1. Manuals
  2. Brands
  3. EnOcean Manuals
  4. Transmitter
  5. PTM 216B
  6. User manual

EnOcean PTM 216B User Manual

Bluetooth pushbutton transmitter module
Hide thumbs Also See for PTM 216B:
Table of Contents

Advertisement

Quick Links

Download this manual
USER MANUAL
PTM 216B – BLUETOOTH
PTM 216B Bluetooth
17 March 2022
Observe precautions! Electrostatic sensitive devices!
Patent
WO98/36395,
DE
WO
2004/051591,
WO 04/109236, WO 05/096482, WO 02/095707,
US 6,747,573, US 7,019,241
© 2022 EnOcean | www.enocean.com
PUSHBUTTON TRANSMITTER MODULE
®
®
Pushbutton Transmitter Module
100
25
561,
DE
103
01
F-710-017, V1.0
PTM 216B User Manual | v1.0 | February 2022 | Page 1/86
DE
101
50
678
A1,
DE
protected:
128,
10309334,

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the PTM 216B and is the answer not in the manual?

Questions and answers

Related Manuals for EnOcean PTM 216B

Summary of Contents for EnOcean PTM 216B

  • Page 1 Observe precautions! Electrostatic sensitive devices! Patent protected: WO98/36395, 561, 128, 2004/051591, 10309334, WO 04/109236, WO 05/096482, WO 02/095707, US 6,747,573, US 7,019,241 © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 1/86...
  • Page 2 The Bluetooth ® word mark and logos are registered trademarks owned by the Bluetooth SIG, Inc. and any use of such marks by EnOcean GmbH is under license. Other trademarks and trade names are those of their respective owners. Important! This information describes the type of component and shall not be considered as assured characteristics.

  • Page 3: Table Of Contents

    Using the NFC interface ................29 NFC interface functions ................30 6.2.1 NFC interface state machine ..............30 6.2.2 IDLE state ....................31 © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 3/86...
  • Page 4 10.3.1 IC (Industry Canada) Regulatory Statement ..........66 ACMA (Australia) Declaration of Conformity ..........68 ARIB (Japan) Construction Type Conformity Certifaction ......69 © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 4/86...
  • Page 5 C.3.2 Data telegram with 1 byte optional data ............. 84 C.3.3 Data telegram with 2 byte optional data ............. 85 C.3.4 Data telegram with 4 byte optional data ............. 86 © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 5/86...

  • Page 6: General Description

    PTM 216B integrated into US-style single or double rocker pad housing The term “PTM 216B” as used in this document applies to all product variants unless other- wise mentioned. Figure 1 below shows from left to right the PTM 216B module, the EWSSB / EWSDB European wall switches and the ESRPB / EDRPB US-style rocker pads.

  • Page 7: Technical Data

    Wall Switch (Double Rocker, see separate documentation) EWSDB E8221-A280 Rocker Pad (Single Rocker, see separate documentation) ESRPB ESRPB-W-EO Rocker Pad (Double Rocker, see separate documentation) EDRPB EDRPB-W-EO © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 7/86...

  • Page 8: Functional Information

    It transmits Bluetooth Low Energy (BLE) data telegrams where the required energy is provided by a built-in electro-dynamic energy gen- erator. The PTM 216B product outline with key functional components is shown in Figure 2 below. Button contacts...

  • Page 9: Functional Block Diagram

    Allows reading and writing certain product parameters using an NFC compliant reader / writer supporting NFC Forum Type 2 tags (as specified by ISO/IEC 14443 Part 2 and 3). © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 9/86...

  • Page 10: User Interface

    PUSHBUTTON TRANSMITTER MODULE User Interface PTM 216B devices provide four button contacts. They are grouped into two channels (Channel A and Channel B) each containing two button contacts (State O and State I). The state of all four button contacts (pressed or not pressed) is transmitted together with a unique device identification (48 Bit device ID) whenever the energy bow is pushed or re- leased.

  • Page 11: Telegram Transmission

    (2402MHz … 2480MHz). By default, PTM 216B will use the three BLE advertising channels (BLE Channel 37, 38 and 39) defined for transmission. The transmission of a radio telegram on these three advertis- ing channels is called an Advertising Event.

