Page 9
Table 10-2: Basic Results Format per MAC Address................87 Table 10-3: Full Results Format per MAC Address................88 Table 10-4: Wi-Fi DatarateID Field......................88 Table 10-5: Wi-Fi Channel ID Field ......................89 LR1110 www.semtech.com 9 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP...
1. Introduction 1.1 Scope This document aims at providing complete information on how to use the LR1110 transceiver in an application. It covers both hardware and software aspects. For a definition of the LR1110 functionalities and circuit specifications, please refer to the LR1110 Datasheet.
Page 13
LR1110 is optimized for low power and long battery life applications requiring indoor and outdoor geolocation. Its efficient Wi-Fi and GNSS geolocation capabilities, coupled with highly optimized detection algorithms, allow achieving a geolocation at a fraction of the power needed by existing solutions on the market.
2.1.1 Standby This mode is the default mode of the LR1110: it is the return state from all the other modes (expect for specific fallback options), and the mode from which the transitions to the other modes are possible. All the commands to configure the device should be issued in this mode.
2.1.3 Sleep The Sleep mode allows configuring the LR1110 into a low power consumption mode between radio or geolocation operations, while retaining the configuration register values and storing the firmware data in RAM.
Sleep IDDSL1 / IDDSL2 Sleep w/ 8kB retention IDDSL3A / IDDSL4A <1 The mode Retention=1 and Wakeup=0 is a valid usage mode, but does not correspond to any datasheet description. LR1110 www.semtech.com 16 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP...
(150-960MHz), using the modems (LoRa® and (G)FSK). After ramping-up the PA, the LR1110 transmits the data buffer at the given frequency, PA, output power and packet and modulation configurations. When the last bit of the packet has been sent, a TX_DONE interrupt is generated, the PA regulator is ramped down, the selected PA is switched OFF and the device goes back to Standby RC or Xosc modes, depending on the FallBackMode configuration.
LPWAN network to compute the device position. 2.1.9 DSP Mode LR1110 geolocation functions require processing of the Wi-Fi or GNSS environment captures. In this mode, only the DSP and the associated regulators are kept active in order to minimize the power consumption. 2.2 Startup Sequence At power-up or after a reset, the device initiates its startup phase.
POR and BRN. 2.3.2 NRESET Putting the pin NRESET to low for at least 100 μs restarts the LR1110. The restart is equivalent to a Power-On Reset, and the device will follow the same restart sequence.
The command will operate in any mode of the device. At the end of the calibration procedure, the device returns to Standby Note: Contact your Semtech representative for the other optimal calibration settings outside of the given frequency bands. 2.4.2 Calibrate The Calibrate( ) command calibrates the requested blocks defined by the CalibParams parameter.
Use Case describes the main device features: 0x01 = Transceiver 0x02 = Modem • FW Major + FW Minor is the version of the LR1110 internal firmware stored in flash memory. LR1110 www.semtech.com 21 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP...
2.6 Modes Transitions & Timings Table 2-12: Mode Transitions lists the main modes transitions of the LR1110. Please refer to Figure 2-1: LR1110 Modes and Transitions for a representation of the LR1110 modes and modes transitions: Table 2-12: Mode Transitions Mode Typical value (s)
The LR1110 exposes an API which allows the Host controller to communicate with the LR1110 through a set of SPI commands / responses. The pin BUSY is used as handshake to indicate if the LR1110 is ready to accept a command.
Name Reset Status Chip Mode Bootloader • Reset Status allows the host to determine the origin of a LR1110 reset: 0 = Cleared (no active reset) 1 = Analog reset (Power On Reset, Brown-Out Reset) 2= External reset (NRESET pin) ...
The command GetErrors( ) returns the current pending errors that occurred since the last ClearErrors( ) command, or the startup of the circuit. It is possible to generate an interrupt on DIO9 or DIO11 when an error occurs. There is no masking of error possible. LR1110 www.semtech.com 25 of 130 User Manual Rev.1.0...
