EnOcean PTM 535BZ User Manual
  1. Manuals
  2. Brands
  3. EnOcean Manuals
  4. Transmitter
  5. PTM 535BZ
  6. User manual

EnOcean PTM 535BZ User Manual

Bluetooth and zigbee green power pushbutton transmitter
Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
USER MANUAL PREVIEW
PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER
PTM 535BZ
Bluetooth
®
and Zigbee Green Power Pushbutton Transmitter
12.05.2021
Observe precautions! Electrostatic sensitive devices!
Patent protected:
WO98/36395, DE 100 25 561, DE 101 50 128,
WO 2004/051591, DE 103 01 678 A1, DE 10309334,
WO 04/109236, WO 05/096482, WO 02/095707,
US 6,747,573, US 7,019,241
© 2021 EnOcean | www.enocean.com
F-710-017, V1.0
PTM 535BZ User Manual | v1.0 | May 2021 | Page 1/112

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the PTM 535BZ and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for EnOcean PTM 535BZ

Summary of Contents for EnOcean PTM 535BZ

  • Page 1 WO98/36395, DE 100 25 561, DE 101 50 128, WO 2004/051591, DE 103 01 678 A1, DE 10309334, WO 04/109236, WO 05/096482, WO 02/095707, US 6,747,573, US 7,019,241 © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 1/112...
  • Page 2 ® The Bluetooth word mark and logos are registered trademarks owned by the Bluetooth SIG, Inc. and any use of such marks by EnOcean GmbH is under license. Other trademarks and trade names are those of their respective owners. Important! This information describes the type of component and shall not be considered as assured characteristics.

  • Page 3: Table Of Contents

    NFC configuration ..................78 A.1 Elatec NFC configuration tool ................ 78 A.1.1 Useful commands ..................79 A.1.2 Translation into binary data ..............79 © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 3/112...
  • Page 4 A.4.5.2 Changing the input configuration ..............99 Receiver configuration for BLE..............100 B.1 Scanning parameters ................. 100 B.1.1 Advertising interval ................101 B.1.2 Scan window ..................101 © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 4/112...
  • Page 5 D.2 Algorithm execution sequence ..............109 D.3 Example ....................110 Address resolution for resolvable private addresses (RPA) ......112 E.1 Address resolution example ................ 112 © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 5/112...

  • Page 6: General Description

    AES-128 security based on a device-unique private key. Figure 1 below shows the top side of PTM 535BZ (on the left side) and the bottom side of PTM 535BZ (on the right side). Figure 1 – PTM 535BZ top and bottom view ©...

  • Page 7: Technical Data

    Ordering information Type Ordering Code Description PTM 535BZ transmitter module PTM 535BZ S3231-A535 ECO 200 kinetic energy generator ECO 200 S3016-N200 © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 7/112...

  • Page 8: Functional Information

    ECO 200. Basic functionality PTM 535BZ works in conjunction with an electro-dynamic energy converter (e.g. ECO 200) which is actuated (pressed and released) by external action such as a button press. The term “ECO 200”...

  • Page 9: Product Interface

    NFC Forum tags (as specified by ISO/IEC 15693). Product interface Figure 3 below shows the product interface of PTM 535BZ seen from the top side (shown on the left) and the bottom side (shown on the right). Figure 3 – PTM 535BZ product interface The following chapters describe the key components of this product interface.
  • Page 10 ECO 200 harvester according to the mechanical design needs of the application. The AC1 and AC2 contact pads of PTM 535BZ can be mechanically connected to the AC1 and AC2 outputs of an ECO 200 kinetic harvester using a suitable fixation housing for ECO 200 and...
  • Page 11 Do not connect these signals to a supply voltage! 2.4.3 LRN button PTM 535BZ provides an LRN button which can be used to trigger the transmission of a com- missioning (LRN) telegram and to execute the channel selection process in Zigbee Green Power.

  • Page 12: Security Keys

    Chapter 4.4.4 for ZGP data telegrams. In addition to that, PTM 535BZ provides for BLE data telegrams the option to obfuscate the sender identity by using Resolvable Private Addresses that are generated using an Identity Resolution Key as described in Chapter 3.3.5.2.