  • Page 12: Default Radio Transmission Sequence

    In certain situations, it might be desirable to transmit radio telegrams on channels other than the three advertising channels. PTM 216B therefore allows to select the radio channels to be used for the transmission of data telegrams and commissioning telegrams. The following transmission modes are sup-...

  • Page 13: Supported Radio Transmission Sequences

    TX_CHANNEL1, TX_CHANNEL2 and TX_CHANNEL3. The PTM 216B telegram will in this mode be transmitted on the radio channel selected by TX_CHANNEL1 first, immediately followed by a transmission on the radio channel selected by TX_CHANNEL2 and a transmission on the radio channel selected by TX_CHANNEL3.

  • Page 14: Two-Channel Radio Transmission Sequence

    (selected by TX_CHANNEL2 and TX_CHANNEL3 respectively), i.e. all trans- missions will be on the radio channel selected by TX_CHANNEL1. The PTM 216B telegram will be sent six times on this radio channel as shown in Figure 8 below.

  • Page 15: Telegram Format

    ® PUSHBUTTON TRANSMITTER MODULE 4. Telegram format PTM 216B transmits Bluetooth Low Energy (BLE) radio telegrams in the 2.4 GHz band. For detailed information about the Bluetooth Low Energy standard, please refer to the applica- ble specifications. Figure 9 below summarizes the BLE frame structure.

  • Page 16: Source Address

    These two address modes are described in the following chapters. 4.4.1 Static source address mode By default, PTM 216B uses static source addresses meaning that the source address is con- stant during normal operation. The static source address can be read and configured (writ- ten) via NFC as described in chapter 6.

  • Page 17: Resolvable Private Address Mode

    PTM 216B) to do so. The shared security key – which has to be known by both PTM 216B and the authorized receiver – is called the Identity Resolution Key (IRK). PTM 216B uses its device-unique ran- dom key as identity resolution key.

  • Page 18: Check Sum

    The 3 byte BLE Check Sum is used to verify data integrity of received BLE radio telegrams. It is calculated as CRC (cyclic redundancy check) of the BLE Header, Source Address and Payload fields. © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 18/86...

  • Page 19: Telegram Payload

    0x0E 0x10) Type byte)  The Type field identifies the data type used for this telegram. For PTM 216B data telegrams, this field is always set to 0xFF to designate manufacturer-specific data field Manufacturer byte)  The Manufacturer ID field is used to identify the manufacturer of BLE devices based on assigned numbers.

  • Page 20: Button Action Encoding

    3. Calculate data payload 4. Calculate security signature In PTM 216B, the type of action (Press Action or Release Action) is indicated by Bit 0 (Ener- gy Bar). If a button contact has been actuated during Press Action or Release Action, then this is indicated by the according status bit set to ‘1’.

  • Page 21: Commissioning Telegram Payload

    Length byte)  The Length field specifies the combined length of the following fields. For PTM 216B commissioning telegrams, this field is set to 0x1D to indicate 29 byte of manufactur- er-specific data. Note: In product versions prior to DC-06 this field was incorrectly set to 0x1E.

  • Page 22: Ptm 216B Data Telegram Authentication

    In order to avoid message replay (capture and retransmission of a valid message), it is required that the receiver tracks the value of the sequence counter used by PTM 216B and only accepts messages with higher sequence counter values (i.e. not accepts equal or lower sequence counter values for subsequent telegrams).

  • Page 23: Authentication Implementation

    PUSHBUTTON TRANSMITTER MODULE ® 4.7.1 Authentication implementation PTM 216B implements data telegram authentication based on AES128 in CCM (Counter with CBC-MAC) mode as described in IETF RFC3610. At the time of writing, the RFC3610 stand- ard could be found here: https://www.ietf.org/rfc/rfc3610.txt...

  • Page 24: Commissioning

    The receiver needs to know how to uniquely identify this specific PTM 216B device. This is achieved by using a unique 48 Bit ID (Source Address) for each PTM 216B device as described in chapter 4.4. In addition, up to 4 byte of Optional Data can be...

  • Page 25: Nfc-Based Commissioning

    PTM 216B configuration using the default PIN code. Should you lose the new NFC PIN code then PTM 216B can be reset to factory mode (with the default NFC PIN code) by means of a factory reset as described in chapter 5.4.

  • Page 26: Camera-Based Commissioning

    For cases where both NFC and camera-based commissioning are not feasible it is possible to set PTM 216B into a specific mode where it transmits commissioning telegrams. This functionality can be disabled via the NFC configuration interface by setting the DISABLE LRN TELEGRAM flag in the Configuration register to 0b1 (see chapter 6.7.3).

