BMS Main 2.

Modbus protocol

Revision 5 (24–October–2023)
 Contents
General information ................................................................................................................... 3

Input registers ............................................................................................................................. 5

Holding registers ...................................................................................................................... 22

Contacts ...................................................................................................................................... 27

Revision history ........................................................................................................................ 28

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 2
 General information

The BMS Main 2.x board provides the information about the battery system using
Modbus protocol. The BMS is a Modbus-server and it responds to the Modbus-client’s
commands.

Interaction with the board is performed over the RS-485 bus (Modbus RTU) or the
Ethernet network (Modbus TCP).

RS-485 bus connection parameters:

• baud rate, bps — 600, 1200, 2400, 4800, 9600 (by default), 19200, 38400, 57600,
115200;
• word length, bits — 8;
• parity — none;
• board address (by default) — 32.

Ethernet connection parameters:

• port — 502.

There is a description of the Input и Holding registers below. Column "Type" contains
method of parameters coding:

U8 — unsigned 8-bit integer number;

U16 — unsigned 16-bit integer number;

S16 — signed 16-bit integer number;

U32 — unsigned 32-bit integer number;

REAL32 — single precision floating point number (IEEE 754 standard);

U8[x] — array of unsigned 8-bit integer numbers having a length of x;

U16[x] — array of unsigned 16-bit integer numbers having a length of x;

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 3
 REAL32[x] — array of single precision floating point numbers having a length of x.

The ordering of bytes of a word — little endian.

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 4
 Input registers

Register Number of
Content Type
address registers

Hardware version:

0x0000 1 byte 0 — minor; U8[2]

byte 1 — major.

Firmware version:

byte 0 — patch;
0x0001-
2 byte 1 — minor; U8[4]
0x0002
byte 2 — major;

byte 3 — not used (set to 0).

Bootloader version:

byte 0 — patch;
0x0003-
2 byte 1 — minor; U8[4]
0x0004
byte 2 — major;

byte 3 — not used (set to 0).

Current time on the board clock:

byte 0 — day (BCD);

byte 1 — month (BCD);

0x1000-
3 byte 2 — year (BCD); U8[6]
0x1003
byte 3 — hours (BCD);

byte 4 — minutes (BCD);

byte 5 — seconds (BCD).

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 5
 Discrete input signals (bitfield):

bit 0 — signal "Battery cover opened";

bit 1 — signal "Charger connected";

bit 2 — signal "Power down request";

0x2000 1 bit 3 — signal "Inhibit charging"; U16

bit 4 — signal "Inhibit discharging";

bit 5 — signal “Charging contactor feedback”;

bit 6 — signal “Discharging contactor feedback”;

bit 7 — signal “Insulation status”.

0x2001-
2 Current, А REAL32
0x2002

0x2003-
2 External temperature, °C REAL32
0x2004

0x2005-
2 Humidity, RH% REAL32
0x2006

Errors 1 (bitfield):

bit 0 — error "Overcurrent";

bit 1 — error "Undervoltage";

bit 2 — error "Overvoltage";

0x2007-
2 bit 3 — error "Low DCH temperature"; U32
0x2008
bit 4 — error "High DCH temperature";

bit 5 — error "Battery cover";

bit 6 — error "High humidity";

bit 7 — error "Water";

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 6
 bit 8 — error "Logic high temperature";

bit 9 — error "Logic offline";

bit 10 — "Critical error";

bit 11 — error "Crown truck offline";

bit 12 — "Cell count error";

bit 13 — error "HYG truck offline";

bit 14 — need to acknowledge errors;

bit 15 — error "Combilift truck offline";

bit 16 — error "Short circuit";

bit 17 — error "Contactor high temperature";

bit 18 — "Logic count error";

bit 19 — "ADC error";

bit 20 — open or short circuit in the current sensor

circuitry;

bit 21 — large number of switching of the charging

contactor;

bit 22 — large number of switching of the

discharging contactor;

bit 23 — error "BMS Current Sensor offline";

bit 24 — internal error of the BMS Current Sensor;

bit 25 — wrong checksum of the board settings;

bit 26 — board is reset by the WDT;

bit 27 — error "No temperature sensors";

bit 28 — error "Temperature sensor shorted";

bit 29 — error “Spirit offline”;

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 7
 bits 30-31 – not used.

