www.concoxcom.

br

Version：V3.0

Level：Confidential

Shenzhen Concox Information Technology Co., Ltd

GPS Tracker
Communication Protocol
(CRX3)

www.concox.com.br 1
 www.concoxcom.br

Content

I. PROTOCOL PACKET FORMAT ................................................................................................................................................ 3

1.1 Protocol Number......................................................................................................................................................... 3

II. PROTOCOL PACKET .............................................................................................................................................................. 4

1. Login packet ............................................................................................................................................................... 4

1.1Login message packet --------------------------------------------------------------------------------------------------------------------------- 4
1.2 Login packet response（server response） ---------------------------------------------------------------------------------------------- 5
2. Heartbeat Packet ........................................................................................................................................................ 6
2.1. Heartbeat packet sent by terminal --------------------------------------------------------------------------------------------------------- 6
2.2 Server responds the heartbeat packet ----------------------------------------------------------------------------------------------------- 7
3. GPS location packet ..................................................................................................................................................... 8
3.1 Location packet sent by terminal ------------------------------------------------------------------------------------------------------------ 8
3.2 Server location packet response ----------------------------------------------------------------------------------------------------------- 10
Location packet server no response ------------------------------------------------------------------------------------------------------------- 10
4 LBS Multiple Bases Extension Packet ...................................................................................................................... 11
a) Terminal sent LBS multiple bases extension packet------------------------------------------------------------------------------------- 11
b) Server reply: No need to reply. -------------------------------------------------------------------------------------------------------------- 12
5 Alarm Packet ............................................................................................................................................................ 13
5.1 Alarm packet sent by terminal ------------------------------------------------------------------------------------------------------------- 13
5.2 Alarm packet response of server ---------------------------------------------------------------------------------------------------------- 15
6 Online command ....................................................................................................................................................... 16
6.1 Online command sent by server ----------------------------------------------------------------------------------------------------------- 16
6.2 Online command replied by terminal----------------------------------------------------------------------------------------------------- 16
7 Time Packet .............................................................................................................................................................. 18
7.2 Time request sent by terminal--------------------------------------------------------------------------------------------------------------- 18
7.3 Server response time information ---------------------------------------------------------------------------------------------------------- 18
8 Information transmission packet.............................................................................................................................. 19
8.2 Information transmission packet sent by terminal ----------------------------------------------------------------------------------- 19
8.3 Server Response Information Transmission Packet ----------------------------------------------------------------------------------- 22
Server no Response --------------------------------------------------------------------------------------------------------------------------------- 22

III. APPENDIX ........................................................................................................................................................................ 23

1. code fragment of the CRC-ITU lookup table algorithm implemented based on C language .................................. 23
2. Data Flow Diagram................................................................................................................................................... 24

www.concox.com.br 2
 www.concoxcom.br

I. Protocol Packet Format

Length
Format Description
(Byte)
Start Bit 2 0x780x78（packet length : 1bit）or 0x79x79（packet length 2 bits）
Length = Protocol Number + Information Content + Information Serial Number
Packet Length 1(2)
+ Error Check
Protocol Number 1 Transmission packet type（see the following diagram for details）
Information The specific contents are determined by the protocol numbers corresponding to
N
Content different applications.
The serial number of the first GPRS data (including status packet and data packet
Information Serial
2 such as GPS, LBS) sent after booting is ‘1’, and the serial number of data sent
Number
later at each time will be automatically added ‘1’.

Error check (From “Packet Length” to“Information Serial Number”) , are
Error Check 2 values of CRC-ITU. CRC error occur when the received information is
calculated, the receiver will ignore and discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D0x0A

1.1 Protocol Number

Login Information 0x01
Positioning Data（UTC） 0x22
Heartbeat Packet 0x13
Online Command Response of Terminal 0x21
Alarm Data（UTC） 0x26
LBS Multiple Bases Extension Packet 0x28
Online Command 0x80
Time Check Packet 0x8A
Information Transmission Packet 0x94

www.concox.com.br 3
 www.concoxcom.br

II. Protocol Packet

1. Login packet
Description：
 Login packet is the information packet connecting the terminal and platform. It can send terminal
information to platform.
 If a GPRS connection is established successfully, the terminal will send a first login message packet
to the server and, within five seconds, if the terminal receives a data packet responded by the server,
the connection is considered to be a normal connection; if not, the terminal will send login packet
again.
 If no packet returned by server within 5 seconds, then the response of login packet is timeout.
 Terminal reboot automatically after 3 timeouts.

