wiki.volkszaehler.org

Benutzer-Werkzeuge

Webseiten-Werkzeuge

Zuletzt angesehen:
hardware:channels:meters:power:wittech_witenergy_e100
no way to compare when less than two revisions

Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.


Vorhergehende Überarbeitung
Nächste Überarbeitung
—hardware:channels:meters:power:wittech_witenergy_e100 [2018/03/25 11:07] – alte Version wiederhergestellt (2018/02/15 13:59) jau
Zeile 1: Zeile 1:
 +===== Wittech WiTenergy E100 =====
  
 +{{ :hardware:channels:meters:power:wittech_witenergy_e100:witenergy_grass.jpg?200|}}
 +
 +=== General ===
 +http://en.wikipedia.org/wiki/Bluetooth_low_energy
 +
 +=== Info ===
 +
 +Distributed by Conrad Elektronik as "Voltcraft SEM-3600BT":
 +http://www.conrad.de/ce/de/product/684997/VOLTCRAFT-SEM-3600BT
 +
 +Review by c't: http://www.heise.de/ct/ausgabe/2014-9-kurz-vorgestellt-Messstecker-2226733.html
 +
 +Review: http://www.smarthelpers.de/equipment/voltcraft-sem-3600bt-das-smarte-energiekostenmessgerat.html
 +
 +original vz-dev thread: http://lists.volkszaehler.org/pipermail/volkszaehler-dev/2015-April/004413.html
 +
 +
 +=== Background ===
 +Development: http://www.wittech-group.com/
 +
 +Manufacturing: http://www.colourhk.com/products.htm
 +
 +==== reverse engineering: hardware ====
 +=== PCB pictures ===
 +== control board == 
 +
 +{{:hardware:channels:meters:power:wittech_witenergy_e100:control_comp.jpg?200|}}
 +{{:hardware:channels:meters:power:wittech_witenergy_e100:control_sold.jpg?200|}}
 +
 +== power board ==
 +
 +{{:hardware:channels:meters:power:wittech_witenergy_e100:power_comp.jpg?200|}}
 +{{:hardware:channels:meters:power:wittech_witenergy_e100:power_solder.jpg?200|}}
 +
 +=== general ===
 +einmal aufgeschraubt, findet man auf der platine den namen des
 +chinesischen OEMs:
 +http://www.colourhk.com/products.htm
 +das geraet heisst dann wohl "WiTenergy",
 +ist auf der produktliste nicht enthalten.
 +(lustigerweise scheint das "EM200 WiTmeter" eine BT-version des kd302
 + zu sein, gleiches gehaeuse zumindest.)
 +
 +auch gleich ein uebler produktionsmangel... die pufferbatterie ist so
 +schlecht verloetet, dass sie von der platine faellt.
 +
 +=== metering IC ===
 +{{:hardware:channels:meters:power:wittech_witenergy_e100:metering.jpg?200|}}\\
 +darin wohl wieder ein metering-IC, allerdings nur in einem 16-poligen
 +SOIC-gehaeuse, mit abgeschliffener beschriftung,
 +aber mit einem 4.096MHz quarz daneben, was zumindest einen
 +recht intelligenten chip nahelegt.
 +
 +=== bluetooth / controller (itl254x) ===
 +{{:hardware:channels:meters:power:wittech_witenergy_e100:itl254x.jpg?200|}}\\
 +there's no separate controller, it seems the controller on the bluetooth module runs the whole device.
 +(which is an obvious choice, as those tend to be more powerful than an average microcontroller anyway.)
 +
 +seems to be a TI device, related to the TI "SensorTag" reference design:
 +http://www.ti.com/product/cc2540
 +http://www.ti.com/tool/cc2541dk-sensor
 +
 +=== eeprom ===
 +{{:hardware:channels:meters:power:wittech_witenergy_e100:eeprom.jpg?200|}}\\
 +labeled "ATML" instead of "ATMEL"? wtf?
 +
 +=== power supply ===
 +{{:hardware:channels:meters:power:wittech_witenergy_e100:lnk304.jpg?200|}}\\
 +switching power supply without isolation?
