TS02 communication Protocol V1.

0 EN

Directory
1. Communication rules. ... ... ... ... ... ... ... ... ... 1
2 Agreement Number ... ... ... ... ... ... ... ... ... ... 2
1. Agreement Number List ... ... ... ... ... 2
2. Bottom Line ... ... ... ... ... ... ... ... ... ... 2
3. Package Definition ... ... ... ... ... ... ... ... 2
4. Terminal status (alarm) analysis ... ... ... 3
3. Uplink Commands ... ... ... ... ... ... ... 3
1. Real-time location ... ... ... ... ... 3
2. Position request ... ... ... ... ... ... ... ... 4
4. The line command ... ... ... ... ... ... ... 5
1. Server settings (IP) ... ... ... ... ... ... ... 6 2.
SMS intercept (ST) ... ... ... ... ... ... ... ... 7
3. Terminal Password Settings (MP) ... ... ... ... ... 7
4. Set the time interval (XT/NXT) ... ... ... ... ... 7
5. Alarm settings (KC) ... ... ... ... ... ... ... 8
6. Device to reboot (CQ ... ... ... ... ... ... ... 8
7. Restore Factory Settings (RESET) ... ... ... ...8
8. Network Access Point (APN) ... ... ... ... ... 9

I. Communications statute
Introduction
This document refers to the instruction for Application layer interface
protocols of car GPS tracker positioning services platform. The
interface protocol is only available for platforms and positioning the
terminal interaction.
1. A heartbeat database packet tracks every 3 minutes
2. In the default setting, the tracking data will update every 10
seconds while the device is in motion, while the device is in static,
the GPS data stops updating.
3. The daily running 20 hours, quantity of flow no more than 26 M/month
4. An inflection point re-posts the GPS point features
5. Data re-posting
While the terminal device failed to connect to server (no GSM signal
or GPRS can not access to network), terminal device will initiate the
data saving to the local, re-connect to the server, and the data is
transmitted to the server
(1) Terminal needs to be able to save at least 1000 valid data

1
 TS02 communication Protocol V1.0 EN

(2) After the terminal device connected with the server, interrupted
storage data will be immediately uploaded to the server (in priority
to upload storage data and then current data)
6. All SMS commands should be able to send via online GPRS commands
(Except
123/position # command to get address)
7. Cut off electrical and oil commands execution requests
(1) Vehicles to be positioned
(2) The speed of the vehicle within 20km/h.
If the requests are met, the command is executed; the platform will
be informed about the implementation status
If you do not meet requests, the command is not executed; the platform
should be informed about the reason why it is not implemented. Do
not delay execution of commands.
8. The alarm must receive a response, if you have not received,
initially send a simple alarm messages to all SOS numbers.
(Normally, platform will send a packet data of the address after an
alarm has been received and the phone forwarded to all SOS numbers)
9. General SMS commands (except commands to cut off / restart the oil
and electricity) are available to all the mobile phone numbers.
10. Only the central number can only be broken electrical oil /restore
electrical oil, only the central number can cut off / restart the
oil and electricity, only the central number is able to set up SOS
number, center number can be set by any phones.
11. After 20 minutes can no access to internet, it automatically
restart the device
12. It supports domain name accessing (but not IP accessing, the server
IP changes if so)
13. Automatically delete SMS messages
14. 10 data received after power-on /reset the device
15. 10 data received after dial your device phone
16. Terminal device has IP cache feature, do not establish a connection
every time by requesting a domain name resolution, only when an IP
can not be connected after 3 consecutive times, and then requests
a domain name resolution
17. Do never lose IMEI no.
18. Remote upgrades available

2
 TS02 communication Protocol V1.0 EN

2. Protocol No.
1. List of protocols
Protocol No. Data Packet Respond or Downlink& uplink
not
1 V Position data Packet No uplink
XT heartbeat packets Yes uplink
1 VI Location request packet Yes uplink
VI Location response packet No downlink
20 S The cut off power packet Yes Downlink
4 V Commands confirm packet No Uplink
SF Armed Yes Downlink
CF Disarm packet Yes Downlink
TG Off platform sending Yes Downlink
UR iCenter nformationNumber Yes Downlink
setting
IP Modify product domain name Yes Downlink
ST Set SMS interception Number Yes Downlink
MP Terminal Password Settings Yes Downlink
XT/NXT Upload interval settings Yes Downlink
KC Alarm settings Yes Downlink
CQ Device reset Yes Downlink
RESET Restore factory settings Yes Downlink
APN APN network access point Yes Downlink
settings
2. Uplink and Downlink
Name Note
Server - terminal downlink
Terminal - - - - server uplink

3. Packet Definition
* XX, YYYYYYYYYY, cmd, HHmmss, S, latitude, D, longitude, G, speed,
direction, DDMMYY vehicle, the status, the MCC, mnc, LAC, CID #
Information field description:
Format Field Name Note
* XX Head Head information
information
YYYYYYYYYY Terminal No. Car Terminal No.