Battery system state (bitfield):

bit 0 — signal "Low SOC";

bit 1 — signal "High charging current";

bit 2 — charge contactor state (0 – opened, 1 –

closed);

bit 3 — signal "Allow charging";

bit 4 — signal "Charging current present";

bit 5 — discharge contactor state (0 – opened, 1 –

closed);

bit 6 — signal "Discharging current present";

bit 7 — signal "High voltage" (EV);

0x2009- bit 8 — signal "Heater" (0 – off, 1 – on);

2 U32
0x200A
bit 9 — signal "Cooler" (0 – off, 1 – on);

bit 10 — shutdown request from the HYG truck;

bit 11 — initialization of the board (current sensor

is calibrating, or BMS Logic boards are scanning);

bit 12 — precharge contactor state (0 – opened, 1

– closed);

bit 13 — shutdown request from Combilift truck;

bit 14 — signal "Cell analysis";

bit 15 — balancing of the cell series #1;

bit 16 — balancing of the cell series #2;

bit 17 — auxiliary discharge contactor state (0 –

opened, 1 – closed);

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 8
 bit 18 — shutdown acknowledge;

bit 19 — EWS signal from the Crown truck;

bit 20 — main contactor state (0 – opened, 1 -

closed);

bit 21 – signal to reset the BMS (service reset);

bit 22 - state of the charging/discharging

contactor (0 – opened, 1 – closed);

bit 23 – signal “Ready to charge”;

bit 24 – signal “Ready to discharge”;

bit 25 – signal “Power up”;

bits 26-31 – not used.

Discrete output signals (bitfield):

bit 0 — state of the output #1;

bit 1 — state of the output #2;

0x200B 1 U16
bit 2 — state of the output #3;

bit 3 — state of the output #4;

bits 4-15 — not used.

Relay states (bitfield):

bit 0 — state of the relay #1;

bit 1 — state of the relay #2;

0x200C 1 U16
bit 2 — state of the relay #3;

bit 3 — state of the relay #4;

bits 4-15 — not used.

0x200E 2 Errors 2 (bitfield): U32

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 9
 bit 0 — error "Low CH temperature";

bit 1 — error “High CH temperature”;

bit 2 — SD card mounting error;

bit 3 — SD card filesystem error;

bit 4 — error “Unallowable charging”;

bit 5 — error “Stuck contactor”;

bit 6 — “CH contactor feedback error”;

bit 7 — “DCH contactor feedback error”;

bit 8 – “Insulation fault”;

bit 9 – “PCH contactor feedback error”;

bit 10 – “CH/DCH contactor feedback error”;

bit 11 – “Main contactor feedback error”;

bits 12-31 — not used.

Address or the BMS Logic board whose

0x2010 1 U16
parameters are in registers 0x2011-0x20C9

BMS Logic board state (bitfield):

bit 0 — board is present;

bit 1 — board is online;

bit 2 — board is ready;

0x2011 1 bit 3 — data from the board is actual; U16

bit 4 — temperature sensor #1 is present;

bit 5 — temperature sensor #2 is present;

bit 6 — temperature sensor #1 is shorted;

bit 7 — temperature sensor #2 is shorted;

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 10
 bits 8-15 — not used.

