ECM700 Power Meter

MODBUS Serial Communications Protocol

V6.5

E-POWER TECHNOLOGY LTD.

www.e-powertech.ca
 CONTENTS

1. Introduction.........................................................................................................................................3
1.1 Purpose of the Communication Protocol ....................................................................................3
1.2 Version of Communication Protocol ...........................................................................................3
2. Detailed Description of the ECM700 Modbus Protocol...................................................................3
2.1. ECM700 Modbus Protocol Rules ..............................................................................................3
2.2. Modes of Transmission ..............................................................................................................3
2.3. Description of the Modbus Packet Structure..............................................................................3
2.3.1. Address Field...........................................................................................................................4
2.3.2. Function Field .........................................................................................................................4
2.3.3. Data Field................................................................................................................................4
2.3.4. Error Check Field....................................................................................................................4
2.4. Network Timing Considerations ................................................................................................4
2.5. Exception Responses..................................................................................................................5
2.6. Broadcast Packets ......................................................................................................................5
3. Packet Communication.......................................................................................................................6
3.1 Relay Control (Function Code 05) ..............................................................................................6
3.2. Read Holding Registers (Function Code 03) .............................................................................6
3.3. Preset Multiple Registers (Function code 16) ............................................................................7
4. Calculating the CRC-16 Error Check Field .....................................................................................7
4.1. Steps for the Generating the CRC-16 Checksum:......................................................................7
4.2. Procedure for Calculating the 6403 Bytes of 16 Hex.................................................................8
5. Description of ECM700 Registers......................................................................................................9
Appendix: ECM700 Modbus Registers List .........................................................................................9
F1: Real-time Data Registers List .....................................................................................................9
F2: Harmonic Register List.............................................................................................................12
F3: Setpoints ...................................................................................................................................15
F4: TOU Register List.....................................................................................................................18
F5: SOE Register List .....................................................................................................................19
F6: Demand Register List ...............................................................................................................20
F7: System Setup ............................................................................................................................20
F8: Analog Import...........................................................................................................................21
F9: Analog Export (Optional AO function: one loop analog) ......................................................21
F10: Analog Export ( Optional E module: two loop analog) ..........................................................22
F11: Pulse Export............................................................................................................................22

ECM700 MODBUS Serial Communications Protocol 2

1. Introduction
This document describes input and output command, communication, data of ECM700 under MODBUS
module. So it is convenient for 3rd part using and developing.

1.1 Purpose of the Communication Protocol

The purpose of the ECM700 MODBUS communications protocol is to allow setup information and
measured data to be efficiently transferred between a MODBUS Master Station and a ECM700. It includes:
1) Allowing setting and reading all ECM700 set-up parameters from a MODBUS Master Station.
2) Allowing reading all data measured by a ECM700 and SOE (Event log).

1.2 Version of Communication Protocol

This document is proper for all versions of ECM700 meters. If any change happens later, it will be declared.

2. Detailed Description of the ECM700 Modbus Protocol

2.1. ECM700 Modbus Protocol Rules
The following rules define the protocol rules for information transfer between a MODBUS Master device
and the ECM700 in a RS-485 serial communications loop.
1) All communications on the RS-485 loop conforms to a MASTER/SLAVE scheme. In this scheme,
information and data is transferred between a MODBUS MASTER device and up to 32 SLAVE monitoring
devices.
2) The MASTER will initiate and control all information transfer on the RS-485 communications loop.
3) Under no circumstances will a SLAVE device initiate a communications sequence.
4) All communications activity on the RS-485 loop occurs in the form of "PACKETS", a packet being
simply a serial string of 8-bit bytes. The maximum number of bytes contained within one packet is 128. The
bytes that comprise a packet consist of standard asynchronous serial data, which are generated using
equipment similar to that used for RS-232C.
5) The packages from MASTER are named request. The packages from SLAVE are named response.
6) Under any circumstance, Slave can just respond one request.

2.2. Modes of Transmission

MODBUS protocol supports ASCII and RTU modes of transmissions. The ECM700 supports only the RTU
mode of transmission with 8 data bits, no parity, and one stop bit.

2.3. Description of the Modbus Packet Structure

Every MODBUS packet consists of four fields:
1) The Address Field
2) The Function Field
3) The Data Field
4) The Error Check field

ECM700 MODBUS Serial Communications Protocol 3

2.3.1. Address Field
The address field is 1-byte long and identifies which slave device the packet is for. Valid addresses range
between 1 and 247. The slave device whose address matches the value in this field will perform the
command specified in the packet.