  • Page 13: Bluetooth Low Energy (Ble) Radio

    PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER Bluetooth Low Energy (BLE) radio By default, PTM 535BZ is configured to transmit BLE telegrams. The format of these tele- grams is the similar to the format used by PTM 215B. Refer to for a detailed description of the BLE telegram format.

  • Page 14: Radio Parameters

    3.1.1 Bit rate By default, PTM 535BZ uses a bit rate of 1 Mbit/s as defined in [2]. PTM 535BZ also sup- ports a custom bit rate of 2 Mbit/s which can be selected via the NFC interface as described Chapter 5.6.3.
  • Page 15 2400 MHz 2482 MHz 2.4 GHz ISM Band Figure 5 – PTM 535BZ BLE radio channel assignment within the 2.4 GHz ISM band 3.1.3 Data whitening Data whitening prevents data with longs sequences of 0's and 1's from introducing a DC bias into the transmitted signal or from having a non-uniform power distribution over the occupied channel bandwidth.

  • Page 16: Radio Transmission Sequence

    Advertising Events as defined in [2]. Each data or commissioning telegram is transmitted as a sequence of redundant advertising events which all contain the same telegram payload. For reliability reasons, PTM 535BZ will send each telegram using several (minimum two) BLE advertising events. This approach increases transmission reliability by providing redundancy in time (by transmitting the same telegram at different times) and redundancy in frequency (by transmitting the same telegram on different radio channels).

  • Page 17: Telegram Format

    PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER Telegram format PTM 535BZ transmits Bluetooth Low Energy (BLE) radio telegrams in the 2.4 GHz band. This chapter provides a summary of the BLE frame structure; for detailed information please refer to [2].
  • Page 18 The six-byte source address identifies the originator (sender) of BLE telegrams. PTM 535BZ supports using either static source addresses or resolvable private addresses. By default, PTM 535BZ uses static source addresses. PTM 535BZ can be configured to use re- solvable private addresses as described in Chapter 5.6.4.
  • Page 19 For some security-critical applications it might be desirable to prevent unauthorized tracking of PTM 535BZ devices based on the source address used for their radio transmissions. At the same time, PTM 535BZ devices must be unambiguously identifiable by the receiver. To ad- dress these requirements, PTM 535BZ can be configured via NFC to use resolvable private addresses (RPA) as defined by the BLE specification [2].
  • Page 20 For an example of resolving a resolvable private address, please refer to Appendix E. Figure 13 – Resolving of resolvable private addresses By default, PTM 535BZ uses SECURITY_KEY1 as IRK. It is possible to configure PTM 535BZ via NFC to use SECURITY_KEY2 as IRK instead of SECURITY_KEY1 as described in Chapter 5.6.4.

  • Page 21: Telegram Payload

    USER MANUAL PREVIEW PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER Telegram payload As described before, PTM 535BZ can transmit two types of BLE telegrams which use different telegram payloads: Data telegrams ◼ The payload of data telegrams contains the input status together with the current...
  • Page 22 The INPUT_STATUS field within the data telegram payload identifies the ECO 200 action (press or release) and the status of the external signals INPUT1 and INPUT2 (connected to GND or not connected to GND). PTM 535BZ uses the following sequence to identify and transmit button contact status: 1.
  • Page 23 PUT_STATUS field of the BLE data telegram. Setting an entry to 0xFF means that PTM 535BZ will not transmit a data telegram if this particular input event occurs. This could for instance be useful if PTM 535BZ should send a data telegram only on button push, but no data telegram on button release.
  • Page 24 In order to avoid message replay (capture and retransmission of a valid message), it is re- quired that the receiver tracks the value of the sequence counter used by PTM 535BZ and only accepts messages with higher sequence counter values (i.e. not accepts equal or lower sequence counter values for subsequent telegrams).
  • Page 25 PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER 3.4.2.1 Authentication implementation PTM 535BZ implements data telegram authentication as described in IETF RFC3610 [4]. The 13 Byte Nonce (number used once – unique) initialization value is constructed as con- catenation of 6 byte Source Address, 4 byte Sequence Counter and 3 bytes of value 0x00 (for padding).
  • Page 26 The payload of commissioning telegrams is 30 bytes long and consists of the following fields: Length (1 byte) ◼ The Length field specifies the combined length of the following fields. For PTM 535BZ commissioning telegrams, this field is always set to 0x1D to indicate that 29 byte of manufacturer-specific data follow.