The command ClearErrors( ) clears all errors flags pending in the device. The error flags cannot be cleared individually. Table 3-5: ClearErrors Command Byte Data from Host 0x01 0x0E Data to Host Stat1 Stat2 LR1110 www.semtech.com 26 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
Rx buffer is not from the previous packet.. ClearRxBuffer Command Table 3-15: Byte Data from Host 0x01 0x0B Data to Host Stat1 Stat2 LR1110 www.semtech.com 29 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
DIO11 can be used as another interrupt pin if no 32.768 kHz crystal oscillator is used. • NRESET allows to cancel on-going functions of the LR1110, and reset all HW and FW. Although a device restart is also possible through host controller commands, it is recommended to allow the host controller to control this signal.
FskLenError error IRQ raised if the packet was received with an address FskAddrError error 4.1.2 Commands 4.1.2.1 GetStatus The command GetStatus( ) returns the status of the LR1110 interrupts. Table 4-2: GetStatus Command Byte Data from Host 0x01 0x00 0x00...
Data from Host 0x01 0x14 (31:24) (23:16) (15:8) (7:0) IrqStatus IrqStatus IrqStatus IrqStatus Data to Host Stat1 Stat2 (31:24) (23:16) (15:8) (7:0) The IrqToClear is identical to IrqToEnable assignment. LR1110 www.semtech.com 32 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
By default, no DIO is used as RF switch: all RFSW outputs are in High-Z state. This command will only work with the chip in Standby RC mode, otherwise it will return a CMD_FAIL on the next GetStatus command. LR1110 www.semtech.com 33 of 130 User Manual Rev.1.0...
4.3 Temperature Sensor A built-in temperature sensor, giving an indication of the internal device temperature, is implemented in the LR1110. The temperature measurement can be triggered using the command GetTemp( ): Table 4-6: GetTemp Command Byte Data from Host 0x01...
5.2 Over Current Protection An Over Current Protection (OCP) block is built-in the LR1110. It prevents surge currents when the device is used at its highest power levels, thus protecting the battery that may power the application. The current clamping values are trimmable by register access.
5.4 Power-On-Reset and Brown-Out-Reset The LR1110 features both POR and BRN features. The POR/BRN ensure a proper startup of the circuit maintaining the internal blocks reset until a safe level of the battery voltage is reached, for example at battery insertion. The BRN triggers a device reset in case the battery voltage goes below the safe operation threshold of 1.7V (typically).
Figure 5-1: LR1110 POR and BRN Functions 5.5 Low Battery Detector The Low Battery Detector (LBD) detects when the supply voltage VBAT drops below 1.88 V (typ). The LBD indication is given through an interrupt signal, hence minimizing the host activity in critical supply voltage conditions. The LBD IRQ shall be activated though the command SetDioIrqParams().
6. Clock Sources The LR1110 uses both low frequency (32 kHz) and high frequency (32 MHz) clock sources. For each frequency, the clock signal can be obtained by either a RC oscillator, or a Crystal oscillator. RC oscillators allow optimized power consumption and faster switching times.
In environments with extreme temperature variation, it may be required to use a TCXO (Temperature Compensated Crystal Oscillator) to achieve better frequency accuracy. It is required to use a TCXO to use the LR1110 GNSS features in order to minimize the power consumption required to perform an outdoor geolocation.
HF_XOSC_START_ERR error. Delay set to 0 (default value) disables the TCXO mode. The command will operate only in Standby RC mode, otherwise it will return CMD_FAIL on the next GetStatus command. LR1110 www.semtech.com 40 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP...
GNSS and the Wi-Fi scanning engines, therefore no simultaneous sub-GHz radio operation, GNSS scanning, or Wi-Fi scanning is possible. The LR1110 frequency synthesizer is clocked by a 32 MHz reference, provided by either a crystal oscillator, or a TCXO. Refer Section 6. "Clock Sources" on page 38 for details.