1.1Login message packet

Length Description
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content + Information
Packet Length 1
Serial Number + Error Check
Protocol Number 1 0x01
Example：IMEI number is 123456789123456，terminal ID is：0x01
Terminal ID 8
0x23 0x45 0x67 0x89 0x120x34 0x56
Model
Information
Identification 2 Distinguish model of terminal by identification code.
Content
Code
Time Zone
2 See the following chart for details of time zone language mark.
Language
The serial number of the first GPRS data (including status packet
and data packet such as GPS, LBS) sent after booting is ‘1’, and
Information Serial Number 2
the serial number of data sent later at each time will be
automatically added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when the
Error Check 2
received information is calculated, the receiver will ignore and
discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A
Example：78 78 11 01 07 52 53 36 78 90 02 42 70 00 32 01 00 05 12 79 0D 0A

Time Zone Language

15
One and a
14
half bits
13 Time zone value expands 100 times
bit15—bit
12
4
11

www.concox.com.br 4
 www.concoxcom.br

10
9
8
7
6
5
4
3 GMT
Lower
2 No definition
half
1 Language Select Bit Chinese
bit4-bit0
0 Language Select Bit English
Bit3 0-------Eastern time
1-------Western time
Example: Extended bit: 0x32 0x00 means GMT+8
Calculation method: 8*100=800 converts to HEX: 0X0320
Extended bit: 0x4D 0xD8 means GMT-12:45
Calculation method: 12.45*100=1245 converts to HEX: 0x04 0xDD
Here, to save 4 bytes, calculation result left shifted 4 bits and combined eastern time, western time and
language bit.

1.2 Login packet response（server response）

1. Length Description
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content + Information Serial
Packet Length 1
Number + Error Check
Protocol Number 1 0x01
Information Serial Serial number of data sent later each time will be automatically added
2
Number ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when the received
Error Check 2
information is calculated, the receiver will ignore and discard the data
packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A
Example：78 78 05 01 00 05 9F F8 0D 0A

www.concox.com.br 5
 www.concoxcom.br

2. Heartbeat Packet
Description：
a) Heartbeat packet is a data packet to maintain the connection between the terminal and the server.
b) If a GPRS connection is established successfully, the terminal will send a first login message packet to the
server and, within five seconds, if the terminal receives a data packet responded by the server, the
connection is considered to be a normal connection; if not, the terminal will send login packet again.
c) If no packet returned by server within 5 seconds, then the response of heartbeat packet is timeout.
d) Terminal reboot automatically after 3 timeouts.

2.1. Heartbeat packet sent by terminal

Heartbeat Packet
Length
Description
(Byte)
Start Bit 2 0x780x78
Length = Protocol Number + Information Content +
Packet Length 1
Information Serial Number + Error Check
Protocol Number 1 0x13
Terminal
Information 1 See the following diagram for details
Content
0x00：No Power (shutdown)
0x01：Extremely Low Battery (not enough for calling or
sending text messages, etc.)
0x02：Very Low Battery (Low Battery Alarm)
Voltage Level 1
0x03：Low Battery (can be used normally)
Information 0x04：Medium
Content 0x05：High
0x06：Full
0x00: no signal;
0x01: extremely weak signal;
GSM Signal
1 0x02: weak signal;
Strength
0x03: good signal;
0x04: strong signal.
Language/Extended
2 latter bit 0x01 Chinese 0x02 English
Port Status
Serial number of data sent later each time will be
Serial Number 2
automatically added ‘1’.
Error check (From“Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when
Error Check 2
the received information is calculated, the receiver will
ignore and discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value: 0x0D 0x0A
Example：78 78 0A 13 40 04 04 00 01 00 0F DC EE 0D 0A

www.concox.com.br 6
 www.concoxcom.br

Terminal Information
One byte is consumed defining for various status information of the mobile phone.
Bit Code Meaning
1: Oil and electricity disconnected
Bit7
0: Oil and electricity connected
1: GPS tracking is on
Bit6
0: GPS tracking is off
Bit3～Bit5 Extended Bit
BYTE 1: Charge On
Bit2
0: Charge Off
1: ACC high
Bit1
0: ACC Low
1: Defense Activated
Bit0
0: Defense Deactivated
2.2 Server responds the heartbeat packet
Length
Description
(Byte)
Start Bit 2 0x780x78
Length = Protocol Number + Information Content + Information
Packet Length 1
Serial Number + Error Check
Protocol Number 1 0x13
Serial number of data sent later at each time will be automatically
Serial Number 2
added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when the
Error Check 2
received information is calculated, the receiver will ignore and
discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value: 0x0D0x0A
Example ：78 78 05 13 01 00 E1 A0 0D 0A

www.concox.com.br 7
 www.concoxcom.br

3. GPS location packet

Description：
a) Data packet used to transmit terminal location
b) Upload locating data based on rule after successfully connected and positioned.
c) Re-upload locating data after successfully connected.

