projects:zibaldone:electronic:turbolevo [Galileo Labs]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== turbolevo ======

{{tag>[canbus]}}

  * [[https://www.kmpdrivetrain.com/paddleshift/practical-tips-can-bus/|canbus basic]]
  * [[https://www.testandmeasurementtips.com/exploring-canbus-oscilloscope/|exploring canbus]]
  * [[https://upcommons.upc.edu/bitstream/handle/2117/118541/report-tfm-eduard-valentino.pdf|canbus esp32 project]]
  * [[https://www.computer-solutions.co.uk/info/Embedded_tutorials/can_tutorial.htm|tutorial]]
  * transreceiver SN65HVD230 [[https://www.ti.com/lit/ds/symlink/sn65hvd230.pdf|datasheet]]  [[https://blog.danman.eu/playing-with-can-bus/|example ESP32 project]]
  * transreveiver TJA1050T: [[https://www.mouser.it/datasheet/2/302/TJA1050-1127967.pdf|datasheet]]
  * 
{{:tips:can-signaling.jpg|}}

===== firmware =====

  * {{ :tips:firmware_status.json |}}
  * {{ :tips:firmware.bin |}}



====== BMS ======

Same port charge and discharge balance PCM for 36V

{{:tips:bms.png?400|}}

  * B-: Connect to the negative pole of the battery pack
  * P-: No Connect
  * C-: Connect to the negative electrode of charge and discharge

Please connect B- line firstly, and then connect voltage monitoring wiring harness. The last step is to connect charge and discharge lines. If you want to remove them, the order should be reversed. Please pay attention to the connection order, or it will damage the component.

====== Electronic ====


{{:tips:schema.png?800|}}

{{:tips:mosfet.png?100|}} {{:tips:pnp.png?100|}}


BOM:
  * [[https://lcsc.com/product-detail/DC-DC-Converters_UMW-Youtai-Semiconductor-Co-Ltd-LM2596HVS-3-3_C347444.html|LM2596HVS-3.3]]
  * [[https://lcsc.com/product-detail/CAN-ICs_Texas-Instruments-SN65HVD230D_C1543812.html|SN65HVD230D]]
  * [[https://lcsc.com/product-detail/Bipolar-Transistors-BJT_IDCHIP-MMBT5551_C2848184.html|bjt npn]]
  * [[https://lcsc.com/product-detail/Bipolar-Transistors-BJT_IDCHIP-MMBT5401_C2848185.html|bjt pnp]]
  * resistenze R1210
  * condensatori C1210
  * [[https://lcsc.com/product-detail/Schottky-Barrier-Diodes-SBD_ROHM-Semicon-RB160SS-40T2R_C507494.html|diode schottky]]
===== turbo levo =====


{{:tips:levocanbus.jpg?400|battery and motor connections }}

{{ :tips:rosenbergcolors.png |}}

{{drawio>namespace:resenberg}}

  * il bms viene attivato da una tensione di controllo di 5v sul cavo marrone
  * a bms attivo compare 12v sul cavo arancione
  * il caricabatterie viene attivato da NTC sul pin ?
  * I dati sono fondamentalmente "little endian", cioè a1 fe ff ff è 0xFFFFFEA1.
  * Corrente, tensione e i valori di capacità sono per lo più "volte 1000"

combinazione non funzionante scheda massimo: motore 5.0.4, bms 2.23.1


====== Pican2 ======

  * [[http://skpang.co.uk/catalog/images/raspberrypi/pi_2/PICAN2UG13.pdf|manual]]


turbo levo: 250khz canbus
<code>
sudo ip link set can0 up type can bitrate 250000
</code>

or
<file txt /etc/network/interfaces>
auto can0
  iface can0 inet manual
  pre-up /sbin/ip link set can0 type can bitrate 250000
  up /sbin/ifconfig can0 up
  down /sbin/ifconfig can0 down
</file>


