Srs Diagnosis Epb m139 Oem v2.3

SiemensVDO
Automotive AG
Software Requirements
Specification Diagnosis
Bosch Engineering
GmbH
Document Name:
Software Requirements Specification Diagnosis
Project:
EPB Maserati M139
Document Maturity:
Released
Release Date:
17.11.2006
Number of Pages:
35
File Name:
srs_diagnosis_epb_m139_oem.doc
Author:
Heiko Meyer, Vector Informatik
Revision:
2.3
Siemens VDO
Name:
Department:
st
Heiko Meyer
Vector Informatik
nd
2 Author:
A. Poursohi
SV C BC P1 EB SW
0941-790-3765
Check:
H. Strll
SV C BC P1 EB SW
0941-790-5909
Release:
W. Engelhard
SV C BC P1 EB PM
0941-790-5941
Department:
Phone:
Transmittal, reproduction, dissemination and/or editing of this document

as well as utilization of its contents and communication there of to
others without express authorization are prohibited. Offenders will be
held liable for payment of damages. All rights created by patent grant or
registration of a utility model or design patent are reserved.
1 Author:
Phone:
Date:
Signature:
Date:
Signature:
Bosch Engineering GmbH

Name:
Release:
J. Grieser
07062-911-6769
Date
Department
Designed by
ali.poursohi@siemens.com
17.11.2006
SV C BC P1 EB SW
Released by
willibald.engelhard@siemens.com
17.11.2006
SV C BC P1 EB PM
Designation
Status
Released
Documentkey
Pages
Siemens Confidential
Siemens VDO Automotive AG
Copyright ( C ) Siemens AG 2006
1 of 35
SiemensVDO
Automotive AG
Bosch Engineering
GmbH
History
Revision
Date
Author
Company
Reason
0.1
2005-12-05
Ali Poursohi
Siemens VDO
First version.
0.2
2005-12-13
Heiko Meyer
Vector
Diagnostic details added.
0.3
2006-01-12
Ali Poursohi
Siemens VDO
Update the services
0.4
2006-01-26
Harald Strll
Siemens VDO
Updated services and security access

levels.
0.5
2006-01-27
Ali Poursohi
Siemens VDO
Updated 6.1 and 6.2.2 and 6.2.3 and via

info from vector.
0.6
2006-02-03
Ali Poursohi
Siemens VDO
Update the garage braking via

M139_SP051102_DIH_Bedding_EPB_proc
edure.doc
0.7
2006-03-30
Heiko Meyer
Vector
Update IO control by local ID
0.8
2006-04-03
Ali Poursohi
Siemens VDO
Update the environmental condition for

DTCs
Change the definition of the garage braking
Add the section for the behavior of the EPB
after the execution of the IO control services
0.9
2006-05-22
Ali Poursohi
Siemens VDO
Excluded the chapter Garage braking

BEG required a separate document for the
garage braking Mr. Jager-Angelo
(BEG/ECF2)
1.0
2006-06-19
Ali Poursohi
Siemens VDO
Completed the condition for the ignition off

and corrected $30 11
1.1
2006-07-17
Heiko Meyer
Vector
IO Control, EPB Reset, Ignition Detection

and other features described more detailed
Req.-Ids added
1.2
2006-07-20
Harald Strll
Siemens VDO
Changed document status to released
1.3
2006-07-26
Harald Strll
Siemens VDO
Corrected environmental conditions table in

chapter 7.1.2 after comparison with
software.
1.4
2006-08-07
Heiko Meyer
Vector
Garage Braking described in more details

List of supported negative response codes
added.
1.5
2006-08-16
Heiko Meyer
Vector
Under / overvoltage protection for garage

breaking and brake control
1.7
2006-09-15
Harald Strll
Siemens VDO
Corrected value "total number of context

bytes" in chapter 7.2.1.
Corrected Security Access positive
response.
1.8
2006-09-28
Ali Poursohi
Siemens VDO
Inserted the value of the following

parameters for the service
ReadDataByLocalIdentifier EPB internal
data frame 1
$xx(1)
15 November 2006
EPB button state
EPB Maserati M139

Page 2 / 35
SiemensVDO
Automotive AG
Bosch Engineering
GmbH
$xx(1)
$xx(1)
$00 Neutral
$01 Pressed
$02 Pressed failure
$03 Neutral failure
$0A Under/Over voltage
EPB state
$00 Undefined position
$01 Applied
$02 Released
$03 Target reached
(by the release to small force
e.g.: 1500N -> 800N)
$04 During apply
$05 During release
$06 During calibration
$07 Stop job (via diagnosis
service)
Brake pedal state
$00 Brake pedal not pressed
Email from Mr. Cristian Bellei from Maserat

on 28.09.2006
1.9
2006-09-28
Heiko Meyer
Vector Informatik
GmbH
Service WDLID MD Factory Data $3B $B3

moved to SRS Diagnosis SV
2.0
2006-10-17
Heiko Meyer
Vector Informatik
GmbH
- Cablebedding added
- Detailed description of garage braking,
cablebedding and brake contol IO services
That is requested from Mr. Cavallotti in the
telecon on 10.10.2006
- Inserted the value of the following
parameters for the service
ReadDataByLocalIdentifier EPB internal
data frame 2
$xx(1) ECU operating phase
$04 Main wakeup nominal
$05 Main wakeup degraded
$xx(1)
ESP request status

$00 No action
$01 Locking request
$02 Unlocking request
$03 - $07 Invalid request
$xx(1)
Motor position
= ($xx * $08 ) $E0 )[1/4

Rotation]
(Min. value= -224 [1/4 Rotation],
Max. value = 1816 [1/4 Rotation])
Email from Mr. van Uffelen on

16.10.2006
2.1
2006-10-24
Ali Poursohi
Siemens VDO
Update the information the brake pedal in

RLI $A1
2.2
2006-11-08
Heiko MEyer
Vector Informatik
GmbH
Review results added:
15 November 2006
list of references updated
EPB Maserati M139

