[Gmecm] The next step: E67 ECM
Bill Shaw
b.shaw
Thu Jun 28 14:16:51 UTC 2007
Garrett -
This is some info I've compiled on the '06 y-body platform class 2 data
communications. I'd bet that the GMLAN stuff will be very similar - bs
SAE j2178 describes address assignments
Part 1 - describes the two allowed forms of message header formats,
single byte and consolidated
AND physical node address range assignments
Part 2 - defines the standard parametric data which may be exchanged on
SAE J1850
Part 3 - defines the message assignments for the single byte header
format and the one byte form
of the consolidated header format.
Part 4 - defines the message assignments for the three byte form of the
consolidated header format.
NOTE: GM uses the 3 byte header format and does not allow in-frame response.
j1979 describes emissions related diagnostics
j2190 describes other diagnostics
j1850 describes the network iinterface, electrical specifications, and
basic protocol, incl. CRC
----------------------------------------------------------
Three Byte Form of Consolidated Header:
Byte 1 Byte 2 Byte 3
See Figure 8 Below Target Address Source Address
FIGURE 7 - Three Byte Form of Consolidated Header
Byte 1 of Three Byte Form of Consolidated Header:
Bit 7 6 5 4 3 2 1 0
P P P 0 K Y Z Z
Priority (0 to 7) H=0 IFR adr typ Message Type (see below)
----------------------------------------------------------
FIGURE 8 - First Byte of Three Byte Form of Consolidated Header
Bit Meaning Value Meaning
K In-Frame Response (IFR) 0 IFR Required
1 IFR Not Allowed
Y Addressing Mode 0 Functional Addressing
1 Physical Addressing
ZZ Specific Message Type 0 0
0 1
1 0
1 1 The meaning for these values are dependent on K & Y above.
----------------------------------------------------------
TABLE 6 - The Sixteen Message Types
Msg KYZZ Response Addressing IFR Message Type (Name)
Type (K bit) (Y bit) Type
0 0000 Required Functional 2 Function
1 0001 Required Functional 1 Broadcast
2 0010 Required Functional 2 Function Query
3 0011 Required Functional 3 Function Read
4 0100 Required Physical 1 Node-to-Node
5 0101 Required Physical -- Reserved - MFG
6 0110 Required Physical -- Reserved - SAE
7 0111 Required Physical -- Reserved - MFG
8 1000 Not Allowed Functional 0 Function Command / Status
9 1001 Not Allowed Functional 0 Function Request / Query
10 1010 Not Allowed Functional 0 Function Ext. Command / Status
11 1011 Not Allowed Functional 0 Function Ext. Request / Query
12 1100 Not Allowed Physical 0 Node-to-Node
13 1101 Not Allowed Physical 0 Reserved - MFG
14 1110 Not Allowed Physical 0 Acknowledgement
15 1111 Not Allowed Physical 0 Reserved - MFG
-------------------------------------------
FIGURE 9 - Functional Target Address
Bit 7 6 5 4 3 2 1 0
Primary Address (128 pairs) W
Primary ID (256 total)
The W bit is logic "0" to signify a Command target and logic "1" to
signify a Status target.