  • Page 27: Zigbee Green Power (Zgp) Radio

    PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER Zigbee Green Power (ZGP) radio PTM 535BZ can be configured via the NFC interface to transmit telegrams using the Zigbee Green Power (ZGP) standard instead of using the BLE standard.

  • Page 28: Radio Channels

    PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER Radio channels PTM 535BZ transmits ZGP telegrams on one of the sixteen IEEE 802.15.4 radio channel within the 2.4 GHz radio frequency band (2402MHz … 2480MHz). The IEEE 802.15.4 radio channel...

  • Page 29: Radio Transmission Sequence

    PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER Radio transmission sequence PTM 535BZ transmits ZGP data telegrams as a set of redundant transmissions where the same data telegram is transmitted 3 times. The timing interval between the start of two consecutive redundant data telegrams is approximately 2.5 ms and varies by some random...

  • Page 30: Telegram Format

    USER MANUAL PREVIEW PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER Telegram format PTM 535BZ transmits ZGP radio telegrams in the 2.4 GHz band according to the Zigbee Green Power specification which uses IEEE 802.15.4 as lower layer standard. Please refer to these specifications for detailed, up to date information.
  • Page 31 The IEEE 802.15.4 MAC Header contains the following fields: IEEE 802.15.4 Frame Control Field (1 byte) ◼ The Frame Control Field is 0x0801 for all ZGP telegram types supported by PTM 535BZ Sequence Number (1 byte) ◼ The Sequence Number is an incremental number used to identify the order of telegrams Address Field (4 byte) ◼...

  • Page 32: Ieee 802.15.4 Mac Payload (Zgp Telegram)

    4.4.1 Data telegram structure By default, PTM 535BZ transmits data telegrams. The payload of data telegrams is either 13 byte (Device ID = 0x07, default) or 12 byte (all other supported Device ID) long. Figure 26 below shows the telegram structure for ZGP data telegrams.
  • Page 33 GP Color Dimmer Switch 1 byte Table 6 – Supported ZGP Device ID The default Device ID used by PTM 535BZ is 0x07 (Generic 8-contact Switch) as described Chapter 4.4.1.2. It is possible to select another supported Device ID via the NFC interface. In that case, it is...
  • Page 34 USER MANUAL PREVIEW PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER 4.4.1.2 Device ID 0x07: Generic 8-contact Switch Device ID 0x07 (Generic 8-contact Switch) is the default configuration used by PTM 535BZ when transmitting ZGP data telegrams. Figure 27 below illustrates the ZGP command struc- ture used by generic switch data telegrams.
  • Page 35 PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER 4.4.1.3 Device ID other than 0x07 It is possible to configure PTM 535BZ via NFC to use one of the alternative Device ID listed Table 6 instead of the default Device ID 0x07.
  • Page 36 Device ID (1 byte) ◼ The Device Type is set to the Device ID used by PTM 535BZ. By default, Device ID 0x07 (Generic Eight Button Switch) is used and therefore this field is set to 0x07. If an alternative Device ID from the list of supported Device ID in Table 6 is selected by the user then this field will be set accordingly.
  • Page 37 Figure 30 below illustrates the Application Information structure for Device ID 0x07. Figure 30 – Application Information structure for Device ID 0x07 © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 37/112...
  • Page 38 It is by default set to 0x01 (unknown switch type, one switch contact) as the majority of PTM 535BZ applications are single push buttons or position switches. The number of contacts can be changed to other values via the NFC interface as...

  • Page 39: Channel Selection

    ZGP networks therefore operate on one of these four primary channels. Devices within a ZGP network can receive radio telegrams from PTM 535BZ only if PTM 535BZ uses the same radio channel as the ZGP network. PTM 535BZ therefore has to be configured to use the right radio channel.
  • Page 40 4.5.1 Channel selection via NFC The radio channel used by PTM 535BZ can be selected via the NFC interface. To do so, the user first needs to determine the radio channel used by the ZGP network that shall receive the radio telegrams of PTM 535BZ. This is typically done by means of a commissioning ap- plication (such as an application on a smartphone) that can communicate with the devices in the ZGP network (for instance via a gateway).
  • Page 41 11, 15, 20 and 25. If channel 25 has been reached then the sequence will be restarted at channel 11. PTM 535BZ is by default configured to use all channels for manual channel selection. In this mode, commissioning telegrams will be sequentially transmitted on channels 11, 12, 13 …...