0x2012-
2 Board temperature, °C REAL32
0x2013

0x2014- Cell balancing flags (bitfield):

2 U32
0x2015 bit i — balancing resistor is connected to the ith cell.

Array of cells states. Each element of the array

corresponds to a cell and is a bitfield:

bit 0 — cell is present;

bit 1 — temperature sensor is present;

0x2016- bit 2 — need to connect a balancing resistor to the

20 U16[20]
0x2029 cell;

bit 3 — balancing resistor is connected to the cell;

bit 4 — temperature sensor is shorted;

bit 5 — wires are connected to the cell;

bits 6-15 — not used.

0x202A-
40 Array of cells voltages (V) REAL32[20]
0x2051

0x2052-
40 Array of cells temperatures (°C) REAL32[20]
0x2079

0x207A-
40 Array of cells SOCs (%) REAL32[20]
0x20A1

0x20A2-
40 Array of cells resistances (Ohm) REAL32[20]
0x20C9

0x2100-
2 Battery state of charge (SOC), % REAL32
0x2101

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 11
0x2102 1 Number of BMS Logic boards U16

0x2103 1 Number of cells U16

0x2104-
2 Battery voltage, V REAL32
0x2105

0x2106-
2 Battery resistance, Ohm REAL32
0x2107

0x2108-
2 Effective capacity, A×h REAL32
0x2109

0x210A-
2 Balancing effectivity, % REAL32
0x210B

0x210C-
2 State of health, % REAL32
0x210D

0x210E-
2 Depth of discharge, A×h REAL32
0x210F

0x2110-
2 Minimum BMS Logic temperature REAL32
0x2111

Address of the BMS Logic board whose

0x2112 1 U16
temperature is minimal

0x2113-
2 Maximum BMS Logic temperature REAL32
0x2114

Address of the BMS Logic board whose

0x2115 1 U16
temperature is maximal

0x2116-
2 BMS Logic polling rate, commands pre second REAL32
0x2117

0x2118-
2 Minimum cell temperature REAL32
0x2119

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 12
 Address of the BMS Logic board which is
0x211A 1 connected to the cell whose temperature is U16
minimal

0x211B 1 Position of the cell whose temperature is minimal U16

0x211C-
2 Maximum cell temperature REAL32
0x211D

Address of the BMS Logic board which is

0x211E 1 connected to the cell whose temperature is U16
maximal

0x211F 1 Position of the cell whose temperature is maximal U16

0x2120-
2 Minimum cell voltage REAL32
0x2121

Address of the BMS Logic board which is

0x2122 1 U16
connected to the cell whose voltage is minimal

0x2123 1 Position of the cell whose voltage is minimal U16

0x2124-
2 Maximum cell voltage REAL32
0x2125

Address of the BMS Logic board which is

0x2126 1 U16
connected to the cell whose voltage is maximal

0x2127 1 Position of the cell whose voltage is maximal U16

Error flag:

0x2128 1 0 — no errors; U16

1 — there are some errors.

0x2129 1 J1939 charge voltage, 0,1V/bit U16

0x212A 1 J1939 charge current, 0,1A/bit U16

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 13
 J1939 charger state (bitfield):

bit 0 — hardware fault;

bit 1 — high temperature;

0x212B 1 bit 2 — invalid input voltage; U16

bit 3 — invalid battery voltage;

bit 4 — offline;

bits 5-15 — not used.

0x2130-
2 Energy received from the charger, W×h REAL32
0x2131

0x2132-
2 Energy consumed by the load, W×h REAL32
0x2133

0x2134-
2 Energy dissipated by the balancing resistors, W×h REAL32
0x2135

SD-card mounting flag:

0x2140 1 0 — not mounted; U16

1 — mounted.

0x2141 1 Reserved U16

0x2142 1 Reserved U16

Eltek charger state:

1 — no charging;

0x2150 1 2 — charging; U16

3 — recoverable error;

4 — nonrecoverable error.