3.1 Location packet sent by terminal

Length Description
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content + Information
Packet Length 1
Serial Number + Error Check
Protocol Number 1 0x22 (UTC)
Year（1byte）Month（1byte）Day（1byte）Hour（1byte）Min
Date Time 6
（1byte）Second（1byte）（converted to decimal）(Date Time)
Quantity of The first character is GPS information length. The second
1
GPS satellites character is positioning satellite number（converted to a decimal）
Latitude 4 Convert to a decimal and divide 1800000
Longitude 4 Convert to a decimal and divide 1800000
Speed 1 Convert to a decimal
Convert to binary number of 16 bits and calculate by bits (see the
Course, Status 2
following diagram)
MCC 2 Mobile Country Code(MCC) (converted to a decimal)
MNC 1 Mobile Network Code(MNC)(converted to a decimal)
LAC 2 Location Area Code (LAC) (converted to a decimal)
Information
Content Cell ID 3 Cell Tower ID(Cell ID)(converted to a decimal)
ACC 1 ACC Status ACC low: 00, ACC high: 01（not available for 06 ）
GPS data upload mode（06 series are excluded）
0x00 Upload by time interval
0x01 Upload by distance interval
Data Upload
1 0x02 Inflection point upload
Mode
0x03 ACC status upload
0x04 Re-upload the last GPS point when back to static.
0x05 Upload the last effective point when network recovers.
GPS Real-Time
1 0x00 Real time upload 0x01 Re-upload（06 series are excluded）
Re-upload
Divided by 100 after turn HEX into decimal. (Only available for
Mileage 4
devices with this function)
Serial number of data sent later at each time will be automatically
Serial Number 2
added ‘1’.
Error Check 2 Error check (From “Packet Length” to“Information Serial

www.concox.com.br 8
 www.concoxcom.br

Number”) , are values of CRC-ITU. CRC error occur when the

received information is calculated, the receiver will ignore and
discard the data packet. (See
Appendix 1)and discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A
Example：78 78 22 22 0F 0C 1D 02 33 05 C9 02 7A C8 18 0C 46 58 60 00 14 00 01 CC 00 28 7D 00 1F 71 00
00 01 00 08 20 86 0D 0A

i. Course & Status

Two bytes are consumed, defining the running direction of GPS. The value ranges from 0° to 360°
measured clockwise from north of 0°.
Bit7 0
Bit6 0
GPS real-time/differential
Bit5
positioning
BYTE_1 Bit4 GPS having been positioning or not
Bit3 East Longitude, West Longitude
Bit2 South Latitude, North Latitude
Bit1
Bit0
Bit7
Bit6
Bit5
Course
Bit4
BYTE_2
Bit3
Bit2
Bit1
Bit0

For example: the value is 0x15 0x4C, the corresponding binary is 00010101 01001100,
BYTE_1 Bit7 0
BYTE_1 Bit6 0
BYTE_1 Bit5 0 (real time GPS)
BYTE_1 Bit4 1 (GPS has been positioned)
BYTE_1 Bit3 0 (East Longitude)
BYTE_1 Bit2 1 (North Latitude)
BYTE_1 Bit1 0
BYTE_1 Bit0 1
BYTE_2 Bit7 0
BYTE_2 Bit6 1
BYTE_2 Bit5 0 Course 332° (0101001100 in Binary, or 332 in decimal)
BYTE_2 Bit4 0
BYTE_2 Bit3 1
www.concox.com.br 9
 www.concoxcom.br

BYTE_2 Bit2 1
BYTE_2 Bit1 0
BYTE_2 Bit0 0
which means GPS tracking is on, real time GPS, location at north latitude, east longitude and the course is
332°.