(7:0) The RF Frequency of the sub-GHz radio is given in Hz. All the frequency dependent parameters are automatically recomputed by the LR1110 firmware when processing this command. 7.2.2 SetRx The command SetRx( ) sets the sub-GHz radio in RX mode. If no packet is received after the defined RxTimeout, the device will go back to Standby RC mode.
0x14 Period Period Period Mode Host (23:16) (15:8) (7:0) (23:16) (15:8) (7:0) Data to IrqStatus IrqStatus IrqStatus IrqStatus Stat1 Stat2 0x00 0x00 0x00 Host (31:24) (23:16) (15:8) (7:0) LR1110 www.semtech.com 44 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
At the end of the Sleep window, the device automatically restarts the process of restoring context and enters the RX mode, and so on. At any time, the host can stop the procedure. Figure 7-2: LR1110 Current Profile During RX Duty Cycle Operation LR1110 www.semtech.com...
Data to Host Stat1 PayloadLengthRX RxStartBufferPointer • PayloadLengthRX is the Palyoad length of the last RF packet received. RxStartBufferPointer is the offset in the RX buffer of the first byte received. LR1110 www.semtech.com 48 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP...
Data to Host Stat1 Stat2 IrqStatus (31:24) • RxBoosted: Activates the Rx Boosted mode. RxBoosted=0: RX Boosted mode deactivated RxBoosted=1: RX Boosted mode activated Other values are RFU LR1110 www.semtech.com 49 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
8. Modems 8.1 Modem Configuration The LR1110 contains different modems capable of handling different constant envelope modulations. The user shall then specify the modem to be used by using the command SetPacketType( ) . In a second step, SetModulationParam( ) configures the modem parameters (SF, BW, CR and LDRO), and SetPacketParam( ) defines the RF packet parameters (Payload length, Implicit/explicit mode, …).
The spread spectrum LoRa® modulation is performed by representing each bit of payload information by multiple chips of information. The rate at which the spread information is sent is referred to as the symbol rate (Rs). The ratio between the LR1110 www.semtech.com...
SF12 at 250 kHz BW. 8.2.1.5 LoRa® Symbol Rate With a knowledge of the key parameters that can be controlled by the user we define the LoRa® symbol rate as: ----------- - LR1110 www.semtech.com 52 of 130 User Manual Rev.1.0...
In this mode the header is removed from the packet. In this case the payload length, error coding rate and presence of the payload CRC must be manually configured identically on both sides of the radio link. LR1110 www.semtech.com 53 of 130 User Manual Rev.1.0...
STDBY_RC mode. The length of the search is configured via the command SetCadParams( ). At the end of the search period, the device triggers the IRQ CADdone. If a valid signal has been detected it also generates the IRQ CadDetected. A minimum of 2 symbols is recommended to perform CAD. LR1110 www.semtech.com 54 of 130 User Manual Rev.1.0...
0x00= explicit header (default) 0x01= implicit header • PayloadLen defines the size of the payload (in Bytes) to transmit or the maximum size of the payload that the receiver can accept. LR1110 www.semtech.com 56 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP...
Choosing the right value must be carefully tested to ensure a good detection at sensitivity level, and also to limit the number of false detections. Application note AN1200.48 provides guidance for the selection of the CAD parameters. LR1110 www.semtech.com 57 of 130 User Manual Rev.1.0...
The bandwidth must be chosen so that: Bandwidth[DSB] 2 frequency deviation frequency error where the frequency error is two times the frequency error of the crystal oscillator used. LR1110 www.semtech.com 59 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP...
Preamble Detection in Receiver Mode The LR1110 is able to gate the reception of a packet if an insufficient number of alternating preamble symbols (usually referred to 0x55 or 0xAA in hexadecimal form) has been detected. This can be selected by the user by using the parameter PreambleDetectorLength used in the command SetPacketParams( ) .