0x2151 1 Eltek input current, 0,1A/bit U16

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 14
0x2152 1 Eltek output current, 0,1A/bit U16

0x2153 1 Eltek input voltage, 1V/bit U16

0x2154 1 Eltek output voltage, 0,1V/bit U16

0x2155 1 Eltek input frequency, 1Hz/bit U16

0x2156 1 Eltek primary temperature, 1°C/bit S16

0x2157 1 Eltek secondary temperature, 1°C/bit S16

0x2158 1 Eltek available power, 0,5%/bit U16

0x2159 1 Eltek maximum power, 1W/bit U16

Eltek errors (bitfield):

bit 0 — overvoltage (recoverable error);

bit 1 — not used;

bit 2 — internal communication error

(nonrecoverable error);

bit 3 — high mains (recoverable error);

bit 4 — low mains (recoverable error);

0x215A-
2 bit 5 — high temperature (recoverable error U32
0x215B
bit 6 — low temperature (recoverable error);

bit 7 — current limited (recoverable error);

bit 8 — not used;

bit 9 — transformer error (nonrecoverable error);

bits 10-15 — not used;

bit 16 — undervoltage (recoverable error);

bit 17 — control timeout (recoverable error);

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 15
 bits 18-31 — not used.

0x2160 1 Sunny Island discharge voltage, 0,1V/bit U16

0x2161 1 Sunny Island current, 0,1A/bit S16

0x2162 1 Sunny Island temperature, 0,1ºC/bit S16

0x2163 1 Sunny Island SOC, 0,01%/bit U16

0x2164 1 Sunny Island SOH, 0,01%/bit U16

0x2165 1 Sunny Island mode U16

0x2166 1 Sunny Island state U16

0x2167 1 Sunny Island errors U16

0x2168 1 Sunny Island charge voltage, 0,01V/bit U16

Wi-Fi connection status:

0x2170 1 0 — no connection; U16

1 — connection is established.

0x2171-
2 IP-address in the Wi-Fi network U8[4]
0x2172

0x2173-
3 MAC-address of the Wi-Fi module U8[6]
0x2175

BMS Crown communication status:

0x2176 1 0 — offline; U16

1 — online.

0x2177 1 Voltage on the A2 line of the BMS Crown, 0,1V/bit U16

0x2178 1 Voltage on the A1 line of the BMS Crown, 0,1V/bit U16

0x2179- 2 Instant effective capacity, A×h REAL32

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 16
0x217A

0x217B-
2 Coulomb received from the charger, A×h REAL32
0x217C

0x217D-
2 Coulomb consumed by the load, A×h REAL32
0x217E

0x217F-
2 Ethernet IP-address U8[4]
0x2180

0x2181-
2 Ethernet netmask U8[4]
0x2182

0x2183-
2 Ethernet gateway U8[4]
0x2184

0x2185-
2 Current zero level, V REAL32
0x2186

0x2187 1 HYG truck feedback U16

HYG truck communication state:

0x2188 1 0 — offline; U16

1 — online.

BMS Indication interaction state:

0 — no actions;

1 — reading settings of the BMS Indication;

0x2189 1 U16
2 — settings are read;

3 — writing settings to the BMS Indication;

4 — settings are written.

Part of parameters which have been read or

0x218A 1 U16
written from/to the BMS Indication, %

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 17
0x218B 1 Combilift truck feedback U16

Combilift truck communication state:

0x218C 1 0 — offline; U16

1 — online.

UPS Parus communication state:

0x218D 1 0 — offline; U16

1 — online.

0x218E 2 Instant voltage from the current sensor, V REAL32

0x2190 2 Instant zero level from the current sensor, V REAL32

0x2192 2 Instant voltage from the auxiliary current sensor, V REAL32

Instant zero level from the auxiliary current sensor,

0x2194 2 REAL32
V

BMS Indication firmware update status:

0 — no actions;

1 — starting bootloader;
0x2196 1 U16
2 — bootloader is started;

3 — bootloader is not started;

1000-1006 — codes returned by the bootloader.

