt

OAP: /Skypatrol/SKYPATROL-3G/V101/Release/SKYPATROL.txt

OAP OAP: /Skypatrol/SKYPATROL-3G/V101/Release/SKYPATROL.txt

Permission OEM command Configuration command □ Public □

Explanation This command is to set remote upgrade server file path

OAP;<File path>

<File path>: 63bytes maximum, FOTA file path setting

Factory default:

OAP: /Skypatrol/SKYPATROL-3G/V101/Release/SKYPATROL.txt

3.9.2.3 Firmware upgrade command (FWU)

Command word Format Reply

FWU FWU Set reply:

Local upgrade: output upgrade option table

OTA upgrade: FWU

Permission OEM command □ Configuration command □ Public

Explanation This is for local upgrade or over the air firmware upgrade.

Format: FWU

Upgrade firmware on local, please refer chapter 6.5.

3.9.2.4 Rollback to previous firmware version (FRC)

Command word Format Reply

FRC FRC FRC:1(command executed)

FRC:0(command non-executed)

Permission OEM command □ Configuration command □ Public

Explanation 0: Roll back to previous version failed

1: Roll back to previous version succeeded

3.9.2.5 Abort ongoing upgrade process (FCL)

59

Skypatrol SP9700 Protocol V1.04

Command word Format Reply

FCL FCL FCL:1(command executed)

FCL:0(command non-executed)

Permission OEM command □ Configuration command □ Public

Explanation This command is only effective when device is downloading firmware file from server.

3.10 SP9700 function command

3.10.1 Function introduction

SP9700 is a kind of software for parameter configuration and firmware upgrade through remote management,

Administrators create assignment tasks on the SP9700 server (including parameter configuration or firmware upgrade)

for the devices they administrated. These devices will access the SP9700 server (through the command SPT

configuration) for a period time, if there is a task then completed and reported the results to the server.

3.10.2 Detailed command

3.10.2.1 Set up time interval command for regularly visit SP9700 server (SPT)

Command word Format Reply

SPT SPT;1H SPT:1H

SPT SPT:1H

Permission OEM command Configuration command □ Public □

Explanation This command is to set up time interval command for regularly visit SP9700

server. Format: SPT;<Time Interval>

<Time interval>:Set up as 30~900S, 15~59M, 1~720H.

Factory default: SPT;24H

3.10.2.2 SP9700 server IP/domain name, port setup command (RCS)

Command word Format Reply

RCS RCS;

SP9700.Skypatrolsystems.com;8080

Or

RCS; 183.233.129.45;5555

RCS:SP9700.Skypatrolsystems.com;

8080 Or

RCS: 183.233.129.45;5555

RCS RCS:SP9700.Skypatrolsystems.com;8080

Permission OEM command Configuration command □ Public □

60

Skypatrol SP9700 Protocol V1.04

Explanation This command is to set up SP9700 server IP/domain name,

port. Format:RCS;< IP/domain name>;<port>

Parameter definition:

< IP/domain name>:IP or domain name, the maximum length of parameter is 64 bytes.

<Port>:SP9700 server port

Factory default: RCS; SP9700.Skypatrolsystems.com;8080

3.10.2.3 SP9700 server access page path setup command (RCP)

Command word Format Reply

RCP RCP;/Dev.php? RCP:/Dev.php?

RCP RCP:/Dev.php?

Permission OEM command Configuration command □ Public □

Explanation This command is to set up the device access SP9700 server page

path. Format:RCP ;< Page path>?

Parameter definition:

<Page path>: The device access SP9700 server page path, the parameter maximum length is

64 bytes.

Factory default: RCP;/Dev.php?

3.10.2.4 Immediate access SP9700 server command (LCS)

Command word Format Reply

LCS LCS LCS

Permission OEM command Configuration command □ Public command □

Explanation This command is to access SP9700 server

immediately. Format: LCS

Parameter definition:

No

Factory default: Null

3.10.2.5 Enable Bluetooth data upload (BLD)

Command word Format Reply

BLD Setting:

BLD; 1

Query:

BLD

Reply:

BLD;1

Reply:

BLD; 1

Permission OEM command Configuration command □ Public command □

61

Skypatrol SP9700 Protocol V1.04

Explanation Function: enable Bluetooth data upload

When connect to Bluetooth, it should enable this mark if need to receive uploading Bluetooth data.

Notice that this mark should as 0 if reset device or disconnect to Bluetooth.

Format: BLD; <type of switch>

Parameter definition:

<Type of switch>

0: disable data upload

1:enable server data uploading

2: regard as test channel, need to configure UGP.

This value as BLD; 0 after power off, reserved reset value if non-power-off.

Factory setting:

Reset value: BLD; 0

3.11 Geo-fence function

3.11.1 Function introduction

It can draw a fence on a virtual map to limit the activities of the vehicle at the specified location. Speed detection

and time interval detection can be set up, also can be set alarm to enter and exit the fence and other actions.

3.11.2 Detailed command

3.11.2.1 Geo-fence configuration (GFS)

Command word Format Reply

GFS GFS0;1;1;25.31;113.0;1000 GFS0:1;8001;25.310000;113.000000;1000 GFS0;P;0;25.31;113.0;1;1000 GFS0:P;0;25.310000;113.000000;1;1000 GFS0;S;10;100 GFS0:S;10;100 GFS0;T;7F;12:00-14:00 GFS0:T;7F;12:00-14:00;00:00-00:00;00:00-00:00 GFS0 GFS0:1;8001;25.310000;113.000000;1000 GFS0;P;0 GFS0:P;0;25.310000;113.000000 GFS0;P;1 GFS0:P;1;1000 GFS0;S GFS0:S;10;100 GFS0;T GFS0:T;7F;12:00-14:00;00:00-00:00;00:00-00:00

Permission OEM command □ Configuration command Public □

62

Skypatrol SP9700 Protocol V1.04

Explanation This command is to set the related parameters of Geo-fence.

Format:

GFS [ID];<vertex_cnt>;<sign>;<para….>

GFS [ID];P;<para. ID>;<para value >;<para. ID>;<para value>…

GFS[ID];S;<min_ speed>;<max_ speed>

GFS[ID];T;<working mask>;<time1>;<time2>;<time3>

GFS[ID];H;<Horizontal factor lower limit>;<Horizontal factor upper limit>

(1), Set Geo-fence configuration:

<ID>: Geo-fence ID, range is “0 to 155”.

“0 to 27” represents 28 Geo-fences that support circle/ rectangle/ polygon.

“28 to 155” represents 128 Geo-fences that support circle shape only. If ID for 0 means Null,

i.e. ”GFS” and “GFS0” are the same.

<vertex_cnt>: numbers of vertex,

”0”: Delete this Geo-fence

“1”: Set as circle shape.

“2”: Set as rectangle shape.

“3 or bigger value” Set as polygon shape

<sign>: Hex, to configure Geo-fence attribution:

Bit0 Enable entering detection

Bit1 Enable leaving detection

63

Skypatrol SP9700 Protocol V1.04

Bit2 Enable outside speed range detection

Bit3 Enable inside speed range detection

Bit4 Enable valid time period

Bit5 Reserved

Bit6 Reserved

Bit7 Reserved

Bit8 Reserved

Bit9 Reserved

Bit10 Reserved

Bit11 Reserved

Bit12 Reserved

Bit13 Time valid sign

Bit14 Speed valid sign

Bit15 Geo-fence valid sign

“Bit0 to Bit1”: one of them must be “1”. System will force “Bit0” as “1” when set “Bit0 and Bit1”

as “00”.

“Bit3 to Bit2”:

“00”: means not detect overspeed

“01”: Represents enable function when speed outside preset range (overspeed) fence event

“10”: Represents enable function when speed inside preset (overspeed) fence event.

“11”: System will treat it as “00”.

“Bit4”:

“0”: not detect time

“1”: Enable only in time period, device to detect in or out of Geo-fence

“Bit5 to Bit12”:

Reserved.

“Bit13”: time parameter valid mark, device will reply 1 if time parameter is valid and user can’t

modify this value.

“Bit14”: Speed valid sign, “1” such condition is enabled, user can’t modify the value from “Bit14”

64

Skypatrol SP9700 Protocol V1.04

65

Skypatrol SP9700 Protocol V1.04

“Bit15”: Geo-fence valid sign, “1” such condition is enabled, user can’t modify the value from

“Bit15”

<Para…>” Parameter of circle or rectangle Geo-fence, if <vertex_cnt> value is “1” or “2”, Geo-

fence has parameter to set:

For circle Geo-fence, <Para…> is <center latitude; center longitude; radius>, unit is “Meter”

For rectangle Geo-fence, <Para…> is <vertex1 latitude; vertex1 longitude; vertex2 latitude; vertex2

longitude>

(2) ,Query Geo-fence configuration:

GFS[ID]

(3) , Set Geo-fence parameters

GFS [ID];P;<para. ID><para value >;<para. ID><para value >…

Parameter ID: Geo-fence ID

For circle, “0” means center latitude and longitude, “1” means radius.

For rectangle, “0” means vertex1 latitude and longitude, “1” means vertex2 latitude and

longitude.

Polygon: “0 to 31” means latitude and longitude of each vertex.

Parameter value:

If it means GPS coordinate, format is latitude; longitude, south latitude and west longitude will be

minus value.

If it means radius, format is radius, unit is meter.

Latitude range is less than +-90.0000 degree (up to six decimal places), longitude not more than +-

180.0000 degree(up to six decimal places)

Radius is more than 200 meters, integer value.

To distinguish parameter ID and parameter value, parameter ID length not more than 2,

parameter value more than 3.

(4) , Query Geo-fence configuration

GFS[ID];P;<parameter ID>

The parameters are same as above (3).

(5) , Set speed parameter:

GFS[ID];S<min speed><;max speed>

GFS[ID];S is to query

66

Skypatrol SP9700 Protocol V1.04

GFS[ID];S; is to delete

<min speed>: Lower limit of speed range, range is 0-255

<max speed>: Upper limit of speed range, range is 0-255

Note: The value of Upper limit speed is bigger than lower limit speed.

(6), Set time parameter:

GFS[ID];T<;workday mask><;time_period1><; time_period2><; time_period3>

“GFS[ID];T”: Query time configuration

“GFS[ID];T;”: Delete time configuration

<workday mask>: Day of work mask, Hex

Bit0 Sunday

Bit1 Monday

Bit2 Tuesday

Bit3 Wednesday

Bit4 Thursday

Bit5 Friday

Bit6 Saturday

Bit7 Reserved

0: Disable this day of week

1: Enable this day of week

<time_period1>: First period, format is “hh:mm-hh:mm”

<time_period2>: Second period, format is “hh:mm-hh:mm”

<time_period3>: Third period, format is “hh:mm-hh:mm”

Note: End time must be greater than start time.

3.11.2.2 Enable Geo-fence (GOF)

Command word Format Reply

GOF GOF;108000001 GOF:108000001

GOF GOF:108000001

Permission OEM command □ Configuration command Public □

67

Skypatrol SP9700 Protocol V1.04

Explanation This command is to toggle specify geo fence detection.

Format: GOF;<enable mask>

<Enable mask>: HEX, length is max. 19 bytes with a nibble.

28 Geo-fences (Round/Rectangular/Polygon), corresponding with bit0 to bit27,

128 Geo-fences, corresponding with bit28 to bit155,

68

Skypatrol SP9700 Protocol V1.04

0:Disable this Geo-fence

1:Enable this Geo-fence

e.g. enable Geo fence #0,#27,#28

GOF;FFFF

3.11.2.3 Geo-fence mask (UFM)

Command word Format Reply

UFM UFM;FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

FFFF

UFM:FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

UFM UFM:FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Permission OEM command Configuration command □ Public □

Explanation Format: UFM;<user-mask>

<user-mask>:

User Geo-fence mask, 156 Geo-fences in total (0 – 155), Bit0 – Bit27, Bit28 – Bit159.

“0”: Disable this geo fence for user

“1”: Enable this geo fence for user

Factory default: UFM:1

3.11.2.4 Delete Geo-fence (GFC)

Command word Format Reply

GFC GFC GFC

Permission OEM command □ Configuration command □ Public

Explanation This command is to delete all saved Geo fences.

3.11.2.5 (GTT) Query Geo-fence status

Command word Format Reply

GTT GTT GTT:FF;1F

Permission OEM command □ Configuration command □ Public

69

Skypatrol SP9700 Protocol V1.04

Explanation This command is to query current status for each geo fence.

Reply format: GTT:<Geo-fence status>;<Geo-fence event alarm>

<Geo-fence status>:

HEX, data length is 156 bits, ranges is “0 to FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF”.

The first 28 Geo-fences are assigned to “bit0 to bit27”, The rest of 128 circle Geo-fences are

assigned to “bit28 to bit155”.

Each bit represents one Geo-fence, e.g.: bit0 represent Geo-fence0.

70

Skypatrol SP9700 Protocol V1.04

“0” represent device is outside Geo-fence or there is not assigned Geo-fence.

“1” represent device is inside Geo-fence.

<Geo-fence event report>: HEX, data length is 156bits, ranges is “0 to

FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF”.

The first 28 Geo-fences are assigned to “bit0 to bit27”, The rest of 128 round Geo-fences are

assigned to “bit28 to bit155”.

Each bit represents one Geo-fence, e.g.: bit0 represent Geo-fence0.

“0” represent device is not reporting Geo-fence event.

“1” represent device is reporting Geo-fence event.

3.12 Black and white list permission management function

3.12.1 Function introduction

This part is mainly for device configuration of the incoming call automatically answers white list, telephone requests

device location information white list, emergency / SOS white list.

3.12.2 Detailed command

3.12.2.1 Phone number white list (PWL)

Command word Format Reply

PWL Set phone number of group 1,2:

PWL;S;1;180XXXXXXXX;2;13512345678

PWL:S;1;180XXXXXXXX;2;13512345678

Query group 1 phone number:

PWL;R;1

PWL:R;1; 180XXXXXXXX

Delete the first group phone number in

whitelist:

PWL;S;1;

Delete all phone numbers in whitelist:

PWL;S;

PWL:S;1;

PWL:S;1;;2;;3;;4;;5;;6;;7;;8;;9;;10;;11;;12;;13;;14;;15;;16;

Query phone numbers from group 1 to 8 in whitelist: PWL;R;1-8 Query phone number of group1,2 in

whitelist:

PWL;R;1;2

PWL:R;1;;2;;3;;4;;5;;6;;7;;8;

PWL:R;1;;2;

Permission OEM command □ Configuration command Public □

71

Skypatrol SP9700 Protocol V1.04

Explanation This command is to set/delete/query phone number white list.

Format: PWL; S ;< Index>;<Phone number list>;<…>

Query white list

72

Skypatrol SP9700 Protocol V1.04

PWL;R;<Index>

2 Formats for <Index>:

Format1: Index number; Index number…

Format2: Start index- End index

Note:

>Single command only available to query 8 numbers in a time.

>”X” means any number will be ok.

>Index number range is “1 to 16”, start number must be smaller than end number.

>If one number has both monitoring and hotline authorization, then only monitoring

authorization is valid.

Factory default: PWL:S;1;;2;;3;;4;;5;;6;;7;;8;;9;;10;;11;;12;;13;;14;;15;;16;

3.12.2.2 Query current position authorization list (QWL)

Command word Format Reply

QWL Query index number of enabling voice

function to gain device location in whitelist:

QWL

QWL

Enabling group 1,2,3,7 phone voice to gain

device location function in whitelist;

QWL;1-3;7

Or

QWL;1;2;3;7

QWL:1,2,3;7

Disable all phone number which has enabling

voice function in whitelist:

QWL;

QWL:

Permission OEM command □ Configuration command Public □

Explanation This command is to enable phone number from white list for current position query purpose,

device will reject the call and reply a SMS with current position.

Format: QWL;<Index list>

<Index>: ID list for white list index.

Factory default: QWL:

3.12.2.3 SOS authorization list (SWL)

Command word Format Reply

SWL Setting:

SWL;1;2

SWL:1;2

73

Skypatrol SP9700 Protocol V1.04

Query SOS whitelist index list:

SWL

SWL:1;2

Delete SOS whitelist index list:

SWL

SWL

Permission OEM command □ Configuration command Public □

Explanation This command maximum in favor of two phone numbers in whitelist as SOS number. If trigger SOS

alarm, it will call the main SOS number and if not one answer then dial SOS sub number.

Format: SWL;<SOS main Index number>;<SOS sub index number>

<SOS main index number>: flexible choose the valid phone number index ID in whitelist

Factory default: SWL

3.13 Device status, event and data upload management function

3.13.1 Function introduction

Change in certain status of the device as an event. Event is divided into single event and combination event,

combination event is obtained by single event configuration. Event can be enable and disable, it can configure the

action after the event generated (upload data, etc.) and can name the event.

This function is mainly related to the device status, event generation, event management, event execution, request

upload, system health data, etc.

3.13.2 Detailed command

3.13.2.1 Query device status (STT)

Command word Format Reply

STT STT<MODE> STT:4000;80

Permission OEM command □ Configuration command □ Public

Explanation Function: query device’s real-time status.

Reply format 0:

STT;<Device status>;<IO status> or STT0;<Device status>;<IO statue>

Reply format 1:

STT1

ACC: Bias=1, State=0:OFF

Input1:Bias=1, State=0

Factory parameter: null

3.13.2.2 Reset event report (ETC)

Command word Format Reply

ETC ETC ETC

74

Skypatrol SP9700 Protocol V1.04

Permission OEM command □ Configuration command □ Public

75

Skypatrol SP9700 Protocol V1.04

Explanation This command is to clear device reaction of event.

Format: ETC

Note: Receiving any permission ETC will directly clear all events mask.

Factory default:

3.13.2.3 Query event report status (ETT)

Command word Format Reply

ETT ETT ETT:10000000

Permission OEM command □ Configuration command □ Public

Explanation This command is to know which event is causing report.

Format: ETT

Reply parameter: HEX, each bit represents one event ID.

Factory default:

3.13.2.4 Rename event for user report (ENM)

Command word Format Reply

ENM ENM25;ALARM:IO2_OFF;ALARM:IO2_ON ENM25:ALARM:IO2_OFF;ALARM:IO2_ON

ENM25 ENM25:ALARM:IO2_OFF;ALARM:IO2_ON

Permission OEM command □ Configuration command □ Public

Explanation This command is to customize event name in the SMS message to user phone number. Message

with UNICODE format will fail to send the event information to user’s mobile phone.

Format: ENM[Event ID];<Event status0 name>;<Event status1 name>

[Event ID]: range is “0 to 63”

<Event status0 name>: 15 bytes maximum, (Escape character unavailable)

<Event status1 name>: 15 bytes maximum, (Escape character unavailable)

Note: Combination event (No.56-No.63) rename only can set on field <Event status0 name>.

Factory default:

3.13.2.5 Sub-event mask (ESM)

Command word Format Reply

ESM ESM3;FF;FF;FF;FF ESM3: FF;FF;FF;FF

ESM ESM3:FF;FF;FF;FF

Permission OEM command Configuration command □ Public □

70

Skypatrol SP9700 Protocol V1.04

Explanation Format: ESM[Main event ID];<Sub-event mask>;<Sub-event status0 mask>;<Sub-event status1

mask>;<Sub-event clear type>

[Main event ID]: Range is “0 to 7”, one main event corresponds to 8 sub events.

<Sub-event mask>: HEX, range is “0 to 0xFF”

“0”: Disable this sub-event

“1”: Enable this sub-event

<Sub-event status0 mask>: HEX, range is “0 to 0xFF”

“0”: Disable sub-event status0 to trigger

“1”: Enable sub-event status0 to trigger

<Sub-event status1 mask>: HEX, range is “0 to 0xFF”

“0”: Disable sub-event status1 to trigger

“1”: Enable sub-event status1 to trigger

<Clear type>: HEX, range is “0 to 0xFF”

“0”: Manually

“1”: Automatically

Note: Hardware fault event is forced to open the Server GPRS event upload.

ESM configuration please refer to APPENDIX: EVENT LIST.

Factory default: only enable ACC event mask, clear type for Automatically.

ESM:0;0;0;ff

ESM1:0;0;0;ff

ESM2:0;0;0;ff

ESM3:10;10;10;ff

ESM4:0;0;0;ff

ESM5:0;0;0;ff

ESM6:0;0;0;ff

ESM7:0;0;0;ff

3.13.2.6 Device reaction for the triggered event (EUP)

Command word Format Reply

EUP EUP28;4;1;1;1 EUP28:4;1;1;1

EUP28;4 EUP28:4;1;1;1

Permission OEM command Configuration command □ Public □

71

Skypatrol SP9700 Protocol V1.04

Explanation Function:

1, Set the number of times of execution and the execution interval time for device reaction 0, reaction

1 and reaction 2.

2, Set the number of times of execution and the execution interval time also set data type ID for device

reaction 3, reaction 4 and reaction 6.

Format: EUP[Event ID];<Device reaction type ID>;<Interval>;<Times>;<Data type ID>

[Event ID]: range is “0 to 63”

<Device reaction type ID>: range is “0 to 7”

0: I/O reaction

1: Report to User0

2: Report to User1

3: Report to SMS server (Admin)

4: Report to GPRS Server

5: Report to GPRS server preferred, if GPRS connection lost report offline data to SMS server via

SMS channel.

6: Bluetooth, report to Bluetooth channel

7: Reserved

<Interval>: Range is “1 to 30”, unit is “minute”

<Times>: Range is “1 to 5”, “0” represent to disable

<Data type ID>: Range is “0 to 7 (ADM0 to ADM7)”, only available for action type “report”, please

refer to command ADM.

Device action 3: Mask the administrator data

Device action 4: Mask the GPRS server data

Factory default:

3.13.2.7 Reset all event executive way (EUC)

Command word Format Reply

EUC EUC EUC

Permission OEM command □ Configuration command □ Public

Explanation This command is to reset all event executive ways.

3.13.2.8 Event combination (ERL)

Command word Format Reply

ERL ERL;15;24;1;25;1 ERL:15;24;1;25;1

ERL0 ERL:15;24;1;25;1

Permission OEM command Configuration command □ Public □

72

Skypatrol SP9700 Protocol V1.04

Explanation Event combination functionality (ERL), binding multiple events (up to 5, AND logic) together as

combination event to trigger specific reaction of device.

Format:

ERL[Combination event ID]:<Valid period>;<Event ID>;<Event status>;<Event ID>;<Event status>…

[Combination event ID]: range is “0 to 7”, corresponding to event number “56 to 63” in chapter10

“Event list”

command responding to “EUP56 to EUP63”, e.g.: ERL0;25;1;24;1 represent EUP56

<Valid period>: All events in combination event must be satisfied during this period, otherwise

combination event will not be activated.

<Event ID>: range is “0 to 55”

<Event status>: range is “0 to 1”

“0”: Status 0 in “Event list”

“1”: Status 1 in “Event list”

Note:

1, <Event ID> ;< Event status> must be paired, 5 pairs maximum.

2, If need to combine IO action, then need to combine EOB.