This setup limits the number of consecutive 1’s or 0’s to 9. Note that the data whitening is only required when the user data has high correlation with long strings of 0’s and 1’s. If the data is already random then the whitening is not required. LR1110 www.semtech.com 61 of 130 User Manual Rev.1.0...
At the initial stage, the command SetGfskWhitParams( ) allows setting the whitening Seed. 8.4.3.5 CRC The LR1110 offers full flexibility to select the CRC polynomial and initial value of the selected polynomial. In addition, the user can also select a complete inversion of the computed CRC to comply with some international standards.
Preamble detector length 24 bits 0x07 Preamble detector length 32 bits • SyncWordLen defines the length of the Syncword in bits. The Syncword is directly programmed into the device through the command SetGfskSyncWord( ). LR1110 www.semtech.com 64 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP...
The CRC can be fully configured and the polynomial used, as well as the initial values can be entered directly through the command SetGfskCrcParams( ) . • Whitening allows to enable the whitening on the RF packet Table 8-25: Whitening Whitening Description 0x00 No encoding 0x01 Whitening enable LR1110 www.semtech.com 65 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
0x00 0x00 0x00 0x00 Data to IrqStatus IrqStatus IrqStatus IrqStatus Host (31:24) (23:16) (15:8) (7:0) • InitValue: initial value of the configured CRC polynomial • Poly: CRC polynomial LR1110 www.semtech.com 66 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
8.6 Data Buffer The LR1110 is equipped with two 255 Bytes RAM data buffers which are accessible in all modes except sleep mode. One buffer stores the received payloads data, while the other is intended to contain the payload data to be transmitted.
Data to Host Stat1 Stat2 IrqStatus (31:24) IrqStatus (23:16) Table 8-33: ReadBuffer8 Response Byte Data from Host 0x00 0x00 0x00 0x00 0x00 Data to Host Stat1 data1 data2 data3 dataN LR1110 www.semtech.com 68 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
8.6.1.3 ClearRxBuffer The command ClearRxBuffer( ) clears all the data in the LR1110 RX buffer. It will write ‘0’ on the whole RX buffer. It is used to ensure the data in the RX buffer is not from the last packet, mostly a debug feature.
Page 70
Estimation of the mean energy of the LoRa® signal over the last packet received. SignalRssiPkt Equivalent to RssiPkt - environment noise Refer to each command description for implementation details on the various RSSI fields. LR1110 www.semtech.com 70 of 130 User Manual Rev.1.0...
9. Power Amplifiers The LR1110 features 2 Power Amplifiers for sub-GHz operation: a High Power PA, optimized for +22dBm operation, and a Low Power PA, optimized for +14dBm operation, capable of +15 dBm output power. Balun LoRa (G)FSK & RFIO_HF...
VREG whenever the required VR_PA is 1.35 V or below, in order to benefit from the Buck converter. The LR1110 incorporates a precise duty cycle trimmer shared between the two power amplifiers. This duty cycle trimmer can be used to trade-off the output power, efficiency, and harmonic emission to address the different regional standard requirements.
The internal regulator for VR_PA has 200 mV of drop-out, which means VBAT must be 200 mV higher than the VR_PA voltage in order to attain the corresponding output power. For example: LR1110 www.semtech.com 73 of 130 User Manual Rev.1.0...
TxPower=14 and PaDutyCycle=0 gives +10 dBm whatever the supply voltage (1.8V, 3.3V and 3.7 V) • TxPower=14 and PaDutyCycle=4 gives +14 dBm whatever the supply voltage (1.8V, 3.3V and 3.7 V) • TxPower=14 and PaDutyCycle=7 gives +15dBm whatever the supply voltage (1.8V, 3.3V and 3.7 V) LR1110 www.semtech.com 74 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP...
PA regulator, the +22 dBm output power can only be obtained from a 3.3 V to 3.7 V supply voltage range. • For +17dBm, VR_PA around 2 V is required. Therefore the LR1110 output power will drop to +17 dBm for the minimum supply voltage 1.8 V.