  • Page 42: Nfc Configuration

    PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER NFC configuration PTM 535BZ provides an NFC interface according to the ISO15693 standard for identifying and configuring device parameters. The NFC interface provides a textual description of key device parameters in NFC Data Exchange Format (NDEF), a register-based description of the current device configuration and a configuration update service with two permission levels.
  • Page 43 5.1.1 Users The NFC interface architecture of PTM 535BZ supports two different users with different levels of access rights. The user with the higher level access rights is called USER1; the user with the lower level access rights is called USER2.
  • Page 44 Chapter 5.6.15. The PTM 535BZ NFC architecture allows for a total of 32 configuration options and functional requests. In the current implementation, 20 of those are used (18 configuration options, 2 functional requests) while 12 are reserved for future use (RFU).
  • Page 45 5.7.1. 5.1.4.3 Factory reset request The configuration of PTM 535BZ can either be changed via the NFC interface or – for the case of the radio channel used for the transmission of ZGP telegrams – also via the LRN button.

  • Page 46: Nfc Memory Map

    NFC memory map The NFC memory is organized in pages (smallest addressable unit) where each page contains 4 byte of data. Several pages with similar functionality form an NFC memory area. PTM 535BZ uses the following areas: Device Identification NDEF string (Read access only) ◼...

  • Page 47: Product Ndef

    The PRODUCT NDEF area contains a device identification string using the NDEF (NFC Data Exchange Format) standard that is readable by most NFC-capable reader devices (including smartphones). An example device identification string from the NDEF area of PTM 535BZ could be: 30SE21510000123+30PS3231-A535+2PAB04+12Z01234567891234+3C29+01000000 This NDEF string encodes the parameters shown in Table 11 below.
  • Page 48 LENGTH ◼ This field identifies the length of the NFC header. For PTM 535BZ, this field is set to 0x0A since the header structure is 10 bytes long VERSION ◼ This field identifies the major revision and is set to 0x01 currently ◼...