  • Page 27: Commissioning Telegram Transmission

    ® To enter commissioning mode, start by selecting one button contact of PTM 216B. Any but- ton of PTM 216B (A0, A1, B0, B1) can be used. This button is referred to as Button_X in Figure 20 above. Next, execute the following long-short-long sequence: 1.

  • Page 28: Factory Reset

    PTM 216B can be reset to its default settings by means of a factory reset. This ensures that PTM 216B can be reset to a known configuration in case the PIN for the NFC access has been lost or NFC access is not possible for other reasons In order to execute such factory reset, the rocker(s) and the switch housing have to be removed from the PTM 216B module.

  • Page 29: Nfc Interface

    14443 Part 2 and 3 standards using an NXP NT3H2111 Mifare Ultralight tag. This NFC functionality can be used to access (read and write) the PTM 216B configuration memory and thereby configure the device as described in the following chapters.

  • Page 30: Nfc Interface Functions

    6.2.1 NFC interface state machine Figure 22 below shows the overall state machine of the NFC interface. Figure 22 – NFC interface state machine © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 30/86...

  • Page 31: Idle State

    If access to protected memory is required, then the tag can transition from the ACTIVE state to AUTHENTICATED state by executing the PWD_AUTH command in conjunction with the correct 32 bit password. © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 31/86...

  • Page 32: Read Command

    The WRITE command requires a start page address and returns writes 4 bytes of data into that page. Figure 24 below shows the read command sequence. Figure 24 – NFC write command sequence © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 32/86...

  • Page 33: Password Authentication (Pwd_Auth) Command

    Note that a read access to page 0xE5 always return 0x00000000, i.e. it is not possible to read out the current PIN code. © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 33/86...

  • Page 34: Using Twn4 As Usb Nfc Reader

    CDC / Virtual COM port to TWN4 and understand the structure of the response that will be received back. © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 34/86...

  • Page 35: Useful Commands

    This raw data can then be transmitted to TWN4 via a virtual COM port. TWN4 will respond to the request with the corresponding response as shown in Figure 28 below. Figure 28 – Binary data exchange © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 35/86...

  • Page 36: Configuration Memory Organization

    Protected data  In addition to that, PTM 216B maintains a private configuration memory region used to store default parameters and confidential information which is not accessible to the user. Figure 29 below shows the configuration memory structure used by PTM 216B.

  • Page 37: Nfc Memory Address Map

    BLE_A0_A1_B1_PRESS_CMD BLE_A0_A1_B1_RELEASE_CMD BLE_A0_B0_B1_PRESS_CMD BLE_A0_B0_B1_RELEASE_CMD BLE_A1_B0_B1_PRESS_CMD BLE_A1_B0_B1_RELEASE_CMD BLE_A0_A1_B0_B1_PRESS_CMD BLE_A0_A1_B0_B1_RELEASE_CMD SECUIRTY_KEY2 SECURITY_KEY2 … CUSTOMER_DATA CUSTOMER_NFC_DATA … Table 2 – Configuration memory address map © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 37/86...

  • Page 38: Public Data

    Name  This is an 8 byte field which is by default set to “EnOcean®“ to identify EnOcean GmbH as the manufacturer of this module. OEM Name and Manufacturer ID can be configured by the customer as required to identify his PTM 216B based product, see chapter 6.7.7...

  • Page 39: Protected Data

    MANUFACTURER_ID_WRITE  This 4-byte register is used to update the Manufacturer ID, see chapter 6.7.7 register SECURITY_KEY_WRITE  This 16-byte register is used to update the security key used by PTM 216B, see chapter 6.7.5 register OPTIONAL_DATA  This 4-byte register contains optional data that can be transmitted as part of all data telegrams, see chapter 4.6.

  • Page 40: Pin Code

    (SOURCE_ADDRESS_WRITE, OEM_NAME_WRITE, MANUFACTURER_ID_WRITE, SECURITY_KEY_WRITE) in the protected data area and set the according UPDATE flag in the CONFIGURATION register. After that, the user has to push and release the energy bar of the PTM 216B module. 6.7.3 CONFIGURATION register The CONFIGURATION register is 1 byte wide and contains configuration flags.