Instant value of current received from the BMS

0x2197 2 S32
Current Sensor, 1mA/bit

Average value of current received from the BMS

0x2199 2 S32
Current Sensor, 1mA/bit

BMS Current Sensor communication state:

0x219B 1 U16
0 — offline;

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 18
 1 — online.

Spirit AGV truck communication state:

0x219C 1 0 – offline; U16

1 – online.

BKM charger communication state:

0x219D 1 0 – offline; U16

1 – online.

BKM trolleybus communication state:

0x219E 1 0 – offline; U16

1 – online.

0x219F 2 Charge current limit, A REAL32

0x21A1 2 Discharge current limit, A REAL32

MicroPower charger communication state:

0x21A3 1 0 – offline; U16

1 – online.

S.P.E. charger communication state:

0x21A4 1 0 – offline; U16

1 – online.

0x21A5 1 S.P.E. charger voltage, V U16

0x21A6 1 S.P.E. charger current, A U16

Record #1 from the errors journal. First 32-bit word

0x2200-
4 contains a timestamp, second 32-bit word U32[2]
0x2203
contains errors 1 flags (see 0x2007-0x2008).

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 19
 Timestamp format:

bits 0-5 — year;

bits 6-9 — month;

bits 10-14 — day;

bits 15-19 — hours;

bits 20-25 — minutes;

bits 26-31 — seconds.

0x2204-
4 Record #2 from the errors journal U32[2]
0x2207

0x2208-
Records #3-31 from the errors journal
0x227B

0x227C-
4 Record #32 from the errors journal U32[2]
0x227F

Number of the last record from the errors journal

0x2300 1 U16
(1..32)

Record data #1 from the errors journal. First 32-bit

0x2380 4 word contains errors 2 flags (see 0x200E- U32[2]
0x200F).

0x2384-
4 Record data #2 from the errors journal U32[2]
0x2387

0x2388-
Records data #3-31 from the errors journal
0x23FB

0x23FC-
4 Record data #32 from the errors journal U32[2]
0x23FF

Current measured by the auxiliary current sensor,

0x2400 2 REAL32
A

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 20
 Final battery current, A

0x2402 2 Note — It is the sum of the values measured by the REAL32

main and auxiliary current sensors

Battery state:

0 – Unknown;

1 – Charging ON;

2 – Charging OFF;
0x2410 1 U16
3 – Relaxed (after charging);

4 – Discharging ON;

5 – Discharging OFF;

6 – Relaxed (after discharging).

0x2411 2 Duration of the battery state (0x2410), seconds U32

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 21
 Holding registers

Register Number of
Content Type
address registers

Address of the BMS Logic board whose parameters

0x4000 1 U16
should be in the input registers 0x2011-0x20C9

Command to acknowledge errors in the errors journal

(bitfield). Each ith bit corresponds to (i+1) record.

Notes:
0x4100 2 U32
1 – After the errors are acknowledged, the register
value will be set to 0.

2 – To acknowledge all errors, set 0xFFFFFFFF.

Software control of the "Battery cover" signal.

Allowable values:

0x5100 1 0 – clear the signal; U16

1 – set the signal;

2-65535 – use the physical input "Battery cover".

Software control of the "Charger connected" signal.

Allowable values:

0 – clear the signal;

0x5101 1 U16
1 – set the signal;

2-65535 – use the physical input "Charger

connected".

Software control of the "Power down request" signal.

0x5102 1 Allowable values: U16

0 – clear the signal;

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 22
 1 – set the signal;

2-65535 – use the physical input "Power down

request".

Software control of the "Inhibit charging" signal.

Allowable values:

0x5103 1 0 – clear the signal; U16

1 – set the signal;

2-65535 – use the physical input "Inhibit charging".

Software control of the "Inhibit discharging" signal.

Allowable values:

0x5104 1 0 – clear the signal; U16

1 – set the signal;

2-65535 – use the physical input "Inhibit discharging".