  • Page 49: Active Configuration

    PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER ACTIVE CONFIGURATION The ACTIVE CONFIGURATION area contains the currently active configuration settings and PTM 535BZ operates according to the register values in this area. Updating the register values is done via the Configuration Update process as described in Chapter 5.6.16.
  • Page 50 The default configuration is that a movement of the ECO 200 harvester spring away from the PTM 535BZ PCB is considered as a press event while a movement of the ECO 200 har- vester spring towards the PTM 535BZ PCB is considered as a release event as described in chapter 2.4.1.
  • Page 51 The PROTOCOL field of the RADIO_CONFIG register is used to select the protocol. By de- fault, PTM 535BZ will use the BLE radio standard for the transmission of telegrams. ZGP can be selected instead of BLE by setting the PROTOCOL bit is to 0b1.
  • Page 52 The CHANNEL_SELECTION field is used to select the BLE radio channels (as described in Chapter 3.1.2) for the transmission of BLE telegrams. By default, PTM 535BZ will use the three advertising channels (CH37, CH38 and CH39) for the transmission of both data and commissioning telegrams.
  • Page 53 Selects the input status encoding 0b1: INPUT_STATUS uses customer-defined encoding 0b0 (Always set to 0b0) Table 16 – BLE_TX_CONFIG register settings © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 53/112...
  • Page 54 The BLE_SECURITY_MODE field is intended for future implementation selecting the security mode used by PTM 535BZ when transmitting BLE telegrams. Currently, the supported secu- rity mode is using a 32 bit sequence counter to generate a 32 bit CMAC (signature) as de-...
  • Page 55 0xE215. The four least significant byte of this address are assigned during manufacturing and are listed in the BLE_SOURCE_ADDRESS register. The resulting 6 byte Static Source Address used by PTM 535BZ for the transmission of BLE telegrams can then be calculated as (0xE215 << 32) + BLE_SOURCE_ADDRESS.
  • Page 56 BLE_INPUT_STATUS field of the BLE_TX_CONFIG register to 0b1. If this feature is enabled, then PTM 535BZ will select the value of the INPUT_STATUS field within the BLE data telegram from one of the eight registers BLE_INPUT_STATUS_0 …...
  • Page 57 PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER 5.6.9 ZGP_TX_CONFIG The ZGP_TX_CONFIG register determines the radio channel used by PTM 535BZ for the trans- mission of ZGP telegrams. The ZGP_TX_CHANNEL field defines the currently used radio channel (channel 11 … 26) as...
  • Page 58 The ZGP_SEC_MODE field defines how the security key is encrypted in the commissioning telegram. By default, PTM 535BZ uses the ZA09 key to encrypt the security key. Optionally, PTM 535BZ can use an Install Code (IC) to encrypt the security key. Refer to the Zigbee Green Power specification for a description of this feature.
  • Page 59 ZGP_PROTOCOL_CONFIG The ZGP_PROTOCOL_CONFIG register defines the ZGP-specific parameters of PTM 535BZ. The ZGP_DEVICE_ID field selects the DEVICE ID used by PTM 535BZ when transmitting ZGP telegrams. By default, Device ID 0x07 (Generic 8-contact switch) is used as described in Chapter 4.4.1.2.
  • Page 60 INPUT1 and INPUT2 signals and the ECO 200 action. Setting the value of a ZGP_COMMAND_x (x = 0…7) register to 0xFF will cause PTM 535BZ no to transmit a data telegram. This can for instance be useful is PTM 535BZ should only transmit a data telegram upon button press but not on release.
  • Page 61 6 (0x40) USER1_PIN 0b1 (Allowed) 0b0 (Not Allowed) 7 (0x80) USER2_PIN 0b1 (Allowed) 0b1 (Allowed) Table 21 - SECURITY OPTIONS group © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 61/112...
  • Page 62 6 (0x40) 0b0 (Not Allowed) 0b0 (Not Allowed) 7 (0x80) 0b0 (Not Allowed) 0b0 (Not Allowed) Table 23 - BLE OPTIONS group © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 62/112...
  • Page 63 5.6.16 SEQUENCE_COUNTER PTM 535BZ maintains a 4 byte BLE Sequence Counter for the authentication of BLE data telegrams as described in Chapter 3.4.1 and a 4 byte ZGP Sequence Counter for the authen- tication of ZGP data telegrams as described in Chapter 4.4.1.
  • Page 64 The request contains invalid parameters (for instance an undefined configuration reg- ister value) 5.6.18 DEVICE_STATUS The DEVICE_STATUS register is an internal register that tracks the PTM 535BZ status during commissioning actions. © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 64/112...

  • Page 65: New Configuration

    PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER NEW CONFIGURATION The NEW CONFIGURATION area is used to update the configuration parameters used by PTM 535BZ which are stored in the ACTIVE CONFIGURATION area. The structure of NEW CONFIGURATION area is shown in Table 26 below. Content...
  • Page 66 CONFIGURATION_SELECTION register. If one, several or all registers cannot be changed by the user, then PTM 535BZ will abort the update process and set the REQUEST_STATUS register to “PERMISSION ERROR”.
  • Page 67 BYTE3 = SYSTEM configuration ◼ The structure of the CONFIGURATION_SELECTION register is shown in Figure 48 below. Figure 48 – CONFIGURATION_SELECTION © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 67/112...
  • Page 68 0b0 (Do not update) 0b1 (Update, only for USER1) 7 (0x80) USER2_PIN 0b0 (Do not update) 0b1 (Update) Table 28 - SECURITY configuration group © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 68/112...
  • Page 69 0b0 (Do not update) 0b1 (Update) 6 (0x40) 0b0 (Do not update) 7 (0x80) 0b0 (Do not update) Table 30 - BLE OPTIONS group © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 69/112...
  • Page 70 PIN codes for USER1 and USER2. Figure 49 – NFC device configuration architecture © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 70/112...
  • Page 71 PIN codes for USER1 and USER2. Figure 50 – USER1_PIN and USER2_PIN register structure with default values © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 71/112...