<code>
cansniffer can0 -c -t 0
</code>

<code>
0.000000  100  03 22 02 06 00 00 00 00 ."......
0.000000  101  05 62 02 06 F5 08 FA B2 .b......
0.000000  200  60 00 14 DA 05 00 00 00 `.......
0.000000  201  00 00 00 00 62          ....b
0.000000  202  DA 16 00 00 74 80 03 00 ....t...
0.000000  203  00 00 00 00 00 00 0B 00 ........
0.000000  204  00 00 00 00 00 00 00 00 ........
0.000000  300  03 5A 0B 5A 28 00 64    .Z.Z(.d.
0.000000  400  01 00 0C 00             ....
0.500217  401  FA A0 00 00 00 00 00 00 ........
0.000000  402  60 00 00 00 14 DA 05 00 `.......
0.000000  403  5C 00 00 00 D4 0D 06 00 \.......
0.126410  450  09 01                   ..
0.149914  451  09 01 00 00 64          ....d  
0.000000  454  03 5A 0B 5A 28 00 64    .Z.Z(.d
0.000000  665  00 00 00 00 53 17 53 00 ....S.S.
0.000000  666  52 07 01 01 52 01 62 26 R...R.b&
</code>

senza assistenza non funzionante
<code>
0.000092  200  5D 00 CC AC 05 00 01 00 ].......
0.000000  201  00 00 00 00 62          ....b
0.000000  202  DA 13 00 00 6A D9 03 00 ....j...
0.000000  203  00 00 00 00 00 00 0A 00 ........
0.000000  204  00 00 00 00 00 00 00 00 ........
0.000000  300  03 5A 0B 5A 23 00 23    .Z.Z#.#
0.000000  400  01 00 0C 00             ....
0.000000  401  CA A0 00 00 00 00 00 00 ........
0.000000  402  5D 00 00 00 CC AC 05 00 ].......
0.000000  403  5C 00 00 00 D4 0D 06 00 \.......
0.000000  450  10 01                   ..
0.000000  665  00 00 00 00 53 17 53 00 ....S.S.
0.000000  666  52 07 01 01 52 01 62 26 R...R.b&
</code>

filtrare i messaggi con id 300 (il 777 è una netmask)
<code>
candump can0,300:777
</code>

record traffic
<code>
candump -l can0
</code>

analyze
<code>
log2asc -I candump-2021-03-17_135219.log can0
</code>

====== canbus turbo levo ======

livelli di assistenza dal più basso
<code>
300  03 5A 0B 5A 23 00 23
300  03 5A 0B 5A 28 00 64
300  03 5A 0B 5A 64 00 64
</code>

===== comandi e notifiche dalla batteria =====

**300** comando assistenza ogni 50ms:
  - la batteria manda un codice: 300#03ww0B5Aaa00pp
    * aa: assistenza (esempio 0x28 che corrisponde a 40 in decimale) 
    * pp: picco (esempio 0x64 che corrisponde a 100 in decimale)
    * ww: walk a A5. Quando non attivo 5A
  - il motore risponde: 454#035A0B5Aaa00pp

**400** ?? ogni 100ms: 400#01 00 0C 00

**401** ?? ogni 100ms: 401#**CA A0** 00 00 00 00 00 00
  * A0CA = 41162mV = **41.162V**

**402** ?? ogni 3s: 402#**5D** 00 00 00 CC AC 05 00 
  * 5D = **93%**
  * 0005ACCC = 371916mWh = **371.916Wh**

**403** capacità massima (divisa per 1.12) ogni 3s: 403#5C 00 00 00 **D4 0D 06 00**
  * 0x00060DD4 = 396756mWh = **396.756Wh**  ---> 396.756*1.12 = **444wH**

===== ??? =====

  * 100#300000 solo 3 volte

ogni 50ms un messaggio 450
  * 450#0601
  * 450#0801
  * 450#0901
  * 450#1001


solo una volta
  * 100#0322020200000000 
  * 100#0322020300000000
  * 100#0322020400000000
  * 100#0322020700000000
  * 100#0322020600000000

solo una volta
  * 101#101B620202433937
  * 101#213237322D313030
  * 101#223230313230382D
  * 101#23332D3531373700
  * 101#1017620203393833
  * 101#2137303130323033
  * 101#2231323230333031
  * 101#23343631BFA60001
  * 101#1017620204575342
  * 101#2143363031313135
  * 101#223531334E000000
  * 101#23000000BFA60001
  * 101#05620207B80BFAB2
  * 101#05620206F508FAB2
===== notifiche dal motore =====

  * **454** stato assistenza ogni 50ms: 454#03ww0B5Aaa00pp
    * 454#035A0B5A**1E**000A pulsante -
    * 454#03**A5**0B5A**1E**0023 walk
    * 454#035A0B5A**1E**0023 eco
    * 454#035A0B5A**28**000A pulsante -
    * 454#035A0B5A**28**000E pulsante +
    * 454#035A0B5A**28**005A trail
    * 454#035A0B5A**5F**000E pulsante -
    * 454#035A0B5A**5F**0021 ???
    * 454#035A0B5A**5F**0064 turbo
    * 454#035A0BA5**5F**0064 ???