 +
 +LNK304: http://www.datasheet4u.com/datasheet-pdf/PowerIntegrations/LNK304/pdf.php?id=602595
 +
 +==== reverse engineering: communication ====
 +
 +das geraet benutzt die low-energy variante die bei BT 4.0 spezifiziert
 +ist, und nicht zu aelteren bluetooth-interfaces kompatibel ist:
 +http://en.wikipedia.org/wiki/Bluetooth_low_energy
 +
 +(es erscheint etwas witzlos, bei einem geraet das per definition
 + am aus dem stromnetz versorgt wird, das low-energy profile zu
 + verwenden, das fuer batteriebetriebene geraete entwickelt wurde...
 + die verlustleistung des netzteils ist damit sicher deutlich hoeher,
 + als der verbrauch des geraetes...)
 +
 +<code>
 +# hcitool lescan
 +LE Scan ...
 +D0:FF:50:7A:73:6C (unknown)
 +D0:FF:50:7A:73:6C WiT Power Meter
 +</code>
 +<code>
 +# gatttool -b D0:FF:50:7A:73:6C --primary
 +attr handle = 0x0001, end grp handle = 0x000b uuid: 00001800-0000-1000-8000-00805f9b34fb
 +attr handle = 0x000c, end grp handle = 0x000f uuid: 00001801-0000-1000-8000-00805f9b34fb
 +attr handle = 0x0010, end grp handle = 0x0019 uuid: 0000fee0-494c-4f47-4943-544543480000
 +attr handle = 0x001a, end grp handle = 0xffff uuid: 0000180a-0000-1000-8000-00805f9b34fb
 +</code>
 +<code>
 +# gatttool -b D0:FF:50:7A:73:6C --characteristics
 +handle = 0x0002, char properties = 0x02, char value handle = 0x0003, uuid = 00002a00-0000-1000-8000-00805f9b34fb
 +handle = 0x0004, char properties = 0x02, char value handle = 0x0005, uuid = 00002a01-0000-1000-8000-00805f9b34fb
 +handle = 0x0006, char properties = 0x0a, char value handle = 0x0007, uuid = 00002a02-0000-1000-8000-00805f9b34fb
 +handle = 0x0008, char properties = 0x08, char value handle = 0x0009, uuid = 00002a03-0000-1000-8000-00805f9b34fb
 +handle = 0x000a, char properties = 0x02, char value handle = 0x000b, uuid = 00002a04-0000-1000-8000-00805f9b34fb
 +handle = 0x000d, char properties = 0x20, char value handle = 0x000e, uuid = 00002a05-0000-1000-8000-00805f9b34fb
 +handle = 0x0011, char properties = 0x12, char value handle = 0x0012, uuid = 0000fee1-494c-4f47-4943-544543480000
 +handle = 0x0014, char properties = 0x1a, char value handle = 0x0015, uuid = 0000fee2-494c-4f47-4943-544543480000
 +handle = 0x0017, char properties = 0x1a, char value handle = 0x0018, uuid = 0000fee3-494c-4f47-4943-544543480000
 +handle = 0x001b, char properties = 0x02, char value handle = 0x001c, uuid = 00002a23-0000-1000-8000-00805f9b34fb
 +handle = 0x001d, char properties = 0x02, char value handle = 0x001e, uuid = 00002a24-0000-1000-8000-00805f9b34fb
 +handle = 0x001f, char properties = 0x02, char value handle = 0x0020, uuid = 00002a25-0000-1000-8000-00805f9b34fb
 +handle = 0x0021, char properties = 0x02, char value handle = 0x0022, uuid = 00002a26-0000-1000-8000-00805f9b34fb
 +handle = 0x0023, char properties = 0x02, char value handle = 0x0024, uuid = 00002a27-0000-1000-8000-00805f9b34fb
