FCC ID: PY76220512 Mobile Base Unit

GT47/GT48 Integrators Manual Produc t Photo/Illustration The product described in this manual conforms to the Radio and Telecommunication Terminal Equipment (R&TTE) directive 99/5/EC with requirements covering EMC directive 89/336/EEC and Low Voltage directive 73/23/EEC. The product fulfils the requirements according to 3GPP TS 51.010-1, EN 301 489-7 and EN60950. SAR statement: This product is intended to be used with the antenna or other radiating element at least 20cm away from any part of the human body. The information contained in this document is the proprietary information of Sony Ericsson Mobile Communications International. The contents are confidential and any disclosure to persons other than the officers, employees, agents or subcontractors of the owner or licensee of this document, without the prior written consent of Sony Ericsson Mobile Communications International, is strictly prohibited. Further, no portion of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording, without the prior written consent of Sony Ericsson Mobile Communications International, the copyright holder. First edition (August 2003) Sony Ericsson Mobile Communications International publishes this manual without making any warranty as to the content contained herein. Further Sony Ericsson Mobile Communications International reserves the right to make modifications, additions and deletions to this manual due to typographical errors, inaccurate information, or improvements to programs and/or equipment at any time and without notice. Such changes will, nevertheless be incorporated into new editions of this manual. All rights reserved. Sony Ericsson Mobile Communications International, 2003 Publication number: LZT 123 7605 P1C Printed in UK Contents Overview ...................................................................................................................5 1. Introduction .............................................................................................................. 6 Target Users................................................................................................................ 6 Prerequisites................................................................................................................ 6 Manual Structure......................................................................................................... 6 2. GT47/GT48 Control Terminals................................................................................ 7 Description.................................................................................................................. 7 Highlights .................................................................................................................. 7 Control Terminals in a Communication System........................................................... 8 Main Features and Services ....................................................................................... 10 Service and Support ................................................................................................... 15 Precautions................................................................................................................ 15 3. Abbreviations and Definitions............................................................................... 16 Integrating the Control Terminal ...........................................................................18 4. Mechanical Description.......................................................................................... 19 Overview................................................................................................................... 19 Physical Dimensions.................................................................................................. 21 5. Electrical Description ............................................................................................. 22 Power Supply and Extended I/O Connector ............................................................... 22 RS232 Serial and Extended I/O Interface ................................................................... 25 Audio Connector ....................................................................................................... 31 Antenna Connector.................................................................................................... 33 SIM Card Reader ....................................................................................................... 34 Real Time Clock........................................................................................................ 35 Software Updates....................................................................................................... 35 6. Embedded Applications ......................................................................................... 36 Features..................................................................................................................... 36 Implementation......................................................................................................... 36 7. TCP/IP Stack........................................................................................................... 38 Implementation......................................................................................................... 38 8. Operation................................................................................................................. 39 Switching On the Control Terminal .......................................................................... 39 Switching Off the Control Terminal .......................................................................... 39 LZ T 123 7 605 P1C 3 Resetting the Control Terminal................................................................................. 39 Operating States/LED................................................................................................ 39 Power Save ................................................................................................................ 40 Controller Mode ........................................................................................................ 40 9. Safety and Product Care ......................................................................................... 41 Safety Instructions ..................................................................................................... 41 General Precautions................................................................................................... 41 SIM Card Precautions ................................................................................................ 42 Antenna Precautions.................................................................................................. 42 10. Installation of the Control Terminal...................................................................... 44 Where to Install the Control Terminal ...................................................................... 44 How to Install the Control Terminal ......................................................................... 45 Antenna .................................................................................................................... 46 Accessories ................................................................................................................ 47 11. Technical Data ........................................................................................................ 49 LZ T 123 7 605 P1C 4 Overview Produc t Photo/Illustration 1. Introduction 1.1 Target Users 1.2 Prerequisites GT47 and GT48 Control Terminals are designed to be integrated into machine-machine or man-to-machine communications applications. They are intended to be used by manufacturers, system integrators, applications developers and developers of wireless communications equipment. It is assumed that the person integrating the GT47/GT48 into an application has a basic understanding of the following:

GSM networking;

Wireless communication and antennas (aerials);

AT commands;

ITU-T standard V.24/V.28;

Micro controllers and programming;

Electronic hardware design. 1.3 Manual Structure The manual is composed of two parts Part 1- Overview This section provides a broad overview of the GT47/GT48 and includes a list of abbreviations used in the manual. Part 2 - Integrating the Control Terminal This section describes each of the signals available on the GT47/GT48 Control Terminal, along with mechanical information. The section also provides you with design guidelines and explains what is needed to commercialise an application from a regulatory point of view. LZ T 123 7 605 P1C 6 2. GT47/GT48 CONTROL TERMINALS 2. GT47/GT48 Control Terminals 2.1 Description Two Control Terminals make up the family; GT47 and GT48, for use in the E-GSM900/GSM1800 and GSM850/GSM1900 bands respectively. The Control Terminal has a radio device embedded in it. The GT47 incorporates the GR47 radio device; the GT48 incorporates the GR48 radio device. Note!