Page 3 / 35
SiemensVDO
Automotive AG
Bosch Engineering
GmbH
2.3
2006-10-24
Ali Poursohi
15 November 2006
Siemens VDO
parameter number of DTCs

explained for services $17 and $18
Update the release date
EPB Maserati M139

Page 4 / 35
SiemensVDO
Automotive AG
Bosch Engineering
GmbH
Table of Content
History ........................................................................................................................... 2
Table of Content ........................................................................................................... 5
Terms and Abbreviations............................................................................................. 6
References .................................................................................................................... 7
Overview........................................................................................................................ 7
Protocol Service ........................................................................................................... 8
6.1
Services Overview.......................................................................................................... 8
6.2
Bus Protocol ................................................................................................................... 8
6.2.1
Protocol Type .......................................................................................................... 8
6.2.2
Stop of Diagnostic Session...................................................................................... 8
6.2.3
Transport Protocol Parameters ............................................................................... 9
6.2.4
CAN Parameters ..................................................................................................... 9
6.3
Conversions.................................................................................................................. 10
6.4
Diagnostic Modes ......................................................................................................... 10
6.5
Access Rights. Access Levels ...................................................................................... 11
6.6
Security Access ............................................................................................................ 11
6.7
Ignition ON/OFF Detection ........................................................................................... 13
6.8
ECU Reset Behavior .................................................................................................... 14
6.9
Diagnostic Services (Detail).......................................................................................... 14
6.10
Negative Return Codes: ............................................................................................... 31
Data Formats............................................................................................................... 32
7.1
Read Status of DTC Output Format ............................................................................. 32
7.1.1
Output Format Sequence ...................................................................................... 32
7.1.2
Environment Byte Description Table ..................................................................... 32
7.1.3
Environment Byte DTC Symptom.......................................................................... 34
15 November 2006
EPB Maserati M139

Page 5 / 35
SiemensVDO
Automotive AG
Bosch Engineering
GmbH
Terms and Abbreviations

BCD
Binary Coded Decimal
EPB
Electrical Parking Brake
NPB
Node Parking Brake = EPB
DTC
Diagnostic Trouble Code
RLI
Record Local Identifier
SID
Diagnosis Service ID
ST
Separation Time
SRS
Software Requirements Specification
TPDU
Transport Protocol Data Unit
USN
Unsigned numeric (Motorola-Format H/L) applies, except

differently indicated
USNi
Unsigned numeric (Intel-Format L/H) used e.g. for internal

parameters
VIN
Vehicle Information Number
RCD/RCW
Remote Control Wakeup
ASCII
American Standard Code for Information
BCD
Binary Coded Decimal
15 November 2006
EPB Maserati M139

Page 6 / 35
SiemensVDO
Automotive AG
Bosch Engineering
GmbH
References
Title
Version or Release Date
/1/
07234: General Diagnosis Specification
Ed.6, 16.06.2003
/2/
07274: FIAT Standard Diagnostic Protocol on CAN
Ed.4, 18.04.2003
/4/
Network Specification & Message Map (C-CAN), F141, M139AD, M139AL
Ed.3 Rev.B 07.07.2006
/5/
srs_power_management_epb_m139.doc
Ed.1.4, 08.09.2006
/6/
srs_garage_braking_epb_m139.doc
Ed.9, 20.10.2006
Overview
This document describes the customer specific diagnosis interface of the ECU EPB M139
Maserati.
15 November 2006
EPB Maserati M139

Page 7 / 35
SiemensVDO
Automotive AG
Protocol Service
6.1
Services Overview
ID
(Hex
Value)
10
20
27
3E
1A
21
3B
18
17
12
14
30
31
32
33
34
36
37
6.2
Diagnostic Service Name
startDiagnosticSession
stopDiagnosticSession
securityAccess
TesterPresent
readECUIdentification
readDataByLocalIdentifier
writeDataByLocalIdentifier
readDiagnosticTroubleCodesByStatus
readStatusOfDiagnosticTroubleCodes
readFreezeFrameData
clearDiagnosticInformation
inputOutputControlByLocalIdentifier
startRoutineByLocalIdentifier
stopRoutineByLocalIdentifier
requestRoutineResultByLocalIdentifier
requestDownload
TransferData
requestTransferExit
Bosch Engineering
GmbH
After sale
diagnostic
session
ECU flash reprogramming

Services
System
supplier
defined
sessions
$10 $81+$83
$10 $85
$10 $FA-$FE
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
Bus Protocol
6.2.1 Protocol Type

All diagnostic request telegrams (Tester) and response telegrams (ECU) will use the
KWP2000 protocol and transport protocol specified in /2/.
6.2.2
Stop of Diagnostic Session
There are several reasons why the diagnostic session is stopped:
StopDiagnosticSession command is sent by tester

This is the normal way for ending diagnostics. The StopDiagnosticSession command
(0x20) has to be sent once if the ECU is in the default session (0x81) or twice if the
ECU is in one of the high layer sessions.
Ignition is switched OFF

Ignition off means for the EPB system that the EPB is not in the main wake up state
and in the main wake up degraded state. (see in /5/ and section 6.7 Ignition ON/OFF
Detection)
If during a diagnostic session ignition is turned off, the diagnostic session is
terminated.
If ignition is off, no diagnostic session may be started.
15 November 2006
EPB Maserati M139

Page 8 / 35
SiemensVDO
Automotive AG
Bosch Engineering
GmbH
Tester sends no tester present

If the timeout for the receiving of tester present is set the EPB leaves the diagnosis
mode.
6.2.3 Transport Protocol Parameters

Parameter
Value
Description
TPDU.TA
23h
ECU Target Address
Tester Address (TA)
F1h
Tester Target Address
TPDU.BS
255
Block Size
TPDU.ST
Separation Time
cCN_Timeout
200 ms
Max. time between first frame and flow control
cCF_Timeout
200 ms
Max. time between FC/CF and next CF
E_tmo_rx
10 s
Timeout between transmission of diagnostic response and

reception of next request
E_dly_tx
<=0.1s /
<=5.0s
Fast / slow
delay introduced by ECU after reception of diagnostic request
and transmission of response
Buffer Size
120 bytes
Max. length of diagnostic buffer size to hold request or response
Diagnostic Request
Identifier
7B0h
Diagnostic request message Id sent by FIAT-Tester
Diagnostic Response
Identifier
7CDh
Diagnostic response message Id sent by NPB (EPB)
Tester present timeout
5100 ms
Time for detection of absent test present request
6.2.4 CAN Parameters

