FCC ID: NJILOCA01 GPS Receiver, Cellular Digital modem, I/O interfac

EXHIBIT 8 USERS MANUAL CSI-Wireless Wireless-Link LoCate-001 Users Manual LoCate-001 Users Manual Document:

Date: 01/06/06 Issue:

Author:

copyright 2001 CSI-Wireless Rev. 1.0 Russ Braathen CSI-Wireless LoCate-001 Users Manual TABLE OF CONTENTS DEFINITIONS.................................................................................................................... 3 2 1 2.1 1.1 1.2 1.3 1.4 2.2 2.3 2.4 2.5 2.6 2.7 2.1.1 2.1.2 2.1.3 2.1.4 INTRODUCTION ........................................................................................................ 4 OPERATIONAL OVERVIEW ........................................................................................4 SYSTEM FEATURES ..................................................................................................6 SYSTEM DESCRIPTION..............................................................................................6 OPERATING MODES..................................................................................................7 Armed Mode ................................................................................................... 7 1.4.1 1.4.2 Active Mode.................................................................................................... 7 SYSTEM COMPONENT DESCRIPTION .................................................................. 7 TWELVE CHANNEL GPS RECEIVER. .........................................................................7 GPS Position/Velocity Fix................................................................................ 7 Geo-fences...................................................................................................... 8 Distance and Home Origin ............................................................................... 8 Differential GPS .............................................................................................. 8 SYSTEM TIMING ......................................................................................................8 EXTERNAL I/O.........................................................................................................9 EVENT MONITOR AND EXCEPTION HANDLER.............................................................9 ON BOARD DIAGNOSTICS.........................................................................................9 STATUS.................................................................................................................10 POWER CONSUMPTION PROFILE..............................................................................10 PERFORMANCE SPECIFICATIONS...................................................................... 11 3.1 CELLULAR TRANSCEIVER .......................................................................................11 3.2 GPS RECEIVER ......................................................................................................11 3.3 LOCATE-001 ANTENNA SPECIFICATIONS.................................................................12 3.3.1 Warning on use of cellular antennas ............... 12 Cellular Antenna Specifications...................................................................... 12 3.3.2 GPS Antenna Specifications ........................................................................... 12 3.3.3 ENVIRONMENTAL REQUIREMENTS..........................................................................13 Temperature and Humidity ............................................................................ 13 Vibration ...................................................................................................... 13 I/O PORTS ...........................................................................................................13 Serial Data Port............................................................................................ 13 Analogue & Digital I/O Ports......................................................................... 13 External Connector Pin Assignments .............................................................. 15 Power Lead Assignments ............................................................................... 15 4 MECHANICAL AND PHYSICAL............................................................................. 16 HOUSING...............................................................................................................16 CONNECTION & IDENTIFICATION REQUIREMENTS....................................................16 3.5.1 3.5.2 3.5.3 3.5.4 3.4.1 3.4.2 4.1 4.2 3.4 3.5 3 1 Acronyms and Abbreviations Bits per Second bps Address (Data) ADDR AMPS American Mobile Phone System Revision 1.0 Page 2 6/11/2001 CSI-Wireless Cellular Section DAC DGPS DSP EEPROM ESD ESN FCP GPS ID I/O LJU LNCC MIN PPM RAM RF RSSI RTC RX SAT SID ST TX UTC VSWR Definitions Action Aeris Almanac Baud Concierge Control Channel Ephemeris Exception Immobilizer MicroBurst Page PSTN Telematics Revision 1.0 LoCate-001 Users Manual Cellular Data Modem for AMPS Digital to Analog Converter Differential Global Positioning System Digital Signal Processor Electronic Erasable Programmable Read Only Memory Electrostatic Discharge Electronic Serial Number Function Control Processor Global Positioning System Identification (Numeric or alpha value) Inputs and/or outputs LoJack Unit LoJack Network Control Center Mobile Identification Number Parts per Million Random Access Memory Radio Frequency Received Signal Strength Indicator Real Time Clock Receiver or Receive Supervisory Audio Tone System Identification Number (Cellular switch identifier) Signaling Tone Transmitter or Transmit Universal Time Coordinated Voltage Standing Wave Ratio A programmed response to an exception. Company that invented MicroBurst A subset of orbital parameters from the GPS satellite ephemeris used to calculate approximate satellite positions and velocities. A unit of measurement specifying the signaling rate (Signals/Sec). Like a Concierge in a hotel, but offering help via cellular telephone A specific cellular communications channel designated for use by the cellular system to set up a voice telephone call between the PSTN and a cellular user A set of GPS satellite parameters used to calculate precise satellite positions and velocities. A predefined event or condition that causes a programmed response