2.3.2. Function Field

The function field is 1-byte long and tells the addressed salve which function to perform. Slave response
packet should include same function field byte as request. The Modbus functions supported by ECM700 are
listed as below:
Function Code Meaning Action
0x03 Read Holding Obtains the current value in one or more holding
Registers registers of the ECM700.
0x10 Preset Multiple Places specific binary values into a series of consecutive
Registers holding registers of the ECM700.

0x05 Relay control Control the relay of ECM700

2.3.3. Data Field

The length of data Field is varies in length depending on its function. In general, MODBUS supports “BIG
INDIAN” mode, it means high-order byte first, low-order byte second.
For example,
One 16 byte register value is 0x12AB; register is transmitted in below sequence:
High-order byte = 0x12
Low-order byte = 0x0AB

2.3.4. Error Check Field

In Modbus RTU mode, the 16-bit Cyclic Redundancy Check (CRC-16) is used. The sending device
calculates a 16-bit value, based on the information stored in the address, function and data fields using the
CRC-16 algorithm and appends it to the end of the packet. The receiving device performs the same
calculation upon the reception of a packet. If the result does not match the checksum stored in the packet,
transmission errors have occurred and the packet will be ignored by the receiving device.
For detail of CRC16 parity arithmetic, please refer to the appendix.

2.4. Network Timing Considerations

Network timing for the transfer of packets between units on the RS-485 loop must conform to the following
rules:
1) The time between the end of a MASTER STATION message request packet and the beginning of a
SLAVE STATION response packet is packet size dependent.
Minimum = 20ms
Maximum = 250ms
Typical = 60ms

2) Under the16-bit mode, the time between the end of a SLAVE STATION response packet and the

ECM700 MODBUS Serial Communications Protocol 4

beginning of the next MASTER STATION message packet is typically 100ms. Under the 32-bit mode, the
time is typically 500 ms.
3) The maximum time between any two data bytes within a packet is baudrate dependent.
T byte max = 3-byte times (3 ms at 9600 baud, 6 ms at 4800 baud, etc.).

2.5. Exception Responses

If a Modbus master device sends a noneffective command to a ECM700 or attempts to read a noneffective
holding register, an exception response will be generated. The exception response consists of the slave
address, function code, error code, and error check field. The high order bit of the function code is set to 1 to
indicate that the packet is an exception response.
Below list describes the meanings of exception codes:
Error Code Meaning
01H A noneffective command is contained in the function field of the request packet.
02H The address referenced in the data field is an invalid address. Or number of bytes contained
within one packet is over 128.
03H Register address of data requested isn’t first address of an integrative structure.
04H Register address of SOE requested isn’t first address of an integrative structure.
05H Operate relay is error.
06H Write password is error.
07H Inside memory is error.

2.6. Broadcast Packets

The ECM700 support broadcast commands when communicating in MODBUS mode.

ECM700 MODBUS Serial Communications Protocol 5

3. Packet Communication
Three MODBUS functions are supported by the ECM700. The standard MODBUS protocol supports only
16-bit registers, which limit the maximum value of any measurement to 65535.
Section 3.1 will describe relay control command. Section 3.2 will describe the format of Read Holding
Registers packet and Response Packet of the ECM700. Section 3.3 will describe Preset Multiple Registers
packet and the acknowledge packet issued by the ECM700.

3.1 Relay Control (Function Code 05)

The following message specifies the relay reference to be forced. Relays are addressed starting at 0: relay 1
is addressed as 0
The requested ON/OFF state is specified by a constant in the data field. A value of FF 00 hex requests the
relay to be ON. A value of 00 00 requests it to be OFF. All other values are illegal and will not affect the
relay.

Request Packet Response Packet

（Master→ECM700 ） （ECM700→Master）
Unit ID/ Slave address 1 byte Unit ID/ Slave address 1 byte
05H (Function Code) 1 byte 05H (Function Code) 1 byte
Relay address 2 bytes Relay address 2 bytes
Control command 2 bytes Control command 2 bytes
CRC check code 2 bytes CRC check code 2 bytes

3.2. Read Holding Registers (Function Code 03)

This command packet requests that the ECM700 responds all valid registers. The value of reserved registers
is 0.
Request Packet Response Packet
(Master→ECM700) (ECM700→Master)