This manual refers to the GT47 and GT48 as Control Terminals. If there is a difference in the functionality of the Control Terminals the GT47 and GT48 information will be listed separately. The Control Terminal is a powerful and flexible device that can be used in a wide range of telemetry and telematics applications that rely on the remote exchange of data, voice, SMS or faxes via the GSM cellular network. Small and lightweight, the Control Terminal has standard connectors and an integral SIM card reader making it easy and quick to integrate. As well as providing a standard RS232 serial communication interface the Control Terminal also has an audio interface allowing an analogue handset to be connected. When the Control Terminal is integrated into an external application, a wireless communications system is created. A typical end-to-end system consists of a micro controller in an external application communicating, via the Control Terminal, with a remote terminal or host using the GSM network. The micro controller uses a set of AT commands to control the Control Terminal, and to set up the end-to-

end communications link, via its 9-way RS232 serial interface. These Control Terminals are intended to be used by manufacturers, system integrators, application developers and developers of a wide range of equipment and business solutions, typically in the following fields:

Security and alarms

Vending

Monitoring and control

Utilities

Fleet Management

Intelligent, versatile GSM/GPRS Control Terminal

Dual band, EGSM 900/GSM1800 (GT47);

GSM 850/GSM1900 (GT48)

Customised applications can be embedded and run independently

Self contained terminal with standard connectors 2.2 Highlights LZ T 123 7 605 P1C 7 2. GT47/GT48 CONTROL TERMINALS

2 x RS232 interfaces with a useful range of configurable IOs

TCP/IP stack

Data: GPRS, HSCSD, CSD, SMS

Voice: full rate, enhanced full rate, half rate; AMR (GT48)

SMS: mobile-originated, mobile-terminated, cell broadcast

Fax: Group 3, Classes 1 & 2

15 way high density connector

5V to 32V d.c. input

4-wire audio connection

Antenna connection (FME male)

R&TTE type approved (GT47) 2.3 Control Terminals in a Communication System Figures 2.1 and 2.2 illustrate the main blocks of a wireless communication system using the Control Terminal. Figure 2.1 shows the communication system when the script is embedded on the Control Terminal and figure 2.2 shows the communication system when a micro-controller is used. They also show the communication principles of the system and the interface between the Control Terminal and the application. The definitions in the figures, as used elsewhere in this manual, are in accordance with the recommendations of GSM 07.07.

The MS (mobile station) represents the Control Terminal and SIM card. The Control Terminal excluding SIM card, is known as the ME (mobile equipment).

The DTE (data terminal equipment) is the controlling application. This can be either an external host or an internal embedded application.

The DCE (data circuit terminating equipment) is the serial communication interface of the MS. LZ T 123 7 605 P1C 8 2. GT47/GT48 CONTROL TERMINALS GSM NETWORK MS SIM POWER SUPPLY GT47 / GT48 GSM ENGINE EMBEDDED APPLICATION STATUS &

RESPONSE DCE DTE AT COMMAND CONTROL S Y S T E M C O N N E C T O R Figure 2.1 Main Blocks in a Wireless System (embedded application) GSM NETWORK MS SIM POWER SUPPLY EXTERNAL APPLICATION DTE MS STATUS &

RESPONSE AT COMMAND CONTROL GT47 / GT48 GSM ENGINE DCE DTE S Y S T E M C O N N E C T O R Figure 2.2 Main Blocks in a Wireless System (external micro-controller) LZ T 123 7 605 P1C 9 2. GT47/GT48 CONTROL TERMINALS In accordance with the recommendations of ITU-T (International Telecommunication Union - Telecommunications Standardisation Sector) V.24, the TE communicates with the MS over a serial interface. The functions of the radio device follow the recommendations provided by ETSI (European Telecommunications Standards Institute) and ITU-T. ETSI specifies a set of AT commands for controlling the GSM element of the Control Terminal; these commands are supplemented by Sony Ericsson specific commands. Note!

To find out how to work with AT commands, see the GR47/GR48 AT Commands Manual. 2.4 Main Features and Services The Control Terminal performs a set of telecom services (TS) according to GSM standard phase 2+, ETSI and ITU-T. The services and functions of the Control Terminal may be implemented using customised applications embedded on the device, or by AT commands over the RS232 serial interface. 2.4.1 Types of Mobile Station The GT47 and GT48 are dual band Control Terminals with the GSM radio characteristics shown in the table below. GT47 Frequency Range (MHz) Channel spacing E-GSM900 TX: 880-915 RX: 925-960 200kHz GSM1800 TX: 1710-1785 RX: 1805-1880 200kHz Number of channels 174 carriers *8 time slots 374 carriers *8 time slots Modulation GMSK GMSK TX phase accuracy

< 5 RMS phase error (burst)

< 5 RMS phase error (burst) Duplex spacing Receiver sensitivity at antenna connector 45MHz

< 102dBm Transmitter output power at antenna connector Class 4 2W (33dBm) Automatic hand-over between EGSM 900 and GSM1800 95MHz

< 102dBm Class 1 1W (30dBm) LZ T 123 7 605 P1C 10 2. GT47/GT48 CONTROL TERMINALS GT48 Frequency Range (MHz) Channel spacing GSM850 TX: 824-849 RX: 869-894 200kHz GSM1900 TX: 1850-1910 RX: 1930-1990 200kHz Number of channels 124 carriers *8 time slots 299 carriers *8 time slots Modulation GMSK GMSK TX Phase Accuracy

< 5 RMS phase error (burst)

< 5 RMS phase error (burst) Duplex spacing Receiver sensitivity at antenna connector 45MHz

< 102dBm Transmitter output power at antenna connector Class 4 2W (33dBm) Automatic hand-over between GSM850 and GSM1900 80MHz

< 102dBm Class 1 1W (30dBm) 2.4.2 Short Message Service The Control Terminal supports the following SMS services:

Sending; MO (mobile-originated) with both PDU (protocol data unit) and text mode supported.

Receiving; MT (mobile-terminated) with both PDU and text mode supported.

CBM (cell broadcast message); a service in which a message is sent to all subscribers located in one or more specific cells in the GSM network

(for example, traffic reports). This feature is network dependent.

SMS STATUS REPORT according to GSM 03.40.