Factory default: ERL(0~7):0;127;0;127;0;127;0;127;0;127;0

3.13.2.9 Report data string mask mode (ADM)

Command word Format Reply

ADM Setting group 0:

ADM;47

ADM:47

Query group 1:

ADM1

ADM1:47

Permission OEM command Configuration command □ Public □

Explanation This command is to customize data type in packet that to be reported to server, up to 8 profiles are available, SMS server is forced to used ADM0 while GPRS server is forced to used ADM1, Bluetooth channel will default for ADM1. Format: ADM[ID];<Main data ID mask>

[ID]: data type ID, range is “0 to 7”.

Profile ID Command word

0 ADM0

1 ADM1

2 ADM2

3 ADM3

73

Skypatrol SP9700 Protocol V1.04

4 ADM4

5 ADM5

6 ADM6

7 ADM7

<Main data ID mask>: HEX, range is “0 to FFFF”.

“0”: Not-report this kind of data

“1”: Report this kind of data

Main data ID mask

Note:

1, Command ADM0 is specific for non-event report to SMS server, data string maximum length is

230bytes.GSM data from SMS server data contains maximum 3 base stations.

2, Command ADM1 is specific for non-event report to GPRS server, data string length is 384bytes.

3, Bit1 and Bit2 are fixed as“1”, which represent data string, must contain GPS or GSM

information. Packet including GSM data is according to report setting SVR/SSP/USP, e.g. G mode

when GPS preferred, otherwise use GSM data, A mode both GPS and GSM will be reported to

server.

Main data mask

(Bit)

Main data ID

Explanation

0

1

0 SYS System information data Not report Report

1 GPS GPS data Not report Report

2 GSM GSM information Not report Report

3 COT COT data Not report Report

4 ADC ADC data Not report Report

5 DTT Device status data Not report Report

6 Reserved Reserved

7 ETD Event data Not report Report

8 Reserved Reserved

9 Reserved Reserved

10 Reserved Reserved

11 Reserved Reserved

12 Reserved Reserved

13 Reserved Reserved

14 Reserved Reserved

15 Reserved Reserved

74

Skypatrol SP9700 Protocol V1.04

Factory default:

ADM0:47

ADM1:47

ADM2:47

ADM3:47

ADM4:47

ADM5:47

ADM6:47

ADM7:47

3.13.2.10 Sub-data type mask (SDM)

Command word Format Reply

SDM SDM1;FFFF SDM1:7F

SDM1 SDM1:7F

Permission OEM command Configuration command □ Public □

Explanation This command is to set Sub-data type mask.

Format: SDM[Main data identifier]; <Sub-data type mask>

<Main data identifier>: range is “0 to 15”, refer to command AMD “Main data type list”.

<Sub-data mask>: HEX, range is 0x0000~0xFFFF.

“0” represents not report.

“1” represents report.

<1>SYS: System data mask (SDM0), max. 2bytes

<2>GPS: GPS data mask (SDM1), max. 2bytes

Bit Sub-data type 0 1 Length, ASCII Length, HEX

0 Fix sign

REPORTED

Report =1bytes =1byte

Valid satellite number <=2bytes

1 Latitude

Not report

Report 10bytes =8bytes

Longitude 11bytes

2 Speed Not report Report <=3bytes =2bytes

3 Azimuth Not report Report <=3bytes =2bytes

4 Altitude Not report Report <=5bytes =2bytes

Bit Sub-data type 0 1 Length, ASCII Length, HEX

0 Device name Not report Report <=15bytes <=15bytes

1 Firmware version Not report Report <=8bytes <=8bytes

2 Hardware version Not report Report <=8bytes <=8bytes

75

Skypatrol SP9700 Protocol V1.04

5 HDOP Not report Report <=5bytes =2bytes

6 VDOP Not report Report <=5bytes =2bytes

7 Location status, only

support txt

Not report

report <=7bytes =0 byte

<3>GSM: GSM data (SDM2), max. 1byte

<4>COT: COT data (SDM3), max. 2bytes

<5>ADC: Analog to digital converter data (SDM4), max. 2bytes

Bit

Sub-data type

0

1 Length,

ASCII

Length, HEX

0 External battery voltage Not report Report <=5bytes =2bytes

1 Backup battery voltage Not report Report <=5bytes =2bytes

2 Device temperature

value

Not report

Report <=5bytes =2bytes

3 Reserved

4 Reserved

5 Reserved

Bit Sub-data type 0 1 Length, ASCII Length, HEX

0 Register status

Not report

Report =1byte =1byte

Signal strength =1byte

1 First station Not report Report <=25bytes =8bytes

2 Second station Not report Report <=25bytes =8bytes

3 Third station Not report Report <=25bytes =8bytes

4 Fourth station Not report Report <=25bytes =8bytes

5 Fifth station Not report Report <=25bytes =8bytes

6 Sixth station Not report Report <=25bytes =8bytes

7 Seventh station Not report Report <=25bytes =8bytes

Bit Sub-data type 0 1 Length, ASCII Length, HEX

0 Mileage Not report Report <=10bytes <=5bytes

1 Engine hour Not report Report <=10bytes <=5bytes

2

3

4

5

76

Skypatrol SP9700 Protocol V1.04

6 Reserved

7 Reserved

<6>DTT: Device status data (SDM5), max. 2bytes

During event status of the device is not cleared, the event status data in the DTT data will be

forced to upload when uploading data packets.

Factory default:

SDM: ffff, SDM1:3f,SDM2:2,SDM3:1,SDM4:3,SDM5:ffff,SDM6:ffff,SDM7:ffff

SDM8:ffff,SDM9:ffff,SDM10:ffff, SDM11:ffff,SDM12:ffff,SDM13:ffff, SDM14:ffff,

SDM15:ffff

3.13.2.11 Toggle configuration profile on condition (FRL)

Command word Format Reply

FRL FRL1;7;7 FRL1:7;7

FRL1 FRL1:7;7

Permission OEM command Configuration command □ Public □

Explanation This command is to set when all selected conditions are satisfied, device will automatically toggle

among profiles.

Format: FRL[ID];<condition mask>;<condition status bit>

<ID>: range is 1 to 10, “0” is system reserved.

<condition mask>: range is “0x00 to 0xFFFF”

“0”: condition does not need to be satisfied.

“1”: condition need to be satisfied

<condition status bit>: range is “0x00 to 0xFFFF”

“0” relate to value “0” of corresponding bit

“1” relate to value “1” of corresponding bit

Please refer to below <configuration file form>

Note: Condition only supports “or” gate.

e.g.: FRL1;7;7

Bit Sub-data type 0 1 Length, ASCII Length, HEX

0 Device status Not report Report <=8bytes <=5bytes

1 IO status Not report Report <=2bytes =2byte

2 Low 120 Geo-fences status Not report Report <=30bytes <=16bytes

3 High 36 Geo-fences status Not report Report <=9bytes <=6bytes

4 Event status Not report Report <=16bytes <=9bytes

5 Packet type indicator Not report Report <=2bytes =2bytes

77

Skypatrol SP9700 Protocol V1.04

First “7” represents Bit2 & Bit1 &Bit0 need to be related

Second “7” represents any event from “domestic roaming & backup battery abnormal & external

battery supply abnormal” is satisfied, configuration file #1 will be executed.

Note: This feature is invalid at the first 15 seconds of tracker firmware initialization.

Factory default: Null

3.13.2.12 Toggle configuration profile on condition (FRS)

Command word Format Reply

FRS FRS1;7;7 FRS1:7;7

FRS1 FRS:7;7

Permission OEM command Configuration command □ Public □

Explanation This command is to set when anyone of the selected condition is satisfied, device will

automatically toggle among profiles.

Format: FRS<File ID>;<Condition mask>;<Condition status bit>

<File ID>: Range “1 to 10”.

<Condition mask>: 0x00~0xFFFF

“0” Disable its corresponding condition.

“1” Enable its corresponding condition

<Condition status bit>:

“0” relate to value “0” of corresponding bit

“1” relate to value “1” of corresponding bit

Note: Condition only supports “or” gate.

e.g.:

FRL1;7;7

First “7” represent Bit2 & Bit1 &Bit0 need to be related

Second “7” represent any event from “domestic roaming & backup battery abnormal & external

battery supply abnormal” is satisfied, configuration file #1 will be executed.

Note: This feature is invalid at the first 30 seconds of tracker firmware initialization.

Factory default: Null

DO output speed related configuration DFP

Comman

d word

Format Reply

DOP Setting:

DOP;40;40

Setting reply:

DOP:40;40

78

Skypatrol SP9700 Protocol V1.04

Query:

DOP

Query reply:

DOP;40;40

Explanati

on

Function: set DO output related speed.

Format: DOP;<OUT1 related speed>; <OUT2 related speed>

<OUT1 related speed>:

When speed lower than this speed, OUT1 then update the output (IO1 can output normally only

when set as output mode, please refer to OTI command)

<OUT2 related speed>:

OUT2 will update when speed lower than this speed.

Note: speed take from GPS location, it will immediately update the output if GPS invalid.

Factory setting:DOP;40;40

<Profile form>:

Byte Bit Condition Status0 Status1

1

Bit0 bExtPwr External battery Normal Abnormal

Bit1 bInterBat Backup battery Normal Abnormal

Bit2 bRoaming Domestic roaming Quit roaming Roaming

Bit3 bInterRoam International roaming Quit roaming Roaming

Bit4 bGeoFence Geo-fence Normal In or Out

Bit5 bStop Parking Parking Quit parking

Bit6 bWorkStatus Private hour Inactive Active

Bit7 bAccOn ACC Off On

2

Bit8 bln1 Level input port 1 status High or absent Low level

Bit9 btow Tow Normal Tow

Bit10 Reserved

Bit11 Reserved

Bit12 Reserved

Bit13 Reserved

Bit14 Reserved

Bit15 Reserved

3.13.2.13 Set triggered event & IO parameter (EOB)

Command word Format Reply

EOB EOB28;0;4;2 EOB28:0;4;2

EOB28 EOB28:0;4;2

Permission OEM command Configuration command □ Public □

79

Skypatrol SP9700 Protocol V1.04

Explanation This command is to specify output pins and output modes for event action mode 0 (IO)

Format: EOB[Event ID];<DO ID>;<DO mode for status0>;<DO mode for status1>;<event erase of DO

mode>

[Event ID]: range is “0 to 63”, Please refer to Chapter 9”Even List”.

<DO ID>: range is “0”

0: OUT1

1: OUT2

<DO mode for status0>: range is “0 to 7”(Digital output port mode, refer to DOM command)

<DO mode for status1>: range is “0 to 7”(Digital output port mode, refer to DOM command)

<Event Erase of DO mode>: range is “0 to 7”(Digital output port mode, refer to DOM command)

Note: This position does not work when manually. This is optional, if carry IO action without

erasing then do not need this.

e.g.:

EOB28;0;4;5;0

DOM

0;4;500;500;5;0;1

DOM0;5;500;500;5;0;1

DOM0;1

ACC_OFF event generating, NO.0 output in mode 4.

When ACC_ON and ACC_OFF erase, NO.0 output in mode0.

Factory default: EOB:0;0;0

3.13.2.14 Batch upload parameter (BDU)

Command word Format Reply

BDU BDU;1 BDU:1

BDU BDU:1

Permission OEM command □ Configuration command Public □

Explanation This command is to set the number of TCP/UDP server batch upload packets. The actual number of

uploaded packets need to plus physical layer can accept the maximum transmission size which is used

by the communication module.

Format: BDU;<parameter>

<parameter>: range is 1-255

Factory default: BDU;1

3.13.2.15 Dynamic upload mask (DNU)

Command word Format Reply

DNU DNU;1 DNU:1

80

Skypatrol SP9700 Protocol V1.04

DNU DNU:1

Permission OEM command □ Configuration command Public □

Explanation This command is to set conditions to toggle between static mode and dynamic mode.

Format: DNU;<Parameter> Range is “0 to FF”(Hex)

Bit0: Parking

Bit1: Domestic roaming

Bit2: International roaming

Bit3: Using backup battery

Bit4: ACC OFF

”0”: Disable

“1”:Enable

DNU;0 means device always sticks to static mode interval only; DNU;1 means device uses dynamic

mode when in packing status.

Default: DNU;1

3.13.2.16 Fix-distance report and corner turning report (DIS)

Command word Format Reply

DIS DIS;0;7;1000000 DIS:0;7;1000000

DIS DIS:0;7;1000000

Permission OEM command □ Configuration command Public □

Explanation This command is to set threshold value for cornering and distance report. When timing upload

mode of the device is turned-off, the distance, angle and mileage upload functions don’t work.

Format: DIS;<Distance>;<Angle>;<Mileage>

Device will report once fixed distance or cornering angle or mileage is satisfied.

<Distance>: range is “0” or “10 to 65535”, unit is “10m”. Actual distance=Set parameters/100(km), e.g., Parameter for” 2550” means if reaching 25.5km then report the event. “0” means disable and available for TCP&UDP socket. <Angle>: range is “0” or “3 to 60”, unit is “degree”. “0” means disable.

<Mileage>: rang is “0” or larger than current mileage value. Unit: Meter

Upload process for fixed angle and distance: One of them reach the setting value then upload data.

Factory default: DIS;0;0;0

3.13.2.17 Query current position (PRQ)

Command word Format Reply

PRQ PRQ PRQ

Permission OEM command □ Configuration command □ Public

81

Skypatrol SP9700 Protocol V1.04

Explanation Device will reply this command by report current position. This function can directly dial the

device number, hang up after a ringing and get report information.

Factory default:

3.13.2.18 GPRS health detection upload mode (HDU)

Command word Format Reply

HDU HDU;1;1 HDU:1;1

HDU HDU:1;1

Permission OEM command □ Configuration command □ Public

Explanation This command is to set the time interval for health detection, it also can view the health status of

the device by requesting health information.

Format:

Request health information: HDU;<mode>

Set the health detection time: HDU;<mode>;<time>

<mode>:

0: Request health information

1: Set health detection time

<Time>: GPRS upload health detection data time interval, this parameter only is valid with <mode

1>, range is 0-65535. 0 represents to cancel upload, unit: hour

GPRS server send format:

Request health information upload:

Send: *GS00, HDU;0#

Reply: *GS46, 356496042331108, HDU:0#

Health information data, set every 12hours to interval upload

Send: *GS00,HDU;1;12#

Reply: *GS46,356496042331108,HDU:1:12#

Data contents:

*GS46,351535054749718,040109010714,

Device status

CCID

GSM CSQ

ADC data

LED working mode

Last time fixed time(format: HHMMSSDDMMYY)

Time zone

Daylight saving time setting #

Factory default: HDU; 1; 0

82

Skypatrol SP9700 Protocol V1.04

3.14 GPRS channel function

3.14.1 Function introduction

GPRS channel is for device reported data and exchange the command with users. This function is mainly for

configuration the basic parameters of the server, data reported basic parameters, heartbeat and offline data, etc.

3.14.2 Detailed command

3.14.2.1 GPRS main server (SVR)

Command word Format Reply

SVR Set as TCP socket:

SVR; 114.142.154.28; 3032;; 0; 0

or

SVR; www.anytracking.net;3032;;0;0

Set as UDP socket

SVR;114.142.154.28;;3032;1;1

or

SVR;www.anytracking.net;;3032;1;1

Delete main server:

SVR;

Set as TCP socket:

SVR: 114.142.154.28; 3032;; 0; 0

or

SVR: www.anytracking.net;3032;;0;0

Set as UDP socket

SVR:114.142.154.28;;3032;1;1

or

SVR:www.anytracking.net;;3032;1;1

Reply:

SVR:

Query:

SVR

Query reply:

SVR:

Permission OEM command □ Configuration command Public □

Explanation This command is to set GPRS server.

Format: SVR;<IP address>;<TCP Port>;<UDP Port>;<Mode>;<Enable ACK>

<IP address>:IP or domain name, 64 bytes maximum

<TCP Port>:TCP port

<UDP Port>:UDP port

<Mode>:

“0”:TCP mode

“1”:UDP mode

“2”:TCP channel for command, UDP channel for data report

<Enable ACK>:

“0”:Disable

“1”:Enabled for UDP, this is default setting

“2”: Enabled for both UDP and TCP

83

Skypatrol SP9700 Protocol V1.04

Note:

①: Data is sent via UDP channel from device, server must respond with any data in 15 seconds,

otherwise device will consider UDP connection is dead and save data to its internal flash storage.

②: When the command does not take <IP address>;<TCP Port>;<UDP Port>;<Mode>;<Enable ACK>

parameters, it indicates that the server configuration parameters are deleted.

Factory default:

SVR; usacomm.anytracking.com; 27000; 0; 1

3.14.2.2 GPRS backup server (BSV)

Command word Format Reply

BSV Set as TCP&UDP socket: Set as TCP&UDP socket:

BSV;120.196.122.109;2002;2002;2;1 BSV:120.196.122.109;2002;2002;2;1 BSV;www.goolg.com;2008;2008;2;1 BSV:www.goolg.com;2008;2008;2;1

Delete main server: Reply:

BSV; BSV:

BSV BSV:

Permission OEM command □ Configuration command Public □

Explanation This command is to set backup GPRS server when main server is unavailable.

Format: BSV;<IP address>;<TCP Port>;<UDP Port>;<Mode>;<Enable ACK>

<IP address>:IP or domain name, 64 bytes maximum

<TCP Port>:TCP port

<UDP Port>:UDP port

<Mode>:

“0”:TCP mode

“1”:UDP mode

“2”:TCP channel for command, UDP channel for data report

<Enable ACK>:

“0”:Disable

“1”:Enabled for UDP, this is default setting

“2”: Enabled for both UDP and TCP

Factory default:

BSV

84

Skypatrol SP9700 Protocol V1.04

3.14.2.3 GPRS server report interval mode (SVP)

Command word Format Reply

SVP SVP;1;15S;G;B SVP:1;15S;G;B

SVP;1 SVP:1;15S;G;B

Permission OEM command □ Configuration command Public □

Explanation This command is to set report interval of mode0 (static) and mode1 (dynamic) to GPRS server or

Bluetooth channel.

Format; SVP;<Work mode>;<Interval>;<Report mode>;<Data format>

<Work mode>:

“0”: Static upload mode

“1”: Dynamic upload mode

<Interval>: range is “5 to 900 seconds”, “15 to 59 minutes”, “1to 720 hours”

<Report mode>:

“O”: Disable

“G”: GPS information prior, otherwise use GSM tower position information instead, GSM tower

position information uses HEX format.

“A”: GPS and GSM information

<Data format>:

“O”: Device will not generate data (record)

“B”: HEX format

“T”: ASCII

Notice:

If enable DSM deep sleep mode, then the upload interval will execute according to DSM

parameter and SVP will be unavailable.

Factory default:

SVP:0;30S;G;B

SVP:1;6H;G;B

85

Skypatrol SP9700 Protocol V1.04

3.14.2.4 Server shift configuration (SVT)

Command word Format Reply

SVT SVT;1800;15 SVT:1800;15

SVT SVT:1800;15

Permission OEM command □ Configuration command Public □

Explanation This command is to set remote server timeout.

Format: SVT;< the longest working hours for standby server >;<ACK time>

<The longest working hours for standby server >: the backup server for the longest time setting

when the device single successful connection, unit is second, range is “60 to 65535”.

<ACK time>: The device sends data to the remote server and waits for the time of the reply

packet. Unit is “Second”, range is “15 to 120”.

Factory default: SVT;1800;15

3.14.2.5 Heartbeat packet (HBI)

Command word Format Reply

HBI HBI;0;50;1 HBI;0;50;1

HBI HBI;0;50;1

Permission OEM command Configuration command □ Public □

Explanation Function: set heartbeat packet interval of TCP/UDP server, and keep the connection of server and

device.

Usage:

HBI;0;<Interval>;<upload format>

<interval>: 0 disable heartbeat packet upload, range is from 1 to 2880, unit is minute

<upload format>:0: without GPS information; 1: time+ LAT/LONG; 2:time +complete GPS

information

HBI;1;<fixed hour>;<fixed minute>;<upload format>

<fixed hour>: fixed wakeup time , range from 0 to 23, unit is hour

<fixed minute>:fixed wakeup time, range from 0 to 59, unit is minute

<upload format>:0 without GPS information; 1:time+LAT/LONG; 2:time+ complete GPS

information

Factory default: HBI;0;0;0

86

Skypatrol SP9700 Protocol V1.04

3.14.2.6 Offline data report mode (EFM)

Command word Format Reply

EFM EFM;1;0;1 EFM:1;0;1

EFM EFM:1;0;1

Permission OEM command Configuration command □ Public □

Explanation This command is to enable/disable/erase offline data uploading.

Format: EFM;<Mode>;<Priority>;<Erase>

<Mode>:

0: Disable offline (GPRS) data saving feature

1: Enable offline (GPRS) data saving feature, If GPRS recovers device will send offline data to

server.

<Priority>:

0: Real-time data prior, when GPRS recovers send the real time data first.

1: Offline data prior, when GPRS recovers send the offline data first.

<Erase>:

1: Erase offline data from flash storage. (Need to include former 2 parameters when executing)

0: Do not erase offline data from flash storage. (Changing former 2 parameters without erasing)

Factory default: EFM:1;1; 0

3.14.2.7 UDP response mechanism (ACK)

Command word Format Reply

ACK ACK;1 ACK:1

ACK ACK:1

Permission OEM command □ Configuration command Public □

Explanation This command is to set UDP response.

Format :

Disable UDP response:ACK;0, data packing is the same as before

Enable UDP response:ACK;1, data packing contains serial number and ID

This function needs to set SVR command as UDP mode and enable response.

example:

SVR;183.233.129.45;;6667;1;1

Factory default: ACK:0

87

Skypatrol SP9700 Protocol V1.04

3.14.2.8 Power compensation value (PCO)

Command word Format Reply

PCO PCO;100 PCO:100

PCO PCO:100

Permission OEM command □ Configuration command Public □

Explanation This command is to set power voltage acquisition compensation value.

Format : PCO;<power voltage compensation value>

<power voltage compensation value>: Range: 0~255

The configured value divides 100 as the adding compensation value.

PCO;100, then read power voltage add 1V.

Factory default:PCO:0

3.15 SMS channel command

3.15.1 Function introduction

SMS function supports two kinds: SMS server and user SMS. SMS server is the same as GPRS server with reporting

data and command interaction function. User SMS is mainly for uploading part of the information to the user based

on the configuration, so that users can understand the work status of the device and other information.

3.15.2 Detailed command

3.15.2.1 Reset SMS counter (SCC)

Command word Format Reply

SCC SCC SCC

Permission OEM command □ Configuration command □ Public

Explanation SMS counter will be reset to zero.

3.15.2.2 Query SMS counter (SCR)

Command word Format Reply

SCR SCR SCR:10;100

Permission OEM command □ Configuration command □ Public

Explanation Reply format: SCR:<parameter1>;<parameter2>

<parameter1>:“10”: SMS number device received

<parameter2>:“100”: SMS number device that consumed

Factory default is zero.