3.2 Server location packet response

Location packet server no response

www.concox.com.br 10
 www.concoxcom.br

4 LBS Multiple Bases Extension Packet

Description：For transmission of data packet when device is not located
a) Terminal sent LBS multiple bases extension packet
Length Description
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content +
Packet Length 1
Information Serial Number + Error Check
Protocol Number 1 0x28
Year（1byte）Month（1byte）Day（1byte）Hour（1byte）
DATE（UTC） 6 Min（1byte）Second（1byte）（converted to a decimal）
(Date Time)
MCC 2 Mobile Country Code(MCC) (converted to a decimal)
MNC 1 Mobile Network Code(MNC)(converted to a decimal)
LAC 2 Location Area Code (LAC) (converted to a decimal)
CI 3 Cell Tower ID(Cell ID)(converted to a decimal)
Signal level of community, range 0x00～0xFF,
RSSI 1 0x00 Weakest signal
0xFF Strongest signal
NLAC1 2 Same as LAC
NCI1 3 Same as CI
NRSSI1 1 Same as RSSI
NLAC2 2 Same as LAC
NCI2 3 Same as CI
Information NRSSI2 1 Same as RSSI
Content NLAC3 2 Same as LAC
NCI3 3 Same as CI
NRSSI3 1 Same as RSSI
NLAC4 2 Same as LAC
NCI4 3 Same as CI
NRSSI4 1 Same as RSSI
NLAC5 2 Same as LAC
NCI5 3 Same as CI
NRSSI5 1 Same as RSSI
NLAC6 2 Same as LAC
NCI6 3 Same as CI
NRSSI6 1 Same as RSSI
Value= “Actual time of signal from Mobile Station to
Timing
1 Location base”-“Time of signal from Mobile Station
Advance
to Location base supposed the distance is 0”
LANGUAGE 2 0x00 0x01Chinese 0x00 0x02English
Serial number of data sent later at each time will be
Serial Number 2
automatically added ‘1’.

www.concox.com.br 11
 www.concoxcom.br

Error check (From “Packet Length” to

“Information Serial Number”) , are values of
Error Check 2 CRC-ITU. CRC error occur when the received
information is calculated, the receiver will ignore and
discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A
Example：7878 3B 28 10 01 0D 02 02 02 01 CC 00 28 7D 00 1F 71 3E 28 7D 00 1F 72 31 28 7D 00
1E 23 2D 28 7D 00 1F 40 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF 00 02 00
05 B1 4B 0D 0A
b) Server reply: No need to reply.

www.concox.com.br 12
 www.concoxcom.br

5 Alarm Packet
Description：
a) Transmit alarm content defined by terminal
b) Server response and parse longitude and latitude into address and re-upload to terminal after receiving the
alarm content
c) Terminal send address to pre-set SOS number of device.

5.1 Alarm packet sent by terminal

Alarm packet（one fence）
Length Description
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content +
Packet Length 1
Information Serial Number + Error Check
Protocol Number 1 0x26（UTC）
Year（1byte）Month（1byte）Day（1byte）Hour（1byte）
Date Time 6 Min（1byte）Second（1byte）
（converted to a decimal）(Date
Time)
Quantity of GPS The first character is GPS information length，The second
information 1 character is positioning satellite number （ converted to a
satellites decimal）
Latitude 4 Convert to a decimal and divide 1800000
Longitude 4 Convert to a decimal and divide 1800000
Speed 1 Convert to a decimal
Convert to binary number of 16 bits and calculate by bits (see
Course, Status 2 the following diagram)（same as GPS packet, see GPS packet
for details）
LBS length 1 LBS length in total (LBS length +MCC +MNC +Cell ID)
MCC 2 Mobile Country Code(MCC) (converted to a decimal)
Information
MNC 1 Mobile Network Code(MNC)(converted to a decimal)
Content
LAC 2 Location Area Code (LAC) (converted to a decimal)
Cell ID 3 Cell Tower ID(Cell ID)(converted to a decimal)
Terminal
1 See the following diagram
Information
0x00：No Power (shutdown)
0x01：Extremely Low Battery (not enough for calling or
sending text messages, etc.)
0x02：Very Low Battery (Low Battery Alarm)
Voltage Level 1
0x03：Low Battery (can be used normally)
0x04：Medium
0x05：High
0x06：Full
GSM Signal 0x00: no signal;
1
Strength 0x01: extremely weak signal;

www.concox.com.br 13
 www.concoxcom.br

0x02: weak signal;