SMS COMMAND according to GSM 03.40. The maximum length of an SMS message is 160 characters when using 7-

bit encoding. For 8-bit data, the maximum length is 140 characters. The Control Terminal supports up to 6 concatenated messages to extend this function. The Control Terminal offers the capability of mobile originated and mobile terminated voice calls, as well as supporting emergency calls. Multi-party, call waiting and call divert features are available. Some of these features are network-operator specific. For the inter-connection of audio, the Control Terminal offers a balanced 4-wire analogue interface. DTMF (Dual Tone Multi Frequency) is supported. 2.4.3 Voice Services LZ T 123 7 605 P1C 11 2. GT47/GT48 CONTROL TERMINALS The Control Terminal supports HR, FR and EFR vocoders. The GT48 also supports the Adaptive Multi Rate (AMR) type of vocoder. The Control Terminal supports the following data protocols:

GPRS (General Packet Radio Service). The Control Terminal is Class B, which provide simultaneous activation and attachment of GPRS and GSM services. GT47 is a GPRS class 8 (4+1) enabled devices, which are capable of transmitting in one timeslot per frame (up link), and receiving at a maximum of four timeslots per frame (down link).

CSD (Circuit Switched Data). The Control Terminal GT47 is a capable of establishing a CSD communication at 9.6kbps.

HSCSD (High Speed Circuit Switched Data). The Control Terminal supports HSCSD class 2 (2+1) communication, with one timeslot per frame capacity in the up link and two timeslots per frame capacity in the down link. The Control Terminal allows fax transmissions to be sent and received by commercial fax software installed on the application computer. Group 3 fax Classes 1 and 2 are supported. 2.4.4 Data 2.4.5 Fax 2.4.6 Supplementary Services

Call forwarding

Call hold, waiting and multiparty

Calling/called number identification

Advice of charge

USSD

Alternate line service

Customer service profile

Preferred networks

Operator selection

Network registration

Call barring

Call transfer LZ T 123 7 605 P1C 12 2. GT47/GT48 CONTROL TERMINALS 2.4.7 Serial Communication The Control Terminal enables an end-to-end communication path to be established between the telemetry/telematics application, either hosted internal or connected externally, and a remote terminal or host, via the GSM network. Once a path has been set up, voice or data communication can take place. An RS232 9-signal serial interface is available via the Control Terminals 15-way high density data connector. This primary serial interface can be used to:

1.Co ntro l the G T47 via an external PC o r m icro -co ntro ller using AT co m m ands;

2.Send and rec eive data. The Control Terminal supports the full set of AT commands according to GSM 07.05 and GSM 07.07. It also supports an extended set of Ericsson proprietary AT commands to add extra functionality. AT commands are used to operate the Control Terminal with a broad range of functions including:

configuring general parameters of the Control Terminal

setting up and controlling communications to and from the GSM network

obtaining GSM network status information Additionally the Control Terminal provides a second RS232 serial interface, operating as a 4-signal and GND interface, with hardware flow control (Rx, Tx, CTS and RTS). This 4-signal serial interface is controllable via embedded applications and may be used to control external accessories e.g. a GPS receiver. For more detail on the AT commands supported by the Control Terminal see GR47/GR48 AT Commands Manual. 2.4.8 Extended I/O Interface The Control Terminal contains several general purpose, configurable, input and output signals. Signals may be reconfigured by AT command or by intrinsic function when using embedded applications.

1 analogue input

3 digital inputs

5 digital outputs

+ 4.8V DC output In addition, 6 of the control signals on the primary RS232 interface can be reconfigured for use as digital inputs or outputs if required. LZ T 123 7 605 P1C 13 2. GT47/GT48 CONTROL TERMINALS The drivers controlling certain outputs have been designed to carry higher currents than normal logic IOs. They can be used to activate or power external devices, for example a switch or a relay. A+4.8V output is available, if required, to power external devices. 2.4.9 Interfacing with the Control Terminal The Control Terminal uses the following industry standard connectors;

15 pin high density socket (RS232 serial port and extended I/O interface)

RJ12 (plug-in power supply and extended I/O connector)

RJ9 (handset audio connector)

Integral SIM card reader

FME male (antenna connector) LZ T 123 7 605 P1C 14 2. GT47/GT48 CONTROL TERMINALS 2.5 Service and Support To contact customer support please use the details below:

Customer Support Sony Ericsson Mobile Communications 1 Lakeside Road Aerospace Centre Farnborough Hampshire GU14 6XP E-mail: modules.support@sonyericsson.com or modules.info@sonyericsson.com 2.6 Precautions Information about Sony Ericsson and its products is available on the following web site:

http://www.SonyEricsson.com/M2M As a standalone item, the Control Terminal is designed for indoor use only. To use outdoors it must be integrated into a weatherproof enclosure. Do not exceed the environmental and electrical limits as specified in Technical Data, page 49. LZ T 123 7 605 P1C 15 3. ABBREVIATIONS AND DEFINITIONS 3. Abbreviations and Definitions Abbreviation Explanations AMR CBM CBS CSD DCE DTE DTMF EFR EMC ETSI FR GPRS GSM High Side Switch HR HSCSD ITU-T Low Side Switch ME MO MS MT PDU RLP RF RTC SIM SMS Adaptive Multi Rate Cell Broadcast Message Cell Broadcast Service Circuit Switched Data Data Circuit Terminating Equipment Data Terminal Equipment Dual Tone Multi Frequency Enhanced Full Rate Electro-Magnetic Compatibility European Telecommunication Standards Institute Full Rate General Packet Radio Service Global System for Mobile Communication Pin is driven high, to Vin, in the active state Half Rate High Speed Circuit Switched Data International Telecommunication Union - Telecommunications Standardisation Sector Pin is driven low in the active state. High state requires external pull up. Mobile Equipment Mobile Originated Mobile Station Mobile Terminated Protocol Data Unit Radio Link Protocol Radio Frequency Real Time Clock Subscriber Identity Module Short Message Service LZ T 123 7 605 P1C 16 3. ABBREVIATIONS AND DEFINITIONS Abbreviation Explanations TA TE TS Terminal Adapter Terminal Equipment Telecommunication Services USSD Unstructured Supplementary Service Data LZ T 123 7 605 P1C 17 Integrating the Control Terminal Produc t Photo/Illustration 4. Mechanical Description 4.1 Overview The pictures below show the mechanical design of the Control Terminal along with the positions of the different connectors and mounting holes. The Control Terminal case is made of durable PC/ABS plastic. LED Antenna connector RS232 serial and extended I/O connector Access to SIM card Figure 4.1 Control Terminal viewed from the left side Mounting hole (x2) Power supply and extended I/O connector Audio connector Figure 4.2 Control Terminal viewed from the right side LZ T 123 7 605 P1C 19 4. MECHANICAL DESCRIPTION Please note the following:

Mounting holes positioned at two of the corners make it possible to securely bolt the Control Terminal into your application.

Keypad, display, microphone, speaker and battery are not part of the Control Terminal.

The SIM card is mounted in the Control Terminal.

The pins and electrical characteristics of the Control Terminals various connectors are described in Electrical Description, page 22.

Information about the antenna connector is found in Antenna Connector, page 33. LZ T 123 7 605 P1C 20 4. MECHANICAL DESCRIPTION 4.2 Physical Dimensions 3.5

(x 2) 7 1.5 3

. 5 4 4

. 6 6 55.3

. 6 0 1 0

. 1 5 11.0 0 9

. 2 6 2 11.0 7 7 .4 Measurements are given in millimetres. See also Technical Data, page 49. LZ T 123 7 605 P1C 21 5. ELECTRICAL DESCRIPTION 5. Electrical Description All electrical connections to the module are protected in compliance with the standard air (8kV) and contact (4kV) Electrostatic Discharge (ESD) tests, of EN 61000-4-2. The module uses the following industry standard connectors:

High density 15 pin (RS232 serial and extended I/O interface)

RJ12 6-way (power supply and extended I/O connector)

RJ9 4-way (handset connector)

SIM card reader

FME male coaxial jack (antenna connector) 5.1 Power Supply and Extended I/O Connector An RJ12 6-way connector, as shown and described below, serves as a means of supplying and controlling d.c. power to the modem. Additionally there are several extended input/output signals available that can be used to control or interface external systems and devices. General signal description:

1 VIN 2 OUT-2 3 IN-1 4 TO_IN 5 OUT-1 6 GND LZ T 123 7 605 P1C 22 5. ELECTRICAL DESCRIPTION The power connector electrical characteristics are listed below:

Pin Signal 1 2 3 4 5 6 VIN OUT-2 IN-1 TO_IN OUT-1 GND Dir I O I I O I Limits Description 5 to 32V Positive power input 32V, 0.25A Low side switch, short circuit protected 0.5 to 32V Digital Input VIH > 3V, VIL < 2.8V Internal Pull Down of 40k 0.5 to 32V Active low control line used to switch the GT47 off/on. VIH > 5V, VIL < 2V Power off/on: t > 0.2s Internal Pull Up to VIN of 20k High side switch, short circuit protected Negative power (ground) input and return path for TO_IN and the extended inputs and outputs VIN, 0.4A

Note!

Signal OUT-2 on the RJ12 connector is switched in parallel to signal OUT-4 on the 15-pin high density socket. The individual output signals are generated by two different low side switches inside the module driven from a common control signal. 5.1.1 Power Supply Interface The supply voltage VIN and GND are protected against polarity reversal and over voltage. The Control Terminal switches on automatically once the VIN voltage is applied. The Control Terminal will not switch on if TO_IN is shorted to ground when the dc supply is applied. For more information on switching the Control Terminal on and off please see section Operation, page 39 Please be aware that the total current carried via either the VIN or GND pins will be the sum of the intrinsic power consumption of the Control Terminal and any drive current supplied via OUT-1 or OUT-2 (or other IOs). The current on either of the VIN or GND pins must not exceed 1.5A. It is recommended that the system integrator provides appropriate fusing otherwise the Control Terminal may be damaged. See Current Consumption with external +4.8V Supply Active, page 53 for more details. Note!

Note!

Note!

Caution!

LZ T 123 7 605 P1C 23 5. ELECTRICAL DESCRIPTION Extended I/O Signals Digital Inputs The digital input IN-1 is available on pin 3 of the RJ12 connector. Its state is detected by IO5 of the embedded Radio Device engine, see Control Terminal-Radio Device signal cross reference table, page 30. The distinction between low level and high level signals is at the voltage level of 3 V. Voltages above 3 V are detected as high level voltages and voltages below 2.8 V are detected as low level. Digital Outputs The RJ12 power supply connector has two different output drivers:

OUT-1 is driven by a high side switch that applies VIN to pin 5 of the RJ12 connector. IO1 of the embedded radio device is used to activate the OUT-1 signal, see Control Terminal - radio device signal cross reference table, page 30.

