Table of Contents

Advertisement

MBUS User Manual
RC11xx-MBUS3
RC1701HP-MBUS4
Important note:
This User Manual contains patented technology. See page 6 for more
information.

Advertisement

Table of Contents
loading

Summary of Contents for Radiocrafts MBUS Series

  • Page 1 MBUS User Manual RC11xx-MBUS3 RC1701HP-MBUS4 Important note: This User Manual contains patented technology. See page 6 for more information.
  • Page 2: Table Of Contents

    CONFIGURATION COMMAND DETAILS ..............41 APPENDIX B CONFIGURATION MEMORY ..................50 APPENDIX C CONFIGURATION MEMORY DEFAULTS ..............56 APPENDIX D ADDITIONAL EXAMPLES ..................... 58 DOCUMENT REVISION HISTORY ......................59 Page 1 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 3 Example 6 – Read mailbox ........................38 Example 7 – Encrypt mailbox #1 ......................38 Example 8 – Changing RF Channel ......................58 Example 9 – Changing MAN_ID ....................... 58 Page 2 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 4 Short Message Standard, please see EN13757-4 for details DLMS Please see EN13757-4 for details Value Information Field, please see EN13757-4 for details Data Information Field, please see EN13757-4 for details Page 3 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 5: Introduction

    In most cases a simple quarter wavelength wire or a PCB track will do. Connect a piece of wire to the RF pin with length corresponding to the quarter of a wavelength. For space limited products, contact Radiocrafts and we will recommend the best antenna solution for your application.
  • Page 6: Differencies Between Rc11

    1.2 Differencies between RC11xx and RC17xx series This User Manual describes the embedded protocol of the Wireless M-Bus modules from Radiocrafts. The MBUS firmware is available as different feature sets targeting specific applications. The hardware has the same size and pin-out for all frequency versions, and the different feature sets available are listed in the table below.
  • Page 7: Important Note On Patented Technology

    Any infringements of patents and IP rights held by Radiocrafts will be prosecuted to the fullest extent. Page 6 of 60 ©2019 Radiocrafts AS...
  • Page 8: Basic Functionality

    TXD line. When the host MCU wants to transmit a Wireless M-Bus packet over the RF, it must send the packet through the UART interface on the RXD line. Figure 2 – Wireless M-Bus Link Page 7 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 9: Uart Interface - Module Configuration

    Figure 3 illustrates how to use the UART interface to enter configuration mode, change configuration parameters and return to IDLE mode. Figure 3 – Configuration mode flow diagram Page 8 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 10: Uart Interface -Configuration Commands

    List Configuration Memory ‘1’ ✔ ✔ ✘ ✔ 0x31 Test mode 1 ‘2’ ✔ ✔ ✘ ✔ 0x32 Test mode 2 ✔ ✔ ✘ ✔ ‘3’ 0x33 Test mode 3 Page 9 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 11: Uart Interface - Send And Receive Messages

    Set module in IDLE mode, enable RF receiver (use after SLEEP) ✔ ✔ Module will send “empty” message (link layer only, no application layer) 0xFE ✔ ✔ 0xFF Set module in IDLE mode, disable RF receiver (UART only) Page 10 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 12: Figure 4 - Uart Interface Packet Transmission (Rxd Pin)

    The length bytes itself must be reduced by 2 before calculating CRC on host. The length byte was shorter at calculation in module as the CRC was not added at time of calculation. Page 11 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 13: Network Topology

    Slaves. In the standard the Master is referred to as “Other”. The Radiocrafts Wireless M-Bus family of modules can be configured to have a role as either Master or Slave. The Slave contains a unique address, and when sending a meter reading this address is added to the wireless message.
  • Page 14: Mbus Basic Functionality

    • Frequent transmit mode T (T1 and T2) • Frequent receive mode R2 • C1 mode • Narrowband mode N (N1 and N2) The mode is configurable by the MBUS_MODE parameter. Page 13 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 15: Table 4 - M-Bus Mode Overview