--------------------------------------------------
TABLE 12 - Node Physical Address Assignments
Node Category Address (hex) # of Nodes
Powertrain Controllers: 00 - 1F 32
Integration / Manufacturer Expansion 00 - 0F 16
Engine Controllers 10 - 17 8
Transmission Controllers 18 - 1F 8
Chassis Controllers: 20 - 3F 32
Integration / Manufacturer Expansion 20 - 27 8
Brake Controllers 28 - 2F 8
Steering Controllers 30 - 37 8
Suspension Controllers 38 - 3F 8
Body Controllers: 40 - C7 136
Integration / Manufacturer Expansion 40 - 57 24
Restraints 58 - 5F 8
Driver Information / Displays 60 - 6F 16
Lighting 70 - 7F 16
Entertainment / Audio 80 - 8F 16
Personal Communications 90 - 97 8
Climate Control (HVAC) 98 - 9F 8
Convenience (Doors, Seats, Windows, etc) A0 - BF 32
Security C0 - C7 8
Future Expansion: C8 - CF 8
Manufacturer Specific: D0 - EF 32
Off-Board Testers / Diagnostic Tools: F0 - FD 14
All Nodes: FE 1
Null Node: FF 1
----------------------------------------------------
TABLE 1 - Primary Functional ID Assignments
Byte 2 of Message Types 0, 1, 2, 8, 9, 10, 11
Command Status Function
00 01 Reserved - SAE
02 03 Reserved - MFG
04 05 Reserved - MFG
06 07 Reserved - MFG
08 09 Engine Torque
0A 0B Engine Air Intake
0C 0D Reserved - MFG
0E 0F Reserved - MFG
10 11 Reserved - SAE
12 13 Throttle
14 15 A/C Clutch
16 17 Reserved - MFG
18 19 Reserved - MFG
1A 1B Engine RPM
1C 1D Reserved - MFG
1E 1F Reserved - MFG
20 21 Reserved - SAE
22 23 Reserved - MFG
24 25 Wheels
26 27 Reserved - MFG
28 29 Vehicle Speed
******************************************************************
2A 2B Traction Control
2C 2D Reserved - MFG
2E 2F Reserved - MFG
30 31 Reserved - SAE
32 33 Brakes
34 35 Steering / Steering Wheel
36 37 Reserved - SAE
38 39 Reserved - MFG
3A 3B Transmission / Transaxle / PRNDL
3C 3D Reserved - MFG
3E 3F Reserved - MFG
40 41 Reserved - SAE
42 43 Reserved - MFG
44 45 Reserved - MFG
46 47 Engine Sensors
48 49 Engine Coolant
4A 4B Engine Oil
4C 4D Reserved - MFG
4E 4F Reserved - MFG
50 51 Reserved - SAE
52 53 Engine Systems Other
54 55 Reserved - MFG
56 57 Reserved - SAE
58 59 Suspension
5A 5B Non-Legislated Diagnostics
5C 5D Reserved - MFG
5E 5F Reserved - MFG
60 61 Reserved - SAE
62 63 Vehicle Speed Control
64 65 Reserved - MFG
66 67 Reserved - SAE
68 69 Reserved - MFG
6A 6B Legislated Diagnostics
6C 6D Reserved - MFG
6E 6F Reserved - MFG
70 71 Reserved - SAE
72 73 Charging System
74 75 Electrical Energy Management
76 77 Reserved - SAE
78 79 Reserved - MFG
7A 7B Odometer
7C 7D Reserved - MFG
7E 7F Reserved - MFG
80 81 Reserved - SAE
82 83 Fuel System
84 85 Vehicle Motion
86 87 Ignition Switch / Starter
88 89 Tell Tales
8A 8B Reserved - MFG
8C 8D Reserved - MFG
8E 8F Reserved - MFG
90 91 Reserved - SAE
92 93 Vehicle Security
94 95 Audio Control
96 97 Audible Warnings
98 99 Reserved - MFG
9A 9B Compact Disc
9C 9D Reserved - MFG
9E 9F Reserved - MFG
A0 A1 Reserved - SAE
A2 A3 Digital Audio Tape
A4 A5 Audio Tuner / Receiver
A6 A7 Cassette Tape
A8 A9 Reserved - MFG
AA AB Cellular Phone
AC AD Reserved - MFG
AE AF Reserved - MFG
B0 B1 Reserved - SAE
B2 B3 Climate Control (HVAC)
B4 B5 Reserved - MFG
B6 B7 Reserved - SAE
B8 B9 Window Wiper / Washer
BA BB Reserved - MFG
BC BD Reserved - MFG
BE BF Reserved - MFG
C0 C1 Reserved - SAE
C2 C3 Mirrors
C4 C5 Door Locks **************************************
C6 C7 External Access
C8 C9 Seat Motion / Control
CA CB Windows
CC CD Steering Column
CE CF Reserved - MFG