(Action). Type of vehicle security alarm that has the capability to immobilize the vehicle by interrupting the fuel line or ignition Data communications specification using telephone signaling protocol of the Analog Cellular Telephone system The event of receiving a cellular telephone call. Also known as an incoming call or cellular page. Public Switched Telephone Network (the copper wire telephone system) New technology description of Electronic Vehicle information and security services Page 3 6/11/2001 CSI-Wireless LoCate-001 Users Manual 1 Introduction 1.1 Operational Overview The LoCate-001 vehicle unit provides a specific set of features for vehicle security and vehicle tracking through the integration of Cellular Control Channel data communications, Global Positioning System (GPS) technology, and an intelligent power management. This basic vehicle security, vehicle tracking, and event monitoring solution can be utilized in a stand-alone mode or in conjunction with a users personal communications system (cellular telephone, SMR network, or LMPR network). LOJACK NETWORK/ISP Internet 2 The Call Center Verifies the Users ID... Customer Calls Call Center on His/Her Cell Phone (any type) 1 Consumers Home Consumers Office 3 If the Users Location is Needed the Network Pings the Vehicle 4 The Vehicle Responds With Position & Status Users Cellular/PCS Carrier Control Channel Aeris Carrier The Users Concierge Service follows his/her portable phone. It doesnt remain in the Vehicle. Figure 1 - Typical LoCate-001 Consumer Application Figure 1 illustrates the typical consumer application. Standalone, the Consumer LoCate-001 operates as a vehicle security system, reporting exceptions and vehicle location through the Aeris Analog Control Channel Network. The addition of the users private Cellular or PCS phone (calling the LoJack Concierge Center) creates an end-to-end Telematics solution. Figure 2 illustrates a commercial application of the LoCate-001. Standalone the Fleet LoCate-001 provides Security, Automatic Vehicle Location, and Asset Tracking. Combining the vehicle unit with the drivers handheld Digital PCS phone creates a complete Dispatching and Fleet Management Solution. The fleet manager can send and receive messages via the LoJack Gateway and can monitor the vehicles location on demand. Revision 1.0 Page 4 6/11/2001 CSI-Wireless LoCate-001 Users Manual L o J a c k F l e e t M a n a g e m e n t N e t w o r k Internet Browser-Based Real Time Dispatching LOJACK NETWORK/ISP Browser-Based Real Time Vehicle Tracking Workers PCS Phone for voice and data dispatching Cellular/PCS Carrier Fleet OnePhoneTM OnePhone Provides Vehicle Security & AVL Aeris Cellemetry Figure 2 - Typical LoCate-001 Commercial Application Both commercial and consumer products can offer a basic set of security features for a one time cost at the point of hardware sale only. Revision 1.0 Page 5 6/11/2001 CSI-Wireless LoCate-001 Users Manual 1.2 System Features Integrated Microburst radio, GPS receiver and power management modules. The LoCate-001 unit incorporates the following major features:

Real Time Clock for scheduling and power management. Low power mode. Event schedules & triggers Protected automotive power supply. 1.3 System Description The LoCate-001 Product consists of the following major components:

Twelve Channel GPS Receiver. 600 mW Cellular Control Channel Data Modem. Highly Integrated Function Control Processor/firmware. Power Management Unit. One analogue input and two digital input lines. Digital output and relay driver outputs for interface to a vehicle security system, GPS and cellular antennas (not supplied by Wireless Link) immobilizer, and door control. Power Management Module 8 - 18v Supply Over Voltage Protection Pre Regulator Backup Regulator External I/O Module GPS Active Antenna Cellular Antenna 4.0v 3.0v 3.3v Vcc Backup 3.3v ADC 4.0v TX RX 3.0v 12 Channel SiRFStar II GPS Receiver 600mW CVDM Cellular Transceiver Microburst AMPS Chipset 126kb Program Flash Configuration EEPROM System Controller Function Control Processor RxB TxB Tx Rx Decoder Rx Tx DATA ADDR Serial EEPROM RAM FLASH System Memory External Rx External Tx 2 Digital Inputs 1 Analogue Input 2 Digital Outputs 2 Relay Coil Drivers Serial Port Protection Digital Input Protection Analogue Input Protection Digital Output Protection Relay Drivers Revision 1.0 Page 6 6/11/2001 CSI-Wireless LoCate-001 Users Manual 1.4 Operating Modes The LoCate-001 unit offers two major operating modes. 1.4.1 Armed Mode When either of the LoCate-001 digital inputs becomes active, the LoCate-001 enters the Armed mode within 1 second. The LoCate-001 will enter the Armed Mode based on activity on the analog input only during the wakeup period. The Armed Mode is a low power mode in which the only active functions are a wakeup timer and monitoring of the three input lines (the analog input is monitored only during the wakeup period). The vehicle battery level is sensed when the unit periodically wakes up to listen for messages from the LoJack Network Control Center (LNCC). The wakeup duration set by the configuration must be long enough, and its interval short enough, to account for Microburst network latencies. 1.4.2 Active Mode In the Active Mode, the cellular radio is continuously on. Status will be transmitted at the interval define by the configuration (10 minutes). 2 System Component Description The following sections provide description of the various system components. 2.1 Twelve Channel GPS Receiver. The LoCate-001 unit incorporates an integrated twelve-channel GPS receiver. 2.1.1 GPS Position/Velocity Fix. The GPS receiver establishes a position fix as shown in Table 1. Time for Fix Certainty 90%

<< 1min. Conditions GPS receiver powered on 6 24 hrs. without a current almanac, satellite ephemeris, initial position or time.

<< 30 sec.

<< 10 sec. 90%

Warm Start, GPS receiver powered on 1 6 hrs. with a current almanac, satellite ephemeris, initial position and time. 90%

Hot Start, GPS receiver powered off for less than 60 minutes with a valid almanac, satellite ephemeris, position and time. Table 1 - Establishment of Position Fix The GPS almanac is updated continuously as pages of the almanac are received during Active Mode state. During the Active Mode the GPS receiver is always powered on and attempting position fixes. The GPS receiver can be configured during the Armed Mode to specify the maximum time to fix interval allowed for the GPS receiver to get a fix before powering off the GPS. This mode is necessary in situations where the GPS antenna is completely hidden from the sky and cannot get an updated position fix during its Armed Mode wake-up/status check cycle. Revision 1.0 Page 7 6/11/2001 CSI-Wireless LoCate-001 Users Manual During the Armed mode the GPS receiver is immediately powered off after getting a valid fix and determining that the vehicle has not moved. However, the cellular transceiver will remain on for the duration of the wake-up/status check cycle to listen for messages from the LNCC. 2.1.2 Geo-fences At the time of the installation the LoCate-001 may be factory programmed with 3 Geo-fences, and defaulted to the first 0-25 mile fence as follows:

1. ID # 1, 0 to 1 miles radius 2. ID # 2, 0 to 25 miles radius 3. ID # 3, 0 to 50 miles radius Users can change these by contacting the LNCC where commands can be sent to the device to change the geo-fence. Alternatively they can execute these commands via the web page interface. A geo-fence defines a boundary or a geographic area calculated as a radius from a central point. Only one geo-fence can be enabled at a time. The LoCate-001 will send a Status message to the LNCC in the event that the vehicle crosses outside the fence selected. Each Geo-fence is defined by the following parameters:

ID (1-3) used to identify a particular constraint region. This value is created and stored by the host, not by the LoCate-001. Type (out of only) Boundary - circle with radius. Center of circle is Home Origin. Trigger - The LoCate-001 will generate an exception, when it has a valid GPS fix, based on:

1. The vehicle crossing the geo-fence, 2. When the unit powers up outside a geo-fence. 2.1.3 Distance and Home Origin One Latitude-Longitude position, referred to as Home Origin, can be kept in the FCP EEPROM configuration memory. This data point is used to calculate the radii of the selected geo-fence, and subsequently the distance from the center of the circle. In the event that the vehicle exits this circle a trigger can be generated and sent to the LNCC. 2.1.4 Differential GPS The LoCate-001 does not support DGPS computations. 2.2 System Timing The LoCate-001 unit maintains accurate system time necessary to support the Armed Mode of operation. When the GPS receiver is active and can see at least one GPS satellite the LoCate-001 system time is synchronized to the GPS time. Revision 1.0 Page 8 6/11/2001 CSI-Wireless LoCate-001 Users Manual 2.3 External I/O The seven I/O ports of the LoCate-001 device are configured as follows:

Port

1 2 3 4 5 6 7 Designation Type Function Signal Chracterics Output Relay Driver Doors Unlock Relay Output Relay Driver Starter Enable/disable Relay Input Digital Crash Sensor, Low Impact Input Digital Crash Sensor, High Impact Output Output Input Digital Digital Analogue Future Assignment Future Assignment Future Assignment Table 3 I/O Port Configuration Pulse active low, 1 second maximum Level, stays high or low as determined by MIN3 / MIN4 Active low, minimum 1 second. Rise time less than 150 microseconds Active low, minimum 1 second. Rise time less than 150 microseconds 2.4 Event Monitor and Exception Handler The LoCate-001 unit is programmed to recognize a number of events as exceptions and use these events to trigger action(s). Some examples of events are:

Excessive speed. Note this is not currently supported. Door lock open/close, as defined by monitoring of an LoCate-001 digital input.

(This feature is not used with the I/O port assignments shown in Table 3.) Not currently supported Geo-fence violation The GPS antenna disconnected. Vehicle alarm violated, as defined by monitoring of an LoCate-001 digital input. Not currently supported. (This feature is not used with the I/O port assignments shown in Table 3.) 2.5 On Board Diagnostics The LoCate-001 vehicle unit incorporates on board diagnostics and troubleshooting support that is accessible by connection to the asynchronous communications port. The following information is available:

Revision 1.0 Page 9 6/11/2001 CSI-Wireless 2.6 Status LoCate-001 Users Manual The following status criteria will be displayed in the Asset Vision Link test software, connected to the LoCate-001 via the RS232 serial port. GPS fix attained (Yes/No) Antenna Status (Connected/disconnected) Cellular RSSI Asset voltage Asset ID Internal phone number (MIN) System Identification (SID) ESN 2.7 Power Consumption Profile The LoCate-001 unit has three major operating modes:

Power Off Armed Active This is the lowest consumption mode to maintain the RTC and monitor external digital inputs. The current draw from the supply lines in this mode is less than 100 microamperes at 12 volts. In this mode the unit checks for scheduled events (not currently supported), external analog and digital inputs. Any unused modules are powered down. When processing is not required the unit runs in the power off state. The current draw from the supply lines in this mode is nominally 150 milliamperes at 12 volts. This is the full operating mode with both the GPS and the Cellular Section powered on continuously. The unit monitors exceptions, receives GPS position fixes and the Cellular Section is in the standby mode ready to receive any messages. The Cellular Section transmitter is turned on as required. The current draw from the supply lines in this mode is nominally 150 milliamperes with periods at 600 milliamperes at 12 volts when the cellular unit is in full power transmit. Revision 1.0 Page 10 6/11/2001 CSI-Wireless LoCate-001 Users Manual 3 Performance Specifications 3.1 Cellular Transceiver Parameter Specification Units Frequency Range (Tx) Frequency Range (Rx) Channel Spacing Deviation Number of Channels Antenna Impedance Receiver Sensitivity Transmitter Power Output Peak Deviation Frequency Stability Carrier Switching Time Channel Switching Time 824.010 848.970 MHz 869.010 893.970 MHz 30 KHz KHz Max. 12 832 50

-116 0.6

+/- 8

+/- 2.5 2 40 Ohms dBm typical Watts nominal KHz ppm maximum ms ms maximum Table 6 Cellular Transceiver Performance Characteristics 3.2 GPS Receiver Parameter Receiver Channels Max Solution Update rate Satellite Reacquisition Time Snap Start Hot Start Warm Start Cold Start Minimum Signal Tracked Maximum Velocity Consumption Voltage Protocols Position Accuracy Specification L1, C/A code 12 1/second 100 ms

< 2 seconds

< 8 seconds

< 38 seconds

< 45 seconds

-175 dBW

< 1,000 knots 150 mA 3.15 to 5.5 VDC NMEA v2.2, SiRF Binary 100 meter 2d RMS SA On 10 meter 2d RMS Table 7 GPS Receiver Specifications Revision 1.0 Page 11 6/11/2001 CSI-Wireless LoCate-001 Users Manual 3.3 LoCate-001 Antenna Specifications The LoCate-001 unit requires two separate antennas, Cellular and GPS. 3.3.1 Warning on use of cellular antennas The cellular antenna supplied with this unit must be used for installation and operation. Substitution of other antennas must be approved by the manufacturer for compliance to radiation safety limits. The mounting of this unit and antenna must be done by professional installers to ensure that the user will maintain at least 20 cm from the cellular antenna in normal use. 3.3.2 Cellular Antenna Specifications Parameter Frequency Gain VSWR Max Power Nominal Impedance Connector Cable Specification 824 894 MHz 3dBd Max 2:1 over range 2 watts 50 Ohms TNC 15 feet RG-174U Table 8 Cellular Antenna Specification 3.3.3 GPS Antenna Specifications Parameter Type Frequency Gain Noise Figure Operating Temp Nominal Impedance Amplifier Bias Voltage Connector Cable Antenna current supplied by LoCate-001 Specification Low Noise with Active Amplifier 1,575.42 MHz, 2 MHz 5 dBiC antenna, 24 dB active amp 1.5 dB Max