  * 451#0601000023     ogni 500ms: 451#06010000ee eco medio
  * 451#0801000028     ogni 500ms: 451#08010000rr trail medio
  * 451#0901000064     ogni 500ms: 451#09010000tt turbo medio
  * 451#10010000236464 ogni 500ms: 451#10010000EERRTT valori di picco


  * 200#640000000000xx80 ogni 3000ms: xx=00,01,02
  * 201#xxyy00000062 ogni 100ms velocità yy*256+xx
  * 202#DA0C000011E00300 ogni 1000ms
  * 203#000000000000FF0F ogni 100ms
  * 204#0000000008000000 ogni 1000ms
  * 450#1001 ogni 500ms 
  * 665#0000000053175300 ogni 3000ms
  * 666#5207010152016226 ogni 3000ms


===== boot =====

<code>
(1617469247.937764) can0 300#035A0B5A5F0064 ripetuto ogni 50ms
... 1500ms
(1617469249.435393) can0 451#10010000235A64
(1617469249.440476) can0 300#035A0B5A5F0064
(1617469249.484886) can0 451#060100001E
(1617469249.490226) can0 300#035A0B5A5F0064
(1617469249.534973) can0 451#0801000028
(1617469249.539717) can0 300#035A0B5A5F0064
(1617469249.586432) can0 451#090100005F
(1617469249.592035) can0 300#035A0B5A5F0064
(1617469249.593631) can0 454#035A0B5A5F0064
</code>

===== cambio assistenza =====

cambio da eco a trail
<code>
(1617469276.343015) can0 300#035A0B5A1E0023 eco
(1617469276.343445) can0 454#035A0B5A1E0023 eco
(1617469276.343725) can0 450#1001
(1617469276.390647) can0 451#10010000235A64
(1617469276.390948) can0 450#0601
(1617469276.393315) can0 454#035A0B5A1E0023
(1617469276.394615) can0 402#1E000000E4C80100
(1617469276.402787) can0 201#F000980862
(1617469276.415188) can0 203#3104C01827000400
(1617469276.439159) can0 451#060100001E
(1617469276.439468) can0 450#0801
(1617469276.443232) can0 400#01002C00
(1617469276.443671) can0 454#035A0B5A28000E push button + to trail
(1617469276.444935) can0 300#035A0B5A1E0023 change not seen by battery
(1617469276.489558) can0 451#0801000028
(1617469276.489863) can0 450#0901
(1617469276.493218) can0 401#688B000061100000
(1617469276.493657) can0 454#035A0B5A28000E push button + to trail
(1617469276.495070) can0 300#035A0B5A1E0023 change not seen by battery
(1617469276.505281) can0 201#F000A20362
(1617469276.517696) can0 203#6C04008F10000400
(1617469276.530005) can0 204#0000000000000000
(1617469276.539479) can0 451#090100005F
(1617469276.542272) can0 202#DA0E0000CE240500
(1617469276.543320) can0 454#035A0B5A28000E push button + to trail
(1617469276.543680) can0 400#01002C00
(1617469276.545379) can0 300#035A0B5A28000E change understood by battery
(1617469276.592594) can0 401#258B0000AB100000
(1617469276.593319) can0 454#035A0B5A28000E push button + to trail
(1617469276.594156) can0 300#035A0B5A28005A change confirmed by battery to trail
(1617469276.607799) can0 201#F0000C0862
(1617469276.620174) can0 203#9004700818000400
(1617469276.642031) can0 400#01002C00
(1617469276.643320) can0 454#035A0B5A28005A motor is in trail mode
(1617469276.643764) can0 300#035A0B5A28005A
</code>


usando la pulsantiera da manubrio da 035A0B5A230023 passiamo a 035A0B5A280064 e poi ancora a 035A0B5A230023

<code>
da eco 230023 a trail 280064
(1616856882.433107) can0 454#035A0B5A230023
(1616856882.451847) can0 300#035A0B5A230023
(1616856882.483108) can0 454#035A0B5A280023 ........280023
(1616856882.501262) can0 300#035A0B5A230023
(1616856882.533102) can0 454#035A0B5A280023
(1616856882.551567) can0 300#035A0B5A280023 ........280023
(1616856882.583099) can0 454#035A0B5A280023
(1616856882.602087) can0 300#035A0B5A280064 ........280064
(1616856882.633096) can0 454#035A0B5A280064 ........280064