Unit ID/ Slave address 1 byte Unit ID/ Slave address 1 byte
03 H (Function Code) 1 byte 03 H (Function Code) 1 byte
Start register address 2 bytes Byte Count (2 * quantity of 1 byte
registers)
Quantity of registers 2 bytes First register data 2 bytes
CRC check code 2 bytes Second register data 2 bytes
... ...
CRC check code 2 bytes

ECM700 MODBUS Serial Communications Protocol 6

3.3. Preset Multiple Registers (Function code 16)
This command packet allows the MODBUS master to program the ECM700 setup parameters.
Preset Registers Format Response Format
（Master→ECM700） （ECM700→Master）
Unit ID/ Slave address 1 byte Unit ID/ Slave address 1 byte
10 H (Function Code) 1 byte 10 H(Function Code) 1 byte
Start register address 2 bytes Start register address 2 bytes
Quantity of registers 2 bytes Quantity of registers 2 bytes
Byte Count (2 * quantity 1 byte CRC check code 2 bytes
of registers)
First register data 2 bytes
Second register data 2 bytes
...
CRC check code 2 bytes

4. Calculating the CRC-16 Error Check Field

This section describes the procedure for obtaining the CRC-16 error check field. A packet can be considered
as a continuous, serial stream of binary data (0, 1). The 16-bit checksum is obtained by multiplying the serial
data stream by 216 (10000000000000000) and then dividing it by the generator polynomial x16+x15+x2+1,
which can be expressed as a binary data 11000000000000101. The quotient is ignored and the 16-bit
remainder is the checksum and is appended to end of the packet. The receiving device performs the same
operation on the entire packet including the checksum. The packet, when divided by the generator
polynomial, should give a zero remainder if no transmission errors have occurred. In calculating the CRC,
all arithmetic operations (additions and subtractions) are performed using MODULO TWO, or
EXCLUSIVE OR operation. Figure 4.1 provides a step by step example to show how to obtain the
checksum for a packet requesting one holding register at location 10 (Van of the ECM700) from a slave with
address 100 (64 Hex).

4.1. Steps for the Generating the CRC-16 Checksum:

1) Form a new polynomial by dropping the MSB (Most Significant Bit) of the generator polynomial and
reversing the bit sequence. This yields the binary number 1010 0000 0000 0001 or A0 01 Hex.
2) Load a 16-bit register with initial value FF FF Hex.
3) Exclusive OR the first data byte with the loworder byte of the 16-bit register, storing the result in the
16-bit register.
4) Shift the 16-bit register one bit to the right.
5a) If the bit shifted out to the right is one, Exclusive OR the 16-bit register with the new generator
polynomial, with result stored in the16-bit register. Return to step 4.
5b) If the bit shifted out to the right is zero, return to step 4.
6) Repeat steps 4 and 5 until 8 shifts have been performed.
7) Exclusive OR the next data byte with the 16-bit register.
8) Repeat steps 4 through 7 until all bytes of the packet have been Exclusive ORed with the 16-bit register

ECM700 MODBUS Serial Communications Protocol 7

and shifted 8 times.
9) The content of the 16-bit register is the checksum and is appended to the end of the packet.

4.2. Procedure for Calculating the 6403 Bytes of 16 Hex.

Step Byte Action Register Bit# Shift

2 Initial Value 1111 1111 1111 1111
1 Load the first byte 0000 0000 0110 0100
3 XOR 1111 1111 1001 1011
4 SHIFT 1 bit to the right 0111 1111 1100 1101 1 1
5a XOR polynomial 1101 1111 1100 1100
4 SHIFT 1 bit to the right 0110 1111 1110 0110 2 0
4 SHIFT 1 bit to the right 0011 0111 1111 0011 3 0
4 SHIFT 1 bit to the right 0001 1011 1111 1001 4 1
5a XOR polynomial 1011 1011 1111 1000
4 SHIFT 1 bit to the right 0101 1101 1111 1100 5 0
4 SHIFT 1 bit to the right 0010 1110 1111 1110 6 0
4 SHIFT 1 bit to the right 0001 0111 0111 1111 7 0
4 SHIFT 1 bit to the right 0000 1011 1011 1111 8 1
5a SHIFT 1 bit to the right 1010 1011 1011 1110
2 Load the second byte 0000 0000 0000 0011
7 XOR 1010 1011 1011 1101
4 SHIFT 1 bit to the right 0101 0101 1101 1110 1 1
5a XOR polynomial 1111 0101 1101 1111
4 SHIFT 1 bit to the right 0111 1010 1110 1111 2 1
5a XOR polynomial 1101 1010 1110 1110
4 SHIFT 1 bit to the right 0110 1101 0111 0111 3 0
4 SHIFT 1 bit to the right 0011 0110 1011 1011 4 1
5a XOR polynomial 1001 0110 1011 1010
4 SHIFT 1 bit to the right 0100 1011 0101 1101 5 0
4 SHIFT 1 bit to the right 0010 0101 1010 1110 6 1
5a XOR polynomial 1000 0101 1010 1111
4 SHIFT 1 bit to the right 0100 0010 1101 0111 7 1
5a XOR polynomial 1110 0010 1101 0110
4 SHIFT 1 bit to the right 0111 0001 0110 1011 8 0
CRC-16 0111 0001 0110 1011

