User Manual 1.1
Contents
1. Based on the characteristics of the EEPROM module they can be connected directly to the EnOcean Module See example below GND DVDD WXIDIO 29 wxopio 30 VDD GND VDDLIM VDD IOVDD RSDADIO3 RF_WHIP I2C EEPROM WSDADIO2 GND SLK SCLKDIO1 STM300 C _ TCM300 C _ DEVICE SDA SCSEDIOO GND PROG_EN GND GND A Please check specific memory modules for compatibility before use Changes in the Decod ing Gateway I2C interface may be required 2 6 2 Storage Selection On start up the Decoding Gateway determines what storage should be used for rolling code and key storage After the first device is taught in this determination is not executed any more The module stores the selected storage pointer and uses it again for any further teach ins After all devices are taught out the determination is executed again 2 6 3 Voltage drops During critical tasks of storing the rolling code in particular erasing a flash page it must be ensured that enough power is available A power drop during this operation can cause un expected behavior Therefore we recommend attaching an external capacitor to overcome a sudden power drop Incase of EEPROM usage as Rolling Code Storage a small capacitor is needed erase time takes 5 ms 0 1 mA See reference 7 for details on voltage In case of Dolphin Chip memory usage as Rolling Code Storage a larger capacitor is required typi cally 20 ms 7 5 mA 2015 EnOcean www eno2. Controller User Manual V1 1 Page 8 11 USER MANUAL Green Smart Wireless e noceair DECODING GATEWAY CONTROLLER 2 5 1 1 Resynchronisation of Taught In Secure Devices During operating mode teach in requests from unknown devices are ignored If a taught in device sends a teach in request the RLC code information is updated This is aimed for the case where the receiver and sender s RLC becomes desynchronized The Decoding Gateway also checks if the private key is matching If not it may be a potential attack and the De coding Gateway sends a CO_EVENT_SECUREDEVICES for handling For details see Chapter 2 2 2 5 2 Gateway Operational Functionality During operation the decoding gateway behaves as the Gateway Controller see reference 6 for details If an encoded telegram from a taught in device is received the decoding gate way decodes this telegram and forwards it decoded on the serial interface For details on encoded packet structure see reference 4 For details on serial message structure see ref erence 5 2 6 Storage for Rolling Codes and Keys For security functionality the Gateway needs to store the following for each learned in device Security AES 128 key 16 bytes Rolling Code information 2 bytes Both values can be stored either in internal Dolphin Chip in external EEPROM Memory The Decoding Gateway makes the decision on where to store the secure information on start up If an external memory i
3. firmware and passed on the UART interface decoded Prior to decoding the secure switch needs to be taught in by the decoding gateway Key and Rolling code man agement is executed by Decoding Gateway For a full specification please consider also the User Manual of the Gateway Controller aka TCM 310 Features All features included in the Gateway Controller m Decodes Telegrams from secure Switches Handling and storing Rolling Codes and Security Keys Storing in external EEPROM Storing in internal Flash Memory Dolphin Chip I2C Implementation to communicate with external EEPROM 2015 EnOcean www enocean com Decoding Gateway Controller User Manual V1 1 Page 4 11 USER MANUAL Green Smart Wireless enocean DECODING GATEWAY CONTROLLER 1 2 References PTM 215 User Manual STM 33x User Manual STM 32x User Manual EnOcean Security Specification EnOcean Serial Protocol 3 Specification Gateway Controller TCM 310 User Manual Microchip EEPROM Memory www microchip com serialeeprom DolphinAPI Description 2 FUNCTIONAL DESCRIPTION oo NLOS OTA O r 2 1 I O description For pin out and hardware related details please refer to the TCM 3xy user manual Symbol Function Characteristics aioe anios _ ADIO5 Digital input internal pull up ADIO6S _ sd a RX UART input ADIO7 SER_TX UART Le SCSEDIOO Interface for external i I O for I2C Data communication EEPROM with I2C inter face SCLKDIO1 In