Parameter
Name
Value
Bus
Bustype
High speed
Baud rate
Baudrate
500 kbit/s
Data length
DLC
Identifier (ID) format
ID
Standard 2.0A (11bit)
Bit time
tBit
2 s
Time quanta
tq
125 ns
Sync. Segment
tsync
125 ns
Time segment 1
tSEG1
1.250 s (10 tq)
Time segment 2
tSEG2
625 ns (5 tq)
Sample point
tSEG1 / tBit
68%
Synchronization jump width
SJW
250 ns (2)
Synchronization mode
SYNCH
recessive to dominant transition
15 November 2006
EPB Maserati M139

Page 9 / 35
SiemensVDO
Automotive AG
Bosch Engineering
GmbH
6.3
Conversions
In this chapter the units and conversions factors used in this document are described.
Parameter
Unit
Conversion
Form
Description
Applied force
Target force
[6N]
Target force = value x 6N
Motor speed
RPM
e.g.: value = 100 -> target force =

600N
375
[375 RPM]
Motor speed = Frequency value in

RPM
e.g.: Frequency value = 10 -> Motor
speed = 3750RPM
Motor circuit voltage
0.1
[0.1V]
Motor circuit voltage = value x 0.1V

e.g.: value = 100 -> motor circuit
voltage = 10V
ECU temperature
[C]
ECU temperature = value C

e.g.: value = 20 -> Temperature =
20C
6.4
Diagnostic Modes
Diagnostic modes are used to group diagnostic services and limit the access to the service
groups needed for production, testing and manufacturing via the security access feature.
If the tester tool wants access to the protected services it needs to unlock the ECU by
following the security access "unlocking" protocol.
The following diagnostic modes are supported by the EPB M139 ECU.
Session ID
diagnosticMode
Access Level
$81
defaultMode-StandardDiagnosticMode-OBDIIMode
Level 0
$83
endOfLineVehicleManufacturerMode
Level 1
$85
ECUProgrammingMode
Level 2
$FA
ECUSupplierDevelopmentMode
Level 5
$FB
ECUSupplierSeriesMode
Level 4
$FD
ActuatorSupplierSeriesMode
Level 3
$FE
ECUSupplierIOControlMode
Level 6
Note, that on starting of the ECU Programming Mode the EPB performs a reset and jumps
into the Flash Boot Loader immediately. From that point of time on the diagnostic commands
described within this document are no longer relevant. Refer to the FIAT Flash Boot Loader
description for a list of commands supported in the boot loader.
15 November 2006
EPB Maserati M139

Page 10 / 35
SiemensVDO
Automotive AG
6.5
Bosch Engineering
GmbH
Access Rights. Access Levels
The following flowchart explains the access level scheme applied for the diagnostic servides
assigned to the diagnostic modes.
The access level hierarchy permits services to be accessed according to the current access
level. If the current access level is >= service minimum required access level then the service
is permitted otherwise the negative response code $22 "Conditions Not Correct" will be sent
to the tester. For each service the minimum required access level is specified.
6.6
Security Access
The algorithm for the key calculation is:

Key = f(Seed) = ((Seed XOR 0xaa559966) + Constant)
The parameter Constant has to be selected according to the security access to be activated.
See chapter 6.4 for a list of available security access types. The value Seed is a random
number generated by the ECU. The security access constants are listed in a separate
document.
SecurityAccess#1 Request Message
Byte No
Service and parameters
Conv.
Code (HEX)
#1
SecurityAccess#1
MAND
$27
#2
AccessMode
MAND
$03
Conv.
Code (HEX)
#1
SecurityAccess#1 service positive response
MAND
$67
#2
AccessMode
MAND
$03
SEED =
MAND
$xx...$xx
SecurityAccess#1 Positive Response

Byte No
#3 to #6
Highest byte seed /

High byte seed /
Low byte seed /
Lowest byte seed.
15 November 2006
$xx /
$xx /
$xx /
$xx
EPB Maserati M139

Page 11 / 35
SiemensVDO
Automotive AG
Bosch Engineering
GmbH
SecurityAccess#1 Negative Responses

Byte No
Conv.
Code (HEX)
#1
Negative response
MAND
$7F
#2
Security access request service Id
MAND
$27
#3
Response code (conditions not correct, sent if current diagnostic

session Id is equal to $81 or security access sequence error)
MAND
$22
Conv.
Code (HEX)
#1
Negative response
MAND
$7F
#2
MAND
$27
#3
Response code (required time delay not expired, sent in case of

wrong key entry during earlier security acceess request)
MAND
$37
Conv.
Code (HEX)
#1
SecurityAccess#2
MAND
$27
#2
AccessMode
MAND
$04
KEY = f(SEED) =
MAND
$xx...$xx=
Byte No
SecurityAccess#2 Request Message

Byte No
#3 to #6
Highest byte key /

High byte key /
Low byte key /
Lowest byte key.
$xx /
$xx /
$xx /
$xx
SecurityAccess#2 Positive Response

Byte No
Conv.
Code (HEX)
#1
SecurityAccess#2 service positive response
MAND
$67
#2
AccessMode
MAND
$04
#3
securityAccessStatus = [securityAccessAllowed]
MAND
$34
Conv.
Code (HEX)
#1
Negative response
MAND
$7F
#2
MAND
$27
#3
Response code (conditions not correct, sent if current diagnostic

session Id is equal to $81 or security access sequence error)
MAND
$22
SecurityAccess#2 Negative Responses

Byte No
15 November 2006
EPB Maserati M139

Page 12 / 35
SiemensVDO
Automotive AG
Byte No
Bosch Engineering
GmbH
Conv.
Code (HEX)
#1
Negative response
MAND
$7F
#2
MAND
$27
#3
Response code (invalid key, sent in case received and computed

key do not match)
MAND
$35
Conv.
Code (HEX)
#1
Negative response
MAND
$7F
#2
MAND
$27
#3
Response code (required time delay not expired, sent in case of