ECM700 MODBUS Serial Communications Protocol 8

5. Description of ECM700 Registers
All ECM700 measured and setup parameters are treated as HOLDING REGISTERS having addresses
4xxxx when communicating in MODBUS protocol. According to the MODBUS Protocol, in response to a
request for register 4xxxx of a particular slave device (ECM700), the MODBUS master reads register
xxxx-1 from the slave (ECM700). For example register 40011 corresponds to register 10.

Appendix: ECM700 Modbus Registers List

F1: Real-time Data Registers List
Register
Reg. Type Description Note
Address
40001 RO Va
40002 RO Vb
40003 RO Vc
40004 RO Reserved Reserved for neutral voltage
40005 RO Vab
40006 RO Vbc
40007 RO Vca
40008 RO Reserved Reserved for voltage unbalance rate
40009 RO Auxiliary Channel Analog Input
40010 RO Ia
40011 RO Ib
40012 RO Ic
40013 RO Reserved Reserve for current unbalance rate
40014 RO Neutral current
40015 RO Watt Phase A (low)
40016 RO Reserved Reserve for Watt (high word)
40017 RO Watt Phase B (low)
40018 RO Reserved
40019 RO Watt Phase C (low)
40020 RO Reserved
40021 RO Watt Total (low)
40022 RO Watt Total (high)
40023 RO Var Phase A (low)
40024 RO Reserved E：Reserved for Var (high word)
40025 RO Var Phase B (low)
40026 RO Reserved
40027 RO Var Phase C (low)

ECM700 MODBUS Serial Communications Protocol 9

 40028 RO Reserved
40029 RO Var Total (low)
40030 RO Var Total (high)
40031 RO VA Phase A (low)
40032 RO Reserved
40033 RO VA Phase B (low)
40034 RO Reserved
40035 RO VA Phase C (low)
40036 RO Reserved
40037 RO VA Total (low)
40038 RO Reserved
40039 RO Phase A Power Factor
40040 RO Phase B Power Factor
40041 RO Phase C Power Factor
40042 RO Total Power Factor
40043 RO Frequency
40044 RO Status input
40045 RO Relay output F：State of extend setpoint
40046 RO SOE counters
40047 RO kWh Import low word
40048 RO kWh Import high
word
40049 RO kWh export low word
40050 RO kWh export high word
40051 RO Reserved
40052 RO Reserved
40053 RO Reserved
40054 RO Reserved
40055 RO kvarh Import low
word
40056 RO kvarh import high
word
40057 RO kvarh export low
word
40058 RO kvarh export high
word

Note: One time request max. 61 registers.

ECM700 MODBUS Serial Communications Protocol 10

1. Voltage
In voltage registers, ECM700 uses secondary values, if users need primary values, PTs coefficient should be
multiplied. If no PTs, the coefficient is 1.
Voltage value is expressed as unsigned 16-bit with 2 decimal places. Unit is Volt. For example, if voltage
value is 12345(0x3039H), the real value is 123.45V.

2. Current
In current registers, ECM700 uses secondary values, if users need primary values, CTs coefficient should be
multiplied. If no CTs, the coefficient is 1.
Current value is expressed as 16-bit unsigned, with 3 decimal places. Unit is Amp. For example, if current
value is 12345(0x3039H), the real value is 123.45A.

3. Voltage unbalance rate

Voltage unbalance rate = max voltage deviation from the avg voltage ÷ avg voltage × 100%.
The value is a percent. It is expressed with 16-bit unsigned data. For example, the data is 12(0x0CH), it
means that the voltage unbalance rate is 12%.

4. Current unbalance rate

The calculation and definition of current unbalance rate are the same with voltage unbalance rate.

