Communication Protoco - V4.2 EN
Communication Protoco - V4.2 EN
Data: 2019-03-01
Version: 4.2
The command frame is the data of the host operation reader, and the format is as shown in the following table.:
Packet Command Device Command Command Command
Length … Checksum
Type Code Number Data Data Data
0xA0 n+3 1 byte 1 byte Byte 1 Byte n-1 Byte n cc
Packet Type is the packet type field, and the command frame packet type is fixed to 0xA0.
Length is the packet length field, indicating the number of bytes in the frame after the Length field.
Device Number is the device number field. When the usercode of the device number is 00, it means group sending.
Checksum is a checksum field that specifies the checksum of all bytes from the packet type field to the last byte of the parameter
field. After the reader receives the command frame, it needs to calculate the checksum to check the error.
The reader command completion response frame is a fixed-length data frame whose format is as shown in the following table.
☆Packet Type is the packet type field, and the command frame packet type is fixed to 0xE4.
☆Length is the packet length field, indicating the number of bytes in the frame after the Length field, fixed to 0x04
☆ Device Number is the device number field. When the usercode of the device number is 00, it indicates group sending.
☆ Status is the status field. The status field indicates the result of the reader after the completion of the PC command or the
☆Checksum is a checksum field that specifies the checksum of all bytes from the packet type field to the last byte of the parameter field.
After the reader receives the command frame, it needs to calculate the checksum to check the error.
Serial
ID Name Description
No
An information frame is a data frame that is returned to the host. For example, it is used to send a label to the host. The frame format is
Data0 Data1 Data2 Data3 Data4 Data5 Data6 Data7 Data8 Data9 Datan
Mem
A0 09 81 usercode WriteMode addr 01 D1 D2 Checksum
-Bank
Host sends a command: A0 09 81 00 00 01 02 01 12 34 8C
Write failure back:(E0 04 81) (00) usercode (05) Status (96)Checksum
Write successfully back:(E0 04 81) (00) usercode (00) Status (9B)Checksum
Mark:1word=2BYTE
MemBank:
002 Reserved
012 EPC
102 TID
112 User
WriteMode:
00 Single word write
Status = 00:write succesfully;
Status = Other values: write failed;
Addr Description: The EPC area is valid from 0x02– 0x07;;
Memeory Write
Answ Com Device Write Addre Wite
Data length Position length Write data checksum
er mand No way ss data
(word)
Data0 Data1 Data2 Data3 Data4 Data5 Data6 Data7 Data8 Datan-1 Datan
07+ Write
A0 81 usercode MemBank addr Length D1 D(Length) Checksum
(Length* 2) Mode
Host sends a command:A0 0B 81 00 01 01 02 02 55 55 AA AA D0
Write failure back:E0 04 81 (00)usercode (05)Status (96)Checksum
Write successfully back:E0 04 81 (00)usercode (00)Status (9B)Checksum
Status = 00:Successfully written
Status = Other values: write failed
Note: when reserved, addr >=0, addr+Length<=4, otherwise the parameter is wrong.
Note: when the EPC area is addr+Length <=8, and ADDR>=2, otherwise the parameter is wrong.
Note: The TID area is not writable and can only be read.
Note: The data area is written up to 8 words at a time according to the actual card situation;
note:1word=2BYTE;
MemBank:
002 Reserved
012 EPC
102 TID
112 User
WriteMode:
01 qickly write tag
Note: Most tags are not supported。
Device
Answer Data length command RFU Password 1 Password 2 Password 3 Password 4 checksum
No
Data0 Data1 Data2 Data3 Data4 Data5 Data6 Data7 Data8 Data9
A0 08 86 usercode 00 MM1 MM2 MM3 MM4 Checksum
The host sends a command: A0 08 86 00 00 12 34 56 78 BE
Slave back: E4 04 86 (00) usercode (00) Status (92) Checksum
Status = 00: Write succeeded
Status = Other value: Write failed
(2)Initialize the EPC tag CODE
comman
Answer Data length Device No Checksum
d
Data0 Data1 Data2 Data3 Data4
A0 03 99 usercode Checksum
answer Data command Device No checksum The host sends the command: A0 03 A8 00 B5
length Slave back: E0 04 A8 usercode Status Checksum
Data0 Data1 Data2 Data3 Data4 Status =00 Success
A0 03 A8 usercode Checksum Status = other value: failed;
Note: The operation of the EPC tag is in "word"; the ISO18000-6B tag
is in "bytes".。
answe Data comm Device Checksum The host sends the command: A0 03 FC 00 61
r length and Slave back: E0 04 FC usercode Status Checksum
Data0 Data1 Data2 Data3 Data4 Status =00 Success
A0 03 FC usercode Checksum Status = other value: failed;
answe Data comm Device checksum The host sends the command: A0 03 FF 00 5E
r length and Successful return: E0 04 FF 00 02 1B 00 00 12 34 AA AA 00 00 00 00 55 55
Data0 Data1 Data2 Data3 Data4 AA AA 01 67 FF 00 00 E2 00 05 11 11 18 02 73 00 00 02 9C 01 CB FF
A0 03 FF usercode Checksum Where: 12 34 AA AA 00 00 00 00 55 55 AA AA, E2 00 05 11 11 18 02 73 00
00 02 9C is the ID number
Write
Data Write
Answer command Device No length Write data Write data Write data checksum
length data
(word)
Data(4+2*
Data(5+2*
Data0 Data1 Data2 Data3 Data4 Data5 Data6 Data7 WordLengt
WordLength)
h)
4+
Word
A0 2*Word 9C usercode D1 D2 D3 D(leng*2) Checksum
Length
Length
For example: write 2 words (1234 5678) in the address EPC area address 4, 5:
A0 08 9C 00 02 12 34 56 78 A6
Return from the machine:
E0 04 9C usercode Status Checksum
Status =00 Success
Status = other value: write failed;;
D4...D15 are 00 02 25 56 52 65 85 74 12 36 65 72, which are the specified EPC ID numbers, a total of 12 bytes.