For 3.7 V, PaDutyCycle=0 the current consumption is approx. 28 mA, for PaDutyCycle=4 approx. 47 mA and for PaDutyCycle=0 approx. 62mA. • For PaDutyCycle=4, the current consumption is approx. 47 mA for 3.3 V and 3.7 V, and approx. 49 mA for 1.8 V. LR1110 www.semtech.com 76 of 130 User Manual Rev.1.0...
PaDutyCycle setting, which means that the plots for 1.8 V, 3.3 V, and 3.7 V are superimposed. Figure 9-7 Figure 9-8 show that the power efficiency of the Low Power PA is maximized when the internal DC-DC regulator is used at or above 3.3V. LR1110 www.semtech.com 77 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP...
During the High Power PA operation, the DC-DC supplies the analog and digital core of the devices, whereas the PA itself -the largest power consumption contributor- is supplied directly from VBAT. Therefore, there is no significant current consumption difference between the DC-DC or the LDO modes during the High Power PA operation. LR1110 www.semtech.com 78 of 130 User Manual Rev.1.0...
Figure 9-9: IDDTX vs TxPower, High Power PA, DC-DC Configuration Figure 9-10: IDDTX vs TxPower, High Power PA, LDO Configuration LR1110 www.semtech.com 79 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
LNA separately. Therefore one can optimize the TX efficiency without compromising the RX sensitivity. The RF switch can be controlled either by the host controller, or by the LR1110 itself (pins DIO5, DIO6, DIO7, DIO8 and DIO10), using the SetDioAsRfSwitch( ) command.
In such a configuration, the PA and the RX differential stages are connected as depicted in the figure hereafter. Please note that series capacitances are required between the PA and the RX stage in order to avoid damaging the LR1110 due to current flowing in the RX stage.
• TxPower defines the output power in dBm in a range of - 17 dBm (0xEF) to +14 dBm (0x0E) by step of 1 dB if the High Efficiency PA is selected LR1110 www.semtech.com 82 of 130 User Manual Rev.1.0...
0x07 3400 A value of Ramp Time value of 40 us allows the best trade-off between a fast RF power establishment and the minimum RF spurious, therefore a compliance to the radio standards. LR1110 www.semtech.com 83 of 130 User Manual Rev.1.0...
Figure 10-1: Wi-Fi Passive Scanning Sequence Figure 10-1shows the sequence of a Wi-Fi passive scanning on a Wi-Fi channel. Upon a WifiScan( ) command, the LR1110 opens a receive window (Preamble Search window) on the given channel, until a Wi-Fi packet is detected (T ).
LR1110 spends in Preamble Search mode in case no Wi-Fi activity is detected in a given channel. The capture of a WiFi packet can only be done if a WiFi preamble is detected during the Preamble Search window.
0x00 During the Wi-Fi passive scanning, the BUSY signal is set High, indicating that LR1110 is not ready to accept a command from the host. This can take a few hundreds of milliseconds, depending on the Wi-Fi passive scanning parameters. BUSY returns to Low when the Wi-Fi passive scanning procedure is complete.
The Full Result structure is organized as continuous series of MAC Addresses Full Results, each MAC Address Full Result being coded on 22 Bytes, defined in Table 10-3: Full Results Format per MAC Address here below. The maximum number of MAC Addresses reported is 32. LR1110 www.semtech.com 87 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP...
PhiOffset: coded on 2 Byts. Used to compute frequency offset of the signal Table 10-4: Wi-Fi DatarateID Field DatarateID Signal type Modulation Coding rate Datarate (Mbps) DBPSK Wi-Fi b DQPSK LR1110 www.semtech.com 88 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
Table 10-6: Wi-Fi MacValidation Field MacValidation Value Meaning MAC Address from a gateway MAC Address from a phone Undetermined Table 10-7: Wi-Fi Frame Control Field (0:1) (2:5) Fields Type SubType ToDS FromDS LR1110 www.semtech.com 89 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
NbResults: number of Wi-Fi AP MAC Addresses to read, from 1 to 32 • Format: Format of the Wi-Fi Passive Scanning results to read 1: Full Results format 4: Basic Results format Other values are RFU LR1110 www.semtech.com 91 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
This cumulative timing can be read regularly to compute the energy consumption of the device for Wi-Fi Passive Scanning operations. All 16 Bytes shall be read. Cumulative timing must be reset by the host. LR1110 www.semtech.com 92 of 130 User Manual Rev.1.0...