  • Page 72: Using The Nfc Interface

    PC or a suitable smartphone with NFC functionality. The selected reader has to support NFC read and write operations according to the ISO15693 standard. For PC-based applications, EnOcean recommends the TWN4 Multitech 2 HF NFC Reader (or- der code T4BT-FB2BEL2-SIMPL) from Elatec RFID Systems (sales-rfid@elatec.com). This...

  • Page 73: Mechanical Interface

    PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER Mechanical interface PTM 535BZ uses the same mechanical outline as the existing PTM 535 / PTM 535Z / PTM 535J and PTM 535Z products. Existing mechanical designs combining one of the existing variants with an ECO 200 harvester can therefore also be used with PTM 535BZ.

  • Page 74: Application Information

    Note that interference from other radio equipment operating in the 2.4 GHz band (WiFi rout- ers, smartphones, wireless audio and video systems, etc.) can have major impact on radio performance. © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 74/112...

  • Page 75: Regulatory Approvals

    8.1.1 Declaration of conformity Hereby, EnOcean GmbH, declares that this radio equipment is in compliance with the essen- tial requirements and other relevant provisions of Directive 2014/53/EU. A copy of the Dec- laration of Conformity can be obtained from the product webpage at www.enocean.com...

  • Page 76: Arib (Japan)

    USER MANUAL PREVIEW PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER ARIB (Japan) 8.2.1 ARIB certificate © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 76/112...

  • Page 77: Product History

    ECO 200 Website Bluetooth Core Specification Zigbee Green Power Specification RFC3610 IEEE 802.15.4 Bluetooth Assigned Numbers – Company Identifiers Elatec SW Development Pack © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 77/112...

  • Page 78: Nfc Configuration

    PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER A. NFC configuration PTM 535BZ can be configured using the integrated NFC interface as described Chapter This appendix provides a set of examples for common configuration tasks using the recom-...

  • Page 79: Useful Commands

    USER MANUAL PREVIEW PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER A.1.1 Useful commands The following commands are used when configuring PTM 535BZ using the Elatec NFC reader: ◼ SearchTag(maximum ID length) This command is used to search and identify (tag type, tag ID) an NFC tag.

  • Page 80: Direct Communication With The Nfc Reader

    NFC page address 0x20 from the previous chapter. Figure 55 – Direct communication with the NFC reader © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 80/112...

  • Page 81: Configuration Examples

    5. Actuate the connected ECO 200 harvester five times in each direction to provide the required energy for the configuration sequence A.2.2 Request status PTM 535BZ uses the REQUEST_STATUS register to inform the user about the status of a configuration request in described in Chapter 5.6.17. This register should be consulted to check if a configuration request was successful and to determine the root cause of a config- uration request failure.

  • Page 82: Functional Requests

    Authenticate request ISO15693_WriteSingleBlock(0x0052,0x02 0x00 0x35 0xE5) (PIN Code of USER1) PTM 535BZ will evaluate and execute this request upon the next actuation of the ECO 200 harvester as described in Chapter 5.1. PTM 535BZ will then return one of the following re-...

  • Page 83: Commissioning Telegram Request By User2

    Authenticate request ISO15693_WriteSingleBlock(0x0052,0x03 0x00 0x35 0xE5) (PIN Code of USER2) PTM 535BZ will evaluate and execute this request upon the next actuation of the ECO 200 harvester as described in Chapter 5.1. PTM 535BZ will then return one of the following re-...

  • Page 84: Zgp Decommissioning Telegram Request By User2

    USER MANUAL PREVIEW PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER PTM 535BZ will evaluate and execute this request upon the next actuation of the ECO 200 harvester as described in Chapter 5.1. PTM 535BZ will return one of the following responses:...

  • Page 85: Factory Reset Request

    PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER A.3.3 Factory reset request The NFC configuration parameters of PTM 535BZ can be reset to its factory defaults by factory reset which can be requested via the NFC interface. A.3.3.1 Factory reset request by USER1...

  • Page 86: Configuration Requests

    (marked 0x00XX) in the NEW CONFIGURATION area. © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 86/112...

  • Page 87: Configuration Status For User1

    PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER A.4.1.2 Configuration status for USER1 PTM 535BZ will evaluate and execute the configuration request provided by USER1 and pro- vide one of the following responses in the REQUEST_STATUS register: Response Code...