3
 TS02 communication Protocol V1.0 EN

CMD Protocol No. Data Packet Protocol No.

HHmmss Time Car time, Standard Time, and Beijing Time is
8 Hours offset
S Significant Significant bit (A/V/B), A means GPS data
bit is significant registered data, V means GPS
data is not significant registered data, B
means Beidou
Latitude Latitude Latitude, format DDFF . FFFF, DD: degrees
latitude (00 to 90) and FF . FFFF: Latitude
(00.0000 to 59.9999, retained for 4 digits
to the right of the decimal
D Latitude flag Latitude (N: Latitude, S: Latitude)
longitude Longitude Longitude format DDDFF . FFFF, DDD: degrees
longitude (000 to 180), FF . FFFF: longitude
(00.0000 to 59.9999, retained for 4 digits
to the right of the decimal
G Longitude mark Longitude mark (E: longitude, W: West)
Speed Speed Speed, range 000.00 to 999.99, two decimal
places. The information fields may be
empty, the speed is 0 . Section 1 = 1.852
km/h
direction Azimuth Azimuth, North is 0 degrees, and the
resolution is 1 degrees in a clockwise
direction. The information fields may be
empty, i.e. , an angle of 0
DDMMYY Day/Month/Yea Day/Month/Year
r
vehicle Terminal Terminal status, a total of 4 bytes, stands
status. status for the car parts, vehicle parts, as well
as status alarm etc.
MCC Country Code Country Code
mnc Operator code Operator code
LAC Base Station Small Area No.
Code
CID Base Station Small area ID
Code

4
 TS02 communication Protocol V1.0 EN

4. Terminal status (alarm) analysis

The vehicle status indicates the Hexadecimal values with ASCII
character, the following shows the specific meaning of each variable
bytes, bit is negative logic, bit = 0 significant. As shown in the
following table:
9 FFF FFFF FFF FFEF 9 = Off FFFFFFFBFF = SOS

The third
Order The first bytes The second bytes The fourth bytes
bytes
No.
Analog time-out Vehicle
3 password
1 0 1 limit alarm 0 armed 0 Robbery police
error alarm
status
GPRS blocked Keep SOS OVERSPEED
2 0 0 0 ACC off 0
alarm alarm status ALARM
Vehicle is in Device powered Illegal
Reservati
3 0 cut-off power 0 by backup 1 0 ignition
battery supply on
status alarm
Prohibited
Battery Battery Reservati
4 0 0 1 0 cross-border
removed. removed on
warning
High-level
GPS antenna GPS antenna
5 0 sensor 1 is 0 0 Engine 0
open open alarm
high
High-level GPS antenna
GPS antenna
6 0 sensor 2 is 0 0 Auto alarm 0 short circuit
short circuit
high alarm
Prohibited from
Low-level Low-level
speeding the
7 0 sensor 1 0 sensor 2 0 0
vehicles cross-border
ground ground
warning

III. Uplink Commands

1. Real-time location
*XX,YYYYYYYYYY,V1,HHmmss,S,latitude,D,longitude,G,speed,direction,DDM
MYY,vehicle_status,mcc,mnc,lac,cid# E.g.:
*HQ,353505910449999,V1,052825,A,2239.4210,N,11400.8825,E,0.00,348,180
814,FFFFFFFF,1CC,0,25FC,F48#
If there is response: No

5
 TS02 communication Protocol V1.0 EN

2. Heartbeat packets(XT) *XX,YYYYYYYYYY,XT# E.g.:

*HQ,353505910449999,XT#
Response format is as follows:
*XX,YYYYYYYYYY,V4,XT# E.g.:
*HQ,353505910449999,V4,XT#

3. Location request(VI1)
*XX,YYYYYYYYYY,VI1,HHmmss,Code,latitude,D,longitude,G,speed,direction
,DDMMYY,vehicle_status,mcc,mnc,lac,cid# E.g.:
*HQ,353505910449999,VI1,052825,0,2239.4210,N,11400.8825,E,0.00,348,18
0814,FFFFFFFF,1CC,0,25FC,F48# If
there is response: Yes Response
format is as follows:
*HQ,YYYYYYYYYY,VI,HHmmss,Display_Time,Code,Info_lenth,Information#
Format Field name Note

Display_Time Time Display time (unit: second; display

range: 5-65,535, "Display_Time = 0"
means that the time is 65,536
seconds.)