-30 to + 60 C 50 ohms 3.3 VDC, 10%

SMA 15 feet RG-174U 20 mA max Table 9 GPS Antenna Specification Revision 1.0 Page 12 6/11/2001 CSI-Wireless LoCate-001 Users Manual 3.4 Environmental Requirements 3.4.1 Temperature and Humidity Parameter Operating Temperature Range Storage Temperature Range Operating Humidity @ -30C to +60 C,

%RH non condensing Minimum

-30 C

-30 C 0 %

Maximum

+60 C

+60 C 95 %

Table 10 Temperature & Humidity Specification 3.4.2 Vibration The LoCate-001 is designed to be mounted in a non-frame area of a car or truck. 3.5 I/O PORTS 3.5.1 Serial Data Port The LoCate-001 unit has 1 serial data port for general-purpose use, unit configuration and diagnostics. The port is a 9600-baud, full duplex, no parity, asynchronous serial RS232 interface. The electrical characteristics are as follows:

Parameter Input Voltage High Input Voltage Low Output Voltage High Output Voltage Low Input Impedance Output Impedance Min 3.5V 0.6V 4.0 V 0.6V 40 KOhm 1.5 KOhm Max 5.5V 1.0V 5.5V 0.6V 75 KOhm 4.0 KOhm Table 12 Serial Data Port Specifications 3.5.2 Analogue & Digital I/O Ports The LoCate-001 has 7 I/O ports, 2 digital inputs, 2 digital outputs, 1 analogue input and 2 relay driver outputs. The electrical characteristics are as follows:

Parameter GENERAL:

Input Impedance Output Impedance DIGITAL:

Input Logic High Input Logic Low Output Logic High Output Logic Low ANALOGUE:

Input Impedance Min Max 40 KOhm 1.5 KOhm 75 KOhm 4.0 KOhm 3.5V

-0.6V 4.0 V

-0.6V 5.5V 0.6V 5.5V 0.6V 20 KOhm 40 KOhm Revision 1.0 Page 13 6/11/2001 CSI-Wireless LoCate-001 Users Manual Input High Voltage Input Low Voltage 6.5V

-0.3V RELAY DRIVER:

Output Impedance Input High Voltage for less than 1 mA draw Reverse Voltage at 1 mA draw 0V 0 ohm 0V 7.5V

-0.6V 3 ohm 32V

-2V Table 13 Analogue & Digital Ports Specifications Revision 1.0 Page 14 6/11/2001 CSI-Wireless LoCate-001 Users Manual 3.5.3 External Connector Pin Assignments The external I/O connector pin assignments are as follows:

Connector: Molex 53259-1310 or equivalent Mating connector, for customer-supplied cable harness: Molex 51067-1300 or equivalent Pin 1 2 3 4 5 6 7 8 9 10 11 12 13 Description Notes Relay Driver 1 Connects relay coil to ground, other side of relay coil goes to supply positive. Relay Driver 2 Connects relay coil to ground, other side of relay coil goes to supply positive. Digital Output 1 0 and 5 volt logic signal with 2 KOhm series impedance driven from LoCate-

001 Digital Output 2 0 and 5 volt logic signal with 2 KOhm series impedance driven from LoCate-

Digital Input 1 Digital Input 2 Analog Input Ground Serial Output Serial Input Reserved 5 Volt Reference Battery Voltage 0 and 5 volt logic signal with 300 KOhm to ground as input to LoCate-001 0 and 5 volt logic signal with 300 KOhm to ground as input to LoCate-001 001 Input for measurement, -0.3 volts to 7 volts Connects to chassis of LoCate-001 Signal from LoCate-001 to Computer Signal from Computer to LoCate-001 Reserved for factory use 5 volts with 2 KOhm series impedance, for reference use For measurement only, 0 to 20 volts range. Table 14 - External Signal Connector Note:

Pin 1 is located next to larger connector (TNC) Pin 13 is located next to smaller connector (SMA). 3.5.4 Power Lead Assignments The LoCate-001 power lead assignments are as follows:

Black Supply Battery Voltage Negative Red Supply Battery Voltage Positive Power input to Locate, battery negative with protection for current to chassis, connected to chassis with low impedance. Power input to Locate, 8 to 18 volts, 2 amp fused externally, internally protected. Table 15 - Power Supply Lead Use. Revision 1.0 Page 15 6/11/2001 CSI-Wireless LoCate-001 Users Manual 4 Mechanical and Physical 4.1 Housing The LoCate-001 consists of a PCB contained inside a housing. The approximate size of the LoCate-001 is 156 mm (L) x 100 mm (W) x 25.4 mm (H). 1. The housing is aluminium cast. 2. Three mounting tabs will allow for use of a size 10 pan head screw. 3. The outside color of the housing is black. LoCate-001 housing 4.2 Connection & Identification Requirements The LoCate-001 unit shall be supplied with the following;

1. 18 AWG twisted power (red) wire end stripped and tinned, and the ground (black) wire terminated with a size TBD ring connector. Length from cable over mold is approximately 11.5 inches (292mm). This connection is to be brought out of the housing separately from the I/O and RF connectors. 2. The I/O lines will terminate using a multi-pin connector mounted on the housing. 3. Two labels with black lettering shall be fixed to the underside of the LoCate-001 housing. The top label shall include the Barcode information as detailed in paragraph 4.3 below. The label below shall contain the FCC and DOC information. 4. No over pack box will be provided. Revision 1.0 Page 16 6/11/2001