88

Skypatrol SP9700 Protocol V1.04

3.15.2.3 SMS server report interval mode (SSP)

Command word Format Reply

SSP SSP;1;12H;G;T SSP:1;12H;G;T

SSP;1 SSP:1;12H;G;T

Permission OEM command □ Configuration command Public □

Explanation This command is to set mode0 and mode1 report interval for SMS server.

Format: SSP;<Mode>;<Interval>;<Report mode>;<Data format>

<Mode>:

“0”: Static upload mode

“1”: Dynamic upload mode

<Interval>: range is “30 to 900 seconds”, “15 to 59 minutes”, “1 to 720 hours”

<Report mode>:

“O”: Disable

“G”: GPS information prior, otherwise use GSM tower position instead, GSM tower uses HEX

format.

“L”: Periodical voice call (Voice monitoring)

<Data format>:

“O”: Device will not generate data

“T”: Text

Factory default:

SSP:0;30M;O;T

SSP:1;30M;O;T

3.15.2.4 User phone number (UNO)

Command word Format Reply

UNO UNO0;13912345678 UNO0:13912345678 UNO1;13912345678 UNO1:13912345678

UNO0;+8613912345678 UNO0:+8613912345678

UNO1;+8613912345678 UNO1:+8613912345678 UNO0 UNO:+8613926442537

Delete user number: Reply:

UNO0; UNO0: UNO1; UNO1:

Permission OEM command □ Configuration command □ Public

89

Skypatrol SP9700 Protocol V1.04

Explanation This command is to set up 2 user’s phone number.

2 user numbers are available: UNO0 and UNO1.

Format: UNO[user ID];<user phone number>

[user ID]:0-1

<user phone number>: 0-20digitals

With the correct password, any phone number is able to use this command. When the phone

number is not the user number, this command can’t use the command combination function.

0-20digitals, the factory default is null

①Set domestic number ②Set the international number, "86" is the country code Note: It is a must to add “+” before country code.

Factory default:

3.15.2.5 User password (UPW)

Command word Format Reply

UPW Set user0 password: UPW0;1234

Set user1 password: UPW1;2234

UPW0:1234

UPW1:2234

UPW UPW:1234

Permission OEM command □ Configuration command □ Public

Explanation This command is to set user password.

Format: UPW;<password>

<password>: Fix 4 digits, range is “0000 to 9999”

UPW0: Set user0 password

UPW1: Set user1 password

Factory default:

UPW;1234

UPW1;1234

3.15.2.6 User report interval (USP)

Command word Format Reply

USP USP;0;12H;G;W USP:0;12H;G;W

USP;0 USP:0;12H;G;W

Permission OEM command □ Configuration command Public □

90

Skypatrol SP9700 Protocol V1.04

Explanation This command is to set static mode and dynamic mode report interval to user.

Format: USP[ID]; <Mode>;<Interval>;<Report mode>;<Data format>

[ID]:

“0”: User0

“1”: User1

<Mode>:

“0”: Static upload mode

“1”: Dynamic upload mode

<Interval>: range is “30 to 900 seconds”, “15 to 59 minutes”, “1to 720 hours”

<Report mode>:

“O”: Disable

“G”: GPS information prior, otherwise use base station information instead, base station uses HEX

format.

“L”: Periodical voice call (Voice monitoring)

<Data format>:

“O”: Device will not generate data

“T”: Text format

“W”: URL format

Note: If <Data format> set as “W”, device that has GPS fixed will send URL0, GPS unfixed will send

URL1, otherwise will send text format.

Factory default:

USP:0;24H;G;T

USP:1;24H;O;T

USP1:0;24H;G;T

USP1:1;24H;O;T

3.15.2.7 SMS server number configuration (SSN)

Command word Format Reply

SSN SSN;13912345678

SSN;+8613912345678

SSN:13912345678

SSN:+8613912345678

Delete number: Delete number reply:

SSN; SSN:

Permission OEM command □ Configuration command Public □

91

Skypatrol SP9700 Protocol V1.04

Explanation This command is to set phone number as SMS server which has administrator permission to

access command list.

Format: SSN;<Phone number>

Range is “0 to 20” digits

Factory default: SSN:

3.15.2.8 SMS forwarding (SMT)

Command word Format Reply

SMT Forward to SMS server

SMT 0;+8613926442537;A

Forward to user0

SMT0;+8613926442537;U;0

Forward to user1

SMT;+8613926442537;U;1

Forward to GPRS server

SMT0;+8613926442537;G

Reply

SMT:+8613926442537;A

SMT:+8613926442537;U;0

SMT:+8613926442537;U;1

SMT:+8613926442537;G

SMT0 SMT0: +8613926442537;U;0

Permission OEM command □ Configuration command Public □

Explanation Device will forward SMS from specified user to server and user.

Format: SMT[ID];<Paramter1>;<Parameter2>;<Parameter3>

[ID]: range is “0 to 2”

<Parameter1>: the phone number need to be forward

<Parameter2>:

92

Skypatrol SP9700 Protocol V1.04

“U”: User

“A”: SMS server

“G”: GPRS server

<Parameter3>:

When <Parameter2> set as “U”, need to add the third parameter.

“0”: forward to User0

“1”: forward to User1

Example: SMT0; 10086;U;0

<Parameter1>: 10086

<Parameter2>: U

<Parameter3>: 0

Function realize:

1. Device receives SMS from 10086 and forward to user0. Assume the SIM card is China Mobile

card, device query balance by dialing 1008611, and device will receive the result message and

forward to user0.

2. the SMS forward to GPRS server adopts HEX, specific please refer to “SMS forward to

information data packet ”

Factory default:

3.15.2.9 Map hyper link (URL)

Command word Format Reply

URL Static link:

URL0;http://maps.google.com/staticmap?z

oom=14&size=300x300&markers

=%n(;%e& sensor=false

URL0:http://maps.google.com/staticmap?zoom=14

&size=300x300&markers =%n(;%e& sensor=false

Dynamic link:

URL0;http://maps.google.com/maps?q=%n

(,%e&t=m&z=16

URL0:http://maps.google.com/maps?q=%n(,%e&t=

m&z=16

Permission OEM command Configuration command □ Public □

93

Skypatrol SP9700 Protocol V1.04

Explanation This command is to set map link in SMS to user. User can access the website directly through

hyper link to find out the information.

Format: URL[ID];<Link>

[ID] id number. Range from “0 to 1”

URL0 is to set GPS hyper map link.

URL1 is to set GSM hyper map link.

URL0 is prior when GPS is fixed.

<Link>: Maximum is 126bytes, “(” is used for data conversion.

Valid parameter that following “%”, case sensitive

“y”: year

“m”: month

“h”: hour

“m”: minute

“s”: second

“n”: north

“e”: east

“a”: valid flag

“s”: speed

“r”: heading

“C”: MCC

“N”: MNC

“A”: LAC

“D”: CID

Factory default: URL:http://maps.google.com/maps?q=%n(,%e&t=m&z=16

4. Stipulations of Protocol

4.1 Protocol introduction

Communication protocol is mainly used for information exchange between device and external other devices.

4.1.1 Information exchange channels between the device and external information is shown as below:

(1) , GPRS channel

(2) , Bluetooth channel

(3) , SMS channel

(4) , USB channel

94

Skypatrol SP9700 Protocol V1.04

4.1.2 There are two communication protocol encoding formats supported by the device:

(1) , ASCII encoding

(2) , HEX encoding

ASCII encoding can be used in the USB channel, GPRS channel, Bluetooth channel and SMS channel, HEX encoding

can be used in the GPRS channel and Bluetooth channel. Which encoding protocol to use for GPRS channel,

Bluetooth channel is decided by command SVP configuration. Using HEX encoding will save much more traffic than

ASCII encoding, but ASCII encoding using explicit representation, so human analysis protocol is more intuitive.

4.1.3 There are two types of information interaction between the device and the external device:

(1), Command interaction

(2), Device data report

Command interaction can only use ASCII code, and the initiative is launched by the external device. Device data

report can be used both ASCII and HEX encoding, it’s according to the specific parameter configuration and data

report is initiated by the device.

Channel Encoding Command interaction Data report

USB ASCII HEX □ □

GPRS ASCII HEX

Bluetooth ASCII HEX

SMS ASCI I HEX □

4.1.4 Upload data conditions:

No. Definition Encoding Conditions for generating data

1. Event upload HEX、ASCII Event need to be produced by “Event List”

2.

Regular upload

HEX、ASCII Command SVP(upload to GPRS or Bluetooth),

command SSP(upload to SMS server), command

USP(upload to user)

3. Fix-distance upload HEX、ASCII Set by command DIS

4. Fix-angle upload HEX、ASCII Set by command DIS

5. Motion, GPS is from invalid to

valid upload

HEX、ASCII Device is in movement status, GPS is from the invalid

to valid

6. Enter into international roaming HEX、ASCII Device SIM card is in international roaming status

7. Update the APN, server

configuration upload

HEX、ASCII Update APN、change server configuration

8. Connections, heartbeat packets

upload

HEX、ASCII Set by command HBI

95

Skypatrol SP9700 Protocol V1.04

9. SMS forwarding upload HEX Set by command SMT

10. Fix-mileage upload HEX、ASCII Set by command DIS

11. Fix-time point upload HEX、ASCII

4.2 Upload configuration

4.2.1 Server data configuration

Upload GPRS server or SMS server data content can be flexibly configured according to the demand. The

configuration of the data content can be divided into the master data and sub data configuration. The master data

configuration is used to configure the data types contained in the upload data. Sub data configuration is used to

configure specific sub-item data under different data types.

4.2.1.1 Master data configuration

Through ADM command can configure data type ID mask to configure the master data. The master data types and

corresponding mask bits as ADM command description, bit1 and bit2 fixed to 1, that is to say data packet need to

contain GPS or GSM information, whether the upload data packet contains GPS or GSM data depends on the upload

mode settings (SVP, SSP, USP), example: If set “G mode” as upload mode, GPS information prior, otherwise use GSM

tower position instead; If set “A mode” as upload mode, use GPS and GSM information. If GPS location is invalid and

GSM is not registered, the data doesn’t contain GPS or GSM data.

It can configure 8 groups (ADM0-ADM7). The causes of data generation are divided into event triggering and non-

event triggering (fixed time, fixed distance, fixed angle etc.). Non-event triggering and upload to SMS server using

ADM0 generated data, non-event triggering and upload to GPRS server using ADM1 to generate data. When an

event is triggered and uploaded to the server, one of 8 groups was determined to use by the EUP command

configuration to generate data.

Note:

The packet length that the device sent to the SMS server is limited to 230 bytes; the data is automatically taken

before 230 bytes if over this value. GSM data in packet contains up to 3 base-station information. The packet

length that the device sent to the GPRS server is limited to 384 bytes; the data is automatically taken before 384

bytes if over this value.

4.2.1.2 Sub data configuration

Through SDM command can configure sub data ID mask to configure data contents of configuration data type. The

sub data configuration is used to configure the data content of the corresponding data type. Shown as below:

(1), SYS system information data sub-mask (SDM0)

(2), GPS data sub-mask (SDM1)

(3) , GSM data sub-mask (SDM2)

96

Skypatrol SP9700 Protocol V1.04

(4) , COT data sub-mask (SDM3)

(5), ADC data sub-mask (SDM4)

(6), DTT device status data sub-mask (SDM5)

4.2.1.3 Dynamic upload

SVP command can configure the device in a specific status (static) and non-specific status (dynamic) to upload the

data in different ways. DNU command can configure specific status (static) conditions. As shown in the following

table, any status in Enable list is satisfied will be considered to enter a static mode (OR relation), otherwise it is

considered to be a dynamic model. If all of status is disable then unable to enter static mode.

Bit Status 0 1

0 Parking Disable Enable

1 Domestic roaming Disable Enable

2 International roaming Disable Enable

3 Backup battery Disable Enable

4 ACC OFF Disable Enable

5 Reserved Disable Enable

4.2.1.4 Health data upload

GPRS health data upload, including the following items:

(1) Device status

(2) ICCID

(3) GSM CSQ

(4) External battery supply voltage

(5) Backup battery voltage

(6) Analog input voltage

(7) Charging status

(8) LED lights working mode

(9) GPS on need setting (GPS wake up time)

(10) The last known time of GPS fix

(11) Digital input and output status

(12) Time zone

(13) Daylight saving setting

4.2.1.5 Request immediate upload

Regardless of the GPRS service, SMS server or the user can be requested to upload data immediately through the

PRQ command.

97

Skypatrol SP9700 Protocol V1.04

4.3 ASCII encoding

4.3.1 Protocol format

4.3.1.1 ASCII general symbol

No. Symbol Definition

1 * Command head,

2 , Command separator, Information identifier separator

3 : Only in device reply message, between command word and its parameter

4 ; Parameter separator, or separator between command word and parameter

5 $ Sub packet separator of batch packet

6 # Command end

4.3.1.2 Escape character set

*is packet header, # is packet tail. The rest of data contained special characters as * , ; ( $ # are required to character

decode. The method is to add left parenthesis (in front of the special characters.

Server sends to device

before * , ; ( $ #

after (* (, (; (( ($ (#

Device sends to server

after * , ; ( $ #

before (* (, (; (( ($ (#

4.3.2 Command interactive protocol format

4.3.2.1 USB channel protocol format

Command 1 Separator …… Command n

Send NAM , …… PTY

Reply NAM:SKYPATROL

, …… PTY:SKYPATROL

98

Skypatrol SP9700 Protocol V1.04

4.3.2.2 SMS server, GPRS server, Bluetooth server protocol format

Packet

head

VER Separ

ator

IMEI Separat

or

Command 1 Separ

ator

……

Command n

Packet tail

Send *GS 46

, NAM , …… PTY #

Reply

*GS

46

, Device

IMEI

,

NAM:SKYPATROL

,

……

PTY:SKYPATROL

#

Note: The numbers of different command response parameters may be inconsistent, when the command is sent, the

protocol version GS46 can be replaced by a common version number GS00.

4.3.2.3 User mobile SMS protocol format:

User

password

Separator

IMEI

Separator

Command 1

Separator

……

Command n

Send password

, NAM , …… PTY

Reply

password

, Device

IMEI

,

NAM:SKYPATROL

,

……

PTY:SKYPATROL

Application examples

Configuration tool command

Query command

Send Command word1,Command word2

Reply Command word1:Parameter1; Parameter2,Command word2:Parameter1;Parameter2

Note: The numbers of different command response parameters may be inconsistent.

Configure command

Send Command word1;Parameter1;Parameter2,Command word2;Parameter1;Parameter2

Reply Command word1:Parameter1; Parameter2,Command word2: Parameter1;Parameter2

SMS server (Admin) and GPRS server command

Query command

Send *GS46, Command word1,Command word2#

Reply *GS46,Device IMEI number, Command word1:Parameter1;Parameter2,Command

word2,Parameter1;Parameter2#

Note: The numbers of different command response parameters may be inconsistent. When the command is sent,

the protocol version GS46 can be replaced by a common version number GS00.

Configure command

Send *GS46,command word1;Parameter1;Parameter2,Command 2;Parameter 1;Parameter 2#

Reply *GS46,Device IMEI number, Command word1:Parameter1;Parameter2,Command

word2:Parameter1;Parameter2#

99

Skypatrol SP9700 Protocol V1.04

User mobile phone sending

Query command

Send Password, command word1,command word2

Reply Password, device IMEI No., command word1:parameter1;parameter2,command word2,

parameter1;parameter2

Note: The numbers of different command response parameters may be inconsistent.

Configure command

Send Password, command word1;parameter1;parameter2,command word2;parameter1;parameter2

Reply Password, device IME number, command word1:parameter1;parameter2,command2:

parameter1;parameter2

4.3.3 Data report protocol format

4.3.3.1 Single packet structure analysis

Data report has the following types of data packet:

(1) , Event packet

(2) , Regular packet

Packet

head

VER Separ

ator

IMEI Separ

ator

Time and data Separ

ator

Event Separa

tor

Data field Packet

tail

Event

*GS

46

,

<IMEI>

,

<HHMMSSDDMMYY>

, <event

>

,

SYS,…, ETD

#

Regular *GS 46 , <IMEI> , <HHMMSSDDMMYY> , Null , SYS,…, FUL #

(1) , Packet header

Identify the beginning of a packet, and is constant to "*GS".

(2) , Protocol version

Identify device protocol version, SKYPATROL product protocol

is 46. (3), Device IMEI number

IMEI is abbreviation of International Mobile Equipment Identity. International mobile equipment identity number is

made up of 15 digit “electronic sting numbers”.

It’s 15 ID number of device.

(4), Time and date

Arrange by “hour minute second day month year” order, each is for two characters. Use “000000000000“when

there’s no date information

(5) , Event ID

Only exists in the event trigger upload packet

e.g. 8F

10

0

Skypatrol SP9700 Protocol V1.04

Check method:

8Fh = 10001111b

Position 7 is event change status identifier, value 0 represent event status numbers 0, and value 1 mean event

change status 1.

Position 7 value is 1 in the example, can confirm “column” of the form (status change 1)

01111h = 15d represent event ID is 15,can confirm “row” of the form.

Use the intersection of “row “and” column” to confirm specific sub-event.

So 8F represents specific sub-event of exiting temperature setting range.

(6) , Data field

According to parameters of ADM command can select whether to upload each data field, each sub data contained in

master data can configure by command SDM.

Master data identifier Data type Whether upload data(command ADM)

SYS System information data Optional

GPS GPS data Not optional, must upload

GSM GSM data Not optional, must upload

COT COT data Optional

ADC Analog to digital converter data Optional

DTT Device status data Optional

Reserved Reserved Reserved

ETD Event data Optional

(7) , Packet tail

Identify the ending of a packet, and is constant to "#".

4.3.3.2 The batch data packets

Batch packet separator is $, batching packet is for multiple offline (GPRS) packets processing, combined into a packet,

and only contains a packet header and tail. Each sub-packet is separated by $. One batch packet maximum length is

1024 bytes.

Format: <packet header>,<protocol version number>,<device IMEI number>,<sub-packet1>$<sub-packet2>…$<sub-

packet N><packet tail>

Sub data packet N format:

In single data packet format remove <packet header>, <protocol version number>, <the device IMEI No.>, and

<packet tail>, other fields for sub data packet of the batch data packet.

Time and date Separator Event Separator Data field

Event <HHMMSSDDMMYY> , <event> , SYS,…, ETD

Regular <HHMMSSDDMMYY> , Null , SYS,…, FUL

101

Skypatrol SP9700 Protocol V1.04

Example:

Batch packet Remark

*GS46,356496042429597,154812300713,,SYS:SKYPATROL;V1.01;,GPS:A;8;N23.164408;E113.

428512;0;56;43;1.20$154822300713,,SYS:SKYPATROL;V1.01;,GPS:A;8;N23.164408;E113.4285

12;0;56;43;1.20$154832300713,,SYS:SKYPATROL;V1.01;,GPS:A;8;N23.164408;E113.428512;0;

56;43;1.20$154842300713,,SYS:SKYPATROL;V1.01;,GPS:A;8;N23.164408;E113.428512;0;56;4

3;1.20$

154852300713,,SYS:SKYPATROL;V1.01;,GPS:A;8;N23.164408;E113.428512;0;56;43;1.20

$154902300713,,SYS:SKYPATROL;V1.01;,GPS:A;8;N23.164408;E113.428512;0;56;4

3;1.20 #

Packet header

Protocol version

Device IMEI

The first packet

Packet separator

The second packet

Packet separator

The third packet

Packet separator

The fourth packet

Packet separator

The fifth packet

Packet separator

The sixth packet

Packet tail

4.3.3.3 Connect the data packet (heartbeat)

It is the first data packet after establishing GPRS connection, or for regularly sent to keep the GPRS online connection.

*GS 46 , 357852034572894 #

Packet header Version No. Separator Device IMEI No. Packet tail

4.3.3.4 SYS sub-packet

This packet data is for system data, including the device name, hardware version and firmware version.

Format: < identifier >:<device name>;<firmware version>;<hardware version>

Example:

SYS: SKYPATROL;V1.01;V1.01

SYS: SKYPATROL;V1.01;V1.01

System data identifier <device name>;<firmware version>;<hardware version>

102

Skypatrol SP9700 Protocol V1.04

4.3.3.5 GPS sub-packet

This packet is for GPS location information data.

Format:

<identifier>:<locating sign>;<satellite number>;<latitude>;<longitude>;<speed>;<azimuth

angle>;<altitude>;<HDOP>;<VDOP>

Example:

GPS:A;8;N23.164351;E113.428515;0;0;37;0.85;0.35

GPS: GPS data identifier

A; GPS locating sign, A: 3D successfully positioning; B: 2D successfully positioning L: latest

valid positioning V: not positioning

4; Current available GPS satellite numbers

N23.164351; Latitude, identification method, N: north,S: south

E113.428515; Longitude, identification method, E: east, W: west

0; Speed, unit: Km/h

0; Azimuth angle

37; Altitude, unit: meter, integer, range -9999 - +9999

0.85; Horizontal dilution of precision, range 0 – 99.99, decimal

0.35 Vertical dilution of precision, range 0 – 99.99

4.3.3.6 GSM sub-packet

This packet is for GSM basic information and base station information.

Format (maximum 7 base stations):

<identifier>:<registration status>;<signal

strength>;<MCC1 >;<MNC1 >;<LAC1 >;<CID1 >;<RSSI1 >;<MCC2 >;<MNC2 >;<LAC2 >;<CID2 >;<RSSI2 >;<MCC3 >;<MN

C3 >;<LAC3 >;<CID3 >;<RSSI3 >;;<MCC4 >;<MNC4 >;<LAC4 >;<CID4 >;<RSSI4 >;<MCC5 >;<MNC5 >;<LAC5 >;<CID5 >;<R

SSI5>;;<MCC6>;<MNC6>;<LAC6>;<CID6>;<RSSI6>;<MCC7>;<MNC7>;<LAC7>;<CID7>;<RSSI7>

Example (1 base station):

GSM: 5;4;460;0;2731;BB41;-82

GSM: GSM data identifier

5; REG registration status, integer , range is “0 to 5”

4; CSQ Signal strength, integer , range is “0 to 5”

460; MCC1 GSM network country code,3 digits or 5 digits, if invalid this field will be “65535” or “0”

0; MNC1 GSM operator code,2 digits or 3 digits or 5 digits, if invalid this field will be “65535” or “0”

2731; LAC1 HEX, Occupy 2 bytes, if invalid this field will be “65535” or “0”

BB41; CID1 HEX, Occupy 2 bytes, if invalid this field will be “65535” or “0”

-82 RSSI1 GSM received Signal strength, unit is dBm

103

Skypatrol SP9700 Protocol V1.04

Note: This form is for 1 base station information, GSM data can carry up to 7 base stations information, each base

station data format keeps same.