(1616856883.453047) can0 300#035A0B5A280064 si ripete
(1616856883.483098) can0 454#035A0B5A280064
...

da trail 280064 a turbo 640064
(1616856883.583094) can0 454#035A0B5A64000E ........64000E
(1616856883.601562) can0 300#035A0B5A280064
(1616856883.633099) can0 454#035A0B5A64000E
(1616856883.651660) can0 300#035A0B5A64000E ........64000E
(1616856883.683099) can0 454#035A0B5A64000E
(1616856883.701612) can0 300#035A0B5A640064 ........640064
(1616856883.733098) can0 454#035A0B5A640064 ........640064

(1616856883.752432) can0 300#035A0B5A640064si ripete
(1616856883.783101) can0 454#035A0B5A640064
...

da turbo 640064 a trail 280064
(1616856884.983095) can0 454#035A0B5A28000C ........28000C
(1616856885.003758) can0 300#035A0B5A28000C ........28000C
(1616856885.033091) can0 454#035A0B5A28000C
(1616856885.054984) can0 300#035A0B5A280064 ............64
(1616856885.083091) can0 454#035A0B5A280064 ............64

(1616856885.103894) can0 300#035A0B5A280064 si ripete
(1616856885.133090) can0 454#035A0B5A280064
...

da trail a eco
(1616856886.183087) can0 454#035A0B5A23000C ........23000C
(1616856886.203557) can0 300#035A0B5A280064
(1616856886.233082) can0 454#035A0B5A23000C

(1616856886.253126) can0 300#035A0B5A23000C ........23000C
(1616856886.283088) can0 454#035A0B5A23000C

(1616856886.302297) can0 300#035A0B5A230023 ........230023
(1616856886.333089) can0 454#035A0B5A230023 ........230023
...
</code>

usando la pulsantiera da batteria il messaggio di cambio è il 0x300

===== walk button =====

  * 454#03**A5**0B5A1E0023 walk button in eco mode


<code>
... bla bla
(1616830448.882233) can0 **454**#035A0B5A230023 walk button not pressed
(1616830448.925175) can0 400#01000C00
(1616830448.926888) can0 **300**#035A0B5A230023

(1616830448.932194) can0 **454**#03**A5**0B5A230023 walk button from motor first press

(1616830448.932795) can0 201#0000000062
(1616830448.944892) can0 203#0000000000000B00
(1616830448.975620) can0 401#6BA1000000000000
(1616830448.977216) can0 **300**#035A0B5A230023 battery does not receive the button...
(1616830448.982189) can0 454#03A50B5A230023
(1616830449.025394) can0 400#01000C00
(1616830449.027363) can0 **300**#03**A5**0B5A230023 ...battery receive button signal and emit ack A5
(1616830449.032194) can0 **454**#03**A5**0B5A230023 walk button pressed
(1616830449.032790) can0 201#0000000062
(1616830449.044926) can0 203#0000000000000B00
(1616830449.075404) can0 401#6BA1000000000000
(1616830449.076995) can0 **300**#03**A5**0B5A230023 battery receive button signal and emit ack A5
(1616830449.082191) can0 454#03A50B5A230023
(1616830449.082471) can0 450#1001
(1616830449.124302) can0 451#10010000236464
(1616830449.124598) can0 450#0601
(1616830449.127063) can0 400#01000C00
(1616830449.129049) can0 300#03A50B5A230023
(1616830449.132188) can0 454#03A50B5A230023
(1616830449.134761) can0 201#0000000063
(1616830449.147178) can0 203#0000000000000B00
....

(1616830448.826973) can0 300#035A0B5A230023
(1616830448.832199) can0 **454**#03**5A**0B5A230023 button non pressed (5A)
(1616830448.832787) can0 201#0000000062
(1616830448.844919) can0 203#0000000000000B00
(1616830448.874624) can0 403#5C000000D40D0600
(1616830448.882233) can0 454#035A0B5A230023
(1616830448.925175) can0 400#01000C00
(1616830448.926888) can0 **300**#03**5A**0B5A230023 battery changes from A5 to 5A to stop walk

</code>
====== Batterie litio ======

  * Sanyo NCR18650GA 3350mAh - 10A
  * best price https://eu.nkon.nl/eve-inr18650-33v-3100mah-10a.html


{{:tips:ncr18650gavsncr18650bnzury.png?400|}}


===== Bluetooth =====

**bluetooth snooping** it was recommended to first turn bluetooth off, enable snooping (develop menu), enable bluetooth, do tests, disable bluetooth, disable snooping; exactly in this order