The host sends a command: A0 0F AA 00 00 02 25 56 52 65 85 74 12 36 65 72 5B
Read successful back: E0 0C AA 00 00 01 3B F4 00 01 26 74 92 0D
E2 00 34 12 01 36 F4 00 is the TID area of the specified EPC number, a total of 8 bytes
Read failed slave return: E4 04 AA usercode Status Checksum (eg E4 04 AA 00 05 69 )
answe Data comm Device Buzzer control checksum BuzzerCtrl=0: Turn off the BEEP sound when reading the
r length and No card;
Data0 Data1 Data2 Data3 Data4 Data5 BuzzerCtrl=1: Open the BEEP sound when reading the
A0 04 B0 usercode BuzzerCtrl Checksum card;
BuzzerCtrl>=2: Sound a single BEEP sound;
The host sends a command: A0 04 B0 00 00 AC;
Slave back: E0 04 B0 (00)usercode 00 68
E4 reader command completion response frame header
04 data length
B0 controls the BUZZER command
00usercode device number
00 status, 00 is control success
68 Checksum
Answ Data comm Device Buzzer checksum RelayOnOff =0: Turn off the relay;
er Length and Control RelayOnOff =1: Open the relay;
Data0 Data1 Data2 Data3 Data4 Data5 The host sends a command: A0 04 B1 00 00 AB;
A0 04 B1 usercode RelayOnOff Checksum Slave back: E0 04 B1 (00) usercode 00 67
E4 reader command completion response frame header
04 data length
B1 control relay command
00 sercode device number
00 status, 00 is control success
67 Checksum
Example:
Relay open command: A0 04 B1 00 01 AA
Relay off command: A0 04 B1 00 00 AB
Write Anten
Answ comm Device Write Memory Write checks
Data length ADD length Write data na No
er and No way position data um
(word)
Datan-
Data0 Data1 Data2 Data3 Data4 Data5 Data6 Data7 Data8 Datan-2 Datan
1
Host sending:
Comman Memeory Reading length Antenn
Answer Data length Device NO ADD checksum
d position (word) No
Data0 Data1 Data2 Data3 Data4 Data5 Data6 Data7 Data8
A0 07 8b usercode MemBank addr Length Ant Checksum
The host sends a command: A0 07 8b 00 01 02 01 01 C9; Reads the data of 1 word from the 0x02 address. Note: 1 word = two BYTE
MemBank:
002 Reserved reserved area
012 EPC EPC
102 TID TID
112 User User Area
Read failed slave back: E4 04 8B (00) usercode (05) Status, ( 88) Checksum
Read successfully slave back: E0 08 8B (00)usercode 01 02 01 12 34 43
E0 read successful data frame header
08 data length
8b tag read command
Usercode device number
01 Membank type
02 address, 01 read length
12 34 data read
43 Checksum
Answ Data Com Device Set the Query parameter Query parameter Command checkum
er length mand number of specified high specified lower
parameter address address Data
s
Data0 Data1 Data2 Data3 Data Data Data Data … Data Data
4 5 6 7 E F
0xA0 0x06 0x62 usercode Length Parameter Parameter 01 … 01 Checksum
+Length address(MSB) address(LSB)
Data 7...Data E is 01 04 10 40 00 01 02 01
For example, if the host sends a command: A0 0E 62 00 08 00 92 01 04 10 40 00 01 02 01 FD (frequency setting)
Slave back: E4 04 62 (00 )usercode(00 )Status,(B6)Checksum
Status 00: Success; Other values: Failure
The Parameter address (MSB) is the high byte of the address of the parameter in the EEPROM.
