Table of Contents
Advertisement
Quick Links
USER MANUAL
EMDCB – BLUETOOTH LOW ENERGY MOTION AND ILLUMINATION SENSOR
EMDCB
2.4 GHz Bluetooth Low Energy Motion And Illumination Sensor
30.11.2018
Observe precautions! Electrostatic sensitive devices!
Patent protected:
WO98/36395, DE 100 25 561, DE 101 50 128,
WO 2004/051591, DE 103 01 678 A1, DE 10309334,
WO 04/109236, WO 05/096482, WO 02/095707,
US 6,747,573, US 7,019,241
© 2019 EnOcean | www.enocean.com
EMDCB User Manual | v1.3 | August 2019 | Page 1/67
Advertisement
Table of Contents
Subscribe to Our Youtube Channel
Related Manuals for EnOcean EASYFIT EMDCB
Summary of Contents for EnOcean EASYFIT EMDCB
- Page 1 WO98/36395, DE 100 25 561, DE 101 50 128, WO 2004/051591, DE 103 01 678 A1, DE 10309334, WO 04/109236, WO 05/096482, WO 02/095707, US 6,747,573, US 7,019,241 © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 1/67...
- Page 2 As far as patents or other rights of third parties are concerned, liability is only assumed for modules, not for the described applications, processes and circuits. EnOcean does not assume responsibility for use of modules described and limits its liability to the replacement of modules determined to be defective due to workmanship. Devices or systems containing RF components must meet the essential requirements of the local legal authorities.
-
Page 3: Table Of Contents
Sensor status encoding ................ 27 4.6.2 Sensor Data Descriptor ................. 27 4.6.3 Data Size .................... 28 Supported parameters ................. 28 EMDCB telegram authentication ..............29 © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 3/67... - Page 4 Attribute Reporting................50 7.6.8.2 Optional Data Size ................50 7.6.8.3 LED Intensity..................50 7.6.9 Reporting interval ................51 7.6.10 Low Power Mode .................. 51 © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 4/67...
- Page 5 Address resolution for resolvable private addresses (RPA) ........ 66 C.1 RPA resolution flow ..................66 C.2 Obtaining the IRK ..................66 C.3 Address resolution example ................67 © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 5/67...
-
Page 6: General Description
This ensures integrity and authenticity of the transmitted telegrams and prevents telegram replay (retransmission of previously transmitted telegrams). © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 6/67... -
Page 7: Technical Data
The required illumination of 200 Lux for sustaining operation is given for a typical operating environment (e.g. at desk level in an office). The required minimum illumination directly at the solar cell of EMDCB is 50 Lux. © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 7/67... -
Page 8: Environmental Conditions
36.5 °C / 98 F. Packaging information Packaging Unit 12 units Packaging Method Box / pallet Ordering information Type Ordering Code Frequency 2.4 GHz (BLE) EMDCB-W-EO E6221-K515 © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 8/67... -
Page 9: Functional Description
EMDCB Product Overview The energy harvesting ceiling-mounted motion and illumination sensor EMDCB from EnOcean provides wireless motion and illumination sensing functionality without batteries. Power is provided by a built-in solar cell. EMDCB transmits sensor data based on the 2.4GHz Bluetooth Low Energy standard. -
Page 10: Basic Functionality
The external user interface consists of one button (LRN) and one LED that together can be used for simple configuration and test activities. Figure 2 – EMDCB front and rear view © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 10/67... -
Page 11: Internal Product Interface
(or similar) with the opening slot. If the EMDCB wall mount plate is already attached to the ceiling, then EMDCB can be removed by gently pulling the housing. © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 11/67... -
Page 12: Functional Modes
Very Long FACTORY Button Press RESET Long STANDBY Button Press Single Button Press Timer DATA SLEEP TELEGRAM Initial Motion Figure 4 – EMDCB functional modes © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 12/67... -
Page 13: Standard Operation
(Disable LED and Radio) Success: 3 short blinks Error: No feedback Very Long Press Factory Reset Success: 5 short blinks Table 1 – EMDCB external interface actions © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 13/67... -
Page 14: Motion Detection
3 m (10 ft). Figure 5 below shows the PIR detection pattern. Figure 5 – EMDCB PIR detection pattern © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 14/67... -
Page 15: Installation Recommendations
For consistent detection, the mounting site of EMDCB should not be exposed to vibrations or motion. © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 15/67... -