0x03: good signal;
0x04: strong signal.
Alarm/Language 2 See the following diagram
Serial number of data sent later at each time will be
Serial Number 2
automatically added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when
Error Check 2
the received information is calculated, the receiver will ignore
and discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A
Example：78 78 25 26 0F 0C 1D 03 0B 26 C9 02 7A C8 18 0C 46 58 60 00 04 00 09 01 CC 00 28 7D 00 1F 71
80 04 04 13 02 00 0C 47 2A 0D 0A

i. Terminal Information
Bit Code Meaning
1:Oil and electricity disconnected
Bit7
0: Oil and electricity connected
1: GPS tracking is on
Bit6
0: GPS tracking is off
100: SOS
011: Low Battery Alarm
Bit3～Bit5 010: Power Cut Alarm
BYTE 001:Vibration Alarm
000: Normal
1: Charging
Bit2
0: Not Charge
1: ACC high
Bit1
0: ACC Low
1: Defense Activated
Bit0
0: Defense Deactivated

i. Alarm language
0x00：normal
0x01：SOS
0x02：Power cut alarm
Byte 1 0x03: Vibration alarm
0x04:Enter fence alarm
0x05:Exit fence alarm
0x06 Over speed alarm

www.concox.com.br 14
 www.concoxcom.br

0x09 Moving alarm

0x0A Enter GPS dead zone alarm
0x0BExit GPS dead zone alarm
0x0C Power on alarm
0x0D GPS First fix notice
0x0E Low battery alarm
0x0F Low battery protection alarm
0x10SIM change notice
0x11Power low-off alarm
0x12Airplane mode alarm
0x13Disassemble alarm
0x14 Door alarm
0x15 Shutdown alarm
0x01Chinese
Byte 2 0x02 English
0x00 No need for reply

5.2 Alarm packet response of server

Length Description
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content + Information
Packet Length 1
Serial Number + Error Check
Protocol Number 1 0x26（UTC）
Serial number of data sent later at each time will be automatically
Information Serial Number 2
added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when the
Error Check 2
received information is calculated, the receiver will ignore and
discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A
Example：78 78 05 26 00 1C 9D 86 0D 0A

www.concox.com.br 15
 www.concoxcom.br

6 Online command
Description：
a) Use server online command to control terminal to execute task.
b) Terminal response results to server.

6.1 Online command sent by server

Length Description
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content + Information
Length of data bit 1
Serial Number + Error Check
Protocol Number 1 0x80
Length of
1 Server flag bit + command content length + language
Command
Information Leave for server identification. Terminal receives the original
Server Flag Bit 4
Content data in Binary in response packet
Command Character string replied in ASCII coding. Command content is
M
Content compatible with SMS command.
Serial number of data sent later at each time will be automatically
Information Serial Number 2
added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when the
Error Check 2
received information is calculated, the receiver will ignore and
discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A
Example ：78 78 0E 80 08 00 00 00 00 73 6F 73 23 00 01 6D 6A 0D 0A

6.2 Online command replied by terminal

Terminal reply（general command）
Length Description
Start Bit 2 0x79 0x79
Length = Protocol Number + Information Content + Information
Length of data bit 2
Serial Number + Error Check
Protocol Number 1 0x21
Server Flag Leave for server identification. Terminal receives the original data in
4
Bit Binary in response packet
Information
Content 0x01 ASCⅡcode
Content 1
Code 0x02 UTF16-BE code.
Content M Data needed to be sent（according to content code format）
Serial number of data sent later at each time will be automatically
Information Serial Number 2
added ‘1’.
Error check (From “Packet Length” to“Information Serial
Error Check 2
Number”) , are values of CRC-ITU. CRC error occur when the
www.concox.com.br 16
 www.concoxcom.br

received information is calculated, the receiver will ignore and

discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A
Example：79 79 00 9D 21 00 00 00 00 01 42 61 74 74 65 72 79 3A 34 2E 31 36 56 2C 4E 4F 52 4D 41 4C
3B 20 47 50 52 53 3A 4C 69 6E 6B 20 55 70 3B 20 47 53 4D 20 53 69 67 6E 61 6C 20 4C 65 76 65 6C
3A 53 74 72 6F 6E 67 3B 20 47 50 53 3A 53 65 61 72 63 68 69 6E 67 20 73 61 74 65 6C 6C 69 74 65 2C
20 53 56 53 20 55 73 65 64 20 69 6E 20 66 69 78 3A 30 28 30 29 2C 20 47 50 53 20 53 69 67 6E 61 6C
20 4C 65 76 65 6C 3A 3B 20 41 43 43 3A 4F 46 46 3B 20 44 65 66 65 6E 73 65 3A 4F 46 46 00 2E 26
DF 0D 0A