Code Coding scheme 0: GB2312, 1: unicode, others:

undefined

Info_lenth Information Information length, 0-255, "0"

length represents the length of 256. When
the length is over 256, modulus shall
be acquired from the handle or LCD
display at 256

Information Information Display information, not exceeding

256 bytes in length (128 characters).
E.g.:
*HQ,0000000000,VI,130305,60,0,26, near the Zhongshan Interchange in
Nanshan District, Shenzhen City #
If there is response: No

6
 TS02 communication Protocol V1.0 EN

IV. Downlink Commands

1. Shutting down/resuming the fuel or power(S20)
*XX,YYYYYYYYYY,S20,HHmmss,C,T#
Field Note
C Final modes of shutting down. 1 or
other digital numbers: static
shutting of fuel or power, the
engine is not detected, the power
relay is always closed, and the
circuit is disconnected
T Shut down or resumed, 0 represents
"resumed", 1 "shut down"

E.g.: *HQ,0000000000,S20,130305,1,1#
After receiving the commands, if the on-board vehicle does not
support fuel or power shutting down, it will directly return the message
*HQ,2020916012,V4,S20,ERROR,130305,050316,A,2212.8745,N,11346.657
4,E,14.28,028, 220902,FFFFFBFF, 460,000,27A6,0F70#
The final results are that power is completely shut down, and the
mode of shutting down is maintained in the way specified in Field "C".
Message is returned when power is completely shut down
*HQ,2020916012,V4,S20,DONE,130305,050316,A,2212.8745,N,11346.6574
,E,14.28,028,220902,F7FFFBFF, 460,000,27A6,0F70# Methods
for resuming fuel or power supply downlink:
*HQ,0000000000,S20,130305,1,0#
Returned message:
*HQ,2020916012,V4,S20,OK,130305,050316,A,2212.8745,N,11346.6574,E
,14.28,028,220902,FFFFFBFF, 460,000,27A6,0F70#

7
 TS02 communication Protocol V1.0 EN

2. Response location request (VI)

*HQ,YYYYYYYYYY,VI,HHmmss,Display_Time,Code,Info_lenth,Information#
Format Field name Note

Display_Time Time Display time (unit: second; display

range: 5-65,535, "Display_Time = 0"
means that the time is 65,536
seconds.)

Code Coding scheme 0: GB2312, 1: unicode, others:

undefined

Info_lenth Information Information length, 0-255, "0"

length represents the length of 256. When
the length is over 256, modulus shall
be acquired from the handle or LCD
display at 256

Information Information Display information, not exceeding

256 bytes in length (128 characters).
E.g.:
*HQ,0000000000,VI,130305,60,0,26, near the Zhongshan Interchange in
Nanshan District, Shenzhen City #
If there is response: No

3. Arming (SF)
*HQ,YYYYYYYYYY,SF# E.g.:
*HQ,135790246811221,SF#
If there is response: Yes
Response format is as follows
*HQ,135790246811221,V4,SF,130305,050316,A,2212.8745,N,11346.6574,E,14
.28,028,220902,FFFFFFFF,mcc,mnc,lac,cid#

4. Disarming (CF)
*HQ, YYYYYYYYYY,CF# E.g.:
*HQ,135790246811221,CF#
If there is response: Yes

8
 TS02 communication Protocol V1.0 EN

Response format is as follows

*HQ,135790246811221,V4,CF,130305,050316,A,2212.8745,N,11346.6574,E,14
.28,028,220902,FFFFFBFF,mcc,mnc,lac,cid#

5. Notification (TG)
*HQ, YYYYYYYYYY,TG,msg# E.g.:
*HQ,135790246811221,TG,6CE8518C6210529FFF015BC67801662F00300031003200
3300340035FF01#
If there is response: Yes
Field Note
msg With the encoding format of its msg
contents transforming into gb2312
format, the response content is
downloaded to the terminals in the
form of byte or character strings

Response format is as follows

*HQ,135790246811221,V4,TG,130305,050316,A,2212.8745,N,11346.6574,E,14
.28,028,220902,FFFFFFFF,mcc,mnc,lac,cid #

6. Master number binding (UR)

*HQ, YYYYYYYYYY,UR,Index,NUMBE# E.g.:
*HQ,135790246811221,UR,1,15814021151#
If there is response: Yes
Field Note
NUMBER Master telephone number to be set
Index Serial number for the controlling
numbers already set; 1 represents
the master number, others
represent vice numbers
Response format is as follows
*HQ,135790246811221,V4,UR,130305,050316,A,2212.8745,N,11346.6574,E,14
.28,028,220902,FFFFFFFF,mcc,mnc,lac,cid#