wrong key entry during earlier security acceess request)
MAND
$37
Byte No
6.7
Ignition ON/OFF Detection
The EPB assumes the vehicle ignition to be switched ON, if the internal power management
state machine is in the main wake-up NOMINAL or DEGRADED states. A diagnostic session
can only be opened and remains active if the EPB power manager is in one of these two
states.
The EPB does observe one dedicated CAN signal or one discrete HW line in order to
determine whether ignition is switched ON or OFF but it observes a combination of HW line
(RCD wake-up line) and different CAN signals. The NOMINAL state is entered in case the
RCD wake-up line is high and the EPB receives a valid main wake-up request via
STATUS_B_CAN2 message. Whenever there is an inconsistency detected between CAN
bus signals and RCD wake-up line the EPB enters the DEGRADED state. This is the case
e.g. if the vehicle does not stand still but the EPB receives a no main wake-up request via
STATUS_B_CAN2 message. Please refer to [5] for further details of the power management.
A diagnostic session can only be opened or remains open in the NOMINAL and DEGRADED
power manager states (i.e. if ignition is assumed to be switch ON). If the EPB leaves the
NOMINAL state towards to PARTIAL wake-up state or the DEGRADED state towards
TRANSITORY state, any active diagnostic session will be closed and new sessions cannot
be opened. Since these transition are not performed immediately after the actual vehicle
ignition off, it may take some time before the session is closed. This is because the EPB
needs time to validate or de-validate the involved HW and CAN signals. The exact timing is
given in [5].
If finally the EPB has left the NOMINAL or DEGRADED wake-up states, then the EPB will
not answer to any diagnostic request till ignition is switched on again and the power manager
is back in the NOMINAL or DEGRADED state.
15 November 2006
EPB Maserati M139

Page 13 / 35
SiemensVDO
Automotive AG
6.8
Bosch Engineering
GmbH
ECU Reset Behavior
There are several cases in which the EPB performs a reset on reception of a dedicated
diagnostic command or timeout:
ECU Reset is initiated via StartRoutineByLocalId command
the ECU Programming Mode is started via StartDiagnostic session command
Garage Braking via IoControlByLocalId command has been activated before and is
now stopped (refer to /6/ for list of reasons for leaving the garage braking mode)
Brake Control or Cablebedding via IoControlByLocalId command has been activated

and diagnostic session ends either due to StopDiagnosticSession command or tester
present timeout or ignition is switched off.
Note, that the diagnostic tester may run into a timeout if one of the conditions above is true.
The EPB indicates via CAN signal IODiagnosticCmdActive in the EPB message that IO
Control has been granted to EPB diagnostics and that therefore a ECU reset is required on
stop of diagnostics. This signal may be used by the tester or other ECU to prevent timeout
entries.
An EPB reset after activation of one of the three IO control services (brake control,
cablebedding or garage braking) cannot be avoided since this is part of the safety concept of
the EPB. Normally the control of the actuator is granted to the CAN interface, i.e. the ESP
that sends its commands (apply or release brake) to the EPB. Whenever an IO control
service is activated via diagnostic tester, the EPB application does not accept further
commands from the ESP. Now the only instance that can control the actuator is the
diagnostic tester. This is in order to ensure that the ESP does not interfere with the tester
during maintenance action in a garage which can endanger the service stuff working on the
car. A switch back of the control to the ESP is not implemented in the EPB application SW.
Once the EPB application SW has handed over control to another instance, only an EPB
reset can bring back the control to the ESP.
Any external ECU that supervises one of the application messages or signals sent by the
EPB must take into account that the time for a reset of the EPB is about 300 ms. I.e. it is
strongly recommended not to use timeouts shorter than 500 ms. Otherwise it may
happen that an external ECU detects a timeout, enters a timeout error into its fault memory
which finally lead to switching on of a malfunction indicator lamp on the instrument. In order
to prevent such a situation it is also recommended to erase fault memory of all ECUs
after one of the three IO control services (brake control, cablebedding or garage
braking) has been activated via diagnostic tester.
15 November 2006
EPB Maserati M139

Page 14 / 35
SiemensVDO
Automotive AG
6.9
Bosch Engineering
GmbH
Diagnostic Services (Detail)
(only relevant services and sub-functions for OEM are listed hereafter)
Requ.-ID
SID
Diagnostic Service
Request Message
Response Message
Minimum
Security
Access
Level
$10
$81
SID
Mode
$50
$81
pos. Response
Mode
Level 0
$10
$83
SID
Mode
$50
$83
pos. Response
Mode
Level 0
$10
$85
SID
Mode
$50
$85
pos. Response
Mode
Level 0
SID
Note, that normal diagnostic ends on receiving of this command and that the
EPB jumps into the Flash Boot Loader.
$60
pos. Response
Level 0
SID
Note, that a ECU reset may be performed if IoCtrlByLocalId command has

been issued before.
$7E
pos. Response
Level 0
Diagnostic Management
SWR_DI_
OEM_0001
V1.0
$10
SWR_DI_
OEM_0002
V1.0
SWR_DI_
OEM_0003
V1.0
$10
$10
SWR_DI_
OEM_0004
V1.0
$20
SWR_DI_
OEM_0005
V1.0
$3E
defaultModeStandardDiagnosticModeOBDIIMode
endOfLineVehicle
ManufacturerMode
ECUProgrammingMode
stopDiagnosticSession
TesterPresent
15 November 2006
$20
$3E
Note, that a ECU reset may be performed if IoCtrlByLocalId command has

been issued before and tester present timeout occurs.
EPB Maserati M139

Page 14 / 35
SiemensVDO
Automotive AG
Requ.-ID
SID
Diagnostic Service
Request Message
Response Message
$14
$FF00
$54
$FF00
Bosch Engineering
GmbH
Minimum
Security
Access
Level
Error Memory read/erase

SWR_DI_
OEM_0006
V1.0
SWR_DI_
OEM_0007
V1.0
$14
$17
ClearDiagnosticInformation
AllGrous
ReadStatusOfDTC
DTC
$17
$XXXX
SID
Group
SID
DTC
pos. Response
Group
Level 0
Note, that clearing of the fault memory may need some time since also
the slave controller is involved in the function. The EPB sends response
pending in case the time for a immediate answer expires.
$57
pos. Response
xx
number of DTC
xxxx
DTC
xx
Error state (SODTC)
xx
EvC1
xx
EvC2
xx
EvC3
xx
EvC4
xx
EvC5
xx
EvC6
xx
Event counter. (FRCNT)
Level 0
Note, that if parameter number of DTC is equal to zero, no further DTC

information will follow within the response message. This will happen if
the requested DTC is not supported by EPB or it is supported but
currently not active (present in failure memory).
15 November 2006
EPB Maserati M139