www.concox.com.br 17
 www.concoxcom.br

7 Time Packet
Description：
7.1.1.1 Used for checking time request sent by terminal to server, avoiding wrong time.
7.1.1.2 Server response right time and format. Time is UTC time.
7.2 Time request sent by terminal
Length
Description
(Byte)
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content +
Packet Length 1
Information Serial Number + Error Check
Protocol Number 1 0x8A
Serial number of data sent later at each time will be
Serial Number 2
automatically added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when
Error Check 2
the received information is calculated, the receiver will ignore
and discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value: 0x0D0x0A
Example：78 78 05 8A 00 06 88 29 0D 0A

7.3 Server response time information

Length Description
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content +
Packet Length 1
Information Serial Number + Error Check
Protocol Number 1 0x8A（UTC）
Year（1byte）Month（1byte）Day（1byte）Hour（1byte）
Information
Date Time 6 Min（1byte）Second（1byte）（converted to a decimal）
Content
(Date Time
Serial number of data sent later at each time will be
Serial Number 2
automatically added ‘1’.
Error check (From “Packet Length” to“Information
Serial Number”) , are values of CRC-ITU. CRC error
Error Check 2 occur when the received information is calculated, the
receiver will ignore and discard the data packet. (See
Appendix 1)
Stop Bit 2 Fixed value: 0x0D0x0A
Example：78 78 0B 8A 0F 0C 1D 00 00 15 00 06 F0 86 0D 0A

www.concox.com.br 18
 www.concoxcom.br

8 Information transmission packet

Description：
8.1.1.1 Terminal transmits all types of non-position data.

8.2 Information transmission packet sent by terminal

Length Description
Start Bit 2 0x790x79
Length = Protocol Number + Information
Length of data bit 2 Content + Information Serial Number + Error
Check
Protocol Number 1 0x94
00 External power voltage
Information
01~03（custom）
Type
1 04 terminal status synchronization
（Sub-protocol
Information 05 door status
Number）
Content ……to add
Different information type results in different
Data Content N transmission content. See the following for
details.
Serial number of data sent later at each time will
Information Serial Number 2
be automatically added ‘1’.
Error check (From “Packet Length” to
“Information Serial Number”) , are values of
CRC-ITU. CRC error occur when the received
Error Check 2
information is calculated, the receiver will
ignore and discard the data packet. (See
Appendix 1)
Stop Bit 2 Fixed value:0x0D0x0A
Example：79 79 00 7F 94 04 41 4C 4D 31 3D 43 34 3B 41 4C 4D 32 3D 43 43 3B 41 4C 4D 33 3D 34 43 3B
53 54 41 31 3D 43 30 3B 44 59 44 3D 30 31 3B 53 4F 53 3D 2C 2C 3B 43 45 4E 54 45 52 3D 3B 46 45 4E 43
45 3D 46 65 6E 63 65 2C 4F 4E 2C 30 2C 32 33 2E 31 31 31 38 30 39 2C 31 31 34 2E 34 30 39 32 36 34 2C
34 30 30 2C 49 4E 20 6F 72 20 4F 55 54 2C 30 3B 4D 49 46 49 3D 4D 49 46 49 2C 4F 46 46 00 0A 06 1E 0D
0A

Transmitted information content

When type is 00，the bit transmit external battery. This bit is two-digit hexadecimal value. Hexadecimal value
converted to decimal value and divide 100
Example：0X04,0X9F, 049F converted to decimal is 101183，then divide 100 is 11.83, which means external
voltage is 11.83V
When type is 04, the bit transmits information of terminal status synchronization. The bit length extended.
Transmission is ASCII code.