4. USER MANUAL EnOcean GmbH Kolpingring 18a 82041 Oberhaching Germany Green Smart Wireless enocean Phone 49 89 67 34 689 0 _ Subject to modifications _ Fax 49 89 67 34 689 50 _ Decoding Gateway Controller User Manual V1 1 info enocean com March 4 2015 1 43 PM WWwW enocean com Page 1 11 USER MANUAL Green Smart Wireless enocean DECODING GATEWAY CONTROLLER REVISION HISTORY The following major modifications and improvements have been made to the first version of this document No Major Changes Initial version Supported SLF range extended Published by EnOcean GmbH Kolpingring 18a 82041 Oberhaching Germany www enocean com info enocean com phone 49 89 6734 6890 EnOcean GmbH All Rights Reserved Important This information describes the type of component and shall not be considered as assured characteris tics No responsibility is assumed for possible omissions or inaccuracies Circuitry and specifications are subject to change without notice For the latest product specifications refer to the EnOcean web site http www enocean com As far as patents or other rights of third parties are concerned liability is only assumed for modules not for the described applications processes and circuits EnOcean does not assume responsibility for use of modules described and limits its liability to the replacement of modules determined to be defective due to workmanship Devices or sys
5. cean com Decoding Gateway Controller User Manual V1 1 Page 10 11 USER MANUAL Green Smart Wireless enocean In cases where Dolphin Chip memory is used the Decoding Gateway does not erase a page when the VDD Fail Interrupt occurs typically at 2 5 V This way a power drop of 0 5 0 7V must be covered by the capacitor See reference 8 for details on VDD Fail Interrupt To ensure enough power for a flash erase is available during a sudden power drop the re ceiver is turned off for this period 2 7 Configurations The configurable values are stored in CFG Area You can change them with DolphinStudio DolphinSuite In addition to the Gateway Controller configurable parameters the following security related parameters are available Security RC flash cycle Address in CFG OxA2 Default value 50 This value defines how many telegrams from one device will be received prior to updat ing the rolling code in persistent memory This parameter is only used when the Dolphin Chip is used for RLC storage Wrong CMAC count Address in CFG 0xA1 Default value 128 This value defines the count of the wrong CMAC validation attempts before the Decod ing Gateway module sends the event serial command CO_EVENT_SECUREDEVICES that a possible security attack is ongoing Security RC window Address in CFG OxAO Default value 128 This value defines how big the Rolling Code window can be The Rolling code window de fines the amount o
6. device using enhanced security features e g PTM 215 energy harvesting wireless switch module transmits encrypted telegrams with rolling code based on the AES 128 standard the TCM 300 or TCM 320 transceiver module programmed with Decoding Gateway can de crypt these telegrams and then forward them to an external controller With this approach EnOcean adds the process of data encryption and decryption transparently to its modules When manufacturers plan energy harvesting wireless applications with encrypted data transfer they can save themselves this development step The OEM s external control ler no longer has to decode the telegrams but receives them already decoded and ready for immediate use Security functions can easily be added to existing receiving and gateway products by programming the TCM 300 transceiver module with Decoding Gateway During the programming process the firmware stores the rolling code together with the corre sponding key on the Dolphin chip so that no changes need to be made to the hardware Alternatively OEMs can also store this information on a separate EEPROM especially for new product developments The security information is therefore stored outside the mod ule s program memory 1 1 Basic functionality The Decoding Gateway is based on Gateway Controller and extends its functionality by se curity decoding of secure switch telegrams e g PTM 215 The secure switch telegram is decoded by the