Page 16: Illumination Measurement
Reporting of the solar cell light level can be enabled and disabled via the NFC interface as described in chapter 7.6.8.1. © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 16/67... -
Page 17: Radio Transmission
Custom Radio Channel 2405 MHz Custom Radio Channel … 2477 MHz Custom Radio Channel 2479 MHz Custom Radio Channel Table 2 – EMDCB supported radio channels © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 17/67... -
Page 18: Default Radio Transmission Sequence
The selection of the transmission mode is done using the TX_CHANNEL_MODE field of the TX register of the NFC configuration interface as described in chapter 7.6.3. © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 18/67... -
Page 19: Three Channel Sequence
INTERVAL TX_CHANNEL1 TX_CHANNEL2 TX_CHANNEL3 TX_CHANNEL1 TX_CHANNEL2 TX_CHANNEL3 TX_CHANNEL1 TX_CHANNEL2 TX_CHANNEL3 (20ms or 10ms) (20ms or 10ms) Figure 8 – Three channel radio transmission sequence © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 19/67... -
Page 20: Two Channel Sequence
This transmission sequence uses a default INTERVAL setting of 20 ms; an alternative setting of 10 ms can be configured via NFC. Figure 10 – Single channel radio transmission sequence © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 20/67... -
Page 21: Telegram Format
Figure 12 below shows specific properties used by EMDCB within the general BLE frame structure. Figure 12 – BLE frame structure The content of these fields is described in more detail below. © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 21/67... -
Page 22: Preamble
EMDCB uses by default Static Source Address mode. Resolvable Private Address mode can be selected by setting the ADDRESS_MODE field in the TX_CONFIG register to 0x01 as described in chapter 7.6.7.2. © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 22/67... -
Page 23: Static Source Address Mode
(written) via NFC as described in chapter 7.5. The structure of EMDCB static addresses is as follows: The upper 2 bytes of the source address are for EnOcean Bluetooth sensors always ◼ set to 0xE500 to enable quick identification The lower 4 bytes are uniquely assigned to each device. -
Page 24: Resolvable Private Address Mode
So conceptually the IRK takes the role of the device source address while prand and hash provide a mechanism to select the correct IRK among a set of IRK. © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 24/67... -
Page 25: Check Sum
The 3 byte BLE Check Sum is used to verify data integrity of received BLE radio telegrams. It is calculated as CRC (cyclic redundancy check) of the BLE Header, Source Address and Payload fields. © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 25/67... -
Page 26: Payload
EMDCB – BLUETOOTH LOW ENERGY MOTION AND ILLUMINATION SENSOR Payload The payload of EnOcean BLE sensor data telegrams can in general be up to 31 bytes long (depending on the size of the sensor data) and consists of the following fields: Length (1 byte) ◼... -
Page 27: Sensor Status Encoding
In this case, the sensor can use the length information provided by this field to determine the start of the next sensor descriptor field (which might contain usable data). © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 27/67... -
Page 28: Data Size
Please refer to chapter A.1 for an example of how to parse an EMDCB data telegram and to chapter A.2 for an example how to parse a commissioning telegram. © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 28/67... -
Page 29: Emdcb Telegram Authentication
EMDCB and only accepts messages with higher sequence counter values (i.e. not accepts equal or lower sequence counter values for subsequent telegrams). © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 29/67... -
Page 30: Authentication Implementation
Appendix B gives a step by step example how to authenticate the payload of a received data telegram based on the previously exchanged security key. © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 30/67... -
Page 31: Emdcb Commissioning
EMDCB radio telegrams. NFC commissioning ◼ Each EMDCB device contains an NFC interface allowing to read device parameters and to configure the device. © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 31/67... -
Page 32: Radio-Based Commissioning
Each EMDCB device contains a product label which can be used to commission EMDC. 6.2.1 Device label The structure of the EMDC device label is shown in Figure 23 below. Figure 23 – EMDCB device label © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 32/67... -
Page 33: Commissioning Qr Code