5. Active power and reactive power

Active and reactive powers of ECM700 all use secondary value. If users need to obtain real primary value,
CTs and PTs coefficients should be multiplied. If no PTs or CTs, the coefficient is 1.
3 phase active and reactive powers are expressed as 32-bit signed value (single phase active and reactive
power are expressed as 16-bit signed value). And they adopt complement code according to the following
table:
D31 D30 – D0
Sign bit Data bits
When the sign bit is 0, the value is positive. When the sign is 1, the value is negative. The values include 1
decimal point bit. Their units are Watt and var.
For example, the 3 phase active power 12345(0x00003039H) means 1234.5W, the reactive power
–12345(FxFFFFCFC7) means –1234.5 var.

6. Apparent power
Apparent power of ECM700 uses secondary value. If users need to obtain real primary value, CTs and PTs
coefficients should be multiplied. If no PTs or CTs, the coefficient is 1.
Apparent power is 32-bit unsigned value with 1 decimal point. The unit is VA. For example, the apparent
power 12345(0x00003039H) means real value 1234.5VA.

7. Power factor
Power factor is expressed as16-bit signed value, with 3 decimal point bits and complement code. When the
value is positive, power angle is leading. When the value is negative, power angle is logging.
D15 D14 – D0
Sign bit Data bits

ECM700 MODBUS Serial Communications Protocol 11

For example, power factor 123(0x007BH) means 0.123(leading).

8. Frequency
Frequency is expressed as 16-bit unsigned value, with 2 decimal point bits. The unit is HZ. For example,
frequency 1234(04D2H) means real value 12.34HZ.

9. Status input
D15 – D8 D7 D6 D5 D4 D3 D2 D1 D0
RESERVE S8 S7 S6 S5 S4 S3 S2 S1
For reserve bits, the value is 0. When one status input is closed, the corresponding status bit is 1, or else is 0.
For some types of ECM700, maybe status input function isn’t provided; then the bits are always 0.

10. The state of the relays and the setpoints

D15 D14 D13 D12 D11 D10 D9 D8 D7 D6 D5 D4 D3 D2 D1 D0
SP10 SP9 SP8 SP7 SP6 SP5 SP4 SP3 SP2 SP1 RL6 RL5 RL4 RL3 RL2 RL1
SPx means the state of setpoints. If one setpoints is active, the corresponding SPX is 1, or else is 0. RLx
means the state of relay. If one relay is closed, the corresponding RLx is 1, or else is 0. The front 4 bits are
logic setpoints, the latter 6 bits are analog setpoints. When setpoints is inactive, the corresponding bit is 0.

11. SOE Events recorder

The recorder records events of ECM700, and it can be used for events retrieval location because ECM700
only provide 100 time records. Please see SOE registers for details.

12. Energy
Energy data of ECM700 is primary value. It uses 32-bit unsigned data, and the max value is 99,999,999.9.
Because of directions of active energy and reactive energy, so define four type data include: import, export,
total and net value. For apparent energy, just total value is offered. The units are kWh, kvarh, and kVAh.
For example, Energy value is 12345.6, then high word is 0X0001, Low word is 0xE240.

F2: Harmonic Register List

Register
Reg. Type Description Note
Address
40201 RO 1st harmonic Va
40202 RO 3rd harmonic Va
40203 RO 5th harmonic Va
40204 RO 7h harmonic Va
40205 RO 9th harmonic Va
40206 RO 11th harmonic Va
40207 RO 13th harmonic Va
40208 RO 15th harmonic Va
40209 RO 17th harmonic Va

ECM700 MODBUS Serial Communications Protocol 12

 40210 RO 19th harmonic Va
40211 RO 21th harmonic Va
40212 RO 23th harmonic Va
40213 RO 25th harmonic Va
40214 RO 27th harmonic Va
40215 RO 29th harmonic Va
40216 RO 31th harmonic Va
40301 RO 1st harmonic Vb
40302 RO 3rd harmonic Vb
40303 RO 5th harmonic Vb
40304 RO 7h harmonic Vb
40305 RO 9th harmonic Vb
40306 RO 11th harmonic Vb
40307 RO 13th harmonic Vb
40308 RO 15th harmonic Vb
40309 RO 17th harmonic Vb
40310 RO 19th harmonic Vb
40311 RO 21th harmonic Vb
40312 RO 23th harmonic Vb
40313 RO 25th harmonic Vb
40314 RO 27th harmonic Vb
40315 RO 29th harmonic Vb
40316 RO 31th harmonic Vb
40401 RO 1st harmonic Vc
40402 RO 3rd harmonic Vc
40403 RO 5th harmonic Vc
40404 RO 7h harmonic Vc
40405 RO 9th harmonic Vc
40406 RO 11th harmonic Vc
40407 RO 13th harmonic Vc
40408 RO 15th harmonic Vc
40409 RO 17th harmonic Vc
40410 RO 19th harmonic Vc
40411 RO 21th harmonic Vc
40412 RO 23th harmonic Vc
40413 RO 25th harmonic Vc
40414 RO 27th harmonic Vc
40415 RO 29th harmonic Vc
40416 RO 31th harmonic Vc