  • Page 41: Source_Address_Write Register

    The SOURCE_ADDRESS_WRITE register is 4 byte wide and can be used to modify the lower 32 bit of the PTM 216B Static Source Address. The upper 16 bit of the PTM 216B Static Source Address are always fixed to 0xE215 to identify the device type. In order to do change the lower 32 bit of the Static Source Address, follow these steps: 1.

  • Page 42: Private Security Key Mode

    It specifies the manufacturer of a BLE product and is transmitted as part of each BLE tele- gram. By default, the Manufacturer ID is set to 0x03DA (assigned to EnOcean GmbH). It can be changed to a different OEM identifier.

  • Page 43: Optional_Data Register

    PUSHBUTTON TRANSMITTER MODULE ® PTM 216B will determine that it should update OEM_NAME and MANUFACTURER_ID based on the setting of the UPDATE_OEM_MAN_ID flag and copy any non-zero value of the OEM_NAME_WRITE register to the OEM_NAME register and any non-zero value of the MANUFACTURER_ID_WRITE reg- ister to the MANUFACTURER_ID register.

  • Page 44: Variant Register

    0b110 Commissioning and Data telegrams on 1 user-defined radio channel 0b111 RFU (Do not use) Table 3 – Transmission Mode settings © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 44/86...
  • Page 45 Mbit proprietary mode using the DATA_RATE field. Setting Result 1 Mbit Data Rate (Default configuration) 2 Mbit Data Rate (Proprietary) Table 5 – Data Rate settings © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 45/86...

  • Page 46: Radio Channel Selection Registers

    Custom Radio Channel … 2477 MHz Custom Radio Channel 2479 MHz Custom Radio Channel Table 6 – Radio Channel Selection register settings © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 46/86...

  • Page 47: Customer Data

    6.7.11 Customer Data PTM 216B allocates 64 pages (256 byte) for customer data that can be read and written via the NFC interface in protected mode. The main intention is to enable storing OEM-specific information such as product type, revi- sion, date code or similar.

  • Page 48: Private Data

    The content of the private data area is not externally accessible. 6.8.1 Security key The Security Key field contains the 128 bit private key used for authenticating PTM 216B telegrams and for resolving private source addresses. This register is programmed with a random value during manufacturing. It can be changed using the Security Key Write feature described in chapter 6.7.5.

  • Page 49: Ptm 216B Device Label

    PTM 216B module itself. PTM 216B device label structure Figure 32 below shows the structure of the PTM 216B device label. It identifies key parame- ters such as the source address (in this case E21501500100) and the manufacturing date (in this case week 30, 2018) in writing.

  • Page 50: Qr Code Format

    PTM 216B – BLUETOOTH ® PUSHBUTTON TRANSMITTER MODULE QR code format The QR code used in the PTM 216B product label encodes key product parameter according to the ANSI/MH10.8.2-2013 industry standard. The QR code shown in Figure 32 above en- codes following...

  • Page 51: Device Integration

    ® PUSHBUTTON TRANSMITTER MODULE 8. Device integration PTM 216B is designed for integration into button or rocker-based switches. It implements the established PTM 2xx mechanical form factor and can therefore be used with a wide va- riety of existing designs.
  • Page 52 PUSHBUTTON TRANSMITTER MODULE ® 1) these catwalks are not needed when using one single rocker only 2) dimensions of rocker part Figure 34 – PTM 216B, top view (note cut A, B and C marking) © 2022 EnOcean | www.enocean.com F-710-017, V1.0...
  • Page 53 Figure 35 – PTM 216B, cut A 2) dimensions of rocker part Figure 36 – PTM 216B, cut B and C © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 53/86...
  • Page 54 USER MANUAL PTM 216B – BLUETOOTH PUSHBUTTON TRANSMITTER MODULE ® Hatched areas: support planes Figure 37 – PTM 216B rear view © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 54/86...
  • Page 55 2) dimensions of rocker part Figure 38 – PTM 216B, side view If the rocker is not mounted on the rotation axis of PTM 216B several tolerances have to be considered! The measure from support plane to top of the energy bow is 7.70 mm +/- 0.3 mm!
  • Page 56 PTM 216B is powered by the electromagnetic generator ECO 200. For proper func- tion magnets or ferromagnetic materials are not permitted within a keep-out zone of 60mm around the center of PTM 216B.