    The destination address (or module address) can also be changed using the ‘T’ command. Using the ‘T’ command, the address is not stored in non-volatile memory. To do a permanent change, use the ‘M’ command. Page 14 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 16 The default timeout is 2 seconds.Max total payload is 246 bytes, giving 255 bytes when including the header in the first block. Page 15 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 17: Timing

    CONFIG pin and is entered during parameter configuration. MEMORY CONFIG is the sub-state of CONFIG entered by the ‘M’ command MEMORY_CONFIG where the non-volatile configuration memory is being programmed. Page 16 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 18: Timing - From Reset And Sleep To Idle

    (“>”) is received in UART TXD Time from end of ‘X’ character on UART RXD to IDLE 146us 1.2ms CONFIG-IDLE Time from end of ‘Z’ character on UART RXD to IDLE ~150us CONFIG-SLEEP Page 17 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 19: Timing - Programming Non Volatile Memory (Nvm )

    M-command. They too return the prompt character and it is important to wait for it. Figure 10 – Timing definitions, commands with arguments but no response data. Page 18 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 20: Table 12 - Timing Numbers, Configuration Commands With Arguments But No Response Data

    Flash configuration memory. After the last command parameter byte the host should wait for the ‘>’ prompt before any further action is done to ensure correct re-configuration. Page 19 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 21: Power Management

    What determines the battery lifetime is how much time the module spends in the modes where current consumption is “high”. The Radiocrafts modules offers several configuration options to allow the module to be “off” for an extensive part of the time: Manual SLEEP function (‘Z’-command from config mode)
  • Page 22: Power Cycling

    It is not recommended to turn off the module as an alternative to using SLEEP mode. The combination of very low SLEEP current and fast startup gives a lower overall current consumption. Page 21 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 23: Installation And Binding

    Host MCU has control over which installation addresses that are available and decides on which Installation address to install the slave. The host MCU sends a Bind command (‘B’) to Radiocrafts module with installation address and slave address. The host MCU sets INSTALL_MODE = 0x00 (Filter on).
  • Page 24: Figure 17 - Installation And Binding Process

    A typical sequence for installing a slave is shown in Figure 12 Get slave address from message Find next available address register. Figure 12 – Installation and binding process Page 23 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 25: Examples

    0xAB Least significant byte first 0x01 ADDR_VER 0x04 > ADDR_DEV (A new command can be issued here) ‘X’ 0x58 (none) Exit CONFIG mode. Module returns to IDLE state Page 24 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 26: Encryption And Decryption

    If both Link Layer encryption and Transport Layer Encryption is defined – LinkLayer encryption will be used. The ELL encryption mode 1, uses the counter mode (AES-128-CTR) and does not need any padding of data. Page 25 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 27: Transport Layer Encryption

    The ‘E’ command can be used to encrypt a message in the Mailbox before it is sent. This is done to save time and needs to be done in T2-mode if the message to be sent back via the mailbox is more than one block. Page 26 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 28: Examples

    Based on the above this translates to the following packet when sent over UART 0x14 0xAB 0xCD 0x12 0x34 0x56 0x78 0x01 0x04 0xyy 0xyy 0xyy 0xaa 0x01 0x02 0x03 0x04 0x05 0x06 0x07 0x08 Page 27 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 29: Example 4 - Message With Transport Layer Encryption

    Not added automatically. 0x01 Version. Not added automatically. 0x04 Device Type. Not added automatically. 0x01 Access Number STAT 0x00 Status 0x10 Configuration Word 2 0xC5 Configuration Word 1 Page 28 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 30 0x2F 0x01 0x02 0x03 0x04 0x05 0x06 0x07 0x08 0x2F 0x2F 0x2F 0x2F 0x2F 0x2F' *) *) Packet length sent over UART is not identical to packet length over-the-air for the MBUS packet. The difference is calculated within the module Page 29 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 31: Two-Way Communication