Registration value

Value Explanation SMS/Voice/GPRS connectivity

0 Fail to register, device is not trying to register to any mobile network ×

1 Register successfully √

2 Fail to register, but device is trying to register to mobile network again ×

3 Register intention is being rejected by mobile network ×

4 Unknown reason ×

5 Register to roaming network successfully √

CSQ signal level

Value RSSI

0 <= -112dBm

1 <= -97dBm

2 <= -82dBm

3 <= -67dBm

4 <= -52dBm

5 >= -51dBm

4.3.3.7 COT sub-packet

This data field is for mileage and the engine running time information.

Format: <COT data>: <Mileage> ;<Engine hour>

Example:

COT: 4294967295;99999-00-00

COT: COT data identifier

4294967295; Range is “0 to 4294967295”, integer , Unit is “meter”

This value represents accumulated mileage of vehicle.

99999-00-00; Time format:<Hour>-<Minute>-<Second>, range is “0-0-0~99999-0-0”

This value represents accumulated engine running hours.

104

Skypatrol SP9700 Protocol V1.04

4.3.3.8 ADC sub-packet

This data field is for internal and external battery pack voltage information and the AD1/IN1 pin voltage information.

Format: <AD data identifier> :< External battery supply voltage> ;< Backup battery voltage>;< AD1/IN1 pin voltage>

Example:

ADC: 12.60; 3.99; 29.00

ADC: 12.60; 3.99; 29.00

Identifier External battery supply

voltage value, unit is “V”

Backup battery voltage

value, unit is “V”

Device temperature

value,, unit is ℃

4.3.3.9 DTT sub-packet

This data field is for device status information, IO status information, Geo- fence status information and event

information.

Format: <Device status data identifier> :<Device status> ;<IO status> ;<Number 0 to 119 Geo-fence status>;

<Number 120 to 155 Geo-fence status> ;<Main Event status> ;<Packet type identifier>

Example:

DTT:10;01;01;01;01;1

<Device status>:

HEX, maximum 4 bytes, MSB first, i.e.: 0x10 = 0000 0000 0001 0000. According to the "Appendix 2 Device status

information table" obtained that the current status of the idle status.

<I/O status>:

HEX, maximum 2 bytes, MSB first, i.e.: 0x01 = 0000 0000 0000 0001. According to the "Appendix 3 Device status I/O

information table" obtained that the current "AD1/IN1 as digital input IN1” is for high level, the other is low level or closed.

< Number 0 to 119 Geo-fence status>:

HEX, maximum 15 bytes, i.e.: 0x01 = 0000 0000 0000 0001. According to the "Appendix 4 Number 0 to 119 Geo-fence

status information table" obtained that the device is within the range of “Geo-fence #1”.

<Number 120 to 155 Geo-fence status>:

HEX, maximum 4 bytes, i.e.: 0x01 = 0000 0000 0000 0001. According to the "Appendix 4 Number 120 to 155 Geo-fence

status information tables" obtained that the device is within the range of “Geo-fence #121”.

<Main Event status>:

HEX, maximum 8 bytes, the trigger status can be manually or automatically reset to zero by command. i.e.: 0x01 =

0000 0000 0000 0001. According to the "Appendix 1 Device event ID table" obtained that “Tow event” has been triggered

and not cleared.

105

Skypatrol SP9700 Protocol V1.04

<Packet type identifier>:

HEX, maximum 2 bytes

Value Definition

0 Event

1 Periodical report

2 Fix-distance

3 Fix-angle

4 PRQ request

5 Moving status, from GPS invalid to GPS valid

6 Enter into international roaming

7 Update APN, server configuration

8 Reserved

9 SMS forward report

10 Serial port transparent upload

11 Over mileage report

12 Fixed time upload

4.3.3.10 ETD sub-packet

This data field is for trigger event data information.

Format: <Identifier> :<data field>

Example:

ETD:11;30

ETD: 11; 30

Event data identifier data field data field

Data content definition is decided by event ID

Event name Format Remarks

Over speed ETD: speed Speed: GPS speed when event generated. Unit: Km/h

Geo-fence ETD: time; speed; fence number; status

Time Local time when generate geo-fence event, format: hour/minute/second/day/month/year

Speed Speed when generate geo-fence event, unit: Km/h

Fence number

Fence number of triggering geo-fence event

status Bit 0 1

0 Outside geo-fence Inside geo-fence

1 Inside preset speed range

Outside preset speed range

106

Skypatrol SP9700 Protocol V1.04

External battery

Battery

AD1

ETD: voltage value Voltage value: The current voltage when triggering event, unit: V

Harsh behavior, collision, turnover

ETD:<acceleration value>

Reflect the harsh behavior; collision event generated by the acceleration value is positive; Turnover event of acceleration is the acceleration value of car gravity direction.

Low balance

information

ETD:<current balance> <current balance>: SIM card balance when generating event

GSM register

event (only for

dual SIM card)

ETD; CCID OF SIM

CARD

CCID code of current SIM card

Hardware

malfunction

alarm

ETD; malfunction alarm

value

Bit Definition Value 0 Value 1

0 3D sensor Normal Malfunction

1 GPS Normal Malfunction

Others reserved

4.4 HEX encoding

4.4.1 Protocol format

4.4.1.1 HEX General Symbols

No. Symbol Definition

1. F8 Packet start & end marks

2. 1B Data escape special characters

4.4.1.2 Escape character set

F8 is packet header and tail. The rest of data such as F8、1B need to decode. The decode method is to put the data

and 1B xor, get the data XX, and generate after adding 1B to the front. i.e.1BXX

Data packing sequence: Original data -> Generate the verification code -> Escape - > add packet header & packet tail

Data unpacking sequence: Obtain the packet data - >Anti-escape - > Verification->Original data

Data packet escape

before F8 1B

after 1BE3 1B00

Data un-packet anti-escape

before 1BE3 1B00

after F8 1B

4.4.1.3 Data verification

Calibration algorithm uses CRC16-CCITT, it will check data start from the second byte (exclude the packet head and

107

Skypatrol SP9700 Protocol V1.04

tail [F8] and the two bytes which represent CRC result before packet tail [F8]). If the CRC failed please check if packet

data contains 1B00 or 1BE3. If the data contains any of these then need change as above table. 1B00 needs to

change 1B and 1BE3 needs to change F8 before decoding the data. Details please refer to the below examples.

Generate polynomial X16+X12+X5+1

Abridged way 1021

Standard reference ISO HDLC, ITU X.25, V.34/V.41/V.42, PPP-FCS

Note: the server-side should decode data first then for verification.

Below examples are the three types of raw data and processing mode.

Example 1: Original data contains 1B00 or 1BE3, NEED to decode first.

Original Data:

F8 16 04 01 44 3B 34 37 D5 41 00 97 01 21 CF 1B E3 E0 03 3F 14 03 47 37 39 15 56 31 2E 33 30 26 56 31 2E 30 2E 35

32 01 01 13 00 3F 47 01 49 84 46 02 56 0E 44 00 00 00 00 00 1B 00 00 93 09 02 1A 40 03 07 DD A6 6B 44 05 04 03 38

D9 51 04 03 55 12 12 0C 03 02 30 00 21 00 31 00 41 00 51 01 3F 04 41 0C 0D A5 03 41 05 7E 03 41 51 01 04 41 10 02

74 03 41 0F 5C 03 41 11 2E 04 41 1F 00 00 06 41 01 00 04 00 00 14 49 02 01 FF FF FF FF FF FF FF FF FF FF FF FF FF FF

FF FF FF 03 41 0D 00 04 00 00 24 BB 57 A0 F8 EB

After decoding:

F8 16 04 01 44 3B 34 37 D5 41 00 97 01 21 CF F8 E0 03 3F 14 03 47 37 39 15 56 31 2E 33 30 26 56 31 2E 30 2E 35 32

01 01 13 00 3F 47 01 49 84 46 02 56 0E 44 00 00 00 00 00 1B 00 93 09 02 1A 40 03 07 DD A6 6B 44 05 04 03 38 D9 51

04 03 55 12 12 0C 03 02 30 00 21 00 31 00 41 00 51 01 3F 04 41 0C 0D A5 03 41 05 7E 03 41 51 01 04 41 10 02 74 03

41 0F 5C 03 41 11 2E 04 41 1F 00 00 06 41 01 00 04 00 00 14 49 02 01 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

FF 03 41 0D 00 04 00 00 24 BB 57 A0 F8 EB

Example 2: Original data include 1B00, according to the rules in HEX format, 2 characters as one byte, and this “1B00”

not contain in two bytes, NO NEED to decode.

F8 16 04 01 44 3B 34 37 D5 41 00 97 01 21 CF A2 8A 03 3F 14 03 47 37 39 15 56 31 2E 33 30 26 56 31 2E 30 2E 35 32

08 00 13 00 3F 46 01 48 91 B0 02 56 AE CC 00 0C 01 5D 00 16 00 C0 09 02 1A 40 03 08 53 DC 49 5F 05 04 03 38 52 97

04 03 7C 12 10 0C 03 02 70 04 21 00 31 00 41 00 51 02 3F 04 41 0C 09 F6 03 41 05 5B 03 41 51 01 04 41 10 04 7C 03

41 0F 49 03 41 11 37 04 41 1F 00 AB 06 41 01 00 04 00 00 14 49 02 01 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

FF 03 41 0D 06 04 00 00 12 8B 00 97 01 21 CF A2 8A 03 3F 14 03 47 37 39 15 56 31 2E 33 30 26 56 31 2E 30 2E 35 32

09 00 13 00 3F 46 01 48 91 B0 02 56 AE CC 00 0C 01 5D 00 16 00 C0 09 02 1A 40 03 08 53 DC 49 5F 05 04 03 38 52 97

04 03 7C 12 10 0C 03 02 70 04 21 00 31 00 41 00 51 05 3F 04 41 0C 09 F6 03 41 05 5B 03 41 51 01 04 41 10 04 7C 03

41 0F 49 03 41 11 37 04 41 1F 00 AB 06 41 01 00 04 00 00 14 49 02 01 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

FF 03 41 0D 06 04 00 00 12 8B 31 44 F8 10

108

Skypatrol SP9700 Protocol V1.04

Example 3: if the two bytes before packet tail as 1B00 or 1BE3, NEED to decode.

Sample 1

Original Data:

F8 16 04 01 44 3B 34 37 D5 41 00 52 01 21 D5 12 3B 00 3F 14 03 47 37 39 15 56 31 2E 33 30 26 56 31 2E 30 2E 35 32

24 06 13 00 3F 47 01 48 C9 18 02 56 4D 7C 00 10 01 5F 00 36 00 88 09 02 1A 40 03 08 53 8A 85 4E 05 04 03 3C B5 4B

04 03 63 12 11 0C 03 02 78 04 21 00 31 00 41 00 51 02 2B 1B E3 F8 E3

After decoding:

F8 16 04 01 44 3B 34 37 D5 41 00 52 01 21 D5 12 3B 00 3F 14 03 47 37 39 15 56 31 2E 33 30 26 56 31 2E 30 2E 35 32

24 06 13 00 3F 47 01 48 C9 18 02 56 4D 7C 00 10 01 5F 00 36 00 88 09 02 1A 40 03 08 53 8A 85 4E 05 04 03 3C B5 4B

04 03 63 12 11 0C 03 02 78 04 21 00 31 00 41 00 51 02 2B F8 F8 E3

Sample 2

Original Data:

F8 16 04 01 44 3B 34 37 D5 41 00 97 01 21 CF B4 D0 03 3F 14 03 47 37 39 15 56 31 2E 33 30 26 56 31 2E 30 2E 35 32

33 00 13 00 3F 47 01 48 36 9A 02 56 D0 0C 00 0C 01 47 00 1B 00 00 66 09 02 1A 40 03 08 53 70 DD 45 05 04 03 38 67

54 04 03 72 12 12 0C 03 02 70 04 21 00 31 00 41 00 51 03 3F 04 41 0C 0B 50 03 41 05 71 03 41 51 01 04 41 10 02 2A

03 41 0F 57 03 41 11 2C 04 41 1F 00 64 06 41 01 00 04 00 00 14 49 02 01 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

FF FF 03 41 0D 0C 04 00 00 14 BC B2 1B 00 F8 2F

After decoding:

F8 16 04 01 44 3B 34 37 D5 41 00 97 01 21 CF B4 D0 03 3F 14 03 47 37 39 15 56 31 2E 33 30 26 56 31 2E 30 2E 35 32

33 00 13 00 3F 47 01 48 36 9A 02 56 D0 0C 00 0C 01 47 00 1B 00 66 09 02 1A 40 03 08 53 70 DD 45 05 04 03 38 67 54

04 03 72 12 12 0C 03 02 70 04 21 00 31 00 41 00 51 03 3F 04 41 0C 0B 50 03 41 05 71 03 41 51 01 04 41 10 02 2A 03

41 0F 57 03 41 11 2C 04 41 1F 00 64 06 41 01 00 04 00 00 14 49 02 01 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

FF 03 41 0D 0C 04 00 00 14 BC B2 1B F8 2F

109

Skypatrol SP9700 Protocol V1.04

4.4.2 Data report format

4.4.2.1 Single packet structure analysis

Data report with the following types of data packets:

(1), Event packet

(2), Regular packet

Packet format table

Head

Ver.

Types IMEI

No.

Time &

Date

Event ID Master

data mask

Data field CRC check

code

Tail

1B 1B 1B 7B 4B 1B 2B NB 2B 1B

Event

F8

46 <Type

>

<IMEI>

<TIME>

<Event>

<Mask>

<SYS>…<ETD>

<CRC>

F8

Regular

F8

46 <Type

>

<IMEI>

<TIME>

Null

<Mask>

<SYS>…<DTT>

<CRC>

F8

(1), Packet header

Identify the beginning of a packet, and is constant to "0xF8".

(2), Protocol version

Identify device protocol version.

(3) , Packet type

Bit Definition Value 0 Value 1

0-5 BCD encoding 1: Regular packet 2: SMS forwarding data 3: Serial pass-through data 4: Mixed packet 4: Mixed packet Other reserved

6 Packet type All data packets generated by

non-events

Data packet generated by events triggered,

with<Event ID> data field

7 Device IMEI No. format Long format, currently only

supports this format

Short format

(4) , IMEI number

Fixed length is 7bytes. i.e.: IMEI HEX. (5) , Time and date

4 bytes unsigned integer data, high byte before, and the low byte in the back, from January 1, 2000. 0 hour 0 minute

0 seconds begin to count until the current second.

e.g. 195A7F9Eh = 4253611310d = 425361310s,i.e. current time is 2013-06-24 03:55:10

(6) , Event ID

Only exist in event trigger uploading packet, this field is null if for regular packet.

e.g. 8F

110

Skypatrol SP9700 Protocol V1.04

Check mode:

8Fh = 10001111b

Bit7 is 1 in example, can confirm the “row” in the table (status change 1)

01111b = 15d represent event ID is 15, can confirm the “line” in the table.

Use the “line” and “row” intersection to confirm the specific sub-event.

So 8F represent specific sub-event of exit the setting range of temperature.

(7) , Master data uploading mask

Display the data type that the current device chooses to upload, according to parameters of ADM command can

select whether to upload each data field, each sub data contained in master data can configure by command SDM.

Bit Main data items Definition 0 1

0 <SYS> System information data No Yes

1 <GPS> GPS data Mandatory uploading, but the sub-data can be

chosen to upload by SDM command. 2 <GSM> GSM information

3 <COT> COT data No Yes

4 <ADC> ADC data No Yes

5 <DTT> Status data No Yes

6 Reserved Reserved No Yes

7 ETD Event data No Yes

8 Reserved

9 Reserved

10 Reserved

11 Reserved

12 Reserved

13 Reserved

14 Reserved

15 Reserved

4.4.2.2 The batch data packet

Batch packet is for multiple offline (GPRS) packets processing, combined into a packet and save to flash. One batch

packet maximum length is 1024 bytes.

Format:

<Packet header><protocol version ><device IMEI number><packet type ><sub packet1 total length><sub packet1

data type><sub packet1 data field><sub packet2 total length><sub packet2 data type><sub packet2 data field><sub

packet3 total length><sub packet3 data type><sub packet3 data field>…<sub packet N total length><sub packet N

data type><sub packet N data field>

111

Skypatrol SP9700 Protocol V1.04

<Sub packet N total length >: Including the total length for <sub packet1 data type> and <sub packet1 data field>.

<sub packet1 data type>: Determines whether the data field contains the event ID field

Sub packet N data field format:

In single data packet format to remove <packet header>, <protocol version number>, <the device IMEI No.>,<CRC

check code> and <packet tail>, the other fields for sub data packet of the batch data packet. As follows:

Sub data packet N data field format table:

Time and date Event ID Master data mask Data field

4B 1B 2B NB

Event <TIME> <Event> <Mask> <SYS>…<ETD>

Regular <TIME> Null <Mask> <SYS>…<DTT>

Example:

F8 Packet header 1byte

46 Protocol version 1 byte

04 The batch packets contain mixed data type 1 byte

01 3F B8 22 12 70 2F Device IMEI number 7 bytes

00 1E Sub packet1 total length 2 bytes

02 Sub packet1 data type identifier, here is

SMS channel forwarding packet

1 byte

08 91 0D 68 31 29 46 14 65 F0 12 4E 2D 56 FD 00 2E 5E

7F 5D DE 00 2E 79 D1 5B 66 57 CE

Sub packet1 data field uncertain

00 39 Sub packet2 total length 2 bytes

41 Sub packet2 data type identifier, here is

regular packet

1 byte

1A BE A7 36 86 00 35 14 06 47 37 33 37 49 43 15 56 30

2E 30 35 26 56 31 2E 30 2E 32 09 02 1C C0 00 25 03 96

2C 51 04 01 74 11 74 0C 03 01 40 80 21 00 31 00 41 40

51 00

Sub packet2 data field uncertain

00 38 sub packet3 total length 2 bytes

01 sub packet3 data type identifier, here is

regular packet

1 byte

1A BE A7 3F 00 35 14 06 47 37 33 37 49 43 15 56 30 2E

30 35 26 56 31 2E 30 2E 32 09 02 1C C0 00 25 03 96 2C

51 04 01 74 11 74 0C 03 01 40 80 21 00 31 00 41 00 51

01

Sub packet3 data field uncertain

00 1C sub packet4 total length 2 bytes

112

Skypatrol SP9700 Protocol V1.04

01 sub packet4 data type identifier, here is

regular packet

1 byte

04 91 0D 68 31 29 46 14 65 F0 10 47 55 41 4E 47 20 5A

48 4F 55 20 43 48 49 4E 41

Sub packet4 data field uncertain

00 38 sub packet5 total length 2 bytes

01 sub packet5 data type identifier, here is

regular packet

1 byte

1A BE A7 49 00 35 14 06 47 37 33 37 49 43 15 56 30 2E

30 35 26 56 31 2E 30 2E 32 09 02 1C C0 00 25 03 96 2C

51 04 01 74 11 74 0C 03 01 40 84 21 00 31 00 41 00 51

01

Sub packet5 data field uncertain

00 38 sub packet6 total length 2 bytes

01 sub packet6 data type identifier, here is

regular packet

1 byte

1A BE A7 53 00 35 14 06 47 37 33 37 49 43 15 56 30 2E

30 35 26 56 31 2E 30 2E 32 09 02 1C C0 00 25 03 96 2C

51 04 01 74 11 74 0C 03 01 40 80 21 00 31 00 41 00 51

01

Sub packet6 data field uncertain

00 3A sub packet7 total length 2 bytes

02 sub packet7 data type identifier, here is

regular packet

1 byte

08 91 0D 68 31 29 46 14 65 F0 2E 4E 2D 56 FD 00 2E 5E

7F 5D DE 00 2E 79 D1 5B 66 57 CE 00 47 00 75 00 61 00

6E 00 67 00 5A 00 68 00 6F 00 75 00 43 00 68 00 69 00 6E

00 61

Sub packet7 data field uncertain

0038 sub packet8 total length 2 bytes

01 sub packet8 data type identifier, here is

regular packet

1 byte

1A BE A7 5D 00 35 14 06 47 37 33 37 49 43 15 56 30 2E

30 35 26 56 31 2E 30 2E 32 09 02 1C C0 00 25 03 96 2C

51 04 01 74 11 74 0C 03 01 40 80 21 00 31 00 41 00 51

01

Sub packet8 data field uncertain

00 38 Sub packet9 total length 2 bytes

01 Sub packet 9 data type identifier, here is

regular packet

1 byte

113

Skypatrol SP9700 Protocol V1.04

1A BE A7 67 00 35 14 06 47 37 33 37 49 43 15 56 30 2E

30 35 26 56 31 2E 30 2E 32 09 02 1C C0 00 25 03 96 2C

50 04 01 74 11 74 0C 03 01 40 84 21 00 31 00 41 00 51

01

Sub packet 9 data field uncertain

00 38 Sub packet 10 total length 2 bytes

01 Sub packet10 data type identifier, here is

regular packet

1 byte

1A BE A7 71 00 35 14 06 47 37 33 37 49 43 15 56 30 2E

30 35 26 56 31 2E 30 2E 32 09 02 1C C0 00 25 03 96 2C

50 04 01 74 11 74 0C 03 01 40 80 21 00 31 00 41 00 51

01

Sub packet10 data field Uncertain

00 38 Sub packet 11 total length 2 bytes

01 Sub packet 11 data type identifier, here is

regular packet

1 byte

1A BE A7 7B 00 35 14 06 47 37 33 37 49 43 15 56 30 2E Sub packet 11 data field Uncertain

30 35 26 56 31 2E 30 2E 32 09 02 1C C0 00 25 03 96 2C

50 04 01 74 11 74 0C 03 01 40 80 21 00 31 00 41 00 51

01

74 07 CRC check code 2 bytes

F8 Packet tail 1 byte

4.4.2.3 Connect the data packet (heartbeat packet)

It is the first data packet after establishing GPRS connection, or for regularly sent to keep the GPRS online connection.

F8 46 00 013FB822050D1D 2D77 F8

Packet header Version Packet type IMEI No. need to be converted to Decimal CRC check code Packet tail

4.4.2.4 SMS forwarding packet

This packet is only for HEX encoding format, the device received the message from other phone number then

through GPRS channel to send to the server.

Packet format table:

Header Ver. Packet type IMEI No. SMS data field CRC check code Packet tail

1B 1B 1B 7B NB 2B 1B

F8 46 02 <IMEI> <SMS> <CRC> F8

SMS data field format:

Data type Phone No. type Phone No. length Phone No. Data length Data

114

Skypatrol SP9700 Protocol V1.04

“04”: 8bit

“08”: UNICODE

“81”: Unknown encoding mode

“91”: International encoding mode

“A1”: Domestic encoding mode

1byte 1byte 1byte 2~12byteS 1byte 0~140byteS

4.4.2.5 SYS sub packet

This packet is for system data, including the device name, hardware version and firmware version.

Format: <system information data field total length><sub-data1 identifier and data field length><sub-data1 data

field>…<sub-data N identifier and data field length><sub-data N data field>

System sub-data ID table, max. 16bytes

ID Sub-data type definition Data field length

0 Device name Less than 15 bytes

1 Firmware version number Less than 8 bytes

2 Hardware version number Less than 8 bytes

Note: In < sub-data identifier and data field length >, <sub-data identifier> occupies 4 high bits, <data field length>

occupies 4 low bits.