  • Page 57: Oem Product Qr Code

    Order Code: S3221-A216 Table 8 – Required fields for the product QR code 8.3.1 Example for an OEM product QR code For this example, we consider an OEM product using a PTM 216B module with the following parameters: Static Source Address: ...

  • Page 58: Application Information

    Note that interference from other radio equipment operating in the 2.4 GHz band (WiFi routers, smartphones, wireless audio and video systems, etc.) can have major impact on radio performance. © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 58/86...

  • Page 59: Receiver Configuration

    PUSHBUTTON TRANSMITTER MODULE Receiver configuration PTM 216B communicates user actions (rocker push / release) using a sequence of advertis- ing telegrams as described in chapter 3. In order to maximize the likelihood of reception of these telegrams, it is necessary that the receiver is either permanently in receive mode on one of the radio channels used by PTM 216B or –...

  • Page 60: Advertising Interval

    From Figure 41 above it can be seen that the minimum duration of the scan window is de- pendent on the advertising interval: If PTM 216B uses 20 ms advertising intervals, then the scan window has to be at ...

  • Page 61: Scan Interval

    From Figure 42 above it can be seen that the maximum duration of the scan interval is de- pendent on the advertising interval: If PTM 216B uses 20 ms advertising intervals, then the scan interval has to be less ...

  • Page 62: Regulatory Information

    ® PUSHBUTTON TRANSMITTER MODULE 10. Regulatory information PTM 216B has been certified according to FCC (US), ISED (CA) and RED (EU) regulations. Changes or modifications not expressly approved by EnOcean could void the user's authori- ty to operate the equipment.

  • Page 63: Fcc (United States) Certificate

    USER MANUAL PTM 216B – BLUETOOTH ® PUSHBUTTON TRANSMITTER MODULE FCC (United States) Certificate © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 63/86...

  • Page 64: Fcc (United States) Regulatory Statement

    Connect the equipment into an outlet on a circuit different from that to which the  receiver is connected. Consult the dealer or an experienced radio/TV technician for help.  © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 64/86...

  • Page 65: Ic (Industry Canada) Certificate

    USER MANUAL PTM 216B – BLUETOOTH ® PUSHBUTTON TRANSMITTER MODULE IC (Industry Canada) Certificate © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 65/86...

  • Page 66: Ic (Industry Canada) Regulatory Statement

    Connect the equipment into an outlet on a circuit different from that to which the  receiver is connected. Consult the dealer or an experienced radio/TV technician for help  © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 66/86...
  • Page 67 Connecter l'équipement à une sortie sur un circuit différent de celui sur lequel le ré-  cepteur est branché. Consulter le revendeur ou un technicien radio / télévision expérimenté pour de l'aide  © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 67/86...

  • Page 68: Acma (Australia) Declaration Of Conformity

    USER MANUAL PTM 216B – BLUETOOTH ® PUSHBUTTON TRANSMITTER MODULE ACMA (Australia) Declaration of Conformity © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 68/86...

  • Page 69: Arib (Japan) Construction Type Conformity Certifaction

    USER MANUAL PTM 216B – BLUETOOTH ® PUSHBUTTON TRANSMITTER MODULE ARIB (Japan) Construction Type Conformity Certifaction © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 69/86...

  • Page 70: India Equipment Type Approval

    USER MANUAL PTM 216B – BLUETOOTH PUSHBUTTON TRANSMITTER MODULE ® 10.6 India Equipment Type Approval © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 70/86...

  • Page 71: Product History

    Revision Release date Key changes versus previous revision DA-01 March 2022 First release for lead customers Table 10 – Product History © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 71/86...

  • Page 72: Parsing Ptm 216B Radio Telegrams

    PUSHBUTTON TRANSMITTER MODULE A. Parsing PTM 216B radio telegrams This appendix is intended as an example of how start to parse received PTM 216B radio telegrams. Please refer to chapter 4 first for a description of the BLE frame structure...

  • Page 73: Commissioning Telegram Example

    Security Key: AB 4B 9A 91 85 2B 70 B8 A6 52 A0 5E 92 BB 12 A0 Static Source Address: 0xE21500001B9F © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 73/86...

  • Page 74: Address Resolution For Resolvable Private Addresses (Rpa)

    ® B. Address resolution for resolvable private addresses (RPA) PTM 216B provides the option to obfuscate its identity by means of using resolvable private addresses (RPA) as described in chapter 4.4.2. The following chapters describe how to re- solve such addresses.