    MailBox Special Messages 0: Mailbox will respond to any message type (C-field). 1: Auto-message function will check incoming C-field and only reply if message is SND-NR, RSP-UD or ACK. Page 30 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 32: Flag Register / Auto-Message Flag Register

    Access Number in the case of lost messages. A two level Auto-message handler can be enabled (MAILBOX.TLAM = 1) to streamline the communication with the meter in this case. Using two level Auto- Page 31 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 33: Mailboxes

    There are up to 15 mailboxes that can be used to store “pre-cooked” messages. Each mailbox is 64 bytes, except mailbox number 15 which is 128 bytes. Mailboxes can be combined to support messages up to 255 bytes (less the Page 32 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 34: Automatically Reply With A Standard Message

    A reply is only sent if the DFC bit in the MAILBOX configuration parameter is cleared The Status byte will automatically be set to the incoming packet RSSI value, Page 33 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 35: Automatically Reply With Message From A Mailbox

    The N2 timing includes a response time of 100 ms (fast) or 1100/2100 ms (slow) after the Slave message is received. This timing is handled by the Master module. Also, a sleeping Slave will wake up and listen after this response time. Page 34 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 36 If a message is sent to the module during the response time cycle that does not match the last incoming message address, the response time cycle is terminated and the message is sent as a normal message without further time delay. Page 35 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 37: Figure 19 - Key Challenge Diagram

    MBUS USER MANUAL Figure 14 - Key challenge diagram Page 36 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 38: Examples

    0x00 0x00 0x2F 0x2F ‘>’ Wait for ‘>’ prompt. 0x2F 0x2F (A new command can be issued here) ‘X’ 0x58 (none) Exit CONFIG mode. Module returns to IDLE state Page 37 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 39: Example 6 - Read Mailbox

    0x01 Mailbox #1 is being encrypted. Wait for ‘>’ prompt. (A new command can be issued here) ‘X’ 0x58 (none) Exit CONFIG mode. Module returns to IDLE state Page 38 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 40: Repeater Mode

    In MBUS3 it is possible to choose to filter messages to be repeated by manufacturer identification code (MAN_ID). This is done by setting the configuration parameter REPEATER_MAN_ID[2:1]. The filtering function is off by default (REPEATER_MAN_ID[2:1] = 0x00 0x00). Page 39 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 41: Mbus4 Extra Features

    9.1 Antenna tuning feature The embedded antenna tuning feature inside the MBUS4 module will make the antenna tuning for 169MHz in a customer specific design easy. See White Papers and Application Note on antenna tuning at Radiocrafts web page. https://radiocrafts.com/uploads/WP008_Antenna_Selection_Guide.pdf https://radiocrafts.com/uploads/AN025_Tuning_the_Antenna_with_Antenna_Tuning_Feature.pdf...
  • Page 42: Appendix Aconfiguration Command Details

    0x62 Bind. RAM based installation addresses. • ‘l’-command (RAM) Argument Options Returns Register # 129-132 (MBUS4) (none) Address 8 bytes slave address. Prompt (>) See Bind for details. Page 41 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 43 ‘M’ command. 0x01: T1 0x02: T2 0x03: S1 0x04: R 0x08: C2 0x09: C1 0x0A: T2+C 0x0B: T1+C RC17xx-MBUS4: 0x10: N2 mode (default) 0x11: N1 mode (slave) Page 42 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 44 This command returns the address of the slave stored at the given register number. Argument Options Returns Register # 129-132 (MBUS4) 8 byte address to slave installed at this register number. + Prompt (>) Page 43 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 45 This command returns the auto-message flags for a gived register number. Argument Options Returns Register # 129-132 (MBUS4) 2 or 3 bytes *) of flags + Prompt (>) *) 3 bytes if MAILBOX.TLAM bit is set Page 44 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 46 The RSSI value increases with increased input signal strength in exit RX mode 0.5 dB steps. Input signal strength is given by (typ.): P = - RSSI / 2 [dBm] Page 45 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 47 TEMP value increases with increased temperature in 1 °C steps and has an accuracy of +/- 2 °C. The temperature is given by: T = TEMP(dec) – 128 [°C] (example: TEMP=0x98 equals +24 °C) Page 46 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 48 (none) (none) ‘Y’ 0x59 Memory Read One Byte Argument Options Returns Address See Table 11 for overview of 1 byte value configuration memory for given address +Prompt (>) Page 47 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 49 Test Mode 0 – List configuration Memory 0x30 This command will list all the contents of the non-volatile configuration memory. Argument Options Returns (none) (none) Configuration memory +Prompt (>) Page 48 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 50 ‘8’ Pulsed transmission This command will send 100ms packet for every 5 seconds. It is used to verify antenna. Argument Options Returns (none) (none) Prompt (>) Page 49 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 51: Appendix Bconfiguration Memory