Page 15 / 35
SiemensVDO
Automotive AG
SWR_DI_
OEM_0008
V1.0
$18
ReadDTCByStatus
RequIdentifiedDtcAndState
AllGroups
$18
$00
$FF00
SID
StatusOfDtc
Group
$58
xx
xxxx
xx
xxxx
xx
Bosch Engineering
GmbH
pos. Response
Number of DTCs
Error code (DTC#1)
Error state (SODTC#1)
Error code n (DTC#n)
Error state n (SODTC#n)
Level 0
Note, that if parameter number of DTC is equal to zero, no further DTC

information will follow within the response message. This will happen if
currently there is no DTC present in failure memory. If parameter
number of DTC is equal to one or more, three bytes are following per
active DTC.
15 November 2006
EPB Maserati M139

Page 16 / 35
SiemensVDO
Automotive AG
Requ.-ID
SID
Diagnostic Service
Request Message
Response Message
Bosch Engineering
GmbH
Minimum
Security
Access
Level
ECU-Identification
SWR_DI_
OEM_0009
V1.0
$1A
ReadECUIdentification
ECU-ID
$1A
$80
SID
ECUIDT
$5A
pos. Response
$80
ECUIDT
$XX(61) Data of Sub service $91 - $99
Level 0
SWR_DI_
OEM_0010
V1.0
$1A
Drawing number
$1A
$91
SID
ECUDN
$5A
pos. Response
$91
ECUDN
$XX(11) Drawing number(ASCII)
Level 0
SWR_DI_
OEM_0011
V1.0
$1A
ECU hardware number
$1A
$92
SID
ECUHWN
$5
pos. Response
$92
ECUHWN
$XX(11) (ASCII)
Level 0
SWR_DI_
OEM_0012
V1.0
$1A
ECU hardware version
$1A
$93
SID
ECUHWV
$5A
$93
$XX(1)
Level 0
SWR_DI_
OEM_0013
V1.0
$1A
ECU software number
$1A
$94
SID
ECUSWN
$5A
pos. Response
$94
ECUSWN
$XX(11) Software number (ASCII)
Level 0
SWR_DI_
OEM_0014
V1.0
$1A
ECU software version
$1A
$95
SID
ECUSWV
$5A
$95
$XX(2)
pos. Response
ECHUSWV
Software Version (UNSIGN)
Level 0
SWR_DI_
OEM_0015
V1.0
$1A
Homologation number
$1A
$96
SID
$5A
$96
$XX(6)
pos. Response
Level 0
15 November 2006
pos. Response
ECUHWV
Hardware Version (UNSIGN)
Homologation number (ASCII)
EPB Maserati M139

Page 17 / 35
SiemensVDO
Automotive AG
Requ.-ID
SID
Diagnostic Service
Request Message
Response Message
$1A
$97
$5A
$97
$XX(5)
Bosch Engineering
GmbH
Minimum
Security
Access
Level
ECU-Identification
SWR_DI_
OEM_0016
V1.0
$1A
ISO Code
SWR_DI_
OEM_0017
V1.0
$1A
Tester code
$1A
$98
SID
$5A
pos. Response
$98
$XX(10) Tester code (ASCII)
Level 0
SWR_DI_
OEM_0018
V1.0
$1A
Programming date
$1A
$99
SID
PD
$5A
$99
$XX(4)
Level 0
15 November 2006
SID
pos. Response
Level 0
ISO Code (UNSIGN)
pos. Response
PD
YYYYMMDD (BCD)
EPB Maserati M139

Page 18 / 35
SiemensVDO
Automotive AG
Requ.-ID
SID
Diagnostic Service
Bosch Engineering
GmbH
Request Message
Response Message
Minimum
Security
Access
Level
$61
$82
$XX(3)
$XX(2)
$XX
$61
$83
$xx(4)
pos. Response
RLI
Sincom (ASCII)
Factory (ASCII)
Series
pos. Response
RLI
Serial No. (ASCII)
Level 0
$61
$8F
$xx(1)
$xx(16)
$xx(5)
$xx(1)
$61
$90
$xx(17)
pos. Response
RLI
Supplier (BOSH code)
Component initials (ASCII)
Free field (ASCII)
EMC index
pos. Response
RLI
VIN (ASCII)
Level 0
$61
$A0
$xx(3)
pos. Response
RLI
EPB cycles counter apply
(most ... less significant)
EPB cycles counter apply max
effort (most less significant)
Level 0
EPB SPECIFIC DATA read/write

SWR_DI_
OEM_0019
V1.0
$21
ReadDataByLocalIdentifier
SincomAndFactory
$21
$82
SID
RLI
SWR_DI_
OEM_0020
V1.0
$21
ECU serial number
$21
$83
SID
RLI
SWR_DI_
OEM_0021
V1.0
$21
EMC type approval
references
$21
$8F
SID
RLI
SWR_DI_
OEM_0022
V1.0
$21
VIN
$21
$90
SID
RLI
SWR_DI_
OEM_0023
V1.0
$21
EPB cycles counter
$21
$A0
SID
RLI
$xx(3)
15 November 2006
Level 0
Level 0
EPB Maserati M139

Page 19 / 35
SiemensVDO
Automotive AG
Requ.-ID
SID
Diagnostic Service
Request Message
Response Message
$21
$A1
$61
$A1
$xx(1)
$xx(1)
Bosch Engineering
GmbH
Minimum
Security
Access
Level

SWR_DI_
OEM_0024
V1.0
$21
EPB internal data frame 1
SID
RLI
$xx(1)
$xx(1)
$xx(1)
$xx(1)
$xx(1)
$xx(1)
15 November 2006
pos. Response
RLI
Vehicle Speed [km/h]
EPB button state
$00 Neutral
$01 Pressed
$02 Pressed failure
$03 Neutral failure
$0A Under/Over voltage
EPB state
$00 Undefined position
$01 Applied
$02 Released
$03 Target reached
(by the release to small force
e.g.: 1500N -> 800N)
$04 During apply
$05 During release
$06 During calibration
$07 Stop job (via diagnosis service)
Brake pedal state
$01 Brake pedal pressed
Battery voltage (KL30) [0.1V]
RCD line voltage (KL15) [0.1V]
ECU temperature [C]
Motor temperature [C]
Level 0
EPB Maserati M139