Example:

11 03473153 1556312E3030265668312E3032

(Corresponding ASCII code: SKYPATROLV1.00 Vh1.02)

<Sub-data N identifier and data field length><sub-data N data field>

11 system information data segment total length

11h = 17d represent system information data segment total length is 17 bytes

1 byte

03 sub-data1 identifier and data field length, high bits are in front, high 4 bits are

sub-data1 identifier, low 4 bits are data field length

3h = 3d represent sub-data1 data field length is 3 bytes

1 byte

473153 sub-data1 data field unfixed byte

15 sub-data2 identifier and data field length, high bits are in front, high 4 bits are

sub-data2 identifier, low 4 bits are data field length

5h = 5d represent sub-data2 data field length is 5 bytes

1 byte

56312E3030 sub-data2 data field unfixed byte

115

Skypatrol SP9700 Protocol V1.04

4.4.2.6 GPS sub packet

This packet is for GPS location information data.

Format:

<GPS data field total length>;<GPS sub-data mask>; <locating sign and satellite number>;<latitude and

longitude>;<speed>;<azimuth angle>;<altitude>;<HDOP>;<VDOP>

GPS sub- data mask table

Bit Definition 0 1 Data length

0 Locating sign and valid satellite number Not upload Upload 1 byte

1 Latitude

Not upload

Upload 8 bytes

Longitude

2 Speed Not upload Upload 2 bytes

3 Azimuth angle Not upload Upload 2 bytes

4 Altitude Not upload Upload 2 bytes

5 HDOP Not upload Upload 2 bytes

6 VDOP Not upload Upload 2 bytes

7 Location status, only valid for TXT format Not upload Upload 0

Example:

15007F48016175DD06C2C8E800000000004B007C007D

116

Skypatrol SP9700 Protocol V1.04

15 GPS data length, ”15” represent 21bytes 1 bytes

007F GPS Sub-data mask, refer to “GPS sub- data mask table” 2 bytes

48 Fix sign and valid satellite number.

Bit0-bit4: Valid satellite number, BCD code

Bit5-Bit6: GPS fix sign, BCD code, And “00”: not fixed, “01”:2D fixed, “10”: 3D

fixed.”11”: last positioning data

1 byte

016175DD Latitude

4bytes signed integer

Positive represents north-latitude, minus represents south-latitude.

E.g.: 0x016175DD, convert to decimal 23164381, divided by 1000000, which

represent 23.164381 degree north-latitude.

4 bytes

06C2C8E8 Longitude

4bytes signed integer

Positive represents east-longitude, minus represents west-longitude

E.g.: 0x06C2C8E8, convert to decimal 113428712, divided by 1000000, which

represent 113.428712 degree east-longitude

4 bytes

003C Speed

2bytes signed integer, “0x003C” converts to decimal is “60”, which represent

speed is 60 km/h (3Ch=60d).

2 bytes

0000 Azimuth

2bytes unsigned, HEX

2 bytes

004B Altitude

2bytes signed integer, HEX, high byte ahead.

“0x004B” converts to decimal is “75”, range is “-9999 to +9999”, unit is “meter”

2 bytes

007C <HDOP> Horizontal Dilution Of Precision

2bytes unsigned integer, HEX, high byte ahead.

The data value is HDOP value divided by 100

007Ch=124d, which represent HDOP value for 1.24

Rang is 0 to 99.99

2 bytes

007D <VDOP> Vertical Dilution Of Precision

2bytes unsigned integer, HEX, high byte ahead.

The data value is VDOP value divided by 100

007Dh=125d, which represent VDOP value for1.25

Rang is 0 to 99.99

2 bytes

117

Skypatrol SP9700 Protocol V1.04

4.4.2.7 GSM sub packet

This packet is for GSM basic information and base station information.

Format: <GSM data field total length>;<GSM sub-data mask><registration status>;<signal strength>;<MCC1 and

MNC1 >;<LAC1 >;<CID1 >;<RSSI1 >….<MCC7 and MNC7>;<LAC7>;<CID7>;<RSSI7>

Example (3 base station data):

1A0F141CC0002503962C401CC000273140F4561CC0002731BB4266

(Corresponding ASCII code: GSM:1;4;460;0;2503;962C;-64;460;0;2731;40F4;-86;460;0;2731;BB42;-102)

1A GSM data field total length,

0Ah=10d which represent GSM data total length for 10bytes

1byte

0F Sub-data mask, refer to “GSM sub-data mask table” 1byte

14 Register status and signal strength, high 4bits represent network register

status, low 4bits represent signal strength.

1byte

1CC000 <MCC1 “mobile country code” and MNC1 “mobile network code”> 3bytes

2503 <LAC1> : GSM main base station zone code

HEX, converts to decimal is “9475”

2bytes

962C < CID1>: GSM main base station ID

HEX, converts to decimal is “38444”

2bytes

40 <RSSI1>: GSM signal strength

HEX, converts to decimal is “64”, which represent strength is “-64dBm”.

1byte

1CC000 <MCC2: GSM mobile country code and MNC2: mobile network code> 3bytes

2731 <LAC2>: GSM main base station zone code

HEX, converts to decimal is “10033”

2bytes

40F4 <CID2>: GSM main base station ID

HEX, converts to decimal is “16628”

2bytes

56 <RSSI2>: GSM signal strength

HEX, converts to decimal is “86”, which represent strength is “-86dBm”.

1byte

1CC000 <MCC3: GSM mobile country code” and MNC3: mobile network code> 3bytes

2731 <LAC3>: GSM main base station zone code

HEX, converts to decimal is “10033”

2bytes

BB42 <CID3>: GSM main base station ID

HEX, converts to decimal is “47938”

2bytes

66 <RSSI3>: GSM signal strength

HEX, converts to decimal is “102”, which represent strength is “-102dBm”.

1byte

118

Skypatrol SP9700 Protocol V1.04

GSM sub-data mask table:

Bit Definition 0 1 Data length

0 Registration status and signal strength level Not upload Upload 1 byte

1 No.1 base station information Not upload Upload 8 bytes

2 No.2 base station information Not upload Upload 8 bytes

3 No.3 base station information Not upload Upload 8 bytes

4 No.4 base station information Not upload Upload 8 bytes

5 No.5 base station information Not upload Upload 8 bytes

6 No.6 base station information Not upload Upload 8 bytes

7 No.7 base station information Not upload Upload 8 bytes

4.4.2.8 COT sub packet

This data field is for mileage and the engine running time information.

Format: <COT data segment total length><Sub-data ID and data length><Sub-data field>

Example:

0B0203E81297C224200003E8

(Corresponding ASCII code: COT: 1000; 10:47:30; 0P1000)

06 COT data field total length

06h = 11d represent COT data segment total length is 11 bytes.

1byte

02 Sub-data1 identifier and data field length

Bit 4 – 7 represent sub-data1 identifier

Bit 3 – 0 represent sub-data1 data field length

1byte

03E8 Sub-data1 field Unfixed byte

12 Sub-data2 identifier and data field length

Bit 4 – 7 represent sub-data2 identifier

Bit 3 – 0 represent sub-data2 data field length

1byte

97C2 Sub-data2 field Unfixed byte

24 Sub data 1 identifier and data field length

Bit 4- bit 7 means sub data 1 identifier

Bit 3-bit 0 means sub data 3 data field length

1 byte

2 Sub data 3 data field type identifier

High 4 bits: 1 means frequency, unit is Hz; 2 means pulse

Uncertain bytes

00003E8 Pulse number

00003E8h = 1000d means pulse number as 1000.

119

Skypatrol SP9700 Protocol V1.04

COT sub-data identifier, BCD encoding

Bit Definition Data length

0 Mileage Less than 5 bytes

1 Engine hour Less than 5 bytes

Mileage:

HEX, converting to decimal represent cumulative mileage value, unit is “meter”. e.g.: “0x03E8” convert to decimal is

“1000”, which represent 1000 meters.

Engine hour:

HEX, converting to decimal represent total time for engine hour, unit is “second”. e.g.: “0x97C2” convert to decimal

is “38850”, which represent 38850 seconds (10H: 47M: 30S)

4.4.2.9 ADC sub packet

This data field is for internal and external battery pack voltage information and the AD1/IN1 pin voltage information.

Format: <AD data segment total length><sub-data identifier and data field>

<Sub-data identifier and data field>: HEX, Fixed 2 bytes.

Format:

Parameter id(high 4 bit)+ parameter value(low 12 bit)

Parameter id is range from 0-F,this ID decides the latter parameter “parameter value” character, the definition

as follows,

Id=0:Represent external battery voltage Id=1

:Represent build-in battery voltage Parameter

value:AD value, Algorithm as follow,

AD_VAL = HEX to DEC (parameter value)* (AD_MAX – AD_MIN)/4096 + AD_MIN

DEXIMAL (parameter value) is converted “parameter value” into decimal

The range of current voltage value definition is AD_MIN:”-10”, AD_MAX:”100”,unit is V

ADC sub-data identifier, BCD encoding

Value Definition 0 1 ASCII data length HEX data length

0 External battery voltage Not upload Upload <=5Bytes 2 Bytes

1 Backup battery voltage Not upload Upload <=5Bytes 2 Bytes

2 Device temperature value Not upload Upload <=5Bytes 2 Bytes

3 Revered

4 Revered

5 Revered

6 Revered

7 Revered

120

Skypatrol SP9700 Protocol V1.04

Example:

06032012083320

06 AD data segment total length

06h = 6d represent ADC data segment total length is 6 bytes

1byte

0 Sub-data 1 identifier 2bytes

320 Sub-data1 data field

320h = 800d, 800*(100-(-10))/4096+(-10)=800*110/4096-10=11.48V

1 Sub-data 2 identifier 2bytes

208 Sub-data2 data field

208h = 520d, 520*(100-(-10))/4096+(-10)=520*110/4096-10=?V

3 Sub-data 3 identifier 2bytes

320 Sub-data3 data field

320h = 800d, 800*(100-(-10))/4096+(-10)=800*110/4096-10=11.48V

4.4.2.10 DTT sub packet

This data field is for device status information, IO status information, Geo- fence status information and event

information.

Format:

<DTT data segment total length><sub-data identifier and data field><sub-data field>

<sub-data identifier>: Occupy high 4 bit

<data field>: Occupy low 4 bit

DTT sub-data identifier, BCD encoding

Value Definition Data length

0 Device status Less than 4bytes

1 IO status Less than 2bytes

2 0 – 119 Geo-fence status Less than 16bytes

3 121 – 156 Geo-fence status Less than 6bytes

4 Trigger event status Less than 8bytes

5 Packet type 1 byte

<Device status>:

HEX, maximum 4 bytes, MSB first, i.e.: 0x10 = 0000 0000 0001 0000. According to the "Appendix 2 Device status

information table" obtained that the current status of the idle status.

<I/O status>:

HEX, maximum 2 bytes, MSB first, i.e.: 0x01 = 0000 0000 0000 0001. According to the "Appendix 3 Device status I/O

information table" obtained that the current "AD1/IN1 as digital input IN1” is for high level.

< Number 0 to 119 Geo-fence status>:

121

Skypatrol SP9700 Protocol V1.04

HEX, maximum 15 bytes, i.e.: 0x01 = 0000 0000 0000 0001. According to the "Appendix 4 Number 0 to 119 Geo-fence

status information table" obtained that the device is within the range of “Geo-fence #1”.

<Number 120 to 155 Geo-fence status>:

HEX, maximum 4 bytes, i.e.: 0x01 = 0000 0000 0000 0001. According to the "Appendix 4 Number 120 to 155 Geo-fence

status information tables" obtained that the device is within the range of “Geo-fence #121”.

<Triggered event status>:

HEX, maximum 8 bytes, the trigger status can be manually or automatically reset to zero by command. i.e.: 0x01 =

0000 0000 0000 0001. According to the "Appendix 1 Device event ID table" obtained that “Tow event” has been triggered

and not cleared.

<Packet type identifier>:

Maximum 2 bytes, BCD encoding:

Value Definition

0 Event

1 Periodical report

2 Fix-distance

3 Fix-angle

4 Enter into international roaming

5 Update APN, server configuration

6 Fix-mileage

7 Fix-time point

4.4.2.11 ETD sub packet

This data field is for triggered event data information.

4.4.2.11.1 Speed event

Example: 0302006D

Format: <speed event data segment total length>< sub-data identifier and data field length><data field>

03 Speed event data segment total length

03h = 3d represent speed event data segment total length is 3bytes

1byte

02 Sub-data identifier and data field length

Bit 4 – 7 represent sub-data identifier

Bit 3 – 0 represent sub-data data field length

1byte

006D Current speed value

006Dh = 109d represent current speed is 109Km/h

2bytes

122

Skypatrol SP9700 Protocol V1.04

4.4.2.11.2 Geo-fence event

Example:

120619A52DBA00641A080309010A020B010C03

Format: <Geo-fence event data segment total length>< sub-data identifier and data field

length><time><speed><data identifier and data field length><fence number and status data>

12 Geo-fence event data segment total length

12h = 18d represent Geo-fence event data segment total length is 18bytes

1byte

06 Data identifier and data field length

Bit 4 – 7 represent sub-data identifier

1byte

Bit 3 – 0 represent sub-data data field length

19A52DBA Time and date 4bytes

0064 Speed

0064h = 100d represent the current speed is 100Km/h

2bytes

1A Data identifier and data field length

Bit 4 – 7 represent sub-data identifier

Bit 3 – 0 represent sub-data data field length

2bytes

08 Geo-fence number

08h = 8d represent the No.8 Geo-fence

2bytes

03 Geo-fence status data

Bit 1:1 represents going to fence, 0 represents going out fence

Bit 0:1 represents over speed, 0 represents normal speed

2bytes

09 Geo-fence number

09h = 9d represent the No.9 Geo-fence

2bytes

01 Geo-fence status data

Bit 1:1 represents going to fence, 0 represents going out fence

Bit 0:1 represents over speed, 0 represents normal speed

0A Geo-fence number

0Ah = 10d represent the No.10 Geo-fence

2bytes

02 Geo-fence status data

Bit 1:1 represents going to fence, 0 represents going out fence

Bit 0:1 represents over speed, 0 represents normal speed

0B Geo-fence number

0Bh = 11d represent the No.11 Geo-fence

2bytes

123

Skypatrol SP9700 Protocol V1.04

01 Geo-fence status data

Bit 1:1 represents going to fence, 0 represents going out fence

Bit 0:1 represents over speed, 0 represents normal speed

0C Geo-fence number

0Ch = 12d represent the No.12 Geo-fence

2bytes

03 Geo-fence status data

Bit 1:1 represents going to fence, 0 represents going out fence

Bit 0:1 represents over speed, 0 represents normal speed

4.4.2.11.3 Voltage input event data Example: 030202BE

Format: <voltage input event data segment total length ><sub data identifier and its data length ><data field>

03 voltage input event data segment total length 03h = 3d: data segment total length is 3 bytes

1 byte

02 Sub data identifier and its data field length bit4 –bit7 represent sub data identifier bit3 – bit0 represent sub data field length

1 byte

02BE data field, voltage value 02BEh = 885d/100 =8.85V

2 bytes

4.4.2.11.4 Harsh behaviors, collision and turn-over event

Data format:

<Emergency driving and accident event data segment total length><sub data identifier and data field length><X axis

data><Y axis data >

Example: 0504FF9C00D7

05 Speed event data segment total length

05h = 5d means health information event data segment total length as 5 bytes

1byt

04 Sub data identifier and data field length

Bit 4 –bit7 means sub data identifier

Bit 3 – bit 0 means sub-data data field length

1byte

FF9C X axis data, signed non-integer

FF9Ch = 990d/1000 = -0.099g

2bytes

00D7 Y axis data, signed non-integer

00D7h = 215d/1000 = 0.215g

2bytes

124

Skypatrol SP9700 Protocol V1.04

4.4.2.11.5 Balance notification event data

Example: 03020008

Format:

<Data segment total length of balance reminding event><sub data identifier and its data length><data field>

03 Data segment total length of voltage input event

03h = 3d represents data segment total length is 3 bytes

1byte

02 Sub data identifier and its data field length

Bit4-bit7 represent sub data identifier

Bit 3-bit 0 represent sub data field length

1byte

0008 Data field, balance value

0008h = 8d

2bytes

<data>: HEX, analysis way,” 0x0008” converts to “8”, unit: accordance with USSD information.

GSM register event data Example:

0B0A89860090191149028636

Format:

<GSM register event data segment total length><sub data identifier and data length><data field>

0B GSM register event data segment total length

0Bh = 11dmeans the total length of data segment as 11 bytes

1byte

0A Sub data identifier and data field length

Bit 4 –bit 7 means sub daa identifier

Bit 3 – bit 0 means sub-data data field length

1byte

0008 Data field , CCID

89860090191149028636h = “89860090191149028636”

10bytes

Hardware malfunction alarm event data

Example:03020001

Format:

<Hardware malfunction alarm event data segment total length><sub data identifier and data length><data field>

03 Hardware malfunction alarm event data segment total length 03h = 3d means data segment total length as 3 bytes

1byte

02 Sub data identifier and data field length Bit 4 – bit 7means sub data identifier Bit 3 – bit 0 means sub-data data field length

1byte

0001 Data field, hardware malfunction value: Bit represent:

Bit Definition Value 0 Value 1

0 3D sensor Normal Malfunction

1 Other

GPS Reserved

Normal Malfunction

2bytes

125

Skypatrol SP9700 Protocol V1.04

4.5 Serial pass-through data packet

Bidirectional communication of this data packet only with HEX format, 384 bytes maximum downlink, 1024 bytes

maximum uplink (with decode data). Maximum uplink receives length 800bytes, maximum 1017 bytes after decoding.

4.5.1 Device to server

Report GPS position

F8 Packet header 1byte

46 Protocol version 1byte

03 Serial data identifier 1byte

07 Auxiliary data is according to command PKI, details as below:

07h=00000111b

1byte

Bit Definition Value 0 Value 1

0 GPS or GSM (used

when invalid GPS)

Not report Report

1 Date and time Not report Report

2 Device IMEI NO. Not report Report

3 GPS speed Not report report

4

5

6

7

55 GPS speed,, need to convert to decimal first, unit is km/h 1byte

013FB822100776 Device IMEI No. , need to be converted to decimal 7bytes

1AA75B75 Date and time, need to be converted to decimal 4bytes

01 GPS position mark, BCD encoding

0: without any position information

1: position information for GPS

2: position information for GSM

1bytes

03537B40 Longitude 4bytes

023C82A8 Latitude 4bytes

3E00071DB603490CA6 Serial peripheral data field Unfix bytes

3CFB CRC verify code 2bytes

F8 Packet tail 1byte

Report GSM position

F8 Packet header 1byte

46 Protocol version 1byte

03 Serial data identifier 1byte

126

Skypatrol SP9700 Protocol V1.04

07 Attached data type set by PKI command, details see following form:

07h=00000111b

1byte

Bit Definition Value 0 Value 1

0 GPS or GSM (used

when invalid GPS)

Not report Report

1 Date and time Not report Report

2 Device IMEI NO. Not report Report

3 GPS speed Not report Report

4

5

6

7

55 GPS speed, need to convert to decimal first, unit is km/h 1byte

013FB821FE1F10 Device IMEI No. , need to be converted to decimal 7bytes

1AA033BB Date and time, need to be converted to decimal 4bytes

02 GPS position mark, BCD encoding

0: without any position information

1: position information for GPS

2: position information for GSM

1bytes

1CC0002503962C3D GSM BS information(MCC/MNC/LAC/CID/RSSI) 8bytes

FF0012FF Serial peripheral data field Unfix byte

22E5 CRC verify code 2bytes

F8 Packet tail 1byte

4.5.2 Server to device

Need to follow the third chapter: data decoding

F8 Packet header 1byte

46 Protocol version 1byte

03 Serial data identifier 1byte

00 Serial port peripheral No. 1byte

0203C4F6 This data field will be forwarded to the serial port peripheral Unfix byte

2D77 CRC verify code 2bytes

F8 Packet tail 1byte

127

Skypatrol SP9700 Protocol V1.04

4.5.3 Serial port configuration

Command EPS set serial port transfer parameters, command EPM set serial port operation mode

Operation Mode Explanation

0 Disable serial No.

1 Transparent, RS232 peripheral decides packet interval

2 Transparent, Device decides packet interval

3 GARMIN protocol, this function is reserved

4 Using external GPS input as the GPS data source

5 Connect MDT mode

6 Idata filter data mode

Command EPT configuration extension serial port receive time intervals under ON ACC and OFF ACC different state

4.6 Connect data packet

It is the first packet after setting up GPS connection, or use for regular sending to keep GPRS connection online.

ASCII encoding

Format:

<Data packet head><protocol version>, <IMEI number>, <time>, <GPS data >, <data packet tail>

Format 1:

GPS data only make a packet for LON & LAT data.

Example:

*GS46, 356496042429597, 154812300713, GPS: N23.164408; E113.428512#

Format2:

GPS data make a packet for all data.

Example:

*GS46,356496042429597,154812300713,GPS:A;11;S31.987490;E115.935720;19;178;25;0.82#

HEX encoding

<Data packet head><protocol version><data packet type><IMEI number><time and date><GPS data length><GPS

data mask><positioning mark and valid satellite

number ><LON&LAT><speed><azimuth><altitude><HDOP><VDOP><CRC verification><data packet tail>

Example:

F8 Data packet head 1 byte

46 Protocol version number 1 byte

03 Serial port data identifier 1 byte

013FB822100776 Device IMEI number, need to covert to decimal first 7 bytes

1AA75B75 Time and date, need to convert to decimal first 4 bytes

15 GPS data segment total length

15h=21d, represents GPS data segment total length is 21

bytes

1 byte

128

Skypatrol SP9700 Protocol V1.04

007F GPS sub data mask

Specific bit definition refer to GPS sub data mask table

2 bytes

48 Positioning mark and valid satellite number

Bit 0 – bit 4 as valid satellite number, BCD encode

Bit 5- bit 6 as GPS positioning status, BCD encode

0 as no positioning, 1 as 2D positioning, 2 as 3D positioning

1byte

016175DD Latitude

4 bytes signed integer data

Positive represents North, negative represents negative

Data value is degree, means value divined into 1000000

016175DDh = 23164381d, means North latitude is

23.164381 degree

4 bytes

06C2C8E8 Longitude

4 bytes singed integer data

Positive means East, negative means West

Data value is degree, means value divined into 1000000

6C2C8E8h = 113428712d, that is East longitude is

4 bytes

113.428712 degree

003C Speed

2bytes no singed integer data

3Ch = 60d, means speed value is 60 km/h

2 bytes

0000 Azimuth

2 bytes no signed integer data

2 bytes

0048 Altitude

2 bytes singed integer data

004Bh = 75d, that is altitude value is +75 meters

Range is -9999 to +9999

2 bytes

007C HDOP

2bytes no singed integer data

Data value is HDOP value divine 100

007Ch = 124d, that is HDOP value is 1.24

Range is 0 ti 99.99

2 bytes

007D VDOP

2bytes no singed integer data

Data value is VDOP value divine 100

007Dh = 125d, that is HDOP value is 1.25

Range is 0 to 99.99

2 bytes

3CFB CRC verification code 2 bytes

F8 Data packet tail 1 byte

129

Skypatrol SP9700 Protocol V1.04

4.7 Data packing process

Steps as follows:

1, Generate original data;

2, CRC validation of the original data (only available for Hex data);

3, Data decode;

4, Packing (plus packet header and packet tail).