9
 TS02 communication Protocol V1.0 EN

7. Server setting (IP)

*HQ,135790246811221,IP,INDEX,IP,PORT,YM#
Format Field name Note

IP IP IP address (32 digits)

INDEX Number 1 or 2 is the priority

number: 1 for IP
priority and 2 for
domain name priority

IP IP Replaced with 0 (out

of date)

PORT Port number The port number is

hexadecimal

YM Domain name Domain name

E.g.:
*HQ,135790246811221,IP,1,00000000,1a7c,www.gps588.com#
If there is response: Yes

Response format is as follows:

*HQ,135790246811221,V4,IP,130305,050316,A,2212.8745,N,11346.6574,E,14
.28,028,220902,FFFFFBFF,mcc,mnc,lac,cid#

8. SMS blocking settings (ST)

*HQ, YYYYYYYYYY,ST,Index,NUMBER#
E.g.: *HQ, 135790246811221,ST,1,10086#
If there is response: Yes
Field Note
NUMBER Phone number for SMS blocking
Index Serial number of phone number to
be blocked

10
 TS02 communication Protocol V1.0 EN

Response format is as follows

*HQ,135790246811221,V4,ST,130305,050316,A,2212.8745,N,11346.6574,E,14
.28,028,220902,FFFFFBFF,mcc,mnc,lac,cid#

9. Terminal password setting (MP)

*XX,YYYYYYYYYY,MP,msg#
Contents with msg sent contains the following fields:
Field Note
Old_password Old termianl password (6 digits)
New_password New termianl password (6 digits)
E.g.:
*HQ,353505910449999,MP,000000,123456#
If there is response: Yes
Response format is as follows
*HQ,135790246811221,V4,MP,130305,050316,A,2212.8745,N,11346.6574,E,14
.28,028,220902,FFFFFFFF,mcc,mnc,lac,cid #

10. Time interval setting (XT/NXT)

*XX,YYYYYYYYYY,[XT,NXT],seconds#
Field Note
XT Time interval for uploading data packets
when the terminal is running
NXT Time interval for uploading data packets
when the terminal is static
seconds Range of time interval for uploading
data packets: 5,3600 in running mode;
10,7200 in static mode (unit: second)
E.g.:
*HQ,353505910449999,XT,10#
If there is response: Yes
Response format is as follows
*HQ,135790246811221,V4,XT,130305,050316,A,2212.8745,N,11346.6574,E,14
.28,028,220902,FFFFFFFF,mcc,mnc,lac,cid#

11
 TS02 communication Protocol V1.0 EN

11. Alarming setting (KC)

*XX,YYYYYYYYYY,KC,Type#
Field Note
Type Alarm type: 1 SMS, 2 phone call, 3
SMS + phone call, the default
setting is 1 alarm via SMS
E.g.:
*HQ,353505910449999,KC,1#
If there is response: Yes
Response format is as follows
*HQ,135790246811221,V4,KC,130305,050316,A,2212.8745,N,11346.6574,E,14
.28,028,220902,FFFFFFFF,mcc,mnc,lac,cid#

12. Device reboot (CQ)

*XX,YYYYYYYYYY,CQ# E.g.:
*HQ,353505910449999,CQ#
If there is response: Yes
*HQ,135790246811221,V4,CQ,130305,050316,A,2212.8745,N,11346.6574,E,14
.28,028,220902,FFFFFFFF,mcc,mnc,lac,cid#

13. Factory reset (RESET) *XX,YYYYYYYYYY,RESET# E.g.:

*HQ,353505910449999,RESET#
If there is response: Yes
Response format is as follows
*HQ,135790246811221,V4,RESET,130305,050316,A,2212.8745,N,11346.6574,E
,14.28,028,220902,FFFFFFFF,mcc,mnc,lac,cid #

14. Network access point (APN)

*XX,YYYYYYYYYY,APN,Name,User,PWD#
Field Note
Name APN name of local operator
User Account of the operator at the
Network Access Point
PWD Operator password

12
 TS02 communication Protocol V1.0 EN

E.g., Spanish APN:

*HQ,353505910449999,APN,zap.vivo.com.br,vivo,vivo#
If there is response: Yes
Response format is as follows
*HQ,135790246811221,V4,APN,130305,050316,A,2212.8745,N,11346.6574,E,1
4.28,028,220902,FFFFFFFF,mcc,mnc,lac,cid#

13