Page 20 / 35
SiemensVDO
Automotive AG
Requ.-ID
SID
Diagnostic Service
Request Message
Response Message
$21
$A2
$61
$A2
$xx(1)
$xx(1)
$xx(1)
$xx(1)
$xx(1)
$xx(1)
$xx(1)
Bosch Engineering
GmbH
Minimum
Security
Access
Level

SWR_DI_
OEM_0025
V1.0
$21
EPB internal data frame 2
SID
RLI
SWR_DI_
OEM_0026
V1.0
$21
Software version slave C
$21
$B7
SID
RLI
$61
$B7
$xx(3)
pos. Response
RLI
Applied force [6N]
Target force [6N]
Motor circuit voltage [0.1V]
RCD line state [1 high / 0 low]
Motor speed requested by ESP [0...100%]
Motor speed [375 RPM]
ECU operating phase
$04 Main wakeup nominal
$05 Main wakeup degraded
ESP request status
$00 No action
$01 Locking request
$02 Unlocking request
$03 - $07 Invalid request
Motor position
= ($xx * $08 ) $E0 )[1/4 Rotation]
(Min. value= -224 [1/4 Rotation],
Max. value = 1816 [1/4 Rotation])
pos. Response
RLI
SW_VERSION
SWR_DI_
OEM_0027
V1.0
$21
Software version FBL
$21
$BD
SID
RLI
$61
$B7
$xx(2)
pos. Response
RLI
FBL_VERSION
$xx(1)
$xx(1)
15 November 2006
Level 0
Level 0
Level 0
EPB Maserati M139

Page 21 / 35
SiemensVDO
Automotive AG
Requ.-ID
SID
Diagnostic Service
Bosch Engineering
GmbH
Request Message
Response Message
Minimum
Security
Access
Level
$3B
SID
$82
RLI
$XX(3) Sincom
$XX(2) Factory
$XX
Series
$3B
SID
$90
RLI
$XX(17) VIN
$XX(4) Password
$3B
SID
$98
RLI= TC
$XX(10) TC
$7B
$82
pos. Response
RLI
Level 1
$7B
$90
pos. Response
RLI
Level 1
$7B
$98
SID
RLI= TC
Level 1
$3B
$99
$XX(4)
$7B
$99
SID
RLI= DATE
Level 1

SWR_DI_
OEM_0028
V1.0
$3B
WriteDataByLocalIdentifier
SincomAndFactory
SWR_DI_
OEM_0029
V1.0
$3B
VIN
SWR_DI_
OEM_0030
V1.0
$3B
Tester Code
SWR_DI_
OEM_0031
V1.0
$3B
Download / Production
Date
15 November 2006
SID
RLI= DATE
Date(BCD)
EPB Maserati M139

Page 22 / 35
SiemensVDO
Automotive AG
Requ.-ID
SID
Diagnostic Service
Request Message
Response Message
$30
$01
$07
$70
$01
$07
Bosch Engineering
GmbH
Minimum
Security
Access
Level
EPB IO CONTROL
SWR_DI_
OEM_0033
V1.0
$30
InputOutputControlByLocalIdentifier
GarageBraking
Start Control
(refer to [6] for
preconditions)
SWR_DI_
OEM_0033
V1.0
$30
GarageBraking
Stop Control
(refer to [6] for
preconditions)
15 November 2006
$xx
$xx
SID
IOLI
GarageBraking
PARAPIL1 (Input output control parameter)
Shot term adjustment = Start control
PARAPIL2 (Input output control state)
$00 Release the parking brake
$FF Tightening of the parking brake
$xx = GarageBrakingForce [6N]
(see below table for further details)

$30
SID
$01
IOLI
GarageBraking
$00
Return control to ECU = Stop control
$xx
$70
$01
$00
$xx
SID
IOLI
GarageBraking
STATPIL1 (Input output control parameter)
STATPIL2 (Input output control status)
$00 Control could not be started
$01 Control in progress
$02 Control ended
$04 Problem
$11 Command processing stopped
$AA Command has been issued
SID
IOLI
GarageBraking
$02 Control ended
$04 Problem
Level 0
Level 0
EPB Maserati M139

Page 23 / 35
SiemensVDO
Automotive AG
Requ.-ID
SID
Diagnostic Service
Request Message
Response Message
$30
$01
$01
$70
$01
$01
Bosch Engineering
GmbH
Minimum
Security
Access
Level
EPB IO CONTROL
SWR_DI_
OEM_0034
V1.0
$30
GarageBraking
SID
IOLI
GarageBraking
Report current state = Status request
$xx
Status Request
(refer to [6] for
preconditions)
SWR_DI_
OEM_0035
V1.0
$30
BrakeControl
$30
$11
$07
$xx
Start Control
(vehicle must stand
still / no under or
over-voltage error
must be present)
SID
IOLI
BrakeControl
$00 Release the parking brake
$01 Setting up for
mounting/ un-mounting
$02 Readjustment
$FF Tightening of the parking brake
$70
$11
$07
$xx
SID
IOLI
GarageBraking
$02 Control ended
$04 Problem
Level 0
SID
IOLI
BrakeControl
$02 Control ended
$04 Problem
$AA Commanhas been issued
Level 0
15 November 2006
EPB Maserati M139

Page 24 / 35
SiemensVDO
Automotive AG
Requ.-ID
SID
Diagnostic Service
Request Message
Response Message
$30
$11
$00
$70
$11
$00
Bosch Engineering
GmbH
Minimum
Security
Access
Level
EPB IO CONTROL
SWR_DI_
OEM_0035
V1.0
$30
BrakeControl
SID
IOLI
BrakeControl
$xx
Stop Control
(vehicle must stand
still / no under or
over-voltage error
must be present)
SWR_DI_
OEM_0036
V1.0
$30
BrakeControl
$30
$11
$01
SID
IOLI
BrakeControl
$70
$11
$01
$xx
Status Request
(vehicle must stand
still / no under or
over-voltage error
must be present)
15 November 2006
SID
IOLI
BrakeControl
$02 Control ended
$04 Problem
SID
IOLI
BrakeControl
$02 Control ended
$04 Problem
Level 0
Level 0
EPB Maserati M139