5. Device function and configuration

5.1 Event management and configuration

5.1.1 Event introduction

Change in certain status of the device as an event. Event is divided into single event and combination event,

combination event is obtained by single event configuration. Events can be enable and disable, it can configure the

action after the event generated (upload data, etc.) and can name the event.

5.1.2 Single event and combination event

The process mode is the same after generating single event and combination event, 56~63 # events as a

combination event, the contents and effective time of combination event is set by the ERL0~ERL7 command.

Combination event is composed by less than five or more than two single events, there is only "AND" relation among

the events, and can’t be composed another combination event again. Any single event in combination event

generated to start timing, within the effective time all other single events are generated to get combination event, if

over the effective time then the condition of generating combination event start again. Once a combination event is

generated, all the events in the combination event list need to be generated again to re-create the combination

event.

Example: ERL;15;10;1;11;1 Reply: ERL:15;10;1;11;1

The contents of the set number 56 event (combined event) appear once in 15 seconds to enter the event and leave

the event.

5.1.3 Name event

Name event is to configure specific event name from user SMS to facilitate the user to identify the event content.

Combined event (56~63 event) only can be named status 0.

Example:

ENM10;;Accident Reply: ENM:;Accident

10# event is named for Accident.

130

Skypatrol SP9700 Protocol V1.04

5.1.4 Event disable

If need the device to upload data or generate vibration etc. after the event is generated, it is required to enable the

event. ESM command in accordance with sub-event mask and sub-event status mask to configure event disable,

enable and erase types.

The erase types of event have automatic and manual modes. Automatic mode is to clear the event status after

completion of event corresponding to the action. Manual mode is to maintain the event status and can’t generate

the same event again until event status cleared.

Example:

ESM0;ff;ff;ff;df Reply: ESM:ff;ff;ff;df

5.1.5 Modes of event action execution

Through the EUP command, each event can be configured for six action modes: related to the IO output, upload

data to user 0, upload data to user 1, upload data to administrator, upload data to GPRS server, prior to upload data

to GPRS server, if failure then save the offline data and upload data to the administrator.

Example:

EUP5;1;1;3 Reply: EUP5:1;1;3

EUP5;2;1;3 Reply: EUP5:2;1;3

EUP5;4;1;0;0 Reply: EUP5:4;1;0;0

EUP5;5;1;1;2 Reply: EUP5:5;1;1;2

Set # 5 event (Geo-fence event) to upload data to user 0 and user 1 every one minute, total for 3 times; According to

ADM2 configuration content, upload data to the SMS server; Upload to GPRS server disable action; In accordance

with the ADM2 configuration content, priority upload to the GPRS server, if successful ,that is over, if failure then

save data to offline and upload to the SMS server.

All execution settings for all events can be cleared through the EUC command.

Example:

EUC Reply: EUC

When event related to IO output, need to set IO output mode by EOB command, and then configuration IO output

by EUP command.

Example:

EOB5;0;0;4 Reply: EOB5:0;0;4

EUP5;0;1;1 Reply: EUP5:0;1;1

131

Skypatrol SP9700 Protocol V1.04

5.1.6 Query and clear for event status

Event status can be included in the upload data, also can query through the ETT command. Event status by HEX

format, corresponding bit of event number reflects the status of the event, 0 for non-event, 1 for event.

Event status by 16 decimal format, the event number corresponds to the status of the event is reflected in the event,

0 for non-event, 1 for the event. Event status can also be cleared through ETC command.

Example:

ETT Reply: ETT:20

ETC Reply: ETC

Related command: ERL、ENM、ESM、EUP、EUC、ETT、ETC

5.2 Geo-fence management and configuration

5.2.1 Geo-fence introduction

Total of 156 Geo-fences can be configured, the first 28 can be set up to 32 polygon fences, and then for 128 circular

fences. The fence to enter & exit can associate with speed, time, HDOP.

5.2.2 Enable Geo-fence

Configure user Geo-fence mask by UFM command.

Example:

UFM;1 Reply:UFM:1

Set Geo-fence enable or disable by GOF command.

Example:

GOF;FFFF Reply: GOF:FFFF

5.2.3 Set Geo-fence

Configuration of Geo-fence by GFS command can enable the speed, time and DHOP relevance.

Example:

GFS0;4;1A Reply: GFS0:4;E01A

GFS0;P;0;41.777456;-83.553771;1;42.147114;-84.660644;2;41.211721;-84.550781;3;41.129021;-83.001708

Reply: GFS0:P;0;41.777456;-83.553771;1;42.147114;-84.660644;2;41.211721;-84.550781;3;41.129021;-83.001708

GFS0;T;7E;08:30-17:30 Reply: GFS0:T;7E;08:30-17:30;00:00-00:00;00:00-00:00

GFS0;S;70;100 Reply GFS0:S;70;100

GFS; H; 0.8; 5.0 Reply: GFS0: H; 0.8; 5.0

GFS0 Reply: GFS0:4; E01B

132

Skypatrol SP9700 Protocol V1.04

Set 4 vertex polygons Geo-fence, enable the input and output of Geo-fence detection. Set the associated detection

time for 8:30 to 17:30 from Saturday to Monday. Set the associated detection speed to 70~100 range. When the

device is in the range of 70~100 during the detection time and the related HDOP is within the range of setting, the

Geo-fence event alarm is generated.

Clear all Geo-fence parameters settings by command GFC.

Example:

GFC Reply: GFC

5.2.4 Geo-fence information query

GTT command can be used to query the Geo-fence status and the alarm status of Geo-fence. The fence status

displays the condition of device outside the fence.

In each change of Geo-fence status will clear the alarm.

When all Geo-fences status of device doesn’t have fence alarm, then Geo-fence status is 0; any Geo-fence has fence

alarm then Geo-fence status is 1.

Geo- fence detected 5 fences per second, when the detected Geo-fence from no alarm to alarm then Geo-fence

event is triggered. The alarm fence #, time and speed value will be carried in Geo- fence event data.

Related to the command UFM, GOF, GFS, GFC, GTT

5.3 Profile management

5.3.1 Profile command list configuration

5.3.1.1 Introduction

The device can set the command to profile command list to execute corresponding file command in different

conditions, and reach the realization of toggle for the scene or mode.

0# profile is default storage OEM initialization command list, 1~5# profile is used for toggling of scene mode. Profile

can be named and toggled in accordance with the name. It can’t exceed 4096 bytes.

5.3.1.2 Upload and download of profile

Profile is uploaded to PC or downloaded to the device via USB cable or PPWC by complying Ymodem protocol.

Through YSF command achieve the upload of command profile list.

Example:

YSF;0 Reply: YSF:0

Upload the OEM default initialization command list profile to the device, after command execution by complying

Ymodem protocol to achieve the file transmission.

Example:

YGF;1 Reply: YGF:1

133

Skypatrol SP9700 Protocol V1.04

Read the 1# command list profile from the device to PC, after command execution by complying Ymodem protocol

to achieve the file transmission.

5.3.1.3 Toggle command list profile on conditions

Toggle configuration profile on condition by FRL command, when all selected conditions are satisfied, device will

automatically toggle among configuration profiles. 0# profile is default OEM initialization command list profile and

unable to associate the toggle condition. This feature is invalid at the first 15 seconds of tracker firmware

initialization.

Example:

FRL1; 7; 7 Reply: FRL1:7; 7

First “7” represents Bit2 & Bit1 &Bit0 need to be related

Second “7” represents all events from “domestic roaming & backup battery abnormal & external battery supply

abnormal” are satisfied, profile #1 will be executed.

FRS1; 7; 7

First “7” represents Bit2 & Bit1 &Bit0 need to be related

Second “7” represents any event from “domestic roaming & backup battery abnormal & external battery supply

abnormal” is satisfied, profile #1 will be executed.

It can be directly through the YCF command to achieve the toggle of command list profile.

Example:

YCF; 2 Reply: YCF: 2

YCF; 0 Reply: YCF: 0

The device in turn executes the configuration command of 2# file. And 0# files to recover to the OEM initialization

status.

5.3.1.4 Name and toggle of command list profile

Profile can be named by FNM command. Maximum 15 characters and can’t be escape characters.

Example:

FNM1; sleep mode reply: FNM1: sleep mode

Profile 0 is named for sleep mode.

It can toggle the profile directly by the name of profile. Note that the name must be the same as the name in FNM

command.

Example:

FCH; sleep mode Reply: FCH: sleep mode

134

Skypatrol SP9700 Protocol V1.04

5.3.1.5 Command list profile query

CFN command can be used to query which profile is currently used.

Example:

CFN Reply: CFN:1

5.3.1.6 Export the current profile

Export the current profile via the CTF command and upload it to the PC via Ymodem protocol.

Example:

CTF Reply: CTF

After command is executed by complying with Ymodem protocol achieve the file transmission.

Related to commands: YSF, YGF, FRL, FRS, YCF, CFN, FNM, FCH

5.3.2 Save and load of current configuration

5.3.2.1 Introduction

It can save multiple backups for configuration command parameters of the device, the status of the device can be

restored to the backup status when appropriate. The backup of the device configuration is unable to read out,

except for APN configuration and Geo-fence configuration.

5.3.2.2 Save current configuration as profile

SCF command is used to save current command parameters of device as backup.

Example:

SCF;1 Reply: SCF:1

5.3.2.3 Load pre-saved configuration file

RCF command is used to load pre-saved backup to current command parameter.

Example:

RCF;1 Reply: RCF:1

5.3.2.4 Export the current configuration file

Export the current profile via the CTF command and upload it to the PC via Ymodem protocol.

Example:

CTF Reply: CTF

Send Ymodem protocol after executed command to achieve the file transmission.

Related commands: SCF,RCF,CTF

135

Skypatrol SP9700 Protocol V1.04

5.4 Data transmit and receive channel

5.4.1 Channel introduction

Device supports multi-channel data reported: SMS channel, GPRS channel, Bluetooth channel. According to the

command configuration to achieve a channel or multi-channel data reported at the same time. Each channel can be

toggled independently by DUO command.

Example:

DUO;1;1;0 Reply: DUO:1;1;0

Enable GPRS and SMS channel data upload, disable Bluetooth channel data upload. No matter how the Bluetooth

channel configuration will no longer generate the channel data.

5.4.2 SMS channel

5.4.2.1 Data format of channel support protocol

SMS channel reported data using ASCII encoding format, SMS server reported data format same as GPRS server

reported data using ASCII coding format.

5.4.2.2 User SMS data report mode

5.4.2.2.1 Hyperlink Report

If user sends SMS with hyperlink format, device will send hyper link information to the user's mobile, and the

following information will be sent together.

GSM: GSM signal strength Ext_Pwr: External battery voltage BAT: Battery voltage #: Numbers of Consumed SMS

Example: Static link: URL0;http: //maps.google.com/staticmap?zoom=14&size=300x300&markers =%n(,%e& sensor=false

Base station: URL1;http://wap.anttna.com/cell2gps/cell2gps2(.php?lac=%A&cellid=%D&z=14&w=300&h=300&t=1

Dynamic link: URL0;http://maps.google.com/maps?q=%n(,%e&t=m&z=16

Format for device sending message:

1) GPS is fixed

Content of message Explanation

SKYPATROL V1.00 Device name/Firmware version

LTM 2013-06-06 14:17:12 Date/Time (LTM-local time, UTC-Greenwich time)

http://maps.google.com/maps?q=23.164 Google map hyper link

374,113.428576&t=m&z=16

GSM -52dBm GSM network signal strength

BAT=3.86V Battery voltage

#30 Consumed messages

136

Skypatrol SP9700 Protocol V1.04

2) GPS is not fixed

If set URL1 to “Null”, send GSM information with text format; if set URL not to ” Null”, then report information

format determined by URL1 configuration.

5.4.2.2.2 ASCII format report

If user sends SMS with TXT format, device will send location information with TXT format to the user's mobile, and

the following information will be sent together.

SPD: Speed and azimuth (GPS is fixed)

GSM: GSM signal strength

BAT: Battery voltage

#: Numbers of Consumed SMS

Format for device sending message:

1) GPS is fixed

Content of message Explanation

SKYPATROL V1.00 Device name/Firmware version

LTM 2013-06-06 09:41:22 Date/Time (LTM-local time, UTC-Greenwich time)

GPS 1.55/0.50/3/4 HDOP/ALTITUDE in meter/Fixed satellite number/Time of first fixed

N23.164302 N represent north/S represent south

E113.428456 E represent east/W represent west

SPD:0km/h 0 Speed/ Azimuth

GSM -52dBm GSM signal strength

BAT=3.96V Battery voltage

#27 Consumed messages

2) GPS is not fixed

Content of message Explanation

SKYPATROL V1.00 Device name/Firmware version

LTM 2013-02-28 23:51:09 Date/Time (LTM-local time, UTC-Greenwich time)

MCC/MNC/LAC/CID/RSSI Base station information type

460/0/2503/962C/-53dBm Main station, MNC/MNC/Local area code/Station ID/signal strength

460/0/2731/40F4/-60dBm Neighbor station 1

460/0/2703/4050/-70dBm Neighbor station 2

GSM -58dB GSM network signal strength

BAT=4.17V Battery voltage

#20 Consumed messages

137

Skypatrol SP9700 Protocol V1.04

5.4.2.2.3 Event report

If assign event is triggered, device will send notify SMS to user according to the setting. Format as below:

Location information (GPS location information or base station information) + event information.

Example:

“T” mode format

Content of message Explanation

SKYPATROL V1.00 Device name/Firmware version

LTM 2013-06-06 09:41:22 Date/Time (LTM-local time, UTC-Greenwich time)

GPS 1.55/0.50/3/4 HDOP/ALTITUDE in meter/Fixed satellite number/Time of first fixed

N23.164302 N represent north/S represent south

E113.428456 E represent east/W represent west

SPD:0km/h 0 Speed/ Azimuth

ETD:6/ACC ON Event ID/User defined event name/Data

GSM -52dBm GSM network signal strength

BAT=3.96V Battery voltage

#28 Consumed messages

GFC event format

Content of message Explanation

SKYPATROL V2.15 Device name/Firmware version

UTC 2013-08-09 15:43:01 Date/Time (LTM-local time, UTC-Greenwich time)

GPS 2.00/1000/8/13 HDOP/ALTITUDE in meter/Fixed satellite number/Time of first fixed

N25.142268 N represent north/S represent south

E113.000000 E represent east/W represent west

SPD:111km/h 0 Speed/ Azimuth

ETD:5/2013-08-09 GFC event, time, speed, GFC number and GFC status, 10 represent in GFC, the

15:43:00/111km/h/No0 10 speed isn’t over.

GSM -51dBm GSM network signal strength

BAT=0.03V Battery voltage

#4 Consumed messages

“W” mode format

Content of message Explanation

SKYPATROL V1.00 Device name/Firmware version

LTM 2013-06-06 14:17:12 Date/Time (LTM-local time, UTC-Greenwich time)

http://maps.google.com/maps?q=23.164374,113.428576&t=

m&z=16

Google map hyper link

138

Skypatrol SP9700 Protocol V1.04

ETD:6/ACC ON Event ID/User defined event name/Data

GSM -52dBm GSM network signal strength

BAT=3.86V Battery voltage

#301 Consumed messages

5.4.2.3 Data upload configuration

5.4.2.3.1 SMS upload configuration

SMS server settings

SSN command is used to SMS server number configuration

Example:

SSN;+8613912345678 Reply: SSN:+8613912345678

Dynamic and static, timed upload settings

SSP command is to set static mode and dynamic mode, report interval, data model and data type for SMS server.

“Interval” has three kinds of time unit settings: “30 to 900 seconds”, “15 to 59 minutes”, “1 to 720 hours”.

“Report mode” has three kinds of setting also: “O”: Disable; “G”: GPS information prior, otherwise use GSM tower

position instead, GSM tower uses HEX format; “L”: Periodical voice call (Voice monitoring). Note: “L” is reserved.

“Data format” has two kinds of setting: “O”: Device will not generate data; “T”: Text, “O” mode is disable timing

upload, the purpose is to save power mode in time to wake up the module to deal with SMS etc.

Example:

SSP;0;5M;G;T Reply: SSP:0;5M;G;T

SSP;1;30M;G;T Reply: SSP:1;30M;G;T

Set dynamic upload interval for 5 minutes, GPS data first upload, for text format; Set static upload interval for 30

minutes, GPS data first upload, for text format.

5.4.2.3.2 User upload function

User setting

UNO command is to set up 2 users phone number, with the correct password, any phone number is able to use this

command. When the phone number is not the user number, this command can’t use the command combination

function.

Example:

UNO0;13912345678 Reply: UNO0:13912345678

UPW0;1234 Reply: UPW0:1234

UNO1;+8613912345679 Reply: UNO1:+8613912345679

139

Skypatrol SP9700 Protocol V1.04

UPW1;1235 Reply: UPW1:1235

Set the user 0 number for 13912345678, the password is 1234; set the user 1 number for 13912345679, the

password is 1235.

Hyperlink settings

If the user uses hyperlink format to send, the device will send hyperlink to the user's mobile phone, the location of

the device can be directly found on the map. Specifies that the URL0 is set based on the GPS location information of

the hyperlink and URL1 is based on the GSM base station information of the hyperlink.

Example:

URL0;http: //maps.google.com/staticmap?zoom=14&size=300x300&markers =%n(,%e&sensor=false

Reply:

URL:http: //maps.google.com/staticmap?zoom=14&size=300x300&markers =%n(,%e&sensor=false

Static link based on GPS location information:

URL0;http://maps.google.com/maps?q=%n(,%e&t=m&z=16

Reply:

URL:http://maps.google.com/maps?q=%n(,%e&t=m&z=16

Dynamic link based on GPS location information:

URL1; http://wap.anttna.com/cell2gps/cell2gps2(.php?lac=%A&cellid=%D&z=14&w=300&h=300&t=1”

Reply:

URL1: http://wap.anttna.com/cell2gps/cell2gps2.php?lac=%A&cellid=%D&z=14&w=300&h=300&t=1”

Dynamic and static, timed upload settings

USP command is to set static mode and dynamic mode, report interval, data model and data type for SMS server.

“Interval” has three kinds of time unit settings: “30 to 900 seconds”, “15 to 59 minutes”, “1 to 720 hours”.

“Report mode” has three kinds of setting also: “O”: Disable; “G”: GPS information prior, otherwise use GSM tower

position instead, GSM tower uses HEX format; “L”: Periodical voice call (Voice monitoring). Note: “L” is reserved.

“Data format” has three kinds of setting: “O”: Device will not generate data; “T”: Text; “W”: Hyperlink. “O” mode is

to shut off timing upload, the purpose is to save mode in time to wake up the module to deal with SMS etc.

Example:

USP;0;1H;G;W Reply: USP:0;1H;G;W

USP;1;24H;G;T Reply: USP:1;24H;G;T

USP1;0;1H;G;W Reply: USP1:0;1H;G;W

USP1;1;24H;G;T Reply: USP1:1;24H;G;T

140

Skypatrol SP9700 Protocol V1.04

Set the user 0, upload interval of 1 hour, GPS data priority mode, hyperlink format; when static, upload interval of 24

hours, GPS data priority mode, text format. The setting of User1 is the same as User0.

5.4.3 GPRS channel

5.4.3.1 Data format of channel support protocol

GPRS channel reported data using ASCII encoding, HEX encoding format.

5.4.3.2 Channel data upload configuration

5.4.3.2.1 Server setting

The setting of the server includes the main server (SVR command) and backup server (BSV command). When the

device fails to connect to the main server, then attempt to connect to backup server. If the device is connected to

the backup server, after a period of time (SVT command) will try to connect with the main server again, if

successfully then switch to the main server, otherwise still connected with the backup server.

The address of the server can be set to the domain name or IP address, and the domain name can’t be more than 64

bytes.

The connection mode of the server can be set as: TCP, UDP, TCP command interaction. In order to improve the

integrity of the data, we can choose to enable the server response mechanism, the response data for any length of

arbitrary data. Server must respond with any data in stipulated time, otherwise device will be considered

disconnected and save data to offline data. There are three ways for response mechanism: Disable server response;

only enable UDP response; enable both TCP and UDP response.

Example:

SVR;120.196.122.109;3556;;0;1 Reply: SVR:120.196.122.109;3556;;0;1

BSV;connect.Skypatrolsystem.com;2014;;0;2 Reply:

BSV:connect.Skypatrolsystem.com;2014;;0;2 SVT;1800;15 Reply: SVT:1800;15

The main server is set to 120.196.122.109, TCP port: 3556, TCP connection, the backup server is set to

connect.Skypatrolsystem.com, TCP port: 2014, TCP connection. Enable TCP server response mechanism, the

response time is for 15 seconds. When the device fails to connect to the main server, then attempt to connect to

backup server. When the backup server is connected to more than 1800 seconds, it will try to connect with the main

service again.

141

Skypatrol SP9700 Protocol V1.04

5.4.3.2.2 Dynamic and static, timing, fixed distance, fixed angle, fixed mileage, fixed time point upload setting

SVP command is to set static mode and dynamic mode, report interval, data model and data type for SMS server.

“Interval”: “30 to 900 seconds”, “15 to 59 minutes”, “1 to 720 hours”.

“Report mode”: “O”: Disable; “G”: GPS information prior, otherwise use GSM tower position instead, GSM tower

uses HEX format; “A”: GPS, GSM data upload at the same time.

“Data format”: “O”: Device will not generate data; “T”: Text; “B”: 16 binary formats. “O” mode is disable timing

upload, the purpose is to save power mode in time to wake up the module to deal with SMS etc.

Example:

SVP;0;30S;G;T Reply: SVP:0;30S;G;T

SVP;1;600S;G;B Reply: SVP:1;600S;G;B

Set the dynamic timing upload interval is 30 seconds, GPS data priority upload, upload data for text format. Set the

static timing upload interval is 600 seconds, GPS data priority upload, upload data for Hex format.

DIS command is to set the upload parameters of fix-distance, fix-angle and fix-mileage.

If the parameter is set to 0 means disable the corresponding upload function.

Example:

DIS;0;7;0 Reply: DIS:0;7;0

5.4.3.2.3 Batch setting

In order to save GPRS traffic, multiple data can be set for batch processing (BDU command). As long as the data

stored in a packet to meet the condition, it will be packed and upload. This function affects the real-time

performance of data upload. But when the device generates events, data forwarding, all non-upload data will be

uploaded immediately.

Example:

BDU;10 Reply: BDU:10

Pack 10 pieces of data to one packet and upload.