Data to Host Stat1 Stat2 Table 10-16: WifiReadCumulTimings Response Byte … Data from Host 0x00 0x00 0x00 0x00 0x00 Data to Host Stat1 Byte 0 Byte 1 … Last Byte LR1110 www.semtech.com 93 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
GNSS Assistance Component (required in assisted mode): In order to operate GNSS Geolocation System in assisted mode, coarse estimates of time and position must be provided to LR1110. This information can be obtained in a variety of ways including application-level knowledge. In LoRaWAN® the Application Layer Clock Synchronization protocol is suited to retrieve assistance time information.
The LR1110 supports both GPS L1 and BeiDou B1 signals. The LR1110 is able to perform either a single GNSS in any (or both) GPS and BeiDou constellations, or a dual GNSS BeiDou in any (or both) GPS and BeiDou constellations.
Data to Host Stat1 Stat2 IrqStatus (31:24) • GnssMode: Selection between single or dual GNSS scanning. 0x00: single scanning 0x01: dual scanning Other values are RFU LR1110 www.semtech.com 96 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
0x00: Low Power mod. The GNSS scanning stops the detection if no strong satellite is detected. 0x01: Best Effort mode. The GNSS scanning continues the detection even if no strong satellite is detected. LR1110 www.semtech.com 97 of 130 User Manual Rev.1.0...
GnssGetResultSize( ). Afterwards, the results can be read using the command GnssReadResult( ). 11.4.1 NAV Message Description The NAV message format is shown in Figure 11-2: NAV Message Format It is composed of a DestinationID field, followed by a Payload of variable length: LR1110 www.semtech.com 98 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP...
Those messages shall not be transmitted to the GNSS solver. 11.4.2 GnssGetResultSize Command The command GnssGetResultSize( ) allows reading the size in Bytes of the bytes stream containing the available GNSS results. LR1110 www.semtech.com 99 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP...
0x0D Data to Host Stat1 Stat2 Table 11-9: GnssReadResults Response Byte … Data from Host 0x00 0x00 0x00 0x00 0x00 Data to Host Stat1 ResultsByte1 ResultsByte2 ResultsByte3 ResultsByteN LR1110 www.semtech.com 100 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
Data from Host 0x04 0x18 Data to Host Stat1 Stat2 Table 11-13: GnssGetSvDetected Response Byte Data from Host 0x00 0x00 0x00 0x00 Data to Host Stat1 SvId1 C/N0 SvId2 LR1110 www.semtech.com 101 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
The Alamanac is used by the LR1110 in the GNSS assisted mode. The LR1110 is pre-programmed with the latest Almanac data at the date of the production test. Even if the Almanac data is valid for 90 days, it is advised to use the latest Almanac data for power optimization. The up-to-date almanac is Available from the Device Management Center (DMC) server.
The AlmanacFullUpdatePayload can be sent in 129 successive SPI transactions of 20 data Bytes each. • minimum number of SPI transactions: The AlmanacFullUpdatePayload can be sent in 2 SPI transactions of 1020 data Bytes each, and a third SPI transaction of 540 Bytes. LR1110 www.semtech.com 103 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP...