D0 D1 Seat Switches
D2 D3 Restraints
D4 D5 Reserved - MFG
D6 D7 Reserved - MFG
D8 D9 External Lamp Outage
DA DB External Lamps
DC DD Interior Lamp Outage
DE DF Interior Lamps
E0 E1 Reserved - SAE
E2 E3 Reserved - MFG
E4 E5 Tires
E6 E7 Electric Defrost
E8 E9 Navigation
EA EB Displays
EC ED Reserved - MFG
EE EF Reserved - MFG
F0 F1 Reserved - SAE
F2 F3 Exterior Environment
F4 F5 Interior Environment
F6 F7 Reserved - SAE
F8 F9 Time
FA FB Vehicle ID (VIN)
FC FD Reserved - MFG
FE FF Network Control
----------------------------------------------------------------
PRN = Parameter Reference Number (j2178 part 2)
----------------------------------------------------------------
6.7 Vehicle Speed:
Primary ID: Vehicle Speed
Command ID: $28
Status ID: $29
TABLE 12 - Vehicle Speed Messages
Secondary ID Name Sec Msg Ext
ID Op Q1 Q0 Addr PRN
Low Resolution 01 R -- x -- 000D
High Resolution 02 R -- x -- 6001
prn 000d = 8 bit unsigned value
---------------------------------------------------------------------
6.27 Door Locks:
Primary ID: Door Locks
Command ID: $C4
Status ID: $C5
TABLE 32 - Door Locks Messages
Secondary ID Name Sec Msg Ext
ID Op Q1 Q0 Addr PRN
Lock 01 L / R L U 7.5 --
Unlock Enable 02 L / R E D 7.5 --
Lock Cylinder Secure 03 R Y N 7.5 --
Key-in-Lock Cylinder 04 R Y N 7.5 --
Master Controller Lock 05 L / R L N 7.5 --
Lock Cylinder State 06 R -- x 7.5 A010
Super / Double Lock 07 L / R L U 7.5
Remote Lock w/ Transmitter Id 08 L / R L U 7.5 C001
Remote Lock 09 L / R L U 7.5
Lock Sw. Active 20 R Y N 7.5 --
Unlock Sw. Active 21 R Y N 7.5 --
Unlock Enable Sw. Active 22 R Y N 7.5 --
Master Controller Lock Sw. Active 25 R Y N 7.5 --
Master Controller Unlock Sw. Active 26 R Y N 7.5 --
---------------------------------------------------------------------------------
6.28 External Access:
Primary ID: External Access
Command ID: $C6
Status ID: $C7
TABLE 33 - External Access Messages
Secondary ID Name Sec Msg Ext
ID Op Q1 Q0 Addr PRN
Open 01 L / R Y N 7.5 --
Close 02 L / R Y N 7.5 --
Remote Open / Close w/ Transmitter Id 11 L / R O C 7.5 C001
Remote Open / Close 12 L / R O C 7.5 --
Ajar Sw. Active 21 R Y N 7.5 --
Door Handle Sw. Active 22 R Y N 7.5 --
Door Jamb Sw. Active 23 R Y N 7.5 --
------------------------------------------------------------------------------------
6.30 Windows:
Primary ID: Windows
Command ID: $CA
Status ID: $CB
TABLE 35 - Windows Messages
Secondary ID Name Sec Msg Ext
ID Op Q1 Q0 Addr PRN
Open 01 L / R E D 7.7 --
Close 02 L / R E D 7.7 --
Operation Enable 03 L / R E D 7.7 --
Master Controller Open 04 L / R E D 7.7 --
Master Controller Close 05 L / R E D 7.7 --
Position 1A L / R -- x 7.7 A00F
Open Sw. Active 21 R Y N 7.7 --
Close Sw. Active 22 R Y N 7.7 --
Lockout Sw. Active 23 R Y N 7.7 --
Master Controller Open Sw. Active 24 R Y N 7.7 --
Master Controller Close Sw. Active 25 R Y N 7.7 --
------------------------------------------------------------
7.5 Doors and Door Locks:
TABLE 55 - Extended Address Assignments for Doors and Door Locks
Address Description
00 ALL
14 Hood
1E Passenger Side Glove Box
20 All Front
22 Driver Side Front
24 Convertible Top
26 Passenger Side Front
28 All Rear
2A Driver Side Rear
2E Passenger Side Rear
31 Left Side Fuel Door
34 Trunk
37 Right Side Fuel Door
3C Only or Rear Center Fuel Door
--------------------------------------------------------------------------
7.7 Windows:
The extended address assignments for windows are in Table 57 below.