5.4.3.2.4 Off-line data processing

CHO command is used to query total storage of offline data, and BTB command is used to distribute offline data

space.

EFM command is to set when the device enters the non GSM/GPRS signal coverage area, the data can be saved as

enable or disable off-line data, re-established offline data upload the way after connection, also can remove the off-

line data.

Example:

EFM;1;0;1 Reply: EFM:1;0;1

EFM;1;1;1 Reply: EFM:1;1;1

140

Skypatrol SP9700 Protocol V1.04

5.4.3.2.5 Heartbeat packet setting

In idle time without data exchange, the device will send a heartbeat packet data to the server every once in a while,

which is convenient for the server to judge whether the connection of the device is disconnection or not.

Example:

HBI;20 Reply: HBI:20

Upload a heartbeat packet every 20 minutes.

5.4.4 Bluetooth channel

5.4.4.1 Data format of channel support protocol

Bluetooth channel reported data using ASCII, HEX format.

5.4.4.2 Channel data upload configuration

5.4.4.2.1 Server setting

1, Searching related device with mobile phone or Bluetooth adapter, select the device to connection (Device name is

for current device IMEI number, it can query by MEI command).

2, After opening relevant service, first need to input OEM password, enter the OEM configuration mode.

3, If need to receive data, then need to send BLD; 1 to enable the data transmission.

4, Service explanation

Service name

UUID

Explanation

BLE Data Service

0xFF12

BLE Serial Pass-through Service

5, Characteristic explanation

Characteristic Description UUID Permission Explanation

Data In 0xFF01 Write without

response

Host terminal send data to slave terminal (BLE pass-through

module) through Characteristic, maximum 20 bytes.

Data Out 0xFF02 Notify Slave terminal (BLE pass-through module) send data to host

terminal through Characteristic by Notification way,

maximum 20 bytes.

5.4.4.2.2 Dynamic and static, timing, fixed distance, fixed angle, fixed mileage, fixed time point upload setting

Same as GPRS channel setting.

5.4.4.2.3 Offline data processing

Distribute offline data space by BTB command

Example:

BTB;30 Reply: BTB:30

I.e.: Distribute 30% offline data space to Bluetooth offline

141

Skypatrol SP9700 Protocol V1.04

5.4.5 Set data uploading channel switch (DUO)

Command

word

Format Reply

DUO DUO;1;1;1

DUO

DUO:1;1;1

DUO:1;1;1

Permission OEM command □ Configuration command □ Public

Explanation This command is to toggle of data upload configuration.

Format:DUO;<SMS upload channel>;<GPRS upload channel>;<Bluetooth upload channel>

< SMS upload channel >:Toggle SMS data upload 1: Upload 0: Non-upload

< GPRS upload channel >:Toggle GPRS data upload 1: Upload 0: Non-upload

< Bluetooth upload channel>>:Toggle Bluetooth upload 1: Upload 0: Non-upload

Factory default: DUO;1;1;1

5.4.45 Specified time point upload parameter (ATP)

Command word Format Reply

ATP ATP;7;07:20:30;10:30:30;G;T

ATP

ATP:7;07:20:30;10:30:30;G;T

ATP:7;07:20:30;10:30:30;G;T

This command is to set the specified time point to upload parameter

Format: ATP;<user/server>;<time1>;<time2>;<upload mode>;<data type>

Parameter Explain:

<user/server>:

bit0:user0

bit1:user1

bit2:GPRS server

<time1>: time point 1 Hour:Minute: hh:mm

Example: 8:23

<time2>: time point 2 Hour:Minute: hh:mm Notice

If need one time point, need time 2 configure same as time 1, they are no particular order.

Time1 and time2 interval should not less than 2 minutes, otherwise the second time point may

not product data.

<upload mode>:

“O”:Disable upload “G”: GPS information prior, otherwise use GSM tower position instead, GSM tower

142

Skypatrol SP9700 Protocol V1.04

Uses HEX format “A”:upload GPS and GSM base information

<data type>:

“B”:Binary format

“T”:Text format

“W”:URL format user only Explain: If device goes into PST sleep mode, this function can wake up the device (needs to

configure DNU:1)

Factory default:ATP;0;08:30:30;20:30:30;O;T

5.5 GSM configuration

5.5.1 Balance query

BLS command is to set periodical balance notification, low balance event and query balance of SIM card.

Example:

BLS;*125#;1W;10 Reply: BLS:*125#;1W;10

USSD command for the query balance is *125#, the different operators with different command, check one time

every one week, if the balance is less than 10 then low balance event will be triggered. If “1W” and “10” are missing

then indicates the immediate report for balance information.

5.5.2 SMS counter

The number of messages sent by the device is counted by using SMS counter. SCR command is used to query the

messages that device consumed also can clear the numbers of message to zero.

5.5.3 Other information setting and query

PIN command is to set PIN number of SIM card to automatically unlock SIM card.

SCN command is to set SMS center number. The device will automatically record the SMS center number of current

configuration when using SIM card, the original configuration is cleared after replacement SIM card and use the

new SIM card comes with SMS center number.

APL or APN command is to set APN.

Device already save some APN information, when the SIM card is recognized, it will fulfill APN automatically. Use this

command can only be configured with the SIM service provider APN, the configuration of other service providers

APN will lead to GPRS connection error.

143

Skypatrol SP9700 Protocol V1.04

Automatically identify the APN command, when stored APN information from SIM card, the device according to MN

C, MCC to get APN information.

APL maximum storage is 4096 bytes, if more than 4096bytes, it will delete the first stored 10 messages.

Example:

APL;46000;CMNET;; Reply: APL:46000;CMNET;;

APN Reply: APN:CMNET;;

APN;cmnet;; Reply: APN:cmnet;;

APL;46000 Reply: APL:46000;cmnet;;

Through MEI command can query the IMEI number of GSM module.

Through MSI command can query IMSI number of SIM card.

Through CID command can query ICCID number of SIM card.

Through CSQ command can query GSM signal strength, REG command query SIM card registration status.

Through GSM command can query GSM related all information.

Related commands: PIN, SCN, APL, APN, MEI, MSI, CID, CSQ, REG, GSM,

5.6 Time zone, daylight saving time and privacy configuration

5.6.1 Time configuration

Device will get the time through the GPS and GSM two ways after on the power. Time is not valid, but GSM is

registered, GPS is invalid, start GSM time calibration if without taking up Socket 1. If GPS with 1 active satellite then

GPS calibration time is a priority. The way for GSM to get time is through the Socket1 access time.nist.gov server to

acquisition time.

TZN command is to set the local time zone. Note: The time to upload server data is UTC time, and the time of the

system is not added to the time zone.

Example:

TZN;8:00 Reply: TZN:8:00

Set the time zone to the East 8 area

It can set the system time through TIM command before GPS didn’t get the time, it can query the device UTC time

through the TIM command after GPS get the time.

Example:

TIM Reply: TIM:14.02.15-08:52:13

Related commands: TZN, TIM

5.6.2 Daylight saving configuration

DST command is to configure start time and end time of daylight saving time.

Example:

DST;03.27;10.01;00:00 Reply: DST:03.27;10.01;00:00

144

Skypatrol SP9700 Protocol V1.04

Set the daylight saving time from 00:00 March 27th at the start to 00:00 October 1st at the end.

STO command is to enable or disable configuration local time for daylight saving time. Local time will be one hour in

advance during enable daylight saving time.

Example:

STO;1 Reply: STO:1

Related command: DST, STO

5.6.3 Privacy configuration

The device can be configured to enter the privacy mode at certain hours of certain working days. The location

information of the device can’t be uploaded in the privacy mode. Privacy mode can be configured as four modes,

each mode is determined by different ways and uploaded to the server content is also different, as shown in the

following table:

Mod

e

Name Trigger condition Report data string

0 Disable As usual

1 Full-manual

privacy mode

In accordance with the DI pin

configuration, pin level is valid to enter the

privacy status, otherwise as usual.

Not report GPS/GSM

position, Report device

status (DTT)

2 Semi-manual

privacy mode

First, according to the configuration of the

DI pin, in the case of the pin level is valid,

set working day mask and time period, if

the non-working day or the rest period of

working day is to enter the privacy status,

otherwise as usual.

Not report GPS/GSM

position, Report device

status (DTT)

3 Automatically

Private mode

According to private hour range setting

only, device will switch to “Automatically”

private mode, otherwise as usual

Not report GPS/GSM

position, Report device

status (DTT)

4 Automatically

private activity

According to private hour range setting

only, device will switch to “Automatically”

private mode, otherwise as usual

Report as usual,

Report device status

(DTT)

Note: It is available to have one DI input pin (configuration range 0) for the high level, need to work in DIM; 0 mode.

145

Skypatrol SP9700 Protocol V1.04

Workday mask, “1” is working day, “0” is private day.

Bit0 Sunday

Bit1 Monday

Bit2 Tuesday

Bit3 Wednesday

Bit4 Thursday

Bit5 Friday

Bit6 Saturday

Bit7 Reserved

Time period format is hh1:mm1-hh2:mm2, only hh2:mm2 in hh1:mm1 after that time period is effective

PVM command is to configure private hour mode.

Example:

PVM;3;7C;00:00-08:30;11:30-13:30;17:30-23:59

Reply: PVM:3;7C;00:00-08:30;11:30-13:30;17:30-23:59

Configure the device at 00:00-08:30,11:30-13:30, 17:30-23:59 period of time from Monday to Friday into the privacy

mode, don’t upload device location information.

POB command is to configure digital output for private mode or private activity.

Example:

POB;0 Reply: POB:0

Related command: PVM, POB

5.7 SP9700 configuration

SP9700 is a kind of software for parameter configuration and firmware upgrade through remote management,

Administrators create assignment tasks on the SP9700 server (including parameter configuration or firmware upgrade)

for the devices they administrated. These devices will access the SP9700 server (through the command SPT

configuration) for a period time, if there is a task then completed and reported the results to the server.

The address of the server can be set to the domain name or IP address, the length of the domain name& page

address can’t be more than 64 bytes.

Example:

RCS; SP9700.Skypatrolsystems.com;8080 Reply:

RCS:SP9700.Skypatrolsystems.com;8080 RCP;/Dev.php? Reply: RCP:/Dev.php?

SPT;4H Reply: SPT:4H

LCS;4H Reply: LCS

Set the SP9700 server for “SP9700.Skypatrolsystems.com”, Port number for “8080”, access the SP9700 server page

address for “/Dev.php?”. The device to access the SP9700 server request task every 4 hours, if there is a task, the

device performs and waits for the next connection. LCS command is to visit SP9700 server immediately

146

Skypatrol SP9700 Protocol V1.04

5.8 Device behavior and mileage configuration

Device can use 3-axis acceleration sensor to monitor the emergent behaviors (harsh brake, harsh acceleration, harsh

left turn, and harsh right turn), accident (turn-over, collision). Static calibration is performed by the device

automatically. Only after device has achieved static calibration, can it monitor the accident and emergency behaviors.

CAC command is to query the 3-axis acceleration sensor calibration status. After the device is monitored by light

distance sensor, the device automatically starts static calibration after the installation status is stationary, in the

detection of the removal status will automatically cancel the calibration status. The device with not static calibration

can only detect motion and static status and can’t determine the emergency and accident.

5.8.1 Static time configuration

3D sensor static period time can be set total for 2 time periods: <time period1> and <time period2>, in this time

period the device doesn’t send the event (from movement to parking or from parking to movement) to user. Time

period must be greater than one minute.

In time period, if the first time point is larger than the second time point, then time period will start from the second time

point and end of the first time point in next day.

5.8.2 Emergency behavior Configuration

BMS command is to set parameters of the 3 axis accelerometer’s static movement and emergency behavior

monitoring.

Example:

BMS; 3; 10; 45 response: BMS:3;10;45

Set the moving detection threshold of 3D accelerated sensor as 30mg, keep in static mode for 10 seconds, the

threshold of harsh brake is 450mg. if the accelerated fluctuate arise by device moving over than 30mg, then regard

device in moving static, and if fluctuate smaller/equal to 30mg and last for 10 more seconds, then regard device in

static mode. And if the accelerate value of judging axis is over the setting threshold then regard device trigger

emergency behaviors.

BMO command is to set the static/moving detection of 3D accelerated sensor and enable/disable each emergency

behavior’s monitoring.

Example:

BMO; 1; 1 Reply: BMO: 1; 1

Enable static/moving detection of 3D accelerated sensor and monitor each emergency behavior.

Involved commands: BMS, BMO

147

Skypatrol SP9700 Protocol V1.04

5.8.3 Accident configuration

AMS command is to set 3 axis acceleration sensor (rollover accident, collision) monitoring parameters.

AMS; 150; 65

Response: AMS: 150; 65

Set collision judging threshold as 1500mg, and turnover judging threshold as 650mg. if any accelerate value on any

axis over the collision judging threshold, then regard device generates collision accident; and if accelerate value of

judging axis is smaller than the turnover threshold then regard device generates turnover accident.

Example:

AMO; 1; 1 response: AMO: 1; 1

Enable 3D accelerated sensor’s collision and turnover accident monitoring.

5.8.4 Parking status configuration

If device remains static status for more than a certain period of time, the device enters into the parking status and

the corresponding parking event will be triggered.

STP command is to set time length value of entering parking.

Example:

STP; 300 response: STP:300

Device remains static status for more than 300 seconds then indicates entering the parking status.

Involved command: STP

5.8.5 Speed configuration

SPO command is to set over speed alarm mode. Including disable over speed event report, speed enters the setting

range, speed leaves the setting range, and speed enters or leaves the range.

Example”

SPO;1 Reply: SPO:1

SPS command is to set speed range for over speed and the detection time.

Example:

SPS;100;1;10 Reply: SPS:100;1;10

Speed alarm range is 1-100Km/h, detection time is 10 seconds.

Related commands: SPO, SPS

5.8.6 Idle and tow configuration

148

Skypatrol SP9700 Protocol V1.04

5.8.6.1 Idle monitoring configuration

Idle means from the device monitoring to the engine starting but the static status exceeds the setting time.

ILO command is to set idle detection enable or disable.

Example:

ILO;1 Reply: ILO:1

ILS command is to set the detection time to enter & exit the idle status.

ILS;10;10 Reply: ILS:10;10

If the device is monitored in a static status and the engine is on for 10 seconds, the device is determined to enter the

idle status; after the device enters the idle status, if the device moves again or the engine is off for 10 seconds, the

device is determined to leave the idle status.

Related commands: ILO, ILS

5.8.6.2 Tow monitoring configuration

Tow means from the device monitoring to the engine off but under movement status exceeds the setting time.

TOW command is to set tow detection enable or disable.

Example:

TOW;1 Reply: TOW:1

5.8.7 Configuration of engine running time statistics

Engine running time is to statistics the engine start time.

ETO command is to set engine running time statistics enable or disable.

Example:

ETO;1 Reply: ETO:1

ETS command is to set initial engine hour.

Example:

ETS;88888:0:0;1 Reply: ETS:88888:0:0;1

ERT command is to query engine accumulated running time.

Related commands: ETO, ETS, ERT

5.8.8 Mileage configuration

MGE command is to set mileage statistics enable or disable.

149

Skypatrol SP9700 Protocol V1.04

Mileage statistics need GPS module in the open status all the time and it is calculated based on the method of

calculating the displacement of device per second, which is based on the GPS positioning data per second.

Example:

MGE;1 Reply: MGE:1

MGS command is to set initial value of mileage.

Example:

MGS;100000 Reply: MGS:100000

5.9 White list configuration

5.9.1 Phone number white list configuration for obtaining location

We can set phone white list to obtain the location of the device, the call from white list number dial to the device,

the call immediately hang up in after a few seconds, the device will automatically upload a location message to white

list number which requested location information.

PWL command is to configure phone number white list, up to 16 groups can be configured, ”X” means any number

will be ok.

QWL command is to enable phone number from white list for current position query purpose, device will reject the

call and reply a SMS with current position.

Example:

PWL;S;1;180XXXXXXXX;2;13512345678 Reply: PWL:S;1;180XXXXXXXX;2;13512345678

The first set of white list for any number at the beginning of the 180, the second set is 13512345678

QWL;1 Reply: QWL:1

Enable phone number from white list for current position query purpose.

5.9.2 Emergency/SOS accident white list configuration

When the device with collision or turn-over event, it will upload event to the white list number respectively.

Example:

PWL;S;1;180XXXXXXXX;2;13512345678 Reply: PWL:S;1;180XXXXXXXX;2;13512345678

Configuration phone number white list by PWL command, up to 16 groups can be configured, ”X” means any

number will be ok.

SWL;1

Enable the first set of white list number with SOS event upload.

Related commands: PWL, QWL, SWL

150

Skypatrol SP9700 Protocol V1.04

5.10 SMS forwarding configuration

Through SMT command can be configured three sets of SMS forwarding number and can be forwarded to the user 0,

user 1, SMS server or GPRS server.

Example:

SMT0;+8613926442537;U;0 Reply: SMT:+8613926442537;U;0

5.11 GPS configuration

5.11.1 AGPS configuration

AGPS is based on the before positioning information from a specific server download ephemeris acceleration GPS

positioning method.

AGP command is to set user name and password to connect with AGPS server and enable or disable AGPS.

Example:

AGP;1 Reply: AGP:1

Enable AGPS function

5.11.2 GPS information query and filter configuration

GFT command is to query the first GPS fixed time.

The GPS positioning data can be filtered and processed by the HDOP of GPS.

HOP command is to set HDOP threshold to discard inaccurate GPS positions, if HDOP bigger than this value will be

discarded, range is 2 -10.

Example:

HOP;3.0 Reply: HOP:3.0

5.12 Anti-Jamming configuration

Configuration Anti-Jamming monitoring parameters by JMP command.

Example:

JMP;30;15;120 Reply: JMP:30;15;120

Set the signal strength (RSSI) threshold of Anti-Jamming monitoring for 30, this value can be default. If there is false

alarm then can increase the value. GSM main base station changes and the signal strength is greater than 15 which

the number of set threshold indicates the detection of Jammer.

Through JAM command can configure Anti-Jamming enable or disable.

Example:

JAM;1 Reply: JAM:1

Enable Anti-Jamming monitoring function.

Related commands: JMP, JAM

151

Skypatrol SP9700 Protocol V1.04

5.13 I/O port configuration

5.13.1 Input interface configuration

SKYPATROL has 1 input interface can be configured as digital input interface also can be configured as analog

input interface.

Example:

AIM;0 Reply: AIM:0

Configure input interface for analog.

5.13.1.1 Analog input voltage query and generate event configuration

The voltage value can be queried by ADC command after the input port is configured as analog.

Example:

ADC Reply: ADC: 3.8; 3.7; 12.0

External battery voltage is for 3.8V, internal battery voltage is for 3.7V, input pin voltage is for 12V.

ASD command is for configuration of the analog input acquisition method.

Example:

ADS;1;8 Reply: ADS:1;8

Every second to start one acquisition for input pin, each acquisition is the average value of the results of the 8 rapid

acquisitions.

5.13.1.2 Digital input status query and configuration

After the input port is configured as digital, the device is still judged the high or low level by the value of ADC

conversion, higher than 3V is for high level and lower than 3V is for low level.

DIM command is for digital input configuration.

Example:

DIM;2 Reply: DIM:2

Digital input interface is used for engine status detection.

STT command is to query device level status of IO interface.

152

Skypatrol SP9700 Protocol V1.04

5.13.2 Output port configuration

The digital output interface is the output of the open drain mode and shares a PIN with the input interface.

Therefore, the PIN is unable to configure any output when doing digital input detection, so as to avoid the error

caused by input detection data.

DOM command is to configure output interface method and parameter.

Example:

DOM;4;1;3;10;0;1 Reply: DOM:4;1;3;10;0;1

DOM;5;3;1;10;1;0 Reply: DOM:5;3;1;10;1;0

In order to ensure that the output port is connected/disconnected to the power, the output port will limit the speed.

Example:

DOP;40 Reply: DOP:40

The digital interface is allowed to output when the speed is less than 40KM/H.

DOO command is to directly enable the output interface to output in accordance with the setting mode.

Example:

DOO;5 Reply: DOO:5

Output immediately in accordance with DOM; 5 configuration parameters.

5.14 Power configuration

Device supports three level power control: normal mode, power saving mode and deep sleep mode. At the same

time, the internal and external battery pack can be detected, the device and the battery life will be protected.

5.14.1 Battery configuration

PTH command is to set threshold value for low voltage event of external battery and backup battery.

Example:

PTH;35;35;30 Reply: PTH:35;35;30

The device will detect battery voltage every 30 seconds, when the battery pack is lower than the threshold value

3.5V, then will generate battery low voltage event.

ADC command can query the voltage of external battery supply and internal battery.

5.14.2 Normal mode

When GPS and GSM don’t enter the power saving mode and under non-deep sleeping configuration mode is

considered for normal working mode.

PSS0;0,PSS1;0, GSM, GPS module are in running status.

5.14.3 Power saving mode

Power saving mode includes GSM power saving, GPS power saving and Bluetooth power saving. When GSM, GPS

are under disable status and did not insert the USB debugger, MCU will enter the low power consumption status.

153

Skypatrol SP9700 Protocol V1.04

5.14.3.1 GSM module power saving

In the absence of registration timeout or no data transceiver timeout, GSM module will enter the power saving

mode. In the power saving mode, if there is SMS data sending request, query balance request or GPRS data request

(Socket can establish connection or device is in motion status before entering the power saving mode), the device

will be waken up immediately, otherwise to wake up according to the setting time.

Example:

PSS0;1;3;3;1440 Reply: PSS0:1;3;3;1440

After 3 minutes without registration or no data to send and receive idle status more than 3 minutes will enter the

power saving mode. Wake up every 1440 minutes in a power saving mode to process SMS and other data. If there is

SMS data sending request, query balance request or GPRS data request (Socket can establish connection or device is

in motion status before entering the power saving mode), the device will be waken up immediately.

5.14.3.2 GPS module power saving

The power saving mode of GPS module includes mode 1 and mode 2.

GPS module in the power saving mode 1 has no association with GSM module power saving.

GPS module in the power saving mode 1 has association with GSM module power saving.

Example:

PSS1;2;120;30 Reply: PSS1:2;120;30

When there is data to be generated, first enable GPS module, if within 120 seconds to locate the position then close

the GPS module after delay 30 seconds. Otherwise after 120 seconds delay to close the GPS module, and then open

the GSM module, generating data and upload the data.

5.14.3.3 Toggle profile mode power saving

GPO command is to control module working status and to achieve GSM, GPS and Bluetooth power off. In the

configuration file to meet a certain scenario, the power of each module can be turned off to achieve power saving

Example:

GPO;0;0;0 Reply: GPO:0;0;0

Set the GSM, GPS, and Bluetooth power all off.

5.14.4 Deep sleep mode

When the device meets certain conditions, it can enter deep sleep mode, at this time only the relevant modes which

configured wake-up conditions are in the operation, others are into the power-down mode. The minimum energy

consumption is used under this mode.