CSI-Wireless Wireless-Link LoCate-001 Users Manual LoCate-001 Users Manual Document:

Date: 01/06/06 Issue:

Author:

copyright 2001 CSI-Wireless Rev. 1.1 Russ Braathen CSI-Wireless LoCate-001 Users Manual TABLE OF CONTENTS DEFINITIONS.................................................................................................................... 3 2 1 2.1 1.1 1.2 1.3 1.4 2.2 2.3 2.4 2.5 2.6 2.7 2.1.1 2.1.2 2.1.3 2.1.4 INTRODUCTION ........................................................................................................ 4 OPERATIONAL OVERVIEW ........................................................................................4 SYSTEM FEATURES ..................................................................................................6 SYSTEM DESCRIPTION..............................................................................................6 OPERATING MODES..................................................................................................7 Armed Mode ................................................................................................... 7 1.4.1 1.4.2 Active Mode.................................................................................................... 7 SYSTEM COMPONENT DESCRIPTION .................................................................. 7 TWELVE CHANNEL GPS RECEIVER. .........................................................................7 GPS Position/Velocity Fix................................................................................ 7 Geo-fences...................................................................................................... 8 Distance and Home Origin ............................................................................... 8 Differential GPS .............................................................................................. 8 SYSTEM TIMING ......................................................................................................8 EXTERNAL I/O.........................................................................................................9 EVENT MONITOR AND EXCEPTION HANDLER.............................................................9 ON BOARD DIAGNOSTICS.........................................................................................9 STATUS.................................................................................................................10 POWER CONSUMPTION PROFILE..............................................................................10 PERFORMANCE SPECIFICATIONS...................................................................... 11 3.1 CELLULAR TRANSCEIVER .......................................................................................11 3.2 GPS RECEIVER ......................................................................................................11 3.3 LOCATE-001 ANTENNA SPECIFICATIONS.................................................................12 3.3.1 Warning on use of cellular antennas ............... 12 Cellular Antenna Specifications...................................................................... 12 3.3.2 GPS Antenna Specifications ........................................................................... 12 3.3.3 ENVIRONMENTAL REQUIREMENTS..........................................................................13 Temperature and Humidity ............................................................................ 13 Vibration ...................................................................................................... 13 I/O PORTS ...........................................................................................................13 Serial Data Port............................................................................................ 13 Analogue & Digital I/O Ports......................................................................... 13 External Connector Pin Assignments .............................................................. 15 Power Lead Assignments ............................................................................... 15 4 MECHANICAL AND PHYSICAL............................................................................. 16 HOUSING...............................................................................................................16 CONNECTION & IDENTIFICATION REQUIREMENTS....................................................16 3.5.1 3.5.2 3.5.3 3.5.4 3.4.1 3.4.2 4.1 4.2 3.4 3.5 3 1 Acronyms and Abbreviations Bits per Second bps ADDR Address (Data) American Mobile Phone System AMPS Cellular Section Cellular Data Modem for AMPS Revision 1.1 Page 2 10/22/2001 CSI-Wireless LoCate-001 Users Manual DAC DGPS DSP EEPROM ESD ESN FCP GPS ID I/O LJU LNCC MIN PPM RAM RF RSSI RTC RX SAT SID ST TX UTC VSWR Definitions Action Aeris Almanac Baud Concierge Control Channel Ephemeris Exception Immobilizer MicroBurst Page PSTN Telematics Digital to Analog Converter Differential Global Positioning System Digital Signal Processor Electronic Erasable Programmable Read Only Memory Electrostatic Discharge Electronic Serial Number Function Control Processor Global Positioning System Identification (Numeric or alpha value) Inputs and/or outputs LoJack Unit LoJack Network Control Center Mobile Identification Number Parts per Million Random Access Memory Radio Frequency Received Signal Strength Indicator Real Time Clock Receiver or Receive Supervisory Audio Tone System Identification Number (Cellular switch identifier) Signaling Tone Transmitter or Transmit Universal Time Coordinated Voltage Standing Wave Ratio A programmed response to an exception. Company that invented MicroBurst A subset of orbital parameters from the GPS satellite ephemeris used to calculate approximate satellite positions and velocities. A unit of measurement specifying the signaling rate (Signals/Sec). Like a Concierge in a hotel, but offering help via cellular telephone A specific cellular communications channel designated for use by the cellular system to set up a voice telephone call between the PSTN and a cellular user A set of GPS satellite parameters used to calculate precise satellite positions and velocities. A predefined event or condition that causes a programmed response