Definition of content identifier

www.concox.com.br 19
 www.concoxcom.br

Definition Identifier
Alarm Bit1 ALM1
Alarm Bit 2 ALM2
Alarm Bit 3 ALM3
Status Bit 1 STA1
SOS Number SOS
Centre Number CENTER
Fence FENCE
Fuel/Electricity
DYD
Cutoff Status
Mode MODE
 ALM1 Definition (Status）
Bit Definition Mark
bit7 Vibration Alarm 1 ON 0 OFF
bit6 Network Alarm 1 ON 0 OFF
bit5 Phone Alarm 1 ON 0 OFF
bit4 SMS Alarm 1 ON 0 OFF
bit3 Displacement Alarm 1 ON 0 OFF
bit2 Network Alarm 1 ON 0 OFF
bit1 Phone Alarm 1 ON 0 OFF
bit0 SMS Alarm 1 ON 0 OFF
 ALM2 Definition (Status）
Bit Definition Mark
Low Internal Battery
bit7 1 ON 0 OFF
Alarm
bit6 Network Alarm 1 ON 0 OFF
bit5 Phone Alarm 1 ON 0 OFF
bit4 SMS Alarm 1 ON 0 OFF
Low External Battery
bit3 1 ON 0 OFF
Alarm
bit2 Network Alarm 1 ON 0 OFF
bit1 Phone Alarm 1 ON 0 OFF
bit0 SMS Alarm 1 ON 0 OFF
 ALM3 Definition (Status）
Bit Definition Mark
bit7 Overspeed Alarm 1 ON 0 OFF
bit6 Network Alarm 1 ON 0 OFF
bit5 Phone Alarm 1 ON 0 OFF
bit4 SMSAlarm 1 ON 0 OFF
bit3 Power Off Alarm 1 ON 0 OFF
bit2 Network Alarm 1 ON 0 OFF
bit1 Phone Alarm 1 ON 0 OFF

www.concox.com.br 20
 www.concoxcom.br

bit0 SMS Alarm 1 ON 0 OFF

 STA1 Definition (Status）
Bit Definition Mark
bit7 Arm Status 1 Arm 0 Disarm
bit6 Automatically Arm 1 ON 0 OFF
bit5 Manually Arm 1 ON 0 OFF
bit4 Remotely Disarm 1 ON 0 OFF
bit3 To Be Defined
bit2 To Be Defined
bit1 Disassembly OFF 1 ON 0 OFF
Disassembly Alarm
bit0 1 ON 0 OFF
Status

 Fuel/Electricity Status Definition

Bit Definition Mark
bit7 Undefined
bit6 Undefined
bit5 Undefined
bit4 Undefined
bit3 Deferred execution caused by overspeed 1Valid bit 0 Invalid bit
bit2 Deferred execution caused by GPS unlocated 1Valid bit 0 Invalid bit
bit1 Oil/Electricity cutoff 1Valid bit 0 Invalid bit
bit0 Oil/Electricity connection 1Valid bit 0 Invalid bit

 SOS definition：adopt ASCII to transmit（use “,” to separate if multiple SOS numbers）

 Center number definition：adopt ASCII to transmit
 Fence definition：adopt ASCII to transmit
 Mode：adopt ASCII to transmit(separate parameters by “，”)

Example ： ALM1=FF;ALM2=FF;ALM3=FF;STA1=CO ； DYD=01 ； SOS=12345 ， 2345 ， 5678 ；

CENTER=987654;FENCE=FENCE,ON,0,-22.277120,-113.516763,5,IN,1；MODE=MODE,1,20,500
Notice：Not all contents are transmitted and please parse based on bits. Different products upload different
contents.

When type is 05，this bit transmit external IO detection( door checking). Transmission is hexadecimal.
Bit Definition Mark
bit7 To Be Defined
bit6 To Be Defined
bit5 To Be Defined
bit4 To Be Defined
bit3 To Be Defined
bit2 IO Status 1 High 0 Low
bit1 Triggering Status 1High triggering
www.concox.com.br 21
 www.concoxcom.br