<code>
adb bugreport bugreport.zip
# unzip FS/data/misc/bluetooth/logs/
</code>

<code>
DC:9E:23:1F:92:96 RSSI: -51 AdvertisementData(local_name='SPECIALIZED', manufacturer_data={525: b'\x02]\x03\x00\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, service_uuids=['00001816-0000-1000-8000-00805f9b34fb'])
scanner stop
[Service] 00001801-0000-1000-8000-00805f9b34fb (Handle: 8): Generic Attribute Profile
[Service] 0000180a-0000-1000-8000-00805f9b34fb (Handle: 9): Device Information
	[Characteristic] 00002a29-0000-1000-8000-00805f9b34fb (Handle: 10): Manufacturer Name String (read), Value: b'SPECIALIZED' ''
	[Characteristic] 00002a28-0000-1000-8000-00805f9b34fb (Handle: 12): Software Revision String (read), Value: b'V1.7.0' ''
[Service] 00001816-0000-1000-8000-00805f9b34fb (Handle: 14): Cycling Speed and Cadence
	[Characteristic] 00002a5b-0000-1000-8000-00805f9b34fb (Handle: 15): CSC Measurement (notify), Value: None
		[Descriptor] 00002902-0000-1000-8000-00805f9b34fb (Handle: 17): Client Characteristic Configuration) | Value: b'\x00\x00' ''
	[Characteristic] 00002a5c-0000-1000-8000-00805f9b34fb (Handle: 18): CSC Feature (read), Value: b'\x03\x00' ''
	[Characteristic] 00002a55-0000-1000-8000-00805f9b34fb (Handle: 20): SC Control Point (write,indicate), Value: None
		[Descriptor] 00002902-0000-1000-8000-00805f9b34fb (Handle: 22): Client Characteristic Configuration) | Value: b'\x00\x00' ''
[Service] 00000001-0000-4b49-4e4f-525441474947 (Handle: 23): SDP
	[Characteristic] 00000011-0000-4b49-4e4f-525441474947 (Handle: 24): HIDP (read), Value: b'\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff' ''
	[Characteristic] 00000021-0000-4b49-4e4f-525441474947 (Handle: 26): Unknown (write), Value: None
[Service] 00000002-0000-4b49-4e4f-525441474947 (Handle: 28): Unknown
	[Characteristic] 00000012-0000-4b49-4e4f-525441474947 (Handle: 29): Hardcopy Control Channel (write), Value: None
[Service] 00000003-0000-4b49-4e4f-525441474947 (Handle: 31): RFCOMM
	[Characteristic] 00000013-0000-4b49-4e4f-525441474947 (Handle: 32): Unknown (read,notify), Value: b'\x01\x10$\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff' ''
		[Descriptor] 00002902-0000-1000-8000-00805f9b34fb (Handle: 34): Client Characteristic Configuration) | Value: b'\x00\x00' ''
(venv)
</code>

serial:
  * [Service UUID: 0000000100004b494e4f525441474947]
  * [UUID: 0000001100004b494e4f525441474947]  00000011-0000-4b49-4e4f-525441474947
  * Value: 0210575342433630313131353531334e000000ff
  * 0000   02 01 22 19 00 15 00 04 00 0b 02 10 57 53 42 43   ..".........WSBC
  * 0010   36 30 31 31 31 35 35 31 33 4e 00 00 00 ff         601115513N....

[UUID: 0000001300004b494e4f525441474947]  Handle: 0x0021
  * **00:01**:BB:AA:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff  da 302 a 312
  * **00:03**:1d:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff  da 24 a 30
  * **00:05**:XX:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff   XX progressivo
  * **00:06**:4e:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff  da 0 a 103
  * **00:0c**:BB:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff   BB SOC **state of charge**
  * **01:00**:XX:00:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff   XX da 0 a 196 
  * **01:01**:XX:02:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff da 00 a 255
  * **01:02**:6c:00:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff da 0 a 65281
  * **01:04**:f0:6f:07:00:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff progressivo
  * **01:05**:XX:00:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff da 1 a 3
  * **01:07**:XX:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff da 27 a 51
  * **01:10**:XX:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff XX=0x67,0x24,0x5c
  * **01:0c**:LL:HH:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff da 0 a 65510
  * **02:0b**:20:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff unico valore 32



{{:tips:levo-advertising.jpg?400|}}
  
{{:tips:levo-blue1.jpg?400|}} 
  
{{:tips:levo-blue2.jpg?400|}}