  • Page 75: Address Resolution Example

    ® B.1.2 Address resolution example We consider a PTM 216B device with the following IRK (options for determining the IRK / security key of a PTM 216B are described in chapter C.1.3.): BE759A027A4870FD242794F4C45220FB We further consider a telegram having the following resolvable private address: 493970E51944 We will now test if this resolvable private address was generated using the IRK above.

  • Page 76: Authentication Of Ptm 216B Data Telegrams

    RFC3610 in particular. Algorithm input parameters The purpose of the security processing in PTM 216B is to calculate a unique signature that can be used to verify authenticity (telegram has not been modified) and originality (tele- gram comes from the assumed sender) of a telegram.

  • Page 77: Variable Input Parameters

    The receiver of PTM 216B telegrams keeps track of this counter and will accept only telegrams with counter values higher than the highest previously used value. This eliminates possibility reusing previously transmitted telegrams.

  • Page 78: Obtaining The Security Key

    The tag response to the last command - NTAG_Read(0x14) - contains the password: NTAG_Read(0x14) Result: true Page: 3DDA31AD44767AE3CE56DCE2B3CE2ABB The password of this device is therefore: 3DDA31AD44767AE3CE56DCE2B3CE2ABB © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 78/86...

  • Page 79: Obtaining The Security Key Via The Product Qr Code

    ® C.1.3.2 Obtaining the security key via the product QR code Each PTM 216B module contains a QR code on its product label which identifies source ad- dress and security key of the module as described in chapter 8.3. The QR code of the device used for this tutorial is shown in Figure 44 below shows the same information encoded according to that.

  • Page 80: Internal Parameters

    C.1.5 Constant internal parameters The RFC3610 implementation in PTM 216B derives two internal parameters – M’ and L’ – based on the input data and uses them to construct A0_Flag and B_0_Flag which – togeth- er with the iteration counter i – are required for subsequent processing.

  • Page 81: Variable Internal Parameters

    ® C.1.6 Variable internal parameters The RFC3610 implementation in PTM 216B derives four internal parameters – Nonce, A0, B0 and B1 – based on the telegram specific input data and the constant internal parame- ters. These variable internal parameters - listed in Table 14 below - are then used together with the security key to calculate the actual signature.

  • Page 82: Examples

    C.3.1 Data telegram without optional data For this example, we consider the following telegram payload received from a PTM 216B with the source address E215000019B8 and security key 3DDA31AD44767AE3CE56DCE2B3CE2ABB: 0C FF DA 03 5D 04 00 00 11 B2 FA 88 FF...
  • Page 83 This proves that the telegram originates from a sender that possesses the same secu- rity key and the telegram content has not been modified. © 2022 EnOcean | www.enocean.com F-710-017, V1.0 PTM 216B User Manual | v1.0 | February 2022 | Page 83/86...

  • Page 84: Data Telegram With 1 Byte Optional Data

    C.3.2 Data telegram with 1 byte optional data For this example, we consider the following telegram payload received from a PTM 216B with the source address E215000019B8 and security key 3DDA31AD44767AE3CE56DCE2B3CE2ABB: 0D FF DA 03 62 04 00 00 10 12 B9 FE AC C1 The last four bytes of this payload (B9 FE AC C1) are the sender-provided signature which has to be authenticated.

  • Page 85: Data Telegram With 2 Byte Optional Data

    C.3.3 Data telegram with 2 byte optional data For this example, we consider the following telegram payload received from a PTM 216B with the source address E215000019B8 and security key 3DDA31AD44767AE3CE56DCE2B3CE2ABB: 0E FF DA 03 63 04 00 00 11 12 34 52 E0 51 16 The last four bytes of this payload (52 E0 51 16) are the sender-provided signature which has to be authenticated.

  • Page 86: Data Telegram With 4 Byte Optional Data

    C.3.4 Data telegram with 4 byte optional data For this example, we consider the following telegram payload received from a PTM 216B with the source address E215000019B8 and security key 3DDA31AD44767AE3CE56DCE2B3CE2ABB: 10 FF DA 03 6A 04 00 00 10 12 34 56 78 2C 9E 10 95 The last four bytes of this payload (2C 9E 10 95) are the sender-provided signature which has to be authenticated.

Table of Contents