 +handle = 0x0025, char properties = 0x02, char value handle = 0x0026, uuid = 00002a28-0000-1000-8000-00805f9b34fb
 +handle = 0x0027, char properties = 0x02, char value handle = 0x0028, uuid = 00002a29-0000-1000-8000-00805f9b34fb
 +</code>
 +<code>
 +# gatttool -b D0:FF:50:7A:73:6C --char-desc
 +handle = 0x0001, uuid = 00002800-0000-1000-8000-00805f9b34fb
 +handle = 0x0002, uuid = 00002803-0000-1000-8000-00805f9b34fb
 +handle = 0x0003, uuid = 00002a00-0000-1000-8000-00805f9b34fb
 +handle = 0x0004, uuid = 00002803-0000-1000-8000-00805f9b34fb
 +handle = 0x0005, uuid = 00002a01-0000-1000-8000-00805f9b34fb
 +handle = 0x0006, uuid = 00002803-0000-1000-8000-00805f9b34fb
 +handle = 0x0007, uuid = 00002a02-0000-1000-8000-00805f9b34fb
 +handle = 0x0008, uuid = 00002803-0000-1000-8000-00805f9b34fb
 +handle = 0x0009, uuid = 00002a03-0000-1000-8000-00805f9b34fb
 +handle = 0x000a, uuid = 00002803-0000-1000-8000-00805f9b34fb
 +handle = 0x000b, uuid = 00002a04-0000-1000-8000-00805f9b34fb
 +handle = 0x000c, uuid = 00002800-0000-1000-8000-00805f9b34fb
 +handle = 0x000d, uuid = 00002803-0000-1000-8000-00805f9b34fb
 +handle = 0x000e, uuid = 00002a05-0000-1000-8000-00805f9b34fb
 +handle = 0x000f, uuid = 00002902-0000-1000-8000-00805f9b34fb
 +handle = 0x0010, uuid = 00002800-0000-1000-8000-00805f9b34fb
 +handle = 0x0011, uuid = 00002803-0000-1000-8000-00805f9b34fb
 +handle = 0x0012, uuid = 0000fee1-494c-4f47-4943-544543480000
 +handle = 0x0013, uuid = 00002902-0000-1000-8000-00805f9b34fb
 +handle = 0x0014, uuid = 00002803-0000-1000-8000-00805f9b34fb
 +handle = 0x0015, uuid = 0000fee2-494c-4f47-4943-544543480000
 +handle = 0x0016, uuid = 00002902-0000-1000-8000-00805f9b34fb
 +handle = 0x0017, uuid = 00002803-0000-1000-8000-00805f9b34fb
 +handle = 0x0018, uuid = 0000fee3-494c-4f47-4943-544543480000
 +handle = 0x0019, uuid = 00002902-0000-1000-8000-00805f9b34fb
 +handle = 0x001a, uuid = 00002800-0000-1000-8000-00805f9b34fb
 +handle = 0x001b, uuid = 00002803-0000-1000-8000-00805f9b34fb
 +handle = 0x001c, uuid = 00002a23-0000-1000-8000-00805f9b34fb
 +handle = 0x001d, uuid = 00002803-0000-1000-8000-00805f9b34fb
 +handle = 0x001e, uuid = 00002a24-0000-1000-8000-00805f9b34fb
 +handle = 0x001f, uuid = 00002803-0000-1000-8000-00805f9b34fb
 +handle = 0x0020, uuid = 00002a25-0000-1000-8000-00805f9b34fb
 +handle = 0x0021, uuid = 00002803-0000-1000-8000-00805f9b34fb
 +handle = 0x0022, uuid = 00002a26-0000-1000-8000-00805f9b34fb
 +handle = 0x0023, uuid = 00002803-0000-1000-8000-00805f9b34fb
 +handle = 0x0024, uuid = 00002a27-0000-1000-8000-00805f9b34fb
 +handle = 0x0025, uuid = 00002803-0000-1000-8000-00805f9b34fb
 +handle = 0x0026, uuid = 00002a28-0000-1000-8000-00805f9b34fb
 +handle = 0x0027, uuid = 00002803-0000-1000-8000-00805f9b34fb
 +handle = 0x0028, uuid = 00002a29-0000-1000-8000-00805f9b34fb
 +</code>
 +<code>
 +# for x in $(seq 1 40) ;do gatttool -b D0:FF:50:7A:73:6C --char-read -a $x | sed s,.*:,$x:\ ,;sleep .05 ; done