The Parameter address (LSB) is the low byte of the address of the parameter in the EEPROM.
Parameter value is the parameter value that needs to be set.
After receiving the command frame, the reader writes the parameters to be set to the EEPROM and returns the command completion
frame.
Such as: host command: A0 06 60 00 00 65 96 FF (set power)
Slave back: (E4 04 60) header, (00) usercode (00) Status, (B8) Checksum
Status 00: Success; Other values: Failure
Schedule 1 :
Parameter Project meaning Set the effective Numerical meaning other
in value of the interpretation
EEPROM operation (decimal)
address
(16 附表 2 :
Decimal)
0x64 User logo code 0 - 255 User setting flag value 附表 3:
0x65 Transmit power 0 - 150 Power analog
0x70 Reader reader operation mode 1,2,3 1: master-slave mode Note: Master mode is still
2: Timing mode active when working in
3: Trigger mode of operation mode 2, 3.
Parameter Project meaning Set the effective Numerical meaning Other
in value of the interpretation
EEPROM operation (decimal)
address
(hex)
0x71 Card reading interval N The unit of value is: (N*10) The reader reader
milliseconds operation mode is valid
Where N is 10 – 100; when the mode is 2 or 3.
0x72 Link selection for actively 1,2,3 1:RS485 link
sending data after the reader 2:wiegand link
reads the data 3:RS232 link
Parameter Project meaning Set the effective Numerical meaning Other
in value of the interpretation
EEPROM operation (decimal)
address 附表 4:
(hex)
0x73 Wiegand Protocol selection 1,2,3 1:wiegand26 Effective for wiegand
2:wiegand34 mode
3:wiegand32
0x74 Wiegand Output data pulse 1 - 255 The card reader internally
width converts to time, time = this
value * 10 (microseconds).
0x75 Wiegand Output data pulse 1 - 255 The card reader internally
period converts to time, time = this
value * 100 (microseconds).
0x76 Wiegand Output repetitions 1,2,3 Not supported yet
0x77 Wiegand Repeated output 1,2,3,4,5,6,The card reader internally
interval 7,8,9,10 converts to time, time = this
value * 10 (milliseconds). (not
supported at this time)
Parameter in Project meaning Set the effective Numerical meaning Other
EEPROM address value of the interpretation
(hex) operation (decimal)
0x80 Trigger pin enable The lower four bits of Bit0:Corresponding trigger pin The reader reader
trigger mode setting the value are set to 0 0 operation mode is valid
or 1, indicating that Bit1:Corresponding to trigger when the mode is 3
the job does not pin 1 (not supported at this
trigger or trigger. time)
Bit2:Corresponding to trigger
pin 2 (not supported at this
time)
Bit3:Corresponding to trigger
pin 3 (not supported at this
time)
0x81 Trigger pin trigger mode The lower four bits of Bit0:Corresponding to trigger
the value are set to 0 pin 0 (support high level
or 1, indicating low trigger)
level trigger or high Bit1:Corresponding to trigger
level trigger. pin 1 (not supported at this
time)
Bit2:Corresponding to trigger
pin 2 (not supported at this
time)
Bit3:Corresponding to trigger
pin 3 (not supported at this 附表 5:
time)
0XC6 Relay delay time setting 1-255 Relay closure delay time value byte
in S range, So
in actual
0XC7 Relay enable setting 0,1 0: Relay enable is off, 1: Relay
use, the
is enabled to open
high byte
0XC8 Fast card reading enable 0,1 0: Fast card reading is turned
in the
setting off (setting the card reading
command
time in units of 10MS), 1: Fast
is filled
card reading is enabled (ms
with 0.
are set in units of card read
For
time)
example,
0XCA Temperature label 0,1 0: Close the setting (the label
the reader
calibration data settings is not initialized), 1: Open the
reader
setting (the label has been
card
initialized)
operation
0XCB Temperature Tag RSSI 0,1 0: Temperature tag gets RSSI Get RSSI card reading will
mode is
Settings off 1: Temperature tag gets get worse
the timed
RSSI open
operation
0XCD EPC TID select output 0,1 0 :Output EPC
mode,
settings 1:Output TID
and the
0XCE European standard, 0,1 0:US Frequency actual
American standard 1:EU Frequency filling is
selection :
Parameter address(MSB) Parameter address(LSB)
0x00 0x70
Description:
After the above command is completed, you need to make the reader work with the new parameters, using one of the following
two methods:
(1) Manually reset the reader so that the operator needs to access the reader (re-power);
(2) The remote computer operates remotely, and the reader is controlled by using the Reset Reader command on the software of
the host computer.
4. Inspection and calculation method (c language)