Part 2 and 3 standards. This NFC functionality can be used to read the device address and the security key of EMDCB as described in chapter 7 below. © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 33/67... -
Page 34: Nfc Interface
This can be done by unlocking the NFC interface with the old PIN code and then writing the new PIN code to page 0xE5. © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 34/67... -
Page 35: Using The Nfc Interface
NFC SW with read, write, PIN lock, PIN unlock and PIN change functionality ◼ 7.3.1 USB NFC Reader For PC applications, EnOcean recommends the TWN4 Multitech 2 HF NFC USB Reader with CDC interface from Elatec RFID Systems: https://www.elatec-rfid.com/fileadmin/Files/Data_Sheets/DS_TWN4_MultiTech.pdf This reader is shown in Figure 25 below. -
Page 36: Nfc Interface Functions
7.4.1 NFC interface state machine Figure 26 below shows the overall state machine of the NFC interface. Figure 26 – NFC interface state machine © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 36/67... -
Page 37: Idle State
If access to protected memory is required then the tag can transition from the ACTIVE state to AUTHENTICATED state by executing the PWD_AUTH command in conjunction with the correct 32 bit password. © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 37/67... -
Page 38: Read Command
The WRITE command requires a start page address and returns writes 4 bytes of data into that page. Figure 28 below shows the read command sequence. Figure 28 – NFC write command sequence © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 38/67... -
Page 39: Password Authentication (Pwd_Auth) Command
The PWD_AUTH command takes the password as parameter and, if successful, returns the password authentication acknowledge, PACK. Figure 29 below shows the password authentication sequence. Figure 29 – Password authentication sequence © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 39/67... -
Page 40: Configuration Memory Organization
0xE5. Note that a read access to page 0xE5 always return 0x00000000, i.e. it is not possible to read out the current PIN code. © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 40/67... -
Page 41: Nfc Memory Map
MAC_ROTATION LRN_ENABLE SECURITY_MODE KEY_ACCESS REPORT_CFG OPTIONAL_DATA_SIZE LED_MODE Private TX_INTERVAL_UNOCCUPIED TX_INTERVAL_OCCUPIED Read / Write LOW_POWER_MODE … Internal Data … Table 5 – NFC Memory Map © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 41/67... -
Page 42: Ndef Text Field
Byte [1] TX_CHANNEL2 (Default: 0x26 = CH38) PIN Protected 0x41 Byte [2] TX_CHANNEL3 (Default: 0x27 = CH39) Byte [3] TX_CHANNEL_MODE (Default: 0x00) Table 7 – TX Channel Configuration © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 42/67... -
Page 43: 7.6.3.1 Tx Channel Mode
0b0101 Commissioning and Data telegrams on 1 user-defined radio channel 0b0110 Unused, will be treated as 0b0000 0b011…0b1111 Table 8 – Transmission Channel settings © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 43/67... -
Page 44: Radio Configuration
Manufacturer ID used to transmit the sensor data. EMDCB by default uses the Bluetooth SIG manufacturer ID 0x03DA (EnOcean GmbH) and transmits with +4 dBm output power and 20 ms advertising interval. These settings can be configured using the Transmission Settings as shown in Table 9 below. -
Page 45: 7.6.4.2 Advertising Interval
Figure 32 – Advertising Interval register structure 7.6.4.3 Manufacturer ID EMDCB by default transmits using the Manufacturer ID 0x03DA (EnOcean GmbH). It is possible to set a different manufacturer ID using the Manufacturer ID bit field shown in Figure 33 below. -
Page 46: Optional Data
PIN Protected 0x44 … 0x47 using the Security Configuration register. Read returns all 0’s if key access is disabled Table 11 – Security Key register © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 46/67... -
Page 47: Security Configuration
Key read disabled (key not visible, write-only mode) 0x02 Unused, will be treated as 0x00 0x03 … 0xFF Table 13 – Key Access settings © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 47/67... -
Page 48: 7.6.7.2 Address Mode
LRN Telegram enabled 0x00 (Default) LRN Telegram disabled 0x01 Unused, will be treated as 0x00 0x02 … 0xFF Table 15 – LRN Telegram settings © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 48/67... -
Page 49: Security Mode
Byte [0] ATTRIBUTE_REPORTING_CONFIG Byte [1] OPTIONAL_DATA_SIZE PIN Protected 0x49 Byte [2] LED_INTENSITY Byte [3] RFU Table 17 – Attribute Reporting, Optional Data Size and LED Intensity © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 49/67... -
Page 50: 7.6.8.1 Attribute Reporting
Bit 7 LED Intensity Reserved Reserved 0b00: Off 0b01: Low intensity 0b10: Medium intensity 0b11: Maximum Intensity Figure 36 – LED Intensity field structure © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 50/67... -