    Others: 0x01 Mode 10 and 11 allows reception of both modes. MBUS4: MBUS3 MBUS4 RC17xx: 0x10 0x00 0x01 0x02 0x03 0x04 0x08 0x09 0x0A T1+C 0x0B T2+C 0x10 0x11 Page 50 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 52 0x0A MBUS3: Short of long preamble in S mode only. 0x00 MBUS4: Transmit frame format A or B MBUS3 MBUS3 S-mode Other MBUS4 Short 0x00 Long 0x01 0x02 Page 51 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 53 0x00-0xFF 0x00 and REPEATER_MAN_ID2 = 0x00. ✘ ✔ LBT_RSSI_ 0x2A 0x32-0x6E LBT RSSI threashold value measured in -dBm 0x50 (80) THREASHOLD (50-110) ✘ ✔ LBT_MAX_ATTEMPT 0x2B 0x03-0x08 0x05 Page 52 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 54 MBUS packet with ID and address 0x01 Application data only 0x02 Reserved Application data only with ack 0x03 (0x00:0x3E) 0x04 Add start/stop byte 0x08 Add CRC 0x0C Add start/stop byte and CRC Page 53 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 55 Enabled and add payload CRC ✔ ✔ DECRYPT_FLAG 0x3F Default setting for decryption, enabled when set 0x00 0x00 Disabled 0x01 Enabled Enabled and check payload 0x03 ✔ ✔ PART_NUMBER RC11xx(HP)-MBUS3/ appendix RC17xxHP-MBUS4 Page 54 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 56 0x75 0x76 0x33 0x2E 0x31 0x36 ASCII ✔ ✔ SERIAL_NUMBER 8 bytes reserved for serial number for traceability. 0xXX appendix The number is programmed by Radiocrafts during test. Page 55 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 57: Appendix Cconfiguration Memory Defaults

    FW version. 0x78 Value varies between modules. 0x80 0x88 0x90 Area used for serial number 0x98 0xA0 0xA8 0xB0 0xB8 0xC0 0xC8 0xD0 0xD8 0xE0 0xE8 0xF0 0xF8 Page 56 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 58 0x88 name, minimum HW 0x90 version and current 0x98 FW version 0xA0 0xA8 0xB0 Area used for serial number 0xB8 0xC0 0xC8 0xD0 0xD8 0xE0 0xE8 0xF0 0xF8 Page 57 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 59: Appendix Dadditional Examples

    Test mode 0 (‘0’ command) can be used to list all parameters stored in non-volatile memory. This command can be used to verify and check the module configuration. Page 58 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 60: Document Revision History

    Added description of new features in FW 1.05 (MBUS4) More channels(11-41), new data rate(5) and new test modes (‘7’ and ‘8’) added for MBUS4 2.01 Rewritten to new company standard. Page 59 of 60 ©2019 Radiocrafts AS MBUS User Manual (ver 2.01)
  • Page 61 Radiocrafts AS customers using or selling these products for use in such applications do so at their own risk and agree to fully indemnify Radiocrafts AS for any damages resulting from any improper use or sale.

This manual is also suitable for:

Rc11 mbus3 seriesRc1701hp-mbus4

Table of Contents