ECM700 MODBUS Serial Communications Protocol 13

 40501 RO 1st harmonic Ia
40502 RO 3rd harmonic Ia
40503 RO 5th harmonic Ia
40504 RO 7h harmonic Ia
40505 RO 9th harmonic Ia
40506 RO 11th harmonic Ia
40507 RO 13th harmonic Ia
40508 RO 15th harmonic Ia
40509 RO 17th harmonic Ia
40510 RO 19th harmonic Ia
40511 RO 21th harmonic Ia
40512 RO 23th harmonic Ia
40513 RO 25th harmonic Ia
40514 RO 27th harmonic Ia
40515 RO 29th harmonic Ia
40516 RO 31th harmonic Ia
40601 RO 1st harmonic Ib
40602 RO 3rd harmonic Ib
40603 RO 5th harmonic Ib
40604 RO 7h harmonic Ib
40605 RO 9th harmonic Ib
40606 RO 11th harmonic Ib
40607 RO 13th harmonic Ib
40608 RO 15th harmonic Ib
40609 RO 17th harmonic Ib
40610 RO 19th harmonic Ib
40611 RO 21th harmonic Ib
40612 RO 23th harmonic Ib
40613 RO 25th harmonic Ib
40614 RO 27th harmonic Ib
40615 RO 29th harmonic Ib
40616 RO 31th harmonic Ib
40701 RO 1st harmonic Ic
40702 RO 3rd harmonic Ic
40703 RO 5th harmonic Ic
40704 RO 7h harmonic Ic
40705 RO 9th harmonic Ic
40706 RO 11th harmonic Ic
40707 RO 13th harmonic Ic

ECM700 MODBUS Serial Communications Protocol 14

 40708 RO 15th harmonic Ic
40709 RO 17th harmonic Ic
40710 RO 19th harmonic Ic
40711 RO 21th harmonic Ic
40712 RO 23th harmonic Ic
40713 RO 25th harmonic Ic
40714 RO 27th harmonic Ic
40715 RO 29th harmonic Ic
40716 RO 31th harmonic Ic
Harmonic value is expressed as percent. For example, 48(0x0030H) means real value 48%.

F3: Setpoints
Register
Reg. Type Description Note
Address
40801 define special operating
WO Return latched relay
value
40802 RW Relay 1 action pulse width
40803 RW Relay 2 action pulse width
40804 RW Relay 3 action pulse width
40805 RW Relay 4 action pulse width
40806 RW Relay 1 control mode 0: remote control
40807 RW Relay 2 control mode 1: local control

40808 RW Relay 3 control mode

40809 RW Relay 4 control mode
40840-40843 RW 1# setpoints(analog) +0 control mode
40844-40847 RW 2# setpoints(analog) +1 action condition

40848-40851 RW 3# setpoints(analog) +2 action delay

+3 action object
40852-40855 RW 4# setpoints(analog)
40856-40859 RW 5# setpoints(analog)
40860-40863 RW 6# setpoints(analog)
40864-40867 RW 7# setpoints(logic) +0 logic mode
40868-40871 RW 8# setpoints(logic) +1 action condition

40872-40875 RW 9# setpoints(logic) +2 action delay

+3 action object
40876-40879 RW 10# setpoints(logic)

1. Relay control mode

Relay control mode of ECM700 is decided by relay control mode register. When the value is 1, the control
mode is local. When the value is 0, the control mode is remote communications. Remote communications
has prior.

ECM700 MODBUS Serial Communications Protocol 15

Only when the control mode is local, the setpoint can work. Remote mode is superior, and when relay is
operated through remote communications, control mode will be switched into remote mode automatically.
ECM700 can’t switch remote mode into local mode automatically. Users can switch it manually.