 +01:  00 18
 +02:  02 03 00 00 2a
 +03:  57 69 54 20 50 6f 77 65 72 20 4d 65 74 65 72 "WiT Power Meter"
 +04:  02 05 00 01 2a
 +05:  00 00
 +06:  0a 07 00 02 2a
 +07:  00
 +08:  08 09 00 03 2a
 +09: Characteristic value/descriptor read failed: Attribute can't be read
 +0A:  02 0b 00 04 2a
 +0B:  50 00 a0 00 00 00 e8 03
 +0C:  01 18
 +0D:  20 0e 00 05 2a
 +0E: Characteristic value/descriptor read failed: Attribute can't be read
 +0F:  00 00
 +10:  00 00 48 43 45 54 43 49 47 4f 4c 49 e0 fe 00 00
 +11:  12 12 00 00 00 48 43 45 54 43 49 47 4f 4c 49 e1 fe 00 00
 +12:  00
 +13:  00 00
 +14:  1a 15 00 00 00 48 43 45 54 43 49 47 4f 4c 49 e2 fe 00 00
 +15:  23 03 42 00 00 00 00 00 00 10 00 00 05 00 87 00 00 00 00
 +16:  00 00
 +17:  1a 18 00 00 00 48 43 45 54 43 49 47 4f 4c 49 e3 fe 00 00
 +18:  00
 +19:  00 00
 +1A:  0a 18
 +1B:  02 1c 00 23 2a
 +1C:  6c 73 7a 00 00 50 ff d0
 +1D:  02 1e 00 24 2a
 +1E:  57 49 54 20 45 31 30 30 00
 +1F:  02 20 00 25 2a
 +20: 53 4e 3a 20 30 30 30 30 30 30 00 "SN: 000000"
 +21:  02 22 00 26 2a
 +22: 46 2f 57 3a 20 56 30 31 2e 33 32 00 "F/W: V01.32"
 +23:  02 24 00 27 2a
 +24: 48 2f 57 3a 20 56 30 30 2e 30 30 00 "H/W: V00.00"
 +25:  02 26 00 28 2a
 +26: 53 2f 57 3a 20 56 30 30 2e 31 31 00 "S/W: V00.11"
 +27:  02 28 00 29 2a
 +28: 57 69 74 74 65 63 68 20 43 6f 6d 70 61 6e 79 20 4c 74 64 2e 00 "Wittech Company "
 +</code>
 +<code>
 +48 43 45 54 43 49 47 4f 4c 49 "HCETCIGOLI"
 +</code>
 +
 +==== reverse engineering: software ====
 +
 +original manufacturer's app:
 +https://play.google.com/store/apps/details?id=wit.android.ble.smartenergymeter
 +\\
 +conrad's app:
 +https://play.google.com/store/apps/details?id=cei.android.ble.smartenergymeter
 +
 +<code>
 +[~/WiTenergy]$ ls -l *apk
 +1069410 cei.android.ble.smartenergymeter.apk
 +1107808 wit.android.ble.smartenergymeter.apk
 +</code>
 +
 +the whole thing seems to be based on TI's "sensortag" app:
 +<code>
 +[~/WiTenergy]$ unzip -l wit.android.ble.smartenergymeter.apk 
 +  Length      Date    Time    Name
 +---------  ---------- -----   ----
 +   126976  2014-10-18 01:36   assets/SensorTagImgA.bin
 +   126976  2014-10-18 01:36   assets/SensorTagImgB.bin
 +[...]
 +</code>
 +<code>
 +[~/WiTenergy/wit.android.ble.smartenergymeter]$ grep -iE texas\|ti\|sensortag assets/*
 +assets/about.html:<meta name="Author" content="Texas Instruments" />
 +assets/about.html:<title>About BLE SensorTag</title>
 +assets/about.html:    <p><b>BLE SensorTag application</b> from <b>Texas Instruments</b> displays converted values from each of the six sensors
 +assets/about.html:    in the SensorTag. It also visualizes button presses. Up to four sensors may be used simultaneously (including keys).</p><hr />
 +assets/about.html:    <p class="copy">&copy; 2013-2014 Texas Instruments</p>
 +</code>
hardware/channels/meters/power/wittech_witenergy_e100.txt · Zuletzt geändert: 2023/03/28 16:49 von r00t