Example:

PST;8;2;1;1440 Reply:PST:8;2;1;1440

Device to enter the parking time will trigger the conditions of deep sleep, at the same time waiting for the

communication module idle and delay time, the device will enter the deep sleep mode. When the device is in status

of motion, it will be awakened and return to the normal mode.

154

Skypatrol SP9700 Protocol V1.04

In certain applications, such as when a device is stored, through CLS1 command to allow the device to enter the

deep sleep mode, only in 5 seconds, the device can be forced to swing more than 1.6g of the acceleration then the

device can be awakened.

6. Device typical application cases

155

Skypatrol SP9700 Protocol V1.04

7. ACK response explanation

7.1 ACK response chart

Device Server

BatchBuf

1 Msg_B

7.2 ACK response function explanation

Waiting for ACK response time uses Fibonacci algorithm, the waiting response time of default configured data is 15

seconds. e.g.: when the network has been in an abnormal state, waiting ACK response time of the first packet is 15

seconds, waiting ACK response time of the second packet is 30 seconds, waiting ACK response time of the third packet

is 45 seconds, waiting ACK response time of the fourth packet is 75 seconds. The timeout period is accumulated like

this until reaching the maximum of 120 seconds.

Initial waiting response time command: SVT;<Standby server longest working time>;<waiting for the server response

time>. Parameter is default 15 seconds.

All data packets reported by device (such as command reply, heartbeat packet, standard packet, serial port pass-

through packet etc.) have recorded serial number.”Seq. Value”, the serial No. starts from 0 and will cumulative 1 after

each packet is sent.

After receiving response packet, the device confirms that the record number of response packet is the latest, then the

data is sent to the server successfully and the current network connection status is normal.

The new ACK response is only applied to UDP packet, TCP packet remains constant.

156

Skypatrol SP9700 Protocol V1.04

7.3 UDP packet format with Seq. Value

7.3.1 HEX packet

Packet header Data content CRC verification F8 Serial number

F8 … … Packet end …

1 byte N bytes 2 bytes 1 byte 1 byte

Note:The serial number range is 0x00-0Xf7

7.3.2 ASCII packet

Packet header Data content # Serial number

*GSXX … Packet end …

5 bytes N bytes 1 byte 2bytes

Note:The serial number range is 0-F7, i.e. HEX text

7.4 ACK response packet format

Packet header Data content #

*GS00 ,ACK:<serial number> Packet tail

5 bytes 2 bytes 1 byte

Note:The serial number range is 0-F7, i.e. HEX text

7.5 Packet identification ID

7.5.1 Explanation

Add data ID in every packet. Accumulate from 0 to 65535 after reset, and recycle. Every time reset ID as 0. Data ID is

added to SYS data field, as long as it enables the ACK function, then automatically add no need other configuration.

7.5.2 Identification ID add to agreement

7.5.2.1 ASCII format:

<identifier>:<device name>;<firmware version>;<hardware version>;<data ID>

SYS: SKYPATROL;V1.01;V1.01;1

System information data identifier <device name>;<firmware version>;<hardware version>;<data ID>

157

Skypatrol SP9700 Protocol V1.04

7.5.2.2 HEX format:

<system information data segment total length> <sub-data 1 identifier and data field length ><sub-data 1 data

field >…

<sub-data N identifier and data length><sub-data N data field><data ID identifier and data field length><data ID

value data field>

place Sub-data type definition Value 0 Value 1 Data field length

0 Device name not upload upload No more than 15 bytes

1 Firmware version number not upload upload No more than 8 bytes

2 Hardware version number not upload upload No more than 8 bytes

3 Data ID not upload upload 2 bytes

11 03 473653 15 56312E3030 26 5668312E3032 32 0100

(ASCII code:SKYPATROL V1.00 V1.02 01)

7.6 Configuration example

Enable UDP mode and open response

SVR;183.233.129.45;;6667;1;1

Enable new response

ACK;1

Configure initial waiting response time

SVT; 1800; 15

158

Skypatrol SP9700 Protocol V1.04

8. APPENDIXES

8.1 APPENDIX1. Device event ID table

Event ID Event name Status change0 Status change1

0 Tow End tow Enter tow

1 Idle End idle Enter idle

2 Parking Move to parking Parking to move

3 Over speed Speed enters into setting range Speed is out of setting range

4 GSM jamming From jamming to no jamming From no jamming to jamming

5 Geo-fence Null Geo –fence alarm

6 GPS first time position Null GPS first time position

7 GPS from non-positioning to

positioning

Null GPS from non-positioning to

positioning

8 Emergency behavior Null Emergency behavior

9 Collision Null Harsh brake

10 Turnover Null Harsh accelerate

11 External battery Disconnect Connect

12 SOS Null SOS triggered

13 Charging Discharge Charge

14 Accelerometer calibration Null Static calibration

15 Temperature sensor Enter set range Exit set range

16 Backup battery Normal Low voltage

17 Reserved

18 IN1 From high to low From low to high

19 SIM card low balance Null Balance low notification

20 GPS non-position timeout Null Non-position timeout

21 Reserved

22 ACC From ON to OFF From OFF to ON

23 Engine From ON to OFF From OFF to ON

24 Deep Sleep mode Exit sleep mode Enter sleep mode

25 Reserved

26 Reserved

27 Reserved

28 Reserved

29 Reserved

30 Reserved

159

Skypatrol SP9700 Protocol V1.04

31 Reserved

32 Reserved

33 Reserved

34 Reserved

35 Reserved

36 Reserved

37 Reserved

38 Reserved

39 Reserved

40 Reserved

41 Reserved

42 Reserved

43 Reserved

44 Reserved

45 Reserved

46 Reserved

47 Reserved

48 Reserved

49 Reserved

50 Reserved

51 Reserved

52 Reserved

53 Reserved

54 Reserved

55 Hardware malfunction Without fault code With fault code

56 Combined event 1

57 Combined event 2

58 Combined event 3

59 Combined event 4

60 Combined event 5

61 Combined event 6

62 Combined event 7

63 Combined event 8

160

Skypatrol SP9700 Protocol V1.04

8.2 APPENDIX2. Device status information table

Bit Condition Status 0 Status 1

0 ExtBat External battery Normal Undervoltage or overvoltage

1 InterBat Backup battery Normal Under voltage or overvoltage

2 Moving Moving Stop Moving

3 SpdOver Overspeed Inside the range Out of the range

4 Idiling Idle Normal Idle

5 Tow Tow Normal Tow

6 GSM AntiJam GSM Anti-jamming Normal Jamming

7 Roaming Domestic roaming Normal Domestic roaming

8 InterRoam International roaming Normal International roaming

9 Urgent Emergency behavior Normal Harsh brake/acceleration/turning

10 Accident Accident Normal Rear/Front Collision or turn-over

11 GeoFence Geo-fence Normal Geo-fence alarm

12 Temperature Device temperature Normal Temperature too high/low

13 Charge Charge status No charger With charger

14 Stop Parking Packing Non-parking

15 WorkStatus Work status Normal Private status

17 ExtBatLow External battery Normal Low voltage

161

Skypatrol SP9700 Protocol V1.04

8.3 APPENDIX3. Device I/O information table

Bit Definition Status 0 Status 1

0

IN1 low level input port 1 status Higha

level/suspension

Low level

1 ACC Status Off On

2 Engine Status Off On

3 OUT1 status Low level High level

4

5

6

7

162

Skypatrol SP9700 Protocol V1.04

8.4 APPENDIX4. Geo-fence information table

< Number 0 to 119 Geo-fence status >

Bit explanation 0 1

0 Geo-fence #1 Device is outside Geo-fence or Geo-fence is invalid Device is inside Geo-fence

… … Device is outside Geo-fence or Geo-fence is invalid Device is inside Geo-fence

119 Geo-fence #120 Device is outside Geo-fence or Geo-fence is invalid Device is inside Geo-fence

<Number 120 to 155 Geo-fence status >

Bit Explanation 0 1

120 Geo-fence #121 Device is outside Geo-fence or Geo-fence is invalid Device is inside Geo-fence

… … Device is outside Geo-fence or Geo-fence is invalid Device is inside Geo-fence

155 Geo-fence #156 Device is outside Geo-fence or Geo-fence is invalid Device is inside Geo-fence

163

Skypatrol SP9700 Protocol V1.04

8.5 APPENDIX5. OEM command and authorization

OEM command

ID Command word Explanation Default User Admin OEM

1 DFP Factory default × × √

2 OPW Set OEM password × × √

3 ACM Administrator command mask × × √

4 UCM User command mask × √ √

5 OAS Set FOTA server × √ √

6 OAP FOTA firmware file path × √ √

7 APL APL list × √ √

8 HBI Set heartbeat packet × √ √

9 URL Set map hyper link × √ √

10 UGP Set UGP × √ √

11 CEN Enable command × √ √

12 CDS Disable command × √ √

13 SDM Sub-data report mask × √ √

14 EFM Set offline data report mode × √ √

15 ESM Sub-event mask × √ √

16 EUP Set device reaction × √ √

17 ERL Combination event × √ √

18 ADM Main data type report mask × √ √

20 DIM Set digital input mode × √ √

22 BMS Harsh behavior configuration × √ √

23 AMS Accident configuration × √ √

24 UFM Set Geo-fence mask × √ √

25 AGS Set AGPS information × √ √

27 PSS Power saving mode × √ √

28 GPO Toggle GSM/GPS module × √ √

29 YSF Load command list profile from computer to device × √ √

30 YGF Save command list profile from device to computer × √ √

31 YCF Load device existing command list profile × √ √

32 FRL Toggle configuration profile on condition (OR) × √ √

33 JMP GSM anti jamming configuration × √ √

34 FRS Toggle configuration profile on condition (AND) × √ √

35 HOP Discard GPS position by HDOP × √ √

164

Skypatrol SP9700 Protocol V1.04

36 GAT Send AT command to GSM module × √ √

37 GAM Enable AT mode of GSM module × √ √

38 EOB Time IO related parameter × √ √

39 DOM Set output port mode × √ √

40 DOP DO output speed related configuration × √ √

41

CTF Generate and export the current configuration file

CTF

×

43

SPT Set up time interval command for regularly visit

SP9700 sever SPT

×

44 LCS Immediate visiting SP9700 sever command LCS × √ √

45

RCS SP9700 sever IP/domain name, port setup command

RCS

×

46 RCP SP9700 sever visiting page path setup command RCP × √ √

165

Skypatrol SP9700 Protocol V1.04

8.6 APPENDIX6. Configuration command and authorization

Configuration command

ID Command word Explanation Default User Admin OEM

1 PIN Set SIM card PIN number √ √ √

2 SCN Set SMS center number √ √ √

3 APN Set APN √ √ √

4 SVR Set main server parameter √ √ √

5 BSV Set backup sever parameter √ √ √

6 BDU Set record batch report √ √ √

7 SVP Set GPRS server report interval mode √ √ √

8 SSP Set SMS server (admin) report interval mode √ √ √

9 USP Set user report interval mode √ √ √

10 SSN Set SMS server phone number √ √ √

11 SMT Set SMS forwarding √ √ √

12 STP Configure motion sensor parameter √ √ √

13 RST Reboot device √ √ √

14 TZN Set time zone √ √ √

15 DST Configure daylight saving parameter √ √ √

16 STO Set daylight saving √ √ √

17 PTH Power supply alarm √ √ √

18 DNU Set Report interval mode √ √ √

19 DIS Fixed distance report and cornering report √ √ √

21 PWL Phone number white list √ √ √

22 QWL Query position permitted phone number white list √ √ √

23 GFS Geo-fence status √ √ √

24 GOF Set Geo-fence √ √ √

25 BMO Set driving behavior detection √ √ √

26 AMO Set accident detection √ √ √

27 MGE Set odometer counter √ √ √

28 MGS Set odometer initial mileage √ √ √

29 SPO Set Over speed report condition √ √ √

30 SPS Over speed configuration √ √ √

31 ILO Set Idle status detection √ √ √

32 ILS Idle status configuration √ √ √

33 ETO Set engine hour counter √ √ √

166

Skypatrol SP9700 Protocol V1.04

34 ETS Engine initial hour counter value √ √ √

35 AGP Set Assist GPS √ √ √

36 SCF Save current configuration as profile to device √ √ √

37 RCF Load configuration profile √ √ √

38 PVM Private hour mode configuration √ √ √

39 SVT Set time parameter of server √ √ √

46 CAC Acceleration sensor calibration status √ √ √

47 SWL Set SOS white list parameter √ √ √

48 POB Set private mode DO output parameter √ √ √

51 PST Set deep sleep √ √ √

52 ACK UDP response mechanism √ √ √

53 PCO Set power compensation value √ √ √

167

Skypatrol SP9700 Protocol V1.04

8.7 APPENDIX7. Public command and authorization

Public command

ID Command word Explanation Default User Admin OEM

1 UNO Set user phone number √ √ √

2 UPW Set user command password √ √ √

3 USC User short command √ √ √

4 FWU Upgrade command √ √ √

5 FCL Cancel downloading remote firmware update √ √ √

6 FRC Rollback to the previous firmware version √ √ √

7 ENM Rename event for user SMS √ √ √

8 ETC Clear event status √ √ √

9 ERT Query engine working time √ √ √

10 PRQ Request to upload √ √ √

11 TIM Ready Greenwich time √ √ √

12 NAM Query product name √ √ √

13 VER Query device hardware/software version √ √ √

14 MEI Query IMEI number √ √ √

15 MSI Query IMSI of SIM card √ √ √

16 CID Query CCID of SIM card √ √ √

17 CSQ Query GSM signal strength √ √ √

18 REG Query GSM registration status √ √ √

19 SCC Clear SMS counter √ √ √

20 SCR Query SMS counter √ √ √

21 GSM Query GSM information √ √ √

22 GPS Query GPS information √ √ √

23 ADC Query ADC information √ √ √

24 GFT Query GFT information √ √ √

25 STT Query device status √ √ √

26 GTT Query Geo-fence status √ √ √

27 MGR Query mileage √ √ √

28 ETT Query event status √ √ √

29 JAM Enable JAM √ √ √

30 TOW Enable tow √ √ √

31 CFN Query current document number √ √ √

32 PTY Query current device model √ √ √

168

Skypatrol SP9700 Protocol V1.04

33 GFC Clear all geo-fence setting parameter √ √ √

34 CHC Query authorization status √ √ √

35 EUC Clear all data execute way √ √ √

36 BLS Set balance query √ √ √

37 TSP Configure separator of balance information in USSD √ √ √

38 HDU Set GPRS health detection uploading mode √ √ √

39 GVR Query model and version of GSM module √ √ √

40 SIM Query SIM card number √ √ √

41 DOO Digital output waveform by specific mode √ √ √

42 RPD Reset parameters of command √ √ √

43 CHO Query total storage of offline data √ √ √

44 BTB Distribute offline data space √ √ √

45 FNM Customize configuring file name √ √ √

46 FCH Toggle configuration mode by file name √ √ √

47 DUO Set data uploading channel √ √ √

48 CLS Send command to make device enter sleeping mode √ √ √

169

Skypatrol SP9700 Protocol V1.04

8.8 APPENDIX8. Firmware upgrade

Firmware upgrade has program backup, local upgrade and firmware over the air (FOTA) function, it can call the

previous backup firmware program when upgrading error. Command configuration parameters will be automatically

saved and restored, the newly added command or parameter if changed then needs to re-configure.

8.8.1 Remote upgrade (FOAT)

During over the air firmware upgrade process, it will not affect device current working status, and firmware

download supports “pause and resume”. Device receives upgrade command, it will download firmware from server

over GPRS, when firmware download finished device will reboot itself to initial upgrade process. If new firmware is

faulty device will restore to original firmware automatically. Related commands are FWU, FRC, FCL, OAS, OAP.

FWU command needs to pass the user name and password, only the server to confirm the user name and password

can be upgraded effectively.

FRC command is also an upgrade command, it is valid only in the case of the backup firmware integrity (i.e., the new

upgrade is not started).

FCL command is to cancel the ongoing firmware download.

Test firmware downloading path(OAP):OAP:/Skypatrol/SKYPATROL

/Debug/SKYPATROL.txt Released firmware download path(OAP):

OAP:/Skypatrol/SKYPATROL /Release/SKYPATROL.txt

Command over GPRS:

FWU format: *GS46, FWU#

Confirm reply: *GS46, 356496042429803, FWU#

Upgrade success reply: *GS46, 356496042429803, FWU:1#

Upgrade fail reply: *GS46, 356496042429803, FWU:0#

FCL format: *GS46, FCL#

Confirm reply: *GS46, 356496042429803, FCL:1#

Upgrade success reply: *GS46, 356496042429803, FCL:0#

Upgrade fail reply: *GS46, 356496042429803, FWU:0#

FRC format: *GS46, FRC#

Confirm reply: *GS46, 356496042429803, FRC:1#

Cannot execute: *GS46, 356496042429803, FRC:0#

Command over user mobile:

FWU format: 1234,FWU

Confirm reply:

170

Skypatrol SP9700 Protocol V1.04

SKYPATROL V2.19

FWU

EXT_PWR=0.00V

BAT=0.01V

#27

Upgrade success reply:

SKYPATROL V2.19

Upgrade Success!

EXT_PWR=0.00V

BAT=0.01V

#28

Upgrade fails reply:

SKYPATROL V2.19

Upgrade FAIL!

EXT_PWR=0.00V

BAT=0.01V

#28

FCL format: 1234, FCL

Confirm reply:

SKYPATROL

V2.19 FCL:1

EXT_PWR=0.00V

BAT=0.01V

#27

Cannot execute:

SKYPATROL

V2.19 FCL:0

EXT_PWR=0.00V

BAT=0.01V

#27

Command executes results reply:

SKYPATROL V2.19

Upgrade UnSuccess!

EXT_PWR=0.00V

BAT=0.01V

#28

171

Skypatrol SP9700 Protocol V1.04

FRC format: 1234, FRC

Confirm reply:

SKYPATROL

V2.19 FCL:1

EXT_PWR=0.00V

BAT=0.01V

#27

Cannot execute:

SKYPATROL

V2.19 FCL:0

EXT_PWR=0.00V

BAT=0.01V

#27

Command executing result and update command executing result have the same reply.

8.8.2 HyperTerminal update (The firmware version can be same as the device fixed version)

Open hyper terminal path: start—all program – accessories – communication – hyper terminal

Input update command FWU

172

Skypatrol SP9700 Protocol V1.04

173

Skypatrol SP9700 Protocol V1.04

Press 1

Reminder:

Local firmware upgrade!

Select "send" →"send file", with following dialog box, select the download file, the protocol type, and then click "send",

waiting for the upgrade to complete.

174

Skypatrol SP9700 Protocol V1.04

8.9 APPENDIX9. Device LED Indicator Status (GSM, GPS, Power)

GSM LED:

GSM indicator(Green):

GPS LED:

GPS indicator(Yellow):

Power LED:

System LED(Red):

External power supply: red

External power: quick flash once every 3seconds

Backup battery: quick flash twice every 3 seconds

Backup battery low voltage: quick flash 3 times every 3 seconds

Note: GPS fixed, GPS LED will flash once, and wait for 3 seconds to flash once more.

GPS unfixed, GPS LED will flash twice continuously, and wait for 3 seconds to flash twice continuously again.

175

Skypatrol SP9700 Protocol V1.04

8.10 Event list

Event list Event status Execute way ID mark

0 1 2 3 4 5 6 7 8

Main

Sub

U

s

e

r

0

U

s

e

r

1

Admini

strato

r

GP

RS

se

rv

er

G

P

R

S

o

r

S

M

S

Res

erv

ed

Res

erv

ed

RS232

outpu

t

even eve Event Definition of IO

t id

nt id

id event 0 1

ac

ti on

0 0 Tow

End Enter √ √ √ √ √ √

tow tow

1 1 Idle End Enter

√ √ √ √ √ √

idle idle Movin Parki

2 2 Parking

g to parki

ng to movin

√ √ √ √ √ √

ng g

Enter Exit

3 3 Speed

prese t

prese t

√ √ √ √ √ √

range range

From Non-

jammi

ng to

jammi

ng

jammi

0 4 4

GSM jamming status change

ng to non-

√ √ √ √ √ √

jammi

ng

Geo-

5 5 Geo-fence Null fence √ √ √ √ √ √ alarm

6 6 GPS TTFF Null

GPS √ √ √ √ √ √

TTFF From

not

posit

7 7

GPS positioning

Null ionin g to

√ √ √ √ √ √

posit

ionin

g

1

0

8

Emergency

Null

Emerg

ency

alarm

1

9

Collision

Null

Colli

sion

alarm

2 10 Turnover Null Turno

ver √ √ √ √ √ √

176

Skypatrol SP9700 Protocol V1.04

3 11 External Disco Conne √ √ √ √ √ √

power nnect ct

4 12 Charging Disch

arge

Charg

e √ √ √ √ √ √

5

13 Sensor

calibration

Null

Calib

ratio

n

6

14 Device

temperature

Insid

e

range

Outsid

e

range

2

0

16

Battery

Norma

l

Under

volta

ge or

over

volta

ge

1 17 Reserved Reser

ved

Reser

ved √ √ √ √ √ √

2

18

IN1

From

high

to

low

From

low

to

high

3

19 Balance

notification

Null

Low

balan

ce

4

20

GPS not

positioned

overtime

Null

GPS

posit

ioned

overt

ime

5 21 Reserved √ √ √ √ √ √

6

22

ACC

From

ON to

OFF

From

OFF to

ON

7

23

Engine

From

ON to

OFF

From

OFF to

ON

3

0 24 Deep Sleep

mode Exit Enter √ √ √ √ √ √

1 25 Reserved √ √ √ √ √ √

2 26 Reserved √ √ √ √ √ √

3 27 Reserved √ √ √ √ √ √

4 28 Reserved √ √ √ √ √ √

5 29 Reserved

6 30 Reserved

7 31 Reserved

4

0 32 Reserved

1 33 Reserved

2 34 Reserved

3 35 Reserved

4 36 Reserved

5 37 Reserved

6 38 Reserved

7 39 Reserved

0 40 Reserved

1 41 Reserved

177

Skypatrol SP9700 Protocol V1.04

5 3 43 Reserved

3 43 Reserved

4 44 Reserved

5 45 Reserved

6 46 Reserved

7 47 Reserved

6

0 48 Reserved

1 49 Reserved

2 50 Reserved

3 51 Reserved

4 52 Reserved

5 53 Reserved

6 54 Reserved

7 55 Hardware fault

code

Witho

ut With √ √ √ √ √ √

7

0 56 Combined event Not

use

Not

use √ √ √ √ √ √

1 57 Combined event Not

use

Not

use √ √ √ √ √ √

2 58 Combined event Not

use

Not

use √ √ √ √ √ √

3 59 Combined event Not

use

Not

use √ √ √ √ √ √

4 60 Combined event Not

use

Not

use √ √ √ √ √ √

5 61 Combined event Not

use

Not

use √ √ √ √ √ √

6 62 Combined event Not

use

Not

use √ √ √ √ √ √

7 63 Combined event Not

use

Not

use √ √ √ √ √ √