2. Relay action pulse width

Relay’s action time is controlled by relay action pulse width register. The time’s unit is second. The range is
0~3000. When the time is 0, the corresponding relay will be always latched until users return it through
panel operation or communications, then release the relay. If the relay is started by setpoints, it also can be
released when the setpoints is not full. The pulse width is effective under local or remote control modes.

3. Return latched relay

The register is WRITE ONLY. Its function is to return latched relay. The write operation for this register is
effective only under local mode.

4. YC setpoints
One setpoints is decided by 4 data, showed as follows:
Control mode register: It is used to set the monitor types and the monitor objects (trigger parameters).
D15 – D12 D11 – D8 D7 – D0
Activation control Monitor types Monitor objects
0x0：Forbidden 0x1：High limit 1：Va
0xA：Active 0x2：Low limit 2：Vb
Others：Invalid Others：Invalid 3：Vc
4：Vab
5：Vbc
6：Vca
7：Ia
8：Ib
9：Ic
10：Neutral current
23：Frequency
26: Neutral Voltage
27：Current unbalance rate
28：Voltage unbalance rate
30：3 phase/neutral voltage meet condition.
31：3 phase-to-phase voltage meet condition.
32：3 current meet condition.
33：Any phase/neutral voltage meets condition.
34：Any phase/phase voltage meets condition.
35：Any current meets condition.
36: Phase A current demand
37: phase B current demand
38: phase C current demand
39: apparent power demand
Others: Invalid

ECM700 MODBUS Serial Communications Protocol 16

Action conditions: After the monitor type is indicated, limit value need to be set. For example, if monitor
type is high limit, and action condition is set to 24000, when monitor object exceeds 240.00, the setpoints is
active.

Action delay time: It defines action object’s delay action time after limit value has been exceeded. In the
period of delay time, if action object returns under limit value, the setpoints is inactive. The time’s unit is
second. The range is 0~255.If the time is set to 0, the action object will act once monitor object exceeds limit
value.

Action objects: It is used to dedicate the action relay. If the value is 0, no relay will act. Every bit expresses
different relay. For example the bit 0 means the relay 1.

5. Logic setpoints
A logic setpoints is defined by 4 data, showed as follows:
Logic mode register: It is used to the set judgment logic and the monitor objects (trigger parameters).
D15 – D12 D11 – D8 D7 – D4 D3 – D0
Logic judgment types Monitor object 3 Monitor object 2 Monitor object 1
0x0：Forbidden The same as logic The same as logic 0x0：No object
0x1：AND object 1 object 1 0x1：S1
0x2：OR 0x2：S2
Others：Invalid 0x3：S3
0x4：S4
0x5：S5
0x6：S6
0x7：S7
0x8：S8
0x9：SP1
0xA：SP2
0xB：SP3
0xC：SP4
0xD：SP7
0xE：SP8
0x0F：Reserved

Action conditions: It is used to define the conditions, which logic objects should meet.
D15 – D12 D11 – D8 D7 – D4 D3 – D0
Reserved The state of logic object 3 The state of logic object 2 The state of logic object 1

Action delay time: It defines action object’s delay action time after limit value has been exceeded. In the
period of delay time, if action object returns under limit value, the setpoints is inactive. The time’s unit is
circle wave. The range is 0~9999.If the time is set to 0, the action object will act once monitor object
exceeds limit value.

ECM700 MODBUS Serial Communications Protocol 17

Action objects: It is used to dedicate the action relay. If the value is 0, no relay will act. Every bit expresses
different relay. For example the bit 0 means the relay 1.

F4: TOU Register List

Register Address Reg. Type Description Note
41001 RW Numbers of period Range: 0-8
of time 0 means no time setup.
41002 RW Start time of 1# Range: 0-47
Time unit is half hour.
41003 RW Tariff of 1# Tariff: 0-3
41004 RW Start time of 2#
41005 RW Tariff of 2#
41006 RW Start time of 3#
41007 RW Tariff of 3#
41008 RW Start time of 4#
41009 RW Tariff of 4#
41010 RW Start time of 5#
41011 RW Tariff of 5#
41012 RW Start time of 6#
41013 RW Tariff of 6#
41014 RW Start time of 7#
41015 RW Tariff of 7#
41016 RW Start time of 8#
41017 RW Tariff of 8#
41018 WO Clear TOU
41019 – 41026 RO 1# TOU structure +0：kWh import low word
41027 -- 41034 RO 2# TOU structure +1：kWh import high word
41035 -- 41042 RO 3# TOU structure +2：kWh export low word
+3：kWh export high word
41043 -- 41050 RO 4# TOU structure
+4：kvarh import low word
+5：kvarh import high word
+6：kvarh export low word
+7：kvarh export high word
41051 -- 41082 Reserved