7. f tries where the device tries to validate the RLC from a message Start Up delay Address in CFG 0xA3 Default value 20 This variable defines what the start up delay of the module is The delay is between waking the module and enabling the radio receiver The real value is multiplied by 10 and then expressed in milliseconds e g 20 10 200 ms 2015 EnOcean www enocean com Decoding Gateway Controller User Manual V1 1 Page 11 11
8. ion to activate a one or two level repeater for EnOcean radio telegrams i level repeater If a received telegram is a valid and original not yet repeated the telegram is repeated after a random delay 2 level repeater If a received telegram is valid and original or repeated once the telegram is re peated after a random delay 2 level repeating function should only be activated if really needed Otherwise the system function can be compromised by collisions of telegrams The repeated telegram is marked as repeated by an increased repeater counter 2015 EnOcean www enocean com Decoding Gateway Controller User Manual V1 1 Page 6 11 USER MANUAL Green Smart Wireless enocean Configuration of the repeater is done via serial interface commands For detailed recommendations regarding the usage of repeaters please refer to our applica tion note EnOcean Wireless Systems Installation Notes PDF 09 2010 2 4 Security details Supported Security Products PTM 215 or similar with same profile See reference 1 STM 330 STM 331 or similar with same profile See reference 2 STM 320 STM 329 or similar with same profile See reference 3 Supported Security Tasks Decoding with VAES 128 VEAS 128 with 2 3 byte RLC Validation CMAC 3 4 bytes length based on Rolling code 2 3 bytes length TX implicit or explicit Telegram decoding chaining not supported For details o
9. n Security Tasks please see reference 4 2 5 Operational modes The Decoding Gateway has two operational modes Teach in mode Gateway operational mode An overview of the functionality can be seen in the figure below Explanations can be found in the following chapters 2015 EnOcean www enocean com Decoding Gateway Controller User Manual V1 1 Page 7 11 USER MANUAL Green Smart Wireless enocean act Decoding Gateway Message Received Send EVENT to inform about potentional attack Is data message from Taught In device Isa security Teach In Message Is Private key in message matching with stored Is message from Taught In device Decode Telegram Update Is Teach In Mode Active stored Rolling Code Send Message NO on UART Device Remove Message Figure 1 Operational functions 2 5 1 Teach In Functionality of Secure Devices For the Decoding Gateway to decode telegrams a teach in information from the broadcast ing device must be received For this purpose also the Decoding Gateway must be put into LRN Mode with the correct UART Command For details see Chapter 2 2 After a successful teach in process the whole teach in message is passed as one serial packet on the serial interface For communication RADIO_MESSAGE TYPE 9 is used See reference 5 for details on serial command 2015 EnOcean www enocean com Decoding Gateway
10. nares 7 2 5 Operational MOdES i sisi cise verasesesteessnoeev E EE EE ER EEE ON 7 2 5 1 Teach In Functionality of Secure Devices ccceceeeee eect ee eee eee eee e neta teed 8 2 5 1 1 Resynchronisation of Taught In Secure Devices eceee eset ee ee eee ee ee eeees 9 2 5 2 Gateway Operational Functionality cceccee ee eee eect ee eee neta eee ee seta eeeeaeaes 9 2 6 Storage for Rolling Codes and KeYS cccecceeeeee ee eee ee eee ee eee e teens teens tees nate eaeaes 9 2 6 1 Possible external MEMOFieS ccccece cece e eee e eee ee eee teen e eee ee eee teed 9 2 6 2 Storage SelectiOm crassi eaan A eden ssenavad stots tsaeverseaciee cies 10 2 6 3 Voltage dr PSrriseririarienirin iinan anaE EEEE V EANAN ERVEN EEEE NEER EEA 10 2 7 Configuration Ssn REEE N EAE ENO ees stealer dee cine 11 2015 EnOcean www enocean com Decoding Gateway Controller User Manual V1 1 Page 3 11 USER MANUAL Green Smart Wireless e noceair DECODING GATEWAY CONTROLLER 1 GENERAL DESCRIPTION With the Decoding Gateway EnOcean now offers its OEM partners a firmware that decodes en crypted EnOcean telegrams on the module This allows manufacturers OEMs to integrate en crypted data communication faster and more easily into their products for example for safety related and smart home applications The Decoding Gateway adds an important mod ule to the receiving side of EnOcean s security portfolio When a