0 Low triggering
bit0 Door Status 1ON 0 OFF

8.3 Server Response Information Transmission Packet

Server no Response

www.concox.com.br 22
 www.concoxcom.br

iii. Appendix
1. code fragment of the CRC-ITU lookup table algorithm implemented based on C language
staticconstU16crctab16[]=
{
0X0000,0X1189,0X2312,0X329B,0X4624,0X57AD,0X6536,0X74BF,
0X8C48,0X9DC1,0XAF5A,0XBED3,0XCA6C,0XDBE5,0XE97E,0XF8F7,
0X1081,0X0108,0X3393,0X221A,0X56A5,0X472C,0X75B7,0X643E,
0X9CC9,0X8D40,0XBFDB,0XAE52,0XDAED,0XCB64,0XF9FF,0XE876,
0X2102,0X308B,0X0210,0X1399,0X6726,0X76AF,0X4434,0X55BD,
0XAD4A,0XBCC3,0X8E58,0X9FD1,0XEB6E,0XFAE7,0XC87C,0XD9F5,
0X3183,0X200A,0X1291,0X0318,0X77A7,0X662E,0X54B5,0X453C,
0XBDCB,0XAC42,0X9ED9,0X8F50,0XFBEF,0XEA66,0XD8FD,0XC974,
0X4204,0X538D,0X6116,0X709F,0X0420,0X15A9,0X2732,0X36BB,
0XCE4C,0XDFC5,0XED5E,0XFCD7,0X8868,0X99E1,0XAB7A,0XBAF3,
0X5285,0X430C,0X7197,0X601E,0X14A1,0X0528,0X37B3,0X263A,
0XDECD,0XCF44,0XFDDF,0XEC56,0X98E9,0X8960,0XBBFB,0XAA72,
0X6306,0X728F,0X4014,0X519D,0X2522,0X34AB,0X0630,0X17B9,
0XEF4E,0XFEC7,0XCC5C,0XDDD5,0XA96A,0XB8E3,0X8A78,0X9BF1,
0X7387,0X620E,0X5095,0X411C,0X35A3,0X242A,0X16B1,0X0738,
0XFFCF,0XEE46,0XDCDD,0XCD54,0XB9EB,0XA862,0X9AF9,0X8B70,
0X8408,0X9581,0XA71A,0XB693,0XC22C,0XD3A5,0XE13E,0XF0B7,
0X0840,0X19C9,0X2B52,0X3ADB,0X4E64,0X5FED,0X6D76,0X7CFF,
0X9489,0X8500,0XB79B,0XA612,0XD2AD,0XC324,0XF1BF,0XE036,
0X18C1,0X0948,0X3BD3,0X2A5A,0X5EE5,0X4F6C,0X7DF7,0X6C7E,
0XA50A,0XB483,0X8618,0X9791,0XE32E,0XF2A7,0XC03C,0XD1B5,
0X2942,0X38CB,0X0A50,0X1BD9,0X6F66,0X7EEF,0X4C74,0X5DFD,
0XB58B,0XA402,0X9699,0X8710,0XF3AF,0XE226,0XD0BD,0XC134,
0X39C3,0X284A,0X1AD1,0X0B58,0X7FE7,0X6E6E,0X5CF5,0X4D7C,
0XC60C,0XD785,0XE51E,0XF497,0X8028,0X91A1,0XA33A,0XB2B3,
0X4A44,0X5BCD,0X6956,0X78DF,0X0C60,0X1DE9,0X2F72,0X3EFB,
0XD68D,0XC704,0XF59F,0XE416,0X90A9,0X8120,0XB3BB,0XA232,
0X5AC5,0X4B4C,0X79D7,0X685E,0X1CE1,0X0D68,0X3FF3,0X2E7A,
0XE70E,0XF687,0XC41C,0XD595,0XA12A,0XB0A3,0X8238,0X93B1,
0X6B46,0X7ACF,0X4854,0X59DD,0X2D62,0X3CEB,0X0E70,0X1FF9,
0XF78F,0XE606,0XD49D,0XC514,0XB1AB,0XA022,0X92B9,0X8330,
0X7BC7,0X6A4E,0X58D5,0X495C,0X3DE3,0X2C6A,0X1EF1,0X0F78,
};

//calculate the 16-bit CRC of data with predetermined length.

U16GetCrc16(constU8*pData,intnLength)
{
U16fcs=0xffff;//initialization
while(nLength>0){
fcs=(fcs>>8)^crctab16[(fcs^*pData)&0xff];
nLength--;
pData++;
}
return~fcs;//negated
}

www.concox.com.br 23
 www.concoxcom.br

2. Data Flow Diagram

Terminal boot &

greater than 20min, terminal reboot
reboot

less than 20min, reconnect

greater than
establish GPRS reconnection time
fail 20 min,
connection? ?
reboot

successful

send login data packet to server send login message packet less than 20min, reconnect reconnection time?

the reply data from the server is

server reply data which is response to the login packet No
correct?

Yes
backend data server

connection is
alarm status
successful

interval of
alarm packet location data packet heartbeat packet
heartbeat packet

send alarm packet to server upload regularly

send location data packet to the server

interval of
uploading the
location data

send heartbeat data packet to the server

fail to receive response
upload regularly from the server within
5min

response of heartbeat packet

yes from the server is normal?
No

server reply data which is response to the heartbeat packet

ShenZhen Concox Information Technology CO.,Ltd

E-mail: [email protected]
Add: 4/F, Building B, Gaoxinqi Industrial Park,
Liuxian 1st Road, No.67 Bao'an District, Shenzhen
www.concox.com.br

www.concox.com.br 24