TABLE 57 - Extended Address Assignments for Windows
Address Description
00 ALL
20 All Front
22 Driver Side Front
24 Front Sun Roof
26 Passenger Side Front
28 All Rear
2A Driver Side Rear
2C Rear Sun Roof
2E Passenger Side Rear
3A Driver Side Rear - Rear (Van)
3C All Rear - Rear (Van)
3E Passenger Side Rear - Rear (Van)
34 Rear Windshield
------------------------------------------------------------------------
ELM:
Need to send ATH1 - headers on
then ATMA - monitor all
to capture all bus data
-------------------------------------------------------------
Our functional address in the 'Body Controllers - Convenience ' range:
A8 A9 Reserved - MFG
AC AD Reserved - MFG
AE AF Reserved - MFG
B4 B5 Reserved - MFG
BA BB Reserved - MFG***********
BC BD Reserved - MFG***********
BE BF Reserved - MFG
need to find two of these addresses that is not used.
-----------------------------------------------------
vehicle speed request...
header byte 1...
101 - priority 5
0 - 3 byte header
1 - no IFR
0 - functional addressing
00 - function command/status
=0xA8
header byte 2 - functional address
=0x29 request Vehicle Speed
header byte 3 - our node address
=0xBA - Driver's side module
=0xbc - Passanger's side module
SH a8 29 ba - from the driver's module
SH a8 29 bc - from the passanger's module
-------------------------------------------------------
open door request...
header byte 1...
101 - priority 5
0 - 3 byte header
1 - no IFR
0 - functional addressing
00 - function command/status
=0xA8
header byte 2 - functional address
=0x29 request Vehicle Speed
-----------------------------------------------------
Garrett Herning wrote:
> Hi,
>
> One thing I would be interested in (both for where I work and
> personally) are the CAN bus protocols that are used to communicate
> with the rest of the vehcile. Specifically on how to talk with the
> controllers in the transmission.
>
> Anyone know where to find some good info on this? Thanks,
>
> Garrett
>
>
>> From: Ryan Hess <rgmecm at yahoo.com>
>> Reply-To: gmecm at diy-efi.org
>> To: gmecm at diy-efi.org
>> Subject: [Gmecm] The next step: E67 ECM
>> Date: Tue, 19 Jun 2007 18:33:13 -0700 (PDT)
>>
>> "The E67 is the high-line controller in GM?s new family of three
>> engine control modules (ECM), which will direct nearly all the
>> engines in Powertrain?s line-up. It features 32-bit processing,
>> compared to conventional 16-bit processing, with 32 megabytes of
>> flash memory, 128 kilobytes of RAM and a high-speed CAN bus. It
>> synchronizes more than 100 functions, from spark timing to cruise
>> control operation to traction control calculations, and it will work
>> in vehicles with different generation vehicle wiring systems, or LANs."
>>
>> I just bought one to take apart and tinker with. It's supposedly the
>> most advanced ECM in GM's lineup. It can handle VVT phasers, DoD
>> solenoids, and all kinds of extras. There are many applications and
>> calibrations for this ECM, including I4, V6 and V8. Considering mine
>> just cost me $60, I think this would be a great base for a cheap
>> aftermarket controller.
>>
>> Is anyone interested in working on a project like this?
>> _______________________________________________
>> Gmecm mailing list
>> Gmecm at diy-efi.org
>> Subscribe: http://lists.diy-efi.org/mailman/listinfo/gmecm
>> Main WWW page: http://www.diy-efi.org/gmecm
>
> _________________________________________________________________
> Picture this ? share your photos and you could win big!
> http://www.GETREALPhotoContest.com?ocid=TXT_TAGHM&loc=us
>
> _______________________________________________
> Gmecm mailing list
> Gmecm at diy-efi.org
> Subscribe: http://lists.diy-efi.org/mailman/listinfo/gmecm
> Main WWW page: http://www.diy-efi.org/gmecm
>
More information about the Gmecm
mailing list