Software control of the "Charging contactor feedback"

signal. Allowable values:

0 – clear the signal;

0x5105 1 U16
1 – set the signal;

2-65535 – use the physical input "Charging contactor

feedback".

Software control of the "Discharging contactor

feedback" signal. Allowable values:

0 – clear the signal;

0x5106 1 U16
1 – set the signal;

2-65535 – use the physical input "Discharging

contactor feedback".

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 23
 Software control of the "Insulation status" signal.
Allowable values:

0x5107 1 0 – clear the signal; U16

1 – set the signal;

2-65535 – use the physical input "Insulation status".

Software control of the "Charge request" signal.

Allowable values:

0x5108 1 0 – clear the signal; U16

1 – set the signal;

2-65535 – use the physical input "Charge request".

Software control of the "Precharge request" signal.

Allowable values:

0x5109 1 0 – clear the signal; U16

1 – set the signal;

2-65535 – use the physical input "Precharge request".

Software control of the "Discharge request" signal.

Allowable values:

0x510A 1 0 – clear the signal; U16

1 – set the signal;

2-65535 – use the physical input "Discharge request".

Software control of the "PCH contactor feedback"

signal. Allowable values:

0x510B 1 0 – clear the signal; U16

1 – set the signal;

2-65535 – use the physical input "PCH contactor

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 24
 feedback".

Software control of the "CH/DCH contactor feedback"

signal. Allowable values:

0 – clear the signal;

0x510C 1 U16
1 – set the signal;

2-65535 – use the physical input "CH/DCH contactor

feedback".

Software control of the "Main contactor feedback"

signal. Allowable values:

0 – clear the signal;

0x510D 1 U16
1 – set the signal;

2-65535 – use the physical input "Main contactor

feedback".

Software control of the "Interlock" signal. Allowable

values:

0x510E 1 0 – clear the signal; U16

1 – set the signal;

2-65535 – use the physical input "Interlock".

Software control of the "Fuse 1" signal. Allowable

values:

0x510F 1 0 – clear the signal; U16

1 – set the signal;

2-65535 – use the physical input "Fuse 1".

Software control of the "Fuse 2" signal. Allowable

0x5110 1 U16
values:

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 25
 0 – clear the signal;

1 – set the signal;

2-65535 – use the physical input "Fuse 2".

Software control of the "Fuse 3" signal. Allowable

values:

0x5111 1 0 – clear the signal; U16

1 – set the signal;

2-65535 – use the physical input "Fuse 3".

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 26
 Contacts
Movicom Electric

7190 Sunset Blvd # 200, Los Angeles, CA, USA

+1 323 633 7033

[email protected]
movicomelectric.com

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 27
 Revision history

Rev. number Rev. date Changes

1 03–August–2021 First revision

Added the discrete input signal “Insulation status”, the

internal state “Charging/Discharging”, and the error
“Insulation fault” to the table of input registers.
2 13-January-2022
Added the software-controlled signals “Charging
contactor feedback”, “Discharging contactor feedback”,
and “Insulation status” to the table of holding registers.

Added internal signals and errors to the table of input

registers.
3 06-June-2023 Added the software-controlled signals “Charge request”,
“Precharge request”, and “Discharge request” to the table
of holding registers.

Added internal signals “Battery state” and “Duration of

the battery state” to the table of input registers.

Added the software-controlled signals “PCH contactor

4 22-September-2023
feedback”, “CH/DCH contactor feedback”, “Main
contactor feedback”, “Interlock”, “Fuse 1”, “Fuse 2”, and
“Fuse 3” to the table of holding registers.

Updated descriptions of the cell states (0x2016-0x2029)

and the final current (0x2402) in the table of input
5 24-October-2023 registers.

Added the command to acknowledge errors to the table

of holding registers.

Movicom Electric
BMS Main 2.x – Modbus protocol. Revision 5 (24-October-2023) 28