Page 104
The Almanac data can be retrieved for the DMC server, for example via LPWAN. LR1110 www.semtech.com 104 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
CryptoProcessJoinAccept() CryptoComputeAesCmac() Network NwkKey Only from Mother CryptoDeriveAndStoreKey() CryptoSetKey( ) CryptoDeriveAndStoreKey() Application AppKey Only from Mother CryptoSetKey( ) CryptoProcessJoinAccept() From Network & LifeTimeEnc JSEncKey (Decryption) Application CryptoSetKey( ) LR1110 www.semtech.com 105 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
Page 106
CryptoSetKey( ) RFU0 RFU1 McAppSKey0 McAppSKey1 McAppSKey2 CryptoAesEncrypt01() McAppSKey3 Only from GpTransport Multicast CryptoVerifyAesCmac( ) McNwkSKey0 CryptoSetKey( ) McNwkSKey1 McNwkSKey2 McNwkSKey3 CryptoAesEncrypt() General CryptoAesDecrypt() Not Allowed Purpose CryptoSetKey( ) LR1110 www.semtech.com 106 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
0x04 Header1 HeaderN Data1 DataM KeyID KeyID Host (7:0) (7:0) Ver (7:0) Data Stat1 Stat2 … 0x00 0x00 0x00 Status Status Status Status Host (31:24) (23:16) (15:8) (7:0) LR1110 www.semtech.com 108 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
Data1, Data2, ... , DataN: Provided data, considered as Byte buffers. • CEStatus: defined in section CEStatus on page 107. • MIC: Message Integrity Check (first 4 bytes of the CMAC). LR1110 www.semtech.com 109 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP...
• KeyID: specified Key ID, as defined in Table 12-1: Cryptographic Keys Usage and Derivation. Goes from 0 to 27. • ExpectedMIC: Provided MIC (first 4 bytes of the CMAC). LR1110 www.semtech.com 110 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP...
The command CryptoAesEncrypt( ) encrypts the provided data using the specified Key and return it. Table 12-16: CryptoAesEncrypt Command Byte … Data from Host 0x05 0x08 KeyID (7:0) Data1 … DataN IrqStatus IrqStatus Data to Host Stat1 Stat2 … 0x00 (31:24) (23:16) LR1110 www.semtech.com 111 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
Data1, Data2, ... , DataN: Provided data, considered as Byte buffers. • CEStatus: defined in section CEStatus on page 107. • DecryptedData1, DecryptedData2, ... , DecryptedDataN: Decrypted data, considered as Byte buffers LR1110 www.semtech.com 112 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP...
Data to Host Stat1 Stat2 Table 12-23: CryptoRestoreFromFlash Response Byte Data from Host 0x00 0x00 Data to Host Stat1 CEStatus • CEStatus: defined in section CEStatus on page 107. LR1110 www.semtech.com 113 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
Data (23:16) Data (15:8) Data (7:0) • ParamID: Parameter ID, goes from 0 to 119 • Data: Parameter Data • CEStatus: defined in section CEStatus on page 107. LR1110 www.semtech.com 114 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
It also pre-provisioned with a DevicePIN allowing the device registration to LoRa Cloud™ Join services. For more information, please refer to the LoRa Cloud™ website: https://www.loracloud.com/portal/join_service All those unique identifiers are stored in the device persistent memory. They are pre-configured by Semtech to ease the LoRaWAN implementation and access to LoRa Cloud™...
(63:56) (7:0) AppEUI is coded on 8 Bytes, in little endian. 13.2.3 ReadDevicePin The command ReadDevicePin( ) allows reading back the LR1110 PIN unique number for the LoRa Cloud™ Device Join service. Table 13-5: ReadDevicePin Command Byte Data from Host...
14. Test Commands Several LR1110 test commands allow an easy configuration of the device for regulatory ETSI or FCC compliance. 14.1 Regulatory Overview This section only describes the RF modes necessary for ETSI and FCC regulatory testing. Please refer to the ETSI and FCC documents for a detailed test description and for the test limits indication.
Stat2 This command immediately starts transmission of the infinite preamble sequence. Therefore, the operating frequency and the PA configuration commands (including the RF output power) have to be called prior to this command. LR1110 www.semtech.com 118 of 130 User Manual Rev.1.0...