Page 51: Reporting Interval
Byte [0] LOW_POWER_MODE 0x00 = Normal Operation Mode (Default) PIN Protected 0x4B 0x01 = Low Power Mode Byte [1:3] RFU Table 19 – Low Power Mode © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 51/67... -
Page 52: Regulatory Notes
8.1.1 Declaration of conformity Hereby, EnOcean GmbH, declares that this radio equipment is in compliance with the essential require- ments and other relevant provisions of Directive 2014/53/EU. A copy of the Declaration of Conformity can be obtained from the product webpage at www.enocean.com... -
Page 53: Fcc (United States)
USER MANUAL EMDCB – BLUETOOTH LOW ENERGY MOTION AND ILLUMINATION SENSOR FCC (United States) 8.2.1 FCC (United States) Certificate © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 53/67... -
Page 54: Fcc (United States) Regulatory Statement
Thus, EMDCB containing the TCM 515B radio module can be operated in the United States without additional Part 15 FCC approval (approval(s) for unintentional radiators may be required for the OEM’s finished product), under EnOcean’s FCC ID number if the OEM re- quirements are met. -
Page 55: Fcc Oem Requirements
EMDCB – BLUETOOTH LOW ENERGY MOTION AND ILLUMINATION SENSOR 8.2.4 FCC OEM Requirements In order to use EnOcean’s FCC ID number, the OEM must ensure that the following condi- tions are met: The Original Equipment Manufacturer (OEM) must ensure that FCC labeling require- ◼... -
Page 56: Ised (Industry Canada)
USER MANUAL EMDCB – BLUETOOTH LOW ENERGY MOTION AND ILLUMINATION SENSOR ISED (Industry Canada) 8.3.1 ISED (Industry Canada) Certificate © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 56/67... -
Page 57: Ised (Industry Canada) Regulatory Statement
(1) l'appareil ne doit pas produire de brouillage, et (2) l'utilisateur de l'appareil doit accepter tout brouillage radioélectrique subi, même si le brouillage est susceptible d'en compromettre le fonctionnement.” © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 57/67... -
Page 58: Product History
Key changes versus previous revision CA-01 December 2018 First release for lead customers CA-02 June 2019 Addition of 2 Mbit mode Table 20 – Product History © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 58/67... -
Page 59: A Parsing Emdcb Telegrams
57 E2 01 00 02 AA 44 D6 00 45 35 00 20 02 C8 CC 57 12 Table 21 – Advertising message parsing A.1.2 Data telegram payload The EnOcean payload can be parsed as shown in Table 22 below. Field Length... -
Page 60: Commissioning Telegram Example
1 byte Commissioning Telegram (22 byte) 0x3E Device Key 16 byte 9E0DE9C25386B6C4F070642E19E03680 Source Address 6 byte 0xE500000000C4 Table 25 – Commissioning telegram payload parsing © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 60/67... -
Page 61: Authentication Example For Emdcb Telegrams
Signature from 32 Bit signature that will be checked C8CC5712 Sender using the security key Table 26 – Input data © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 61/67... -
Page 62: Constant Algorithm Parameters
L’ = length field size - 1 A0_Flag 0x01 (always) L’ B0_Flag 0x49 (always) (0b01<<6) + (M’<<3) + L’ Iteration counter 0x0000 (always) Table 28 – Constant internal parameters © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 62/67... -
Page 63: Intermediate Parameters
EMDCB – BLUETOOTH LOW ENERGY MOTION AND ILLUMINATION SENSOR Intermediate parameters The RFC3610 implementation used in EnOcean BLE products derives four internal parame- ters – Nonce, A0, B0, B1 and B2 – based on the telegram specific input data and the con- stant internal parameters. -
Page 64: Rfc3610 Execution Sequence
T_0 using four AES-128 and three XOR operations. The algorithm execution sequence is shown in Figure 37 below. The first four bytes of T_0 are then used to authenticate EnOcean BLE multi-sensor data telegrams. -
Page 65: Execution Example
(see chapter A.1). This proves that the telegram originates from a sender that possesses the same security key and the telegram content has not been modified. © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 65/67... -
Page 66: C Address Resolution For Resolvable Private Addresses (Rpa)
From the device label as specified in chapter 6.2 (if the factory-programmed securi- ◼ ty key has not been changed via the NFC Interface) © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 66/67... -
Page 67: Address Resolution Example
Therefore the transmitter of this telegram used this specific IRK to generate this resolvable private ad- dress. © 2019 EnOcean | www.enocean.com EMDCB User Manual | v1.3 | August 2019 | Page 67/67...
Need help?
Do you have a question about the EASYFIT EMDCB and is the answer not in the manual?
Questions and answers