OUT-2 is driven by a low side switch that shorts pin 2 of the RJ12 connector to ground when activated. IO3 of the embedded Radio Device engine is used to activate OUT-2, see Control Terminal - Radio Device signal cross reference table, page 30. IMAGE -TBD VIN Monitoring The voltage, VIN, can be monitored internally by the Control Terminal, for example if the Control Terminal is supplied from an external battery. ADC1 on the Radio Device is used for this purpose, see Control Terminal-

Radio Device signal cross reference table, and is calibrated to operate in the voltage range 0 31.875 V. The resolution of the 8 bit converter, ADC1, provides a measurement accuracy of approximately 3%. LZ T 123 7 605 P1C 24 5. ELECTRICAL DESCRIPTION 5.2 RS232 Serial and Extended I/O Interface The Control Terminal supports a standard 9 signal RS232 serial interface

(EIA/TIA 574) on the 15 pin high density connector together with a range of configurable I/Os including a second 4-wire logic level RS232 interface. 11 12 13 14 6 7 8 9 1 2 3 15 10 4 5 11 IN-2 6 DSR 1 DCD 12 OUT-4 7 RTS 2 RD 13 DTR 8 CTS 3 TD 14 GND 9 4.8V 4 IN-3 15 ANA_IN 10 RI 5 OUT-3 Signals that support an alternative configuration can be reconfigured using the appropriate AT command (e.g. AT+E2IO) or via an intrinsic function if using an embedded application. Note!

When reconfiguring a Control Terminal signal, via AT command or intrinsic function, the corresponding Radio Device signal name must be used, see Control Terminal-Radio Device signal cross reference table, page 30. The electrical characteristics of the serial port signals are shown below:

Pin Control Terminal Signal Dir 1 2 3 4 5 6 7 DCD RD TD IN-3 OUT-3 DSR RTS O O I I O O I Max. Voltage limits 13.2V 13.2V 25V Description RS232 signal Data carrier detect Vout 5V RS232 signal:

Received data Vout 5V RS232 signal:

Transmitted data VIL < 0.6V, VIH > 2.4V

-0.5 to 32V Digital input VIH > 3V, VIL < 2.8V PullDown with 40k 32V, 0.25A low side switch, short circuit protected 13.2V 25V RS232 signal:

Data set ready Vout 5V RS232 signal:

Request to send VIL < 0.6V, VIH > 2.4V LZ T 123 7 605 P1C 25 5. ELECTRICAL DESCRIPTION Pin Control Terminal Signal Dir 8 9 10 11 12 13 14 15 CTS 4.8V RI IN-2 OUT-4 DTR GND ANA_IN O O O I O I I I Max. Voltage limits 13.2V 0 to +4.8V, 75mA 13.2V Description RS232 signal:

Clear to send Vout 5V Voltage supply for external devices Supply voltage +4.8V, max. current 75mA RS232 signal:

Ring indicator Vout 5V

-0.5 to 32V Digital input VIH > 3V, VIL < 2.8V PullDown with 40k 32V, 0.25A low side switch, short circuit protected 25V

RS232 signal:

Data Terminal Ready VIL < 0.6V, VIH > 2.4V Ground connection and return path for the extended inputs/outputs

-0.5 to 32V Analog input measurement range: 0 to 12.75V 5.2.1 Standard RS232 Serial interface and Signals The module supports a standard RS232 serial interface (EIA/TIA 574) via its 15 pin high density connector, shown above. 5.2.2 Serial Data The Control Terminal supports the standard data character format of 1 start bit, 8 bit data, no parity plus 1 stop bit, in total 10 bits per character. In line with serial communication terminology the module is the data circuit-terminating equipment (DCE) and the external application or computer is the data terminating equipment (DTE). 5.2.3 Serial Data Signals - RD, TD The default baud rate is 9.6kbps, however higher bit rates up to 230.4kbps are supported and can be set by AT commands. At start-up the module transmits and receives data at the default rate of 9.6kbps in either standard AT mode or binary mode (the first received data - AT or binary format -

determines the operating mode). Serial Data From GT47 (RD) Pin 2 RD is an output signal that the Control Terminal uses to send data to the external application. LZ T 123 7 605 P1C 26 5. ELECTRICAL DESCRIPTION Serial Data To Control Terminal (TD) Pin 3 TD is an input signal, used by the external application to send data to the Control Terminal. 5.2.4 Control Signals - RTS, CTS, DTR, DSR, DCD, RI Request to Send (RTS) Pin 7 Used to condition the Control Terminal for data transmission. The default level is inactive by internal pull down. The exact behaviour of RTS is defined by an AT command. Software or hardware flow control can be selected. Hardware flow control is the default selection. The application must pull RTS high to enable transmission from the Control Terminal. Clear To Send (CTS) Pin 8 CTS indicates that the Control Terminal is ready to transmit data. The default level is high. You can define the exact behaviour of CTS through an AT command, and can select software or hardware flow control. Data Terminal Ready (DTR) Pin 13 DTR indicates that the DTE is ready to send and receive data. It also acts as a hardware hang-up, terminating calls when switched low. The signal is active high. You can define the exact behaviour of DTR with an AT command. Data Set Ready (DSR) Pin 6 An active DSR signal is sent from the Control Terminal to the application

(DTE) to confirm that a communications path has been established. DSR has two modes of operation, use the AT command AT&S to set the mode. Data Carrier Detect (DCD) Pin 1 DCD indicates that the Control Terminal is receiving a valid carrier (data signal) when high. You can define the exact behaviour of DCD with an AT command. Ring Indicator (RI) Pin 10 RI indicates that a ringing signal is being received by the Control Terminal when high. You can define the exact behaviour of RI with an AT command. LZ T 123 7 605 P1C 27 5. ELECTRICAL DESCRIPTION Alternative Configuration It is possible to reconfigure one or more of the signals in this section (RTS, CTS, DTR, DSR DCD and RI) to be used as digital inputs or outputs if the full RS232 serial interface is not required. Configuration is achieved using AT command (AT+E2IO) or via embedded application intrinsic functions, please refer to Control Terminal-Radio Device signal cross reference table, page 30. To be reconfigured as a digital IO, each signal must retain the direction and the logic voltage levels attributed to it when used as an RS232 signal. For example DSR can only be reconfigured as a digital output with Vout 5V. 5.2.5 Extended I/O Signals Please refer to Control Terminal-Radio Device signal cross reference table, page 30, for more information on the relationship between signal names and pin numbers of the Control Terminal and the embedded Radio Device engine. Digital Inputs Pin 4 & 11 Digital inputs IN-2 and IN-3 are available on the HD15 connector via pins 11 and 4 respectively. The inputs are detected via signals IO4 and IO7 of the embedded Radio Device engine. Note!