(Action). Type of vehicle security alarm that has the capability to immobilize the vehicle by interrupting the fuel line or ignition Data communications specification using telephone signaling protocol of the Analog Cellular Telephone system The event of receiving a cellular telephone call. Also known as an incoming call or cellular page. Public Switched Telephone Network (the copper wire telephone system) New technology description of Electronic Vehicle information and security services Revision 1.1 Page 3 10/22/2001 CSI-Wireless LoCate-001 Users Manual 1 Introduction 1.1 Operational Overview The LoCate-001 vehicle unit provides a specific set of features for vehicle security and vehicle tracking through the integration of Cellular Control Channel data communications, Global Positioning System (GPS) technology, and an intelligent power management. This basic vehicle security, vehicle tracking, and event monitoring solution can be utilized in a stand-alone mode or in conjunction with a users personal communications system (cellular telephone, SMR network, or LMPR network). LOJACK NETWORK/ISP Internet 2 The Call Center Verifies the Users ID... Customer Calls Call Center on His/Her Cell Phone (any type) 1 Consumers Home Consumers Office 3 If the Users Location is Needed the Network Pings the Vehicle 4 The Vehicle Responds With Position & Status Users Cellular/PCS Carrier Control Channel Aeris Carrier The Users Concierge Service follows his/her portable phone. It doesnt remain in the Vehicle. Figure 1 - Typical LoCate-001 Consumer Application Figure 1 illustrates the typical consumer application. Standalone, the Consumer LoCate-001 operates as a vehicle security system, reporting exceptions and vehicle location through the Aeris Analog Control Channel Network. The addition of the users private Cellular or PCS phone (calling the LoJack Concierge Center) creates an end-to-end Telematics solution. Figure 2 illustrates a commercial application of the LoCate-001. Standalone the Fleet LoCate-001 provides Security, Automatic Vehicle Location, and Asset Tracking. Combining the vehicle unit with the drivers handheld Digital PCS phone creates a complete Dispatching and Fleet Management Solution. The fleet manager can send and receive messages via the LoJack Gateway and can monitor the vehicles location on demand. Revision 1.1 Page 4 10/22/2001 CSI-Wireless LoCate-001 Users Manual L o J a c k F l e e t M a n a g e m e n t N e t w o r k Internet Browser-Based Real Time Dispatching LOJACK NETWORK/ISP Browser-Based Real Time Vehicle Tracking Workers PCS Phone for voice and data dispatching Cellular/PCS Carrier Fleet OnePhoneTM OnePhone Provides Vehicle Security & AVL Aeris Cellemetry Figure 2 - Typical LoCate-001 Commercial Application Both commercial and consumer products can offer a basic set of security features for a one time cost at the point of hardware sale only. Revision 1.1 Page 5 10/22/2001 CSI-Wireless LoCate-001 Users Manual 1.2 System Features Integrated Microburst radio, GPS receiver and power management modules. The LoCate-001 unit incorporates the following major features:

Real Time Clock for scheduling and power management. Low power mode. Event schedules & triggers Protected automotive power supply. 1.3 System Description The LoCate-001 Product consists of the following major components:

Twelve Channel GPS Receiver. 600 mW Cellular Control Channel Data Modem. Highly Integrated Function Control Processor/firmware. Power Management Unit. One analogue input and two digital input lines. Digital output and relay driver outputs for interface to a vehicle security system, GPS and cellular antennas (not supplied by Wireless Link) immobilizer, and door control. Power Management Module 8 - 18v Supply Over Voltage Protection Pre Regulator Backup Regulator External I/O Module GPS Active Antenna Cellular Antenna 4.0v 3.0v 3.3v Vcc Backup 3.3v ADC 4.0v TX RX 3.0v 12 Channel SiRFStar II GPS Receiver 600mW CVDM Cellular Transceiver Microburst AMPS Chipset 126kb Program Flash Configuration EEPROM System Controller Function Control Processor RxB TxB Tx Rx Decoder Rx Tx DATA ADDR Serial EEPROM RAM FLASH System Memory External Rx External Tx 2 Digital Inputs 1 Analogue Input 2 Digital Outputs 2 Relay Coil Drivers Serial Port Protection Digital Input Protection Analogue Input Protection Digital Output Protection Relay Drivers Revision 1.1 Page 6 10/22/2001 CSI-Wireless LoCate-001 Users Manual 1.4 Operating Modes The LoCate-001 unit offers two major operating modes. 1.4.1 Armed Mode When either of the LoCate-001 digital inputs becomes active, the LoCate-001 enters the Armed mode within 1 second. The LoCate-001 will enter the Armed Mode based on activity on the analog input only during the wakeup period. The Armed Mode is a low power mode in which the only active functions are a wakeup timer and monitoring of the three input lines (the analog input is monitored only during the wakeup period). The vehicle battery level is sensed when the unit periodically wakes up to listen for messages from the LoJack Network Control Center (LNCC). The wakeup duration set by the configuration must be long enough, and its interval short enough, to account for Microburst network latencies. 1.4.2 Active Mode In the Active Mode, the cellular radio is continuously on. Status will be transmitted at the interval define by the configuration (10 minutes). 2 System Component Description The following sections provide description of the various system components. 2.1 Twelve Channel GPS Receiver. The LoCate-001 unit incorporates an integrated twelve-channel GPS receiver. 2.1.1 GPS Position/Velocity Fix. The GPS receiver establishes a position fix as shown in Table 1. Time for Fix Certainty 90%

<< 1min. Conditions GPS receiver powered on 6 24 hrs. without a current almanac, satellite ephemeris, initial position or time.

<< 30 sec.

<< 10 sec. 90%

Warm Start, GPS receiver powered on 1 6 hrs. with a current almanac, satellite ephemeris, initial position and time. 90%

Hot Start, GPS receiver powered off for less than 60 minutes with a valid almanac, satellite ephemeris, position and time. Table 1 - Establishment of Position Fix The GPS almanac is updated continuously as pages of the almanac are received during Active Mode state. During the Active Mode the GPS receiver is always powered on and attempting position fixes. The GPS receiver can be configured during the Armed Mode to specify the maximum time to fix interval allowed for the GPS receiver to get a fix before powering off the GPS. This mode is necessary in situations where the GPS antenna is completely hidden from the sky and cannot get an updated position fix during its Armed Mode wake-up/status check cycle. Revision 1.1 Page 7 10/22/2001 CSI-Wireless LoCate-001 Users Manual During the Armed mode the GPS receiver is immediately powered off after getting a valid fix and determining that the vehicle has not moved. However, the cellular transceiver will remain on for the duration of the wake-up/status check cycle to listen for messages from the LNCC. 2.1.2 Geo-fences At the time of the installation the LoCate-001 may be factory programmed with 3 Geo-fences, and defaulted to the first 0-25 mile fence as follows:

1. ID # 1, 0 to 1 miles radius 2. ID # 2, 0 to 25 miles radius 3. ID # 3, 0 to 50 miles radius Users can change these by contacting the LNCC where commands can be sent to the device to change the geo-fence. Alternatively they can execute these commands via the web page interface. A geo-fence defines a boundary or a geographic area calculated as a radius from a central point. Only one geo-fence can be enabled at a time. The LoCate-001 will send a Status message to the LNCC in the event that the vehicle crosses outside the fence selected. Each Geo-fence is defined by the following parameters:

ID (1-3) used to identify a particular constraint region. This value is created and stored by the host, not by the LoCate-001. Type (out of only) Boundary - circle with radius. Center of circle is Home Origin. Trigger - The LoCate-001 will generate an exception, when it has a valid GPS fix, based on:

1. The vehicle crossing the geo-fence, 2. When the unit powers up outside a geo-fence. 2.1.3 Distance and Home Origin One Latitude-Longitude position, referred to as Home Origin, can be kept in the FCP EEPROM configuration memory. This data point is used to calculate the radii of the selected geo-fence, and subsequently the distance from the center of the circle. In the event that the vehicle exits this circle a trigger can be generated and sent to the LNCC. 2.1.4 Differential GPS The LoCate-001 does not support DGPS computations. 2.2 System Timing The LoCate-001 unit maintains accurate system time necessary to support the Armed Mode of operation. When the GPS receiver is active and can see at least one GPS satellite the LoCate-001 system time is synchronized to the GPS time. Revision 1.1 Page 8 10/22/2001 CSI-Wireless LoCate-001 Users Manual 2.3 External I/O The seven I/O ports of the LoCate-001 device are configured as follows:

Port

1 2 3 4 5 6 7 Designation Type Function Signal Chracterics Output Relay Driver Doors Unlock Relay Output Relay Driver Starter Enable/disable Relay Input Digital Crash Sensor, Low Impact Input Digital Crash Sensor, High Impact Output Output Input Digital Digital Analogue Future Assignment Future Assignment Future Assignment Table 3 I/O Port Configuration Pulse active low, 1 second maximum Level, stays high or low as determined by MIN3 / MIN4 Active low, minimum 1 second. Rise time less than 150 microseconds Active low, minimum 1 second. Rise time less than 150 microseconds 2.4 Event Monitor and Exception Handler The LoCate-001 unit is programmed to recognize a number of events as exceptions and use these events to trigger action(s). Some examples of events are:

Excessive speed. Note this is not currently supported. Door lock open/close, as defined by monitoring of an LoCate-001 digital input.

(This feature is not used with the I/O port assignments shown in Table 3.) Not currently supported Geo-fence violation The GPS antenna disconnected. Vehicle alarm violated, as defined by monitoring of an LoCate-001 digital input. Not currently supported. (This feature is not used with the I/O port assignments shown in Table 3.) 2.5 On Board Diagnostics The LoCate-001 vehicle unit incorporates on board diagnostics and troubleshooting support that is accessible by connection to the asynchronous communications port. The following information is available:

Revision 1.1 Page 9 10/22/2001 CSI-Wireless 2.6 Status LoCate-001 Users Manual The following status criteria will be displayed in the Asset Vision Link test software, connected to the LoCate-001 via the RS232 serial port. GPS fix attained (Yes/No) Antenna Status (Connected/disconnected) Cellular RSSI Asset voltage Asset ID Internal phone number (MIN) System Identification (SID) ESN 2.7 Power Consumption Profile The LoCate-001 unit has three major operating modes:

Power Off Armed Active This is the lowest consumption mode to maintain the RTC and monitor external digital inputs. The current draw from the supply lines in this mode is less than 100 microamperes at 12 volts. In this mode the unit checks for scheduled events (not currently supported), external analog and digital inputs. Any unused modules are powered down. When processing is not required the unit runs in the power off state. The current draw from the supply lines in this mode is nominally 150 milliamperes at 12 volts. This is the full operating mode with both the GPS and the Cellular Section powered on continuously. The unit monitors exceptions, receives GPS position fixes and the Cellular Section is in the standby mode ready to receive any messages. The Cellular Section transmitter is turned on as required. The current draw from the supply lines in this mode is nominally 150 milliamperes with periods at 600 milliamperes at 12 volts when the cellular unit is in full power transmit. Revision 1.1 Page 10 10/22/2001 CSI-Wireless LoCate-001 Users Manual 3 Performance Specifications 3.1 Cellular Transceiver Parameter Specification Units Frequency Range (Tx) Frequency Range (Rx) Channel Spacing Deviation Number of Channels Antenna Impedance Receiver Sensitivity Transmitter Power Output Peak Deviation Frequency Stability Carrier Switching Time Channel Switching Time 824.010 848.970 MHz 869.010 893.970 MHz KHz 30 KHz Max. 12 832 50

-116 0.6

+/- 8

+/- 2.5 2 40 Ohms dBm typical Watts nominal KHz ppm maximum ms ms maximum Table 6 Cellular Transceiver Performance Characteristics 3.2 GPS Receiver Parameter Receiver Channels Max Solution Update rate Satellite Reacquisition Time Snap Start Hot Start Warm Start Cold Start Minimum Signal Tracked Maximum Velocity Consumption Voltage Protocols Position Accuracy Specification L1, C/A code 12 1/second 100 ms

< 2 seconds

< 8 seconds

< 38 seconds

< 45 seconds

-175 dBW

< 1,000 knots 150 mA 3.15 to 5.5 VDC NMEA v2.2, SiRF Binary 100 meter 2d RMS SA On 10 meter 2d RMS Table 7 GPS Receiver Specifications Revision 1.1 Page 11 10/22/2001 CSI-Wireless LoCate-001 Users Manual 3.3 LoCate-001 Antenna Specifications The LoCate-001 unit requires two separate antennas, Cellular and GPS. 3.3.1 Warning on use of cellular antennas The cellular antenna supplied with this unit must be used for installation and operation. Substitution of other antennas must be approved by the manufacturer for compliance to radiation safety limits. The mounting of this unit and antenna must be done by professional installers to ensure that the user or nearby persons will maintain at least 20 cm from the cellular antenna in normal use. 3.3.2 Cellular Antenna Specifications Parameter Frequency Gain VSWR Max Power Nominal Impedance Connector Cable Specification 824 894 MHz 3 dBd maximum Max 2:1 over range 2 watts 50 Ohms TNC 15 feet RG-174U Table 8 Cellular Antenna Specification 3.3.3 GPS Antenna Specifications Parameter Type Frequency Gain Noise Figure Operating Temp Nominal Impedance Amplifier Bias Voltage Connector Cable Antenna current supplied by LoCate-001 Specification Low Noise with Active Amplifier 1,575.42 MHz, 2 MHz 5 dBiC antenna, 24 dB active amp 1.5 dB Max