  • Page 88: Security Configuration

    Identify register(s) to update ISO15693_WriteSingleBlock(0x0051,0x80 0x00 0x00 0x00) (SECURITY -> USER2_PIN) Provide new value (0x12345678) ISO15693_WriteSingleBlock(0x007A,0x12 0x34 0x56 0x78) for USER2_PIN © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 88/112...

  • Page 89: Reading User1_Configuration_Options

    Being able to change the PIN code used by USER2 allows USER1 (e.g. an OEM) to pre-assign a PIN code for use by USER2 (e.g. an installer or the end customer) to PTM 535BZ devices. It also allows USER1 to reset USER2_PIN in case this is lost or forgotten.

  • Page 90: Reading User2_Configuration_Options

    Note that by default, USER2 has access to the same configuration options as USER1 except USER1_PIN and USER2_CONFIGURATION_OPTIONS (which both can only be changed by USER1). © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 90/112...

  • Page 91: Restricting User2_Configuration_Options

    Identify configuration register(s) to update ISO15693_WriteSingleBlock(0x0051,0x10 0x00 0x00 0x00) (SECURITY -> USER2_CONFIGURATION_OPTIONS) Provide new register value (0x87373F13) for ISO15693_WriteSingleBlock(0x0076,0x87 0x37 0x3F 0x13) USER2_CONFIGURATION_OPTIONS © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 91/112...

  • Page 92: Reading Security_Key1

    ISO15693_WriteSingleBlock(0x0068,0x00 0x01 0x02 0x03) Provide new value for SECURITY_KEY1: ISO15693_WriteSingleBlock(0x0069,0x04 0x05 0x06 0x07) ISO15693_WriteSingleBlock(0x006A,0x08 0x09 0x0A 0x0B) 000102030405060708090A0B0C0D0E0F ISO15693_WriteSingleBlock(0x006B,0x0C 0x0D 0x0E 0x0F) © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 92/112...

  • Page 93: Writing Security_Key2

    ISO15693_WriteSingleBlock(0x006C,0x00 0x01 0x02 0x03) Provide new value for SECURITY_KEY2: ISO15693_WriteSingleBlock(0x006D,0x04 0x05 0x06 0x07) ISO15693_WriteSingleBlock(0x006E,0x08 0x09 0x0A 0x0B) 000102030405060708090A0B0C0D0E0F ISO15693_WriteSingleBlock(0x006F,0x0C 0x0D 0x0E 0x0F) © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 93/112...

  • Page 94: Zgp Configuration

    LRN button to prevent unintended change of the radio channel. In this example, we assume that we want to configure PTM 535BZ to transmit ZGP telegrams using ZGP radio channel 15 with radio channel selection via LRN button disabled:...

  • Page 95: Zgp Device Id Selection

    USER MANUAL PREVIEW PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER A.4.3.2 ZGP Device ID selection PTM 535BZ allows the user to select the ZGP Device ID used within ZGP data telegrams as discussed in Chapter 4.4.1. By default, PTM 535BZ uses Device ID 0x07 (Generic Switch). To...

  • Page 96: Ble Configuration

    ECO is released (INPUT_STATUS = 0xFF meaning that no telegram will be sent). Such input status encoding could be helpful when using a push button based on PTM 535BZ in toggle mode where each press of the button will toggle the status of the receiver.

  • Page 97: Security Key Selection For Ble

    Identify register(s) to update ISO15693_WriteSingleBlock(0x0051,0x00 0x00 0x02 0x00) (BLE -> BLE_SEC_CONFIG) Provide new value: ISO15693_WriteSingleBlock(0x0058,0x00 0x00 0x00 0x00) BLE_SEC_CONFIG = 0x00 © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 97/112...

  • Page 98: System Configuration

    The System configuration area allows selecting the radio protocol (BLE or ZGP) used for the telegram transmission. A.4.5.1 Selecting the radio protocol PTM 535BZ uses BLE radio protocol by default. PTM 535BZ can be configured by USER2 to use ZGP as radio protocol as follows: Command...

  • Page 99: Changing The Input Configuration

    PCB is by default considered to be a “release”. PTM 535BZ can be configured by USER2 to reverse this encoding (so that a move of the ECO 200 spring towards the connected PCB is considered to be a “press” while a move of the ECO 200 spring away from the connected PCB is considered to be a “release”) as follows:...