As an alternative configuration signals IN-2 and IN-3 can be used to support a second RS232 serial interface as RTS-2 and TD-2. Further information is given below. Analog Input Pin 15 The signal ANA_IN can be used for measuring analog input values in the range 0 to 12.75V. ADC2 of the embedded GR47 is used to detect ANA_IN. The resolution of the converter is 8 bit with an measurement accuracy of about 3%. The input impedance of the ANA_IN pin is 50 k. Digital Outputs Pin 5 & 12 Digital outputs OUT-3 and OUT-4 are available on the HD15 connector via pins 5 and 12 respectively. The outputs are controlled via signals IO8 and IO3 of the embedded Radio Device engine. Signal OUT-4 on the HD15 connector is switched in parallel to signal OUT-2 on the RJ12 connector. The individual output signals are generated by two different low side switches inside the terminal driven from the common control signal, IO3. All Control Terminal output signals LZ T 123 7 605 P1C 28 5. ELECTRICAL DESCRIPTION driven by low side switches return to open circuit when deactivated. This allows the external application hardware to determine the desired logic voltage levels with the appropriate pull-up. The output drivers are low side switches which short the pin to GND if they are activated. Note!

As an alternative configuration signals OUT-3 and OUT-4 can be used to support a second RS232 serial interface as RD-2 and CTS-2. Further information is given below.

+4.8V Output Supply Pin 9 There is a voltage regulator implemented inside the module that is capable of supplying an external voltage source of +4.8V with a maximum current of 75 mA. The voltage source can be switched on/off with the DAC signal of the internal Radio Device GSM engine. By default the voltage source is switched on. A high level of 2.75V at the DAC output of the Radio Device GSM engine will switch the voltage source off. Note!

The +4.8V source may be switched on/off via an embedded or external application and so may be used as an optional digital output with levels of

+4.8V and open circuit. 5.2.6 Second RS232 Serial Interface IN-3 and OUT-3 can be automatically reconfigured as signals TD-2 and RD-2, of a second serial interface, by enabling UART3 of the internal Radio Device. UART 3 may be enabled using AT command or intrinsic function. In addition, IN-2 and OUT-4 can be automatically reconfigured as signals RTS-2 and CTS-2 of the second serial interface by enabling hardware flow control for UART3 on the internal Radio Device. Hardware flow control can be enabled using intrinsic function only. Note!

The signal level thresholds for each of the digital inputs of the second serial interface are: 3V<VIH<32V and VIL< 2.8V. An external RS232 transceiver component may be used to convert the serial interface to standard RS232 electrical levels. The Control Terminal's +4.8 V output can be used to provide power for the transceiver. LZ T 123 7 605 P1C 29 5. ELECTRICAL DESCRIPTION 5.2.7 Relationship between Control Terminal and Radio Device signals When reconfiguring a Control Terminal signal, via AT command or intrinsic function, the corresponding Radio Device signal name must be used, see the Control Terminal-Radio Device signal cross reference tables overleaf. Control Terminal - Radio Device Signal Cross-reference Table A Control Terminal (CT) Relationship to the Radio Device (RD) engine CT Pin CT Primary Signal Dir. RD Pin Corresponding RD Signal O O I I O O I O O O I O I 38 42 41 43 44 32 39 40 20 36 24 23 37 HD15 Connector DCD 1 RD 2 TD 3 IN-3 4 OUT-3 5 DSR 6 RTS 7 CTS 8

+4.8V 9 RI 10 IN-2 11 OUT-4 12 DTR 13 GND 14 15 ANA_IN RJ12 Connector 1 2 3 4 5 6 Control Terminal Internal Function 26 22 VIN OUT-2 IN-1 TO_IN OUT-1 GND VIN Monitoring I O Power Save Mode 23 13 O I 21 27 O I DCD RD TD IO7 IO8 DSR RTS CTS DAC RI IO4 IO3 DTR ADC2 IO3 I05 IO1 ADC1 IO2 IO3 o n the em bedded Radio Device pro vides the co m m o n co ntro l sig nal fo r bo th Co ntro l Term inal sig nals OUT-2 and OUT-4. LZ T 123 7 605 P1C 30 5. ELECTRICAL DESCRIPTION Control Terminal - Radio Device Signal Cross-reference Table B Control Device (CT) Relationship to Radio Device (RD) engine CT Pin CT Alternative signal Dir. Pin Corresponding RD Signal OUT-6 HD15 Connector 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 TD-2 RD-2 OUT-7 IN-4 OUT-8 OUT-5 OUT-9 RTS-2 CTS-2 IN-5 O I O I O O I O O O I O I 38 42 41 43 44 32 39 40 20 36 24 23 37 O1 TD3 RD3 O3 IO9 O4 DAC O2 IO4 IO3 IN1 5.3 Audio Connector A 4-way RJ9 connector, as shown below, allows a telephone handset to be plugged into the Control Terminal, giving access to the microphone and earpiece signals. The connector may also be used to drive other analogue audio sub-systems or devices. The module is configured to work with a range of handsets. If necessary, changes can be made to the characteristics of the audio interface by sending the Control Terminal appropriate AT commands. LZ T 123 7 605 P1C 31 5. ELECTRICAL DESCRIPTION Audio signal descriptions are listed below:

Pin Signal Dir Description 1 2 3 4 MICN BEARN BEARP MICP I O O I Microphone negative input Earpiece negative output Earpiece positive output Microphone positive input MICP and MICN are balanced differential microphone input signals. These inputs are compatible with an electret microphone. BEARP and BEARN are the speaker output signals. These are differential-mode outputs. The electrical characteristics are given in the table below. Parameter Output level (differential) Output level (dynamic load = 32) Distortion at 1kHz and maximum output level Offset, BEARP to BEARN Ear piece mute switch attenuation Limit 4.0Vpp 2.8Vpp 5%

30mV 40dB The following table shows the ear piece impedances that can be connected to BEARP and BEARN. Ear piece model Impedance Tolerance Dynamic ear piece Dynamic ear piece Piezo ear piece

[32 + 800H] // 100pF

[150 + 800H] // 100pF 1k + 60nF 20%

20%

20%

LZ T 123 7 605 P1C 32 5. ELECTRICAL DESCRIPTION 5.4 Antenna Connector The antenna connector allows transmission of radio frequency (RF) signals between the Control Terminal and an external customer-supplied antenna. The module is fitted with a 50, FME male coaxial jack as shown below. RF Signal GND The table below shows the antenna electrical characteristics:

Parameter Limit Description Nominal impedance 50 (SWR better than 2.5:1) Output Power 2 Watt peak (Class 4) EGSM 850/EGSM 900 1 Watt peak (Class 1) GSM1800/GSM 1900 Static Sensitivity Better than 102dBm EGSM 850/ EGSM 900 Better than 102dBm GSM1800/ GSM 1900 For information on antenna refer to Antenna, page 46. LZ T 123 7 605 P1C 33 5. ELECTRICAL DESCRIPTION 5.5 SIM Card Reader The module is fitted with a SIM card reader designed for 3V and 5V SIM cards. It is the flip-up type which is lockable in the horizontal position and is accessed through a removable panel as shown below. The SIM card reader incorporates a SIM presence switch which detects whether a SIM card is inserted. The full operation of the Control Terminal relies on a SIM card being inserted. Caution! Some Control Terminal functionality may be lost if you try to operate it without a SIM card. The SIM presence switch also ensures that when a SIM card is inserted or removed the unit is reset, as long as the Control Terminal is switched ON. Loggin with the SIM In TBA Logging with the SIM Out TBD LZ T 123 7 605 P1C 34 5. ELECTRICAL DESCRIPTION 5.6 Real Time Clock The module contains a real time clock (RTC) to maintain accurate timekeeping and to enable timestamping of messages. The RTC is powered all the time that the Control Terminal is turned on. When the Control Terminal is powered off, a storage energy device within the module provides back-up power to maintain the RTC for several hours

- please contact Sony Ericsson Customer Support for more information. The RTC back-up is fully charged after approximately 10 hours with the control terminal turned on. Once fully charged the RTC back-up will maintain the Real Time Clock for at least 8 hours. 5.7 Software Updates It is possible, and sometimes necessary, to update the module software. Updates must be carried out by a Sony Ericsson approved technician. Please contact your supplier for details (see Service and Support, page 9). LZ T 123 7 605 P1C 35 6. EMBEDDED APPLICATIONS 6. Embedded Applications 6.1 Features The module has the capability to store, and run customer written code in the form of a script during the processors idle time, through the use of an on board interpreter. Main features of embedded applications are as follows.

C based scripting language (Sony Ericsson specific)

Over the air upgrade of scripts (NOT GSM software)

Library of intrinsic functions

Two radio device scripts can be stored, but only one can run at any one time. 6.2 Implementation 6.2.1 Limitations The module has up to 44kbytes of space available for storage of two scripts in the scripting language and 25kbytes of operating RAM. Structures included in this language are:

If - then - else statements

While loops

For loops All hardware interfaces that are normally available to the module through the AT commands are available to the embedded application. Further drivers have been written such as M bus and I2C for use by the embedded application (EA) through the use of the I/O pins. Since the module is processing the script using its own memory, limitations are placed onto the scripts that are run.

A direct comparison cannot be made to a fully compiled C program in terms of size but a gauge of script size is that if each line were 128 characters long in the script then the script could be 350 lines long.

Processing power is something that needs to be considered as the script is run as a low priority process within the software. However, controller mode stops GSM operation and provides all the processing power for the script to be run. See the M2m Power Application Guide for more details.

Code cannot be ported directly from an existing application and loaded directly onto the radio device. It must be re written in the Sony Ericsson Mobile script language so that the radio device interpreter can function correctly. LZ T 123 7 605 P1C 36 6. EMBEDDED APPLICATIONS 6.2.2 M2mpower IDE (Integrated Developers Environment) The IDE is a windows based package which allows the user to write, simulate, debug and download the application into a radio device with the embedded application (EA) software. The standard version is designed to run on Windows XP and 2000, other versions are available for 98 if required. A M2m Power application guide is available for implementing applications using the developers kit and the embedded application (EA) functionality. This is a required package to be able to implement an embedded application (EA). For further information please contact SEM customer support. LZ T 123 7 605 P1C 37 7. TCP/IP STACK 7. TCP/IP Stack An on board IP/TCP/UDP stack has been integrated into the software negating the need for the customer to implement one in their own code base. This is available through the embedded applications (see previous section) using intrinsic functions and also through AT commands (see GR47/GR48 AT commands manual). 7.1 Implementation The following types of commands allow various functions:

Open/closing IP connection - Negotiates/closes a dynamic IP address with the web server.

Send/Receive TCP packets - Performs all TCP operations to send and receive packets.

Send/Receive UDP packets - Performs all UDP operations to send and receive packets.