-30 to + 60 C 50 ohms 3.3 VDC, 10%

SMA 15 feet RG-174U 20 mA max Table 9 GPS Antenna Specification Revision 1.1 Page 12 10/22/2001 CSI-Wireless LoCate-001 Users Manual 3.4 Environmental Requirements 3.4.1 Temperature and Humidity Parameter Operating Temperature Range Storage Temperature Range Operating Humidity @ -30C to +60 C,

%RH non condensing Minimum

-30 C

-30 C 0 %

Maximum

+60 C

+60 C 95 %

Table 10 Temperature & Humidity Specification 3.4.2 Vibration The LoCate-001 is designed to be mounted in a non-frame area of a car or truck. 3.5 I/O PORTS 3.5.1 Serial Data Port The LoCate-001 unit has 1 serial data port for general-purpose use, unit configuration and diagnostics. The port is a 9600-baud, full duplex, no parity, asynchronous serial RS232 interface. The electrical characteristics are as follows:

Parameter Input Voltage High Input Voltage Low Output Voltage High Output Voltage Low Input Impedance Output Impedance Min 3.5V 0.6V 4.0 V 0.6V 40 KOhm 1.5 KOhm Max 5.5V 1.0V 5.5V 0.6V 75 KOhm 4.0 KOhm Table 12 Serial Data Port Specifications 3.5.2 Analogue & Digital I/O Ports The LoCate-001 has 7 I/O ports, 2 digital inputs, 2 digital outputs, 1 analogue input and 2 relay driver outputs. The electrical characteristics are as follows:

Parameter GENERAL:

Input Impedance Output Impedance DIGITAL:

Input Logic High Input Logic Low Output Logic High Output Logic Low ANALOGUE:

Input Impedance Min Max 40 KOhm 1.5 KOhm 75 KOhm 4.0 KOhm 3.5V

-0.6V 4.0 V

-0.6V 5.5V 0.6V 5.5V 0.6V 20 KOhm 40 KOhm Revision 1.1 Page 13 10/22/2001 CSI-Wireless LoCate-001 Users Manual Input High Voltage Input Low Voltage 6.5V

-0.3V RELAY DRIVER:

Output Impedance Input High Voltage for less than 1 mA draw Reverse Voltage at 1 mA draw 0V 0 ohm 0V 7.5V

-0.6V 3 ohm 32V

-2V Table 13 Analogue & Digital Ports Specifications Revision 1.1 Page 14 10/22/2001 CSI-Wireless LoCate-001 Users Manual 3.5.3 External Connector Pin Assignments The external I/O connector pin assignments are as follows:

Connector: Molex 53259-1310 or equivalent Mating connector, for customer-supplied cable harness: Molex 51067-1300 or equivalent Pin 1 2 3 4 5 6 7 8 9 10 11 12 13 Description Notes Relay Driver 1 Connects relay coil to ground, other side of relay coil goes to supply positive. Relay Driver 2 Connects relay coil to ground, other side of relay coil goes to supply positive. 0 and 5 volt logic signal with 2 KOhm series impedance driven from LoCate-

Digital Output 1 001 Digital Output 2 0 and 5 volt logic signal with 2 KOhm series impedance driven from LoCate-

Digital Input 1 Digital Input 2 Analog Input Ground Serial Output Serial Input Reserved 5 Volt Reference Battery Voltage 0 and 5 volt logic signal with 300 KOhm to ground as input to LoCate-001 0 and 5 volt logic signal with 300 KOhm to ground as input to LoCate-001 001 Input for measurement, -0.3 volts to 7 volts Connects to chassis of LoCate-001 Signal from LoCate-001 to Computer Signal from Computer to LoCate-001 Reserved for factory use 5 volts with 2 KOhm series impedance, for reference use For measurement only, 0 to 20 volts range. Table 14 - External Signal Connector Note:

Pin 1 is located next to larger connector (TNC) Pin 13 is located next to smaller connector (SMA). 3.5.4 Power Lead Assignments The LoCate-001 power lead assignments are as follows:

Black Supply Battery Voltage Negative Red Supply Battery Voltage Positive Power input to Locate, battery negative with protection for current to chassis, connected to chassis with low impedance. Power input to Locate, 8 to 18 volts, 2 amp fused externally, internally protected. Table 15 - Power Supply Lead Use. Revision 1.1 Page 15 10/22/2001 CSI-Wireless LoCate-001 Users Manual 4 Mechanical and Physical 4.1 Housing The LoCate-001 consists of a PCB contained inside a housing. The approximate size of the LoCate-001 is 156 mm (L) x 100 mm (W) x 25.4 mm (H). 1. The housing is aluminium cast. 2. Three mounting tabs will allow for use of a size 10 pan head screw. 3. The outside color of the housing is black. LoCate-001 housing 4.2 Connection & Identification Requirements The LoCate-001 unit shall be supplied with the following;

1. 18 AWG twisted power (red) wire end stripped and tinned, and the ground (black) wire terminated with a size TBD ring connector. Length from cable over mold is approximately 11.5 inches (292mm). This connection is to be brought out of the housing separately from the I/O and RF connectors. 2. The I/O lines will terminate using a multi-pin connector mounted on the housing. 3. Two labels with black lettering shall be fixed to the underside of the LoCate-001 housing. The top label shall include the Barcode information as detailed in paragraph 4.3 below. The label below shall contain the FCC and DOC information. 4. No over pack box will be provided. Revision 1.1 Page 16 10/22/2001