11. s connected then the keys are stored there If no memory is detected then keys are stored in the Dolphin Chip Following maximum supported devices are possible e 32 devices if using Dolphin Chip Memory as storage e 32 devices if using external 8 kilobit memory e 128 devices if using external 32 kilobit memory The security Key of a device is constant The RLC will change with every telegram transmis sion Therefore the receiver needs to store it periodically during whole operational time For the case of power off the RLC needs to be store also in the non volatile memory Based on the used memory module we define following storage frequency Internal Dolphin Chip every 50 transmission External Memory Module every transmission We recommend using external memory for storage of rolling codes because it ensures higher safety through storing rolling code every change and separates the rolling code stor age place from program memory storage place 2 6 1 Possible external memories If the Decoding Gateway is used with external memory we can refer to these two possible EEPROMs 24AA08 Microchip 8 kilobit See reference 7 for details 2015 EnOcean www enocean com Decoding Gateway Controller User Manual V1 1 Page 9 11 USER MANUAL Green Smart Wireless enocean 24AA32 Microchip 32 kilobit See reference 7 for details As the Decoding Controller was developed using these modules compatibility is guaranteed
12. tems contain ing RF components must meet the essential requirements of the local legal authorities The modules must not be used in any relation with equipment that supports directly or indirectly human health or life or with applications that can result in danger for people animals or real value Components of the modules are considered and should be disposed of as hazardous waste Local government regulations are to be observed Packing Please use the recycling operators known to you By agreement we will take packing materi al back if it is sorted You must bear the costs of transport For packing material that is returned to us unsorted or that we are not obliged to accept we shall have to invoice you for any costs incurred 2015 EnOcean www enocean com Decoding Gateway Controller User Manual V1 1 Page 2 11 USER MANUAL Green Smart Wireless enocean TABLE OF CONTENT 1 GENERAL DESCRIPTION oreiro ien rN E E E E EEE E A EEES 4 121 Basicfunctionalty srscriserepiar iinan aE E EEEE TEREKE EEEE EERE ANA 4 L2 RETEFENCES suyri sir n ar En E EAEE OEA TE EA NETEN EA EEES 5 2 FUNCTIONAL DESCRIPTION ccece eect cece eee rian eee rene reeset erate eats eens enna 5 2 1 I O descriptio M mereni enn E E E EERE SEES TESTES SEES SEES EEE REESE EES 5 2 2 Serial imterfaCE iieri an oaeen ita AEAEE KERVO I ETRO NUNE 5 2 3 Built in Repeater asrni tristor E EEEE sors EE 6 2 4 Security GetallS wiscciecutieur sneering ERVARE era AAEE
13. terface for external Digital Output Clock pin for I2C Communica EEPROM with I2C inter tion face 2 2 Serial interface Gateway Controller provides a bi directional serial interface which conforms to the ESP3 specification For details regarding ESP3 please refer to the ESP3 specification The data rate on the serial interface is 58 8 kbit s which is usually interoperable with systems run ning on 57 6 kbit s Direction Nominal serial data rate Tolerance TX sent by module 58823 bit s 57600 bit s 2 1 lt 50 ppm RX received by module 58823 bit s The ESP3 commands are supported like in Gateway Controller Software Additionally these security tasks related commands are supported CO_WR_LEARNMODE CO_RD_LEARNMODE CO_EVENT_SECUREDEVICES 2015 EnOcean www enocean com Decoding Gateway Controller User Manual V1 1 Page 5 11 USER MANUAL Green Smart Wireless enocealr CO_WR_SECUREDEVICE_ADD CO_WR_SECUREDEVICE_DEL CO_RD_SECUREDEVICE_BY_INDEX CO_RD_SECUREDEVICE_BY_ID CO_RD_NUMSECUREDEVICES This commands are NOT relevant to this Firmware and they are also not supported CO_RD_SECURITY CO_WR_SECURITY Also supported but not security related RADIO_MESSAGE Due to storage limitations these commands are not longer supported CO_WR_SLEEP CO_RD_SYS_LOG CO_WR_SYS_LOG REMOTE_MAN_COMMAND For command structure please see reference 5 2 3 Built in Repeater The Gateway Controller provides the opt
Download Pdf Manuals
Related Search