Resolve URL to an IP address - Similar to lookup command in DOS When the unit is set up and controlled using the embedded applications either the embedded applications or an external application can generate data to be sent and pass it to the radio device for transmission. This effectively provides a transparent communication link to an internet server from the application over GPRS. LZ T 123 7 605 P1C 38 8. OPERATION 8. Operation 8.1 Switching On the Control Terminal The Control Terminal is turned ON automatically once DC power is applied. If the Control Terminal is turned OFF, using one of the methods described in 8.2, the Control Terminal can be turned ON again through one of two methods:

pull signal TO_IN to ground for t >0.2s, then release.

activate the main RS232 control line DTR, low to high for >0.2s The Control Terminal is fully operational after 4 seconds. Logging onto a network may take longer than this and is outside the control of the Control Terminal. Note!

The Control Terminal will not switch on if TO_IN is shorted to ground when the dc supply is applied. 8.2 Switching Off the Control Terminal There are two ways to switch off the Control Terminal as described below.

Use the appropriate AT command (AT+CFUN);

pull signal TO_IN to ground for t >0.2s, then release. 8.3 Resetting the Control Terminal A full system reset, independent of the status of the software, may be applied to the Control Terminal as follows:

assert HR_IN high for > 3.5s. 8.4 Operating States/LED The Control Terminal has a green LED, as depicted below, which is used to indicate various operating states. These states are described in following table. LED LZ T 123 7 605 P1C 39 8.5 Power Save 8. OPERATION Operating state After switching on the Control Terminal LED On after 4s Control Terminal switched off or power removed from the module Off Standby or talk Flashing No network, network search, no SIM card, no PIN entered On The Control Terminal can power down the main RS232 IC when not needed in order to minimise power consumption. The IC is powered up automatically at start-up but can be powered down by setting the output of IO2 on the embedded Radio Device (pin22) to low via AT command or embedded application. Once powered down, the IC can be woken up by setting the output of IO2 high on the Radio Device via AT Command. Even when powered down the IC is able to pass a DTR signal received on the serial interface. Therefore an embedded application that monitors DTR, while the IC is powered down, can be made to wake up the IC, if a signal is received, by setting IO2 on the Radio Device high. 8.6 Controller Mode The Control Terminal, when powered up, will normally start up its GSM signalling software and look to register on the GSM network. Any embedded application script runs as a background process as and when the GSM software is idle. A feature available via embedded applications allows the Control Terminal to be placed in controller mode whereby the Control Terminal powers up with a minimal subset of radio functionality. The GSM signalling software is halted and the embedded applications script has full control of the processor. Controller mode allows an application to run with more predictable response times. LZ T 123 7 605 P1C 40 9. SAFETY AND PRODUCT CARE 9. Safety and Product Care Please read the information in this section and the information in Installation of the Control Terminal, page 44, before starting your integration work. 9.1 Safety Instructions PLEASE READ THESE SAFETY INSTRUCTIONS AND KEEP A COPY OF THEM.

Always ensure that use of the Control Terminal is permitted. The Control Terminal may present a hazard if used in proximity to personal medical electronic devices. As a rule, the Control Terminal must not be used in hospitals, airports or planes.

Never use the Control Terminal at a gas station, refuelling point, blasting area or in any other environment where explosives may be present.

Operating the Control Terminal close to other electronic devices, such as antennas, television sets, and radios may cause electromagnetic interference.

This product is intended to be used with the antenna or other radiating element at least 20cm away from any part of the human body. In applications where this rule cannot be applied, the application designer is responsible for providing the SAR measurement test report and declaration.

You are responsible for observing your country's safety standards, and where applicable, the relevant wiring rules. 9.2 General Precautions

The Control Terminal as a stand alone item is designed for indoor use only. To use outside it must be integrated into a weatherproof enclosure. Do not exceed the environmental and electrical limits as specified in Technical Data, page 49.

Avoid exposing the Control Terminal to lighted cigarettes, naked flames or to extreme hot or cold temperature.

Never try to dismantle the Control Terminal yourself. There are no components inside the Control Terminal that can be serviced by the user. If you attempt to dismantle the Control Terminal, you may invalidate the warranty.

The Control Terminal must not be installed or located where the surface temperature of the plastic case may exceed 85 C.

All cables connected to the Control Terminal must be secured or clamped, immediately adjacent to the Control Terminal's connectors, to LZ T 123 7 605 P1C 41 9. SAFETY AND PRODUCT CARE provide strain relief and to avoid transmitting excessive vibration to the Control Terminal in the installation.

Ensure the d.c. cable, supplying power to the Control Terminal, does not exceed 3 metres. For longer distances please contact Sony Ericsson Service and Support.

To protect power supply cables and meet the fire safety requirements when the unit is powered from a battery or a high current supply, connect a fast 1.5A fuse in line with the positive supply. An appropiate fuse should be used see section Power Supply, page 45

Do not connect any incompatible component or product to the Control Terminal. Note!

Sony Ericsson may refuse warranty claims where evidence of product misuse is found. 9.3 SIM Card Precautions

Before handling the SIM card in your application, ensure that you are not charged with static electricity. Use proper precautions to avoid electrostatic discharges.

When the SIM card hatch is opened, the SIM card connectors lie exposed under the SIM card holder. Caution! Do not touch these connectors! If you do, you may release an electrical discharge that could damage the Control Terminal or the SIM card.

When designing your application, the SIM cards accessibility should be taken into account. We always recommend that you have the SIM card protected by a PIN code. This will ensure that the SIM card cannot be used by an unauthorized person. 9.4 Antenna Precautions

If the antenna is to be mounted outside, consider the risk of lightning. Follow the instructions provided by the antenna manufacturer.

Never connect more than one Control Terminal to a single antenna. The Control Terminal can be damaged by radio frequency energy from the transmitter of another Control Terminal.

Like any mobile station, the antenna of the Control Terminal emits radio frequency energy. To avoid EMI (electromagnetic interference), you must determine whether the application itself, or equipment in the applications proximity, needs further protection against radio emission and the