Page 25 / 35
SiemensVDO
Automotive AG
Requ.-ID
SID
Diagnostic Service
Request Message
Response Message
$30
$12
$07
$70
$12
$07
Bosch Engineering
GmbH
Minimum
Security
Access
Level
EPB IO CONTROL
SWR_DI_
OEM_0037
V1.0
$30
Cablebedding
$xx
Start Control
(vehicle must stand
still / no under or
over-voltage error
must be present)
SWR_DI_
OEM_0037
V1.0
$30
Cablebedding
$xx
SID
IOLI
Cablebedding
$xx delay time between apply and
release command and vice versa in steps of
20 ms (range 0 ms to 5100 ms)
PARAPIL 3 (Input output control parameter)
$xx number of apply release cycles
(range 1 t0 20 cycles / 0 = 5 cycles)

$30
SID
$12
IOLI
Cablebedding
$00
$xx
$70
$12
$00
$xx
Stop Control
(vehicle must stand
still / no under or
over-voltage error
must be present)
15 November 2006
SID
IOLI
Cablebedding
$02 Control ended
$04 Problem
Level 0
SID
IOLI
Cablebedding
$02 Control ended
$04 Problem
Level 0
EPB Maserati M139

Page 26 / 35
SiemensVDO
Automotive AG
Requ.-ID
SID
Diagnostic Service
Request Message
Response Message
$30
$12
$01
$70
$12
$01
Bosch Engineering
GmbH
Minimum
Security
Access
Level
EPB IO CONTROL
SWR_DI_
OEM_0038
V1.0
$30
Cablebedding
SID
IOLI
Cablebedding
$xx
Status Request
(vehicle must stand
still / no under or
over-voltage error
must be present)
SID
IOLI
Cablebedding
$02 Control ended
$04 Problem
Level 0
Explanation of return value STATPIL2 (brake control, cablebedding and garage braking):
$00
$01
$02
$04
$11
$AA
Control could not be started

Control in progress
Control ended
Problem
Command processing stopped
Command has been issued
IO control is not allowed and cannot be started therefore

IO control command has been issued and is no been processed by slave C
IO control command has been successfully finished
problem in IO control command processing
IO control command processing has been stopped via Stop Control command
IO control command has just been issued and is not transferred to slave C
Explanation of parameter value PARAPIL2 (brake control and garage braking):

$00
$01
$02
$FF
Apply brake
Setup for mounting
Readjustment
Release brake
apply brake to 150 daN (brake control) and PARAPIL3 daN for garage braking
set EPB in the cable mounting position (brake control only)
re-calibrate EPB by performing single apply release cycle (brake control only)
release EPB to 0 daN
15 November 2006
EPB Maserati M139

Page 27 / 35
SiemensVDO
Automotive AG
Bosch Engineering
GmbH
Explanation of parameter value PARAPIL3 (garage braking):

$xx
Force
force [6N] to which the EPB is applied on apply garage braking command (for ranges and default values ref. To [6])
Explanation of parameter value PARAPIL2 (cablebedding):

$xx
Delay Time
time [20ms] between single apply-release and release-apply commands (no restrictions)
Explanation of parameter value PARAPIL3 (cablebedding):

$xx
Cycles
number of apply to 150 daN and release to 0 daN cycles (0 = default = 5 cycles, max. = 20 cycles)
Common behavior for all three IO control services (brake control, cablebedding and garage braking):
On stop diagnostic session, test present timeout and key off detection the EPB will perform a reset
Only one of the three IO control services can be active at a time. If one service is started, then the activation of the other services will be rejected by return code
0x22 (Conditions not correct)
The services can only be started if the preconditions mentioned in the tables above are fulfilled.
Common behavior of garage braking and cablebedding:

Preconditions are not only checked on entering of the service but they are continuously monitored. If during run of a the service a precondition is no longer fulfilled
then the service is stopped and the brake is released. This is not the case for the brake control service, i.e. brake control will continue if already started even if the
preconditions are no longer true.
The brake is always release when the service ends independent on the stop reason. This is also not valid for the brake control service, i.e. on stop of brake control
the currently active command is aborted and the actuator stays at the current position.
Common behavior of brake control and garage braking:

If the services are stopped via IO control command then the EPB remains in the currently active diagnostic session with actuator control enabled. This leads to a
EPB reset if later diagnostic session ends. For garage braking the behaviour is different. Here the EPB immediately leaves diagnostics and performs a reset, i.e.
diagnostic processing cannot be continued.
15 November 2006
EPB Maserati M139

Page 28 / 35
SiemensVDO
Automotive AG
Bosch Engineering
GmbH
Exit criteria for brake control functions:
IO control stop command is sent ($30 $11 $00) (no EPB reset)
default diagnostic session is closed -> EPB is reset
tester present timeout -> EPB is reset
ignition is switched off -> EPB is reset
Exit criteria for cablebedding:
IO control stop command is sent ($30 $12 $00) -> EPB is released (no EPB reset)
vehicle speed is exceeds 10 km/h -> EPB is released (no EPB reset)
default diagnostic session is closed -> EPB is released -> EPB is reset
tester present timeout -> EPB is released -> EPB is reset
ignition is switched off -> EPB is released > EPB is reset
Exit criteria for garage braking:
ref. to [6] for list of garage braking exit conditions -> EPB is always released independent of exit reason -> EPB is always reset independent of exit reason
15 November 2006
EPB Maserati M139

Page 29 / 35
SiemensVDO
Automotive AG
SID
Diagnostic Service
Request Message
Response Message
$31
$03
$B0
$71
$03
Bosch Engineering
GmbH
Minimum
Security
Access
Level
EPB SPECIFIC ROUTINES

SWR_DI_
OEM_0037
V1.0
$31
StartRoutineByLocalIdentifier
ECU Reset
15 November 2006
SID
RLI
LogicalReset
pos. Response
RLI
Level 0
EPB Maserati M139

Page 30 / 35
SiemensVDO
Automotive AG
Bosch Engineering
GmbH
6.10 Negative Return Codes:

The EPB supports the following negative return codes, that are used in the explained error conditions:
0x11: The whole diagnostic service is not supported by EPB.
0x12: A only a specific sub-function of a service is not supported or the length of the request message is incorrect or a parameter value is
outside of allowed values.
0x22: Service and sub-function are supported in general but currently the environmental conditions do not allow the execution of the
request.
0x33: Security access is requested for this sub-function.
0x35: Invalid key to unlock security access
0x78: The EPB need time to respond. A positive response will follow.
0x80: Service or sub-function is not supported in the currently active diagnostic mode.
0x87: Writing error, e.g. during write access to EEPOROM.
15 November 2006
EPB Maserati M139