  • Page 100: Receiver Configuration For Ble

    To maximize the likelihood of reception of these telegrams, it is necessary that the receiver is either permanently in receive mode on one of the radio channels used by PTM 535BZ or – if this is not possible – periodically in receive mode for a sufficiently long duration.

  • Page 101: Advertising Interval

    If PTM 535BZ uses 20 ms advertising intervals, then the scan window has to be at ◼ least 20 ms (advertising interval) plus 0.5 ms (telegram duration) plus a timing margin to account for the random time offset at the transmitter.

  • Page 102: Scan Interval

    If PTM 535BZ uses 20 ms advertising intervals, then the scan interval has to be less ◼ than the time between the end of the first advertising event and the begin of the third advertising event (2 * 20 ms = 40 ms) minus 0.5 ms (telegram duration) mi-...

  • Page 103: Parsing Of Ptm 535Bz Ble Radio Telegrams

    PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER C. Parsing of PTM 535BZ BLE radio telegrams This appendix is intended as an example of how start to parse received PTM 535BZ radio telegrams. Please refer to Chapter 3 for a description of the BLE frame structure.

  • Page 104: Commissioning Telegram Example

    PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER Commissioning telegram example We consider the following raw commissioning telegram data captured from a PTM 535BZ device: D6 BE 89 8E 42 24 06 00 00 10 15 E2 1D FF DA 03 41 00 00 00 1D 76 A7 A0 DE 93 E7 F5 53 13 2D 58 94 CF F9 9B 06 00 00 10 15 E2 97 B2 B6 C.2.1...

  • Page 105: Authentication Of Ptm 535Bz Ble Data Telegrams

    RFC3610 in particular. Algorithm input parameters The purpose of the security processing in PTM 535BZ is to calculate a unique signature that can be used to verify authenticity (telegram has not been modified) and originality (telegram comes from the assumed sender) of a telegram.

  • Page 106: Variable Input Parameters

    Sequence Counter and Input Status fields of the BLE data telegram (9 byte in total). Length of input data (Size of the payload to be authenticated) ◼ The length of the payload to be authenticated is 9 byte for PTM 535BZ data telegrams. Security key ◼...

  • Page 107: Obtaining The Security Key

    The security key – the common secret shared between sender and receiver – has to be ob- tained via specific mechanisms. There are three different ways to obtain the security key used by a PTM 535BZ module when it is transmitting BLE telegrams: Via NFC (by reading SECURITY_KEY1 or by writing SECURITY_KEY2) ◼...

  • Page 108: Constant Internal Parameters

    D.1.5 Constant internal parameters The RFC3610 implementation in PTM 535BZ derives two internal parameters – M’ and L’ – based on the input data and uses them to construct A0_Flag and B_0_Flag which – together with the iteration counter i – are required for subsequent processing.

  • Page 109: Algorithm Execution Sequence

    The algorithm execution sequence is shown in Figure 59 below. The first four bytes of T_0 are then used to authenticate PTM 535BZ telegrams. Figure 59 – Authentication algorithm sequence © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 109/112...

  • Page 110: Example

    Example For this example, we consider the BLE data telegram payload 0CFFDA034000000001B0561C03 received from a PTM 535BZ with source address E21510000006 which is authenticated with security key 1D76A7A0DE93E7F553132D5894CFF99B. The last four bytes of this payload (B0561C03) are the sender-provided signature which has to be authenticated (compared against the signature the receiver calculates based on its own security key).
  • Page 111 This proves that the telegram originates from a sender that possesses the same security key and the telegram content has not been modified. © 2021 EnOcean | www.enocean.com F-710-017, V1.0 PTM 535BZ User Manual | v1.0 | May 2021 | Page 111/112...

  • Page 112: Address Resolution For Resolvable Private Addresses (Rpa)

    PTM 535BZ – BLUETOOTH AND ZIGBEE GREEN POWER PUSHBUTTON TRANSMITTER E. Address resolution for resolvable private addresses (RPA) PTM 535BZ provides the option to obfuscate its identity by means of using resolvable private addresses (RPA that are generated using an Identity Resolution Key as described in Chapter 3.3.5.2.

This manual is also suitable for:

S3231-a535

Table of Contents