RfswRxCfg(7:0), RfswTxCfg(7:0), Setup the RFSWx outputs configurations for SetDioAsRfSwitch 0x0112 RfswTxHPCfg(7:0), RfswTxHFCfg(7:0), each radio mode RfswGnssCfg(7:0), RfswWifiCfg(7:0) SetDioIrqParams 0x0113 IrqToEn(31:0), IrqToEn2(31:0) Configures irqs to output on IRQ pin(s) LR1110 www.semtech.com 119 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
Page 120
Returns the 8-byte factory DeviceEUI GetJoinEui 0x0126 Returns the 8-byte factory JoinEUI Returns the 4-byte PIN which can be used to ReadDevicePin 0x0127 register the device with LoRaCloud Services LR1110 www.semtech.com 120 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
BroadcastAddr Defines into which mode the chip goes after SetRxTxFallbackMode 0x0213 Fall-back mode a TX / RX done. RxPeriod(23:0) SetRxDutyCycle 0x0214 Start RX Duty Cycle mode SleepPeriod(23:0) LR1110 www.semtech.com 121 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
Page 122
0x0224 SeedValue, PolyValue Sets the parameters for the CRC polynom SetGfskWhitParams 0x0225 SeedValue Sets the parameters for the whitening SetRxBoosted 0x0227 BoostedGain Sets the RX to boosted mode LR1110 www.semtech.com 122 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
0x0306 NbResults Return Wi-Fi results Format Initialize cumulative times per phases for WifiResetCumulTime 0x0307 power consumption measurements Returns cumulative time per phase for WifiReadCumulTime 0x0308 power consumption measurements LR1110 www.semtech.com 123 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
15.6 CryptoElement Configuration / Status Operations Table 15-6: CryptoElement Configuration / Status Operations Command opcode Parameters Description KeyID(7:0) CryptoSetKey 0x0502 Key[1..16] SrcKeyID(7:0) CryptoDeriveAndStoreKey 0x0503 DstKeyID(7:0) Derive and store a key. Nonce[1..16] LR1110 www.semtech.com 124 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
Page 125
CryptoRestoreFromFlash 0x050B Restore all Keys (and Parameters) from flash. ParamID(7:0), CryptoSetParam 0x050D Set a parameter in the RAM. Data(31:0) CryptoGetParam 0x050E ParamID(7:0) Get a parameter from the RAM. LR1110 www.semtech.com 125 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
16. Revision History The following table details the versions of the User Manual document issued, and the corresponding LR1110 versions supported (Use Case and FW Major.FW Minor), as returned by the command GetVersion( ). Table 16-1: Revision History User Manual...
Page 127
Digital Input / Output Device Management Center Distribution System Double Side Band Digital Signal Processing Engineering Change Order Frequency Deviation Forward Error Correction FIFO First In First Out Frequency Synthesis LR1110 www.semtech.com 127 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
Page 128
LFSR Linear-Feedback Shift Register Low-Noise Amplifier Local Oscillator Long Range Communication LoRa® the LoRa® Mark is a registered trademark of the Semtech Corporation Least Significant Bit Wi-Fi Media Access Control MISO Master Input Slave Output MPDU Wi-Fi MAC Protocol Data Unit...
Page 129
Serial Clock Spreading Factor Sequence Number Signal to Noise Ratio Serial Peripheral Interface Single Side Bandwidth Wi-Fi Client Station STDBY Standby TCXO Temperature-Compensated Crystal Oscillator XOSC Crystal Oscillator LR1110 www.semtech.com 129 of 130 User Manual Rev.1.0 Semtech UM.LR1110.W.APP March 2020...
Page 130
Information relating to this product and the application or design described herein is believed to be reliable, however such information is provided as a guide only and Semtech assumes no liability for any errors in this document, or for the application or design described herein.
Need help?
Do you have a question about the LR1110 and is the answer not in the manual?
Questions and answers