Page 31 / 35
SiemensVDO
Automotive AG
Data Formats
7.1
Read Status of DTC Output Format
Bosch Engineering
GmbH
7.1.1 Output Format Sequence

Byte
Name
Content
#1..2
DTC
2 bytes
#3
Status of DTC
See chapter 7.1.3
#4
Env1
INPUT_VOLTAGE_KLEMMEN_BUTTON
#5
Env2
FORCE
#6
Env3
MOTOR_SPEED
#7
Env4
ACTUATOR_STATES
#8
Env5
APPL_STATES
#9
Env6
ERROR_CAN_SIGNAL
#10
Event Counter
0..40
SYMPTOMS
INPUT_ VOLTAGE_
KLEMMEN_BUTTON
Bitpos
Environmental Byte
Bytes
7.1.2 Environment Byte Description Table

Environmental Text
0-3
DTC Symptoms
Readiness bit
0/1
0: DTC is
detectable
1: DTC is not
detectable
Stored bit
0/1
0: DTC is not
stored
1: DTC is
already
stored
Filtered present bit
0/1
0: DTC is
actual not
present
1: DTC is
actual
present
reserved
0/1
reserved
0-3
KL30_Motor_Voltage
1,6 V
KL30_Mot
4-5
Button_state
Numeric value:
Button states
Scaling
Comments
Status of
DTC
0: switch pressed
1: switch pressed and fault
2: switch released
3: switch released and fault
6
Ignition
15 November 2006
0/1
RCD line
EPB Maserati M139

Page 32 / 35
FORCE
MOTOR_SPEED
Bosch Engineering
GmbH
Bitpos
Environmental Byte
Bytes
SiemensVDO
Automotive AG
Environmental Text
Scaling
Comments
Undervoltage
0/1
0: KL30_E >
8V
1: KL30_E <
7.6 V
0-3
Actual force
96 N
Actual force
4-7
Target force
96 N
Requested
force by ESP
0-2
Target speed by ESP
Assignment:
0: 35 %
1: 50 %
2: 100 %
3: < 10 %
4: > 100 %
5: < 35 %
6: < 50 %
7: < 100 %
ACTUATOR_STATES
APPL_STATES
3-7
Motor Speed
400 rpm
0-12000 rpm
Unknown
0/1
Applied
0/1
Actuator
states
Released
0/1
TargetReached
0/1
DuringApply
0/1
DuringRelease
0/1
DuringCalibration
0/1
Stopped
0/1
0..2
Internal EPB states
Numeric value:
0: InitWakeUp
Internal wake
up states
1: TransitoryWakeUp
2: PartialWakeUp
3: MainWakeUpNominal
4: MainWakeUpDegraded
5: MainWakeUpIep
6: SwitchOff
7:InvalidWakeUp
3..5
ESP_Request
Numeric value:
0: no request
Request from
ESP
1: apply requested
2: release requested
7: invalid signal
6
ERROR_CAN_SIGNAL
Apply_Permission
1: V < V_Apply_Allowed
V_APPLY_A
LLOWED =
10km/h
reserved
0/1
Reserved bit
Main Wakeup
0/1
1: invalid
15 November 2006
0: V > V Apply_Allowed
EPB Maserati M139

Page 33 / 35
Event Counter
Total number of
context bytes
Bosch Engineering
GmbH
Bitpos
Environmental Byte
Bytes
SiemensVDO
Automotive AG
Environmental Text
Scaling
Comments
EPB request
0/1
0: valid
Vehicle Speed
0/1
Engine rpm
0/1
0/1
0/1
0/1
0/1
Event Counter
0..40
7.1.3 Environment Byte DTC Symptom

DTC Fault Symptom
Value
above max
0001
below min
0010
no signal
0100
invalid signal
1000
15 November 2006
EPB Maserati M139

Page 34 / 35

Srs Diagnosis Epb m139 Oem v2.3

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Srs Diagnosis Epb m139 Oem v2.3

Uploaded by

Copyright:

Available Formats

SiemensVDO

Software Requirements Specification Diagnosis

EPB Maserati M139

Heiko Meyer, Vector Informatik

Transmittal, reproduction, dissemination and/or editing of this document

Bosch Engineering GmbH

Copyright ( C ) Siemens AG 2006

Diagnostic details added.

Update the services

Updated services and security access

Updated 6.1 and 6.2.2 and 6.2.3 and via

Update the garage braking via

Update IO control by local ID

Update the environmental condition for

Excluded the chapter Garage braking

Completed the condition for the ignition off

IO Control, EPB Reset, Ignition Detection

Changed document status to released

Corrected environmental conditions table in

Garage Braking described in more details

Under / overvoltage protection for garage

Corrected value "total number of context

Inserted the value of the following

EPB button state

EPB Maserati M139

Email from Mr. Cristian Bellei from Maserat

Service WDLID MD Factory Data $3B $B3

ESP request status

= ($xx * $08 ) $E0 )[1/4

Email from Mr. van Uffelen on

Update the information the brake pedal in

Review results added:

list of references updated

EPB Maserati M139

parameter number of DTCs

Update the release date

EPB Maserati M139

Table of Content ........................................................................................................... 5

Terms and Abbreviations............................................................................................. 6

Protocol Service ........................................................................................................... 8

Bus Protocol ................................................................................................................... 8

Protocol Type .......................................................................................................... 8

Stop of Diagnostic Session...................................................................................... 8

Transport Protocol Parameters ............................................................................... 9

CAN Parameters ..................................................................................................... 9

Diagnostic Modes ......................................................................................................... 10

Access Rights. Access Levels ...................................................................................... 11

Security Access ............................................................................................................ 11

Ignition ON/OFF Detection ........................................................................................... 13

ECU Reset Behavior .................................................................................................... 14

Diagnostic Services (Detail).......................................................................................... 14

Negative Return Codes: ............................................................................................... 31

Read Status of DTC Output Format ............................................................................. 32

Output Format Sequence ...................................................................................... 32

Environment Byte Description Table ..................................................................... 32

Environment Byte DTC Symptom.......................................................................... 34

EPB Maserati M139

Terms and Abbreviations

Binary Coded Decimal

Electrical Parking Brake

Node Parking Brake = EPB

Diagnostic Trouble Code

Record Local Identifier

Software Requirements Specification