ECM700 MODBUS Serial Communications Protocol 18

F5: SOE Register List
Register
Reg. Type Description Note
Address
41201 RW UNIX low word
41202 RW UNIX high word
41203 RO 1#SOE first word Low byte indicates event’s type.
0 – 9：Setpoints
10 – 19：Status input
20 – 29： Relay output
High byte indicates event’s state.
0：Inactive or OFF
1：Active or ON
41204 RO 1#SOE second word Millisecond
41205 RO 1#SOE third word UNIX low word
th
41206 RO 1#SOE 4 word UNIX high word
41207 RO 2#SOE first word
41208 RO 2#SOE second word
41209 RO 2#SOE third word
41210 RO 2#SOE 4th word
41211 RO 3#SOE first word
41212 RO 3#SOE second word
41213 RO 3#SOE third word
41214 RO 3#SOE 4th word
…… …… …… ……
41595 RO 99#SOE first word
41596 RO 99#SOE second word
41597 RO 99#SOE third word
41598 RO 99#SOE 4th word
41599 RO 100#SOE first word
41600 RO 100#SOE second word
41601 RO 100#SOE third word
41602 RO 100#SOE 4th word

ECM700 MODBUS Serial Communications Protocol 19

F6: Demand Register List
Changed by 2006_11_25
Register Address Reg. Type Description Note
41800 RO Phase A current demand
41801 RO Phase B current demand
41802 RO Phase C current demand
41803 RO Apparent power demand
41804 RO Active power demand low word
41805 RO Active power demand high word
41806 RO Reactive power demand low word
41807 RO Reactive power demand high word
41808 RO Max. demand for Ia
41809 RO Max. demand for Ib
418010 RO Max. demand for Ic
418011 RO Max. demand for Stot (total apparent
power)
418012 RO Max. demand for Ptot (total active power),
low word
418013 RO Max. demand for Ptot, high word
418014 RO Max. demand for Qtot (total reactive
power),
low word
418015 RO Max. demand for Qtot, high word

F7: System Setup

Register Address Reg. Type Description Note
43002 RW Slave Address 1 -247
43003 RW Baudrate 1 0: 2400bps
43004 RW Baudrate 2 1: 4800bps
2: 9600bps
3: 19200bps
43005 RW PT ratio
43006 RW CT ratio
43007 RW Connect mode 0: 3-phase 4-wire
1: 3-phase 3-wire
43008 RW Password 0 – 9999
43009 WO Clear SOE Password: 720
43010 WO Clear energy
43011 WO Clear Max value
43012 WO Clear setpoints

ECM700 MODBUS Serial Communications Protocol 20

 43013 WO Clear Demand
43014 Reserved
Note: SOE, energy, max value, and setpoints can’t be cleared at the same time. They should be cleared one
by one.
F8: Analog Import
40901 RW 4mA analog value
40902 RW 20mA analog value

F9: Analog Export (Optional AO function: one loop analog)

43031 RW The object of analog 1：Va
2：Vb
3: Vc
4： Ia
5： Ib
6: Ic
7：Watt Phase A
8：Watt Phase B
9: Watt Phase C
10: Watt Total
11：var Phase A
12：var Phase B
13: var Phase C
14: var Total
15：Power Factor A
16：Power Factor B
17: Power Factor C
18: Frequency
43032 RW Value of 20mA analog
43034 RW Value of 4mA analog

ECM700 MODBUS Serial Communications Protocol 21

F10: Analog Export ( Optional E module: two loop analog)
43031 RW The object of analog 1 1：Va
43032 RW The object of analog 2 2：Vb
3: Vc
4： Ia
5： Ib
6: Ic
7：Watt Phase A
8：Watt Phase B
9: Watt Phase C
10: Watt Total
11：var Phase A
12：var Phase B
13: var Phase C
14: var Total
15：Power Factor A
16：Power Factor B
17: Power Factor C
18: Frequency

43033 RW 4mA value of analog 1

43034 RW 4mA value of analog 2

43037 RW 20mA value of analog 1

43038 RW 20mA value of analog 2

F11: Pulse Export

43035 RW Pulse constant of Pulse export 1
43036 RW Pulse constant of Pulse export 2

ECM700 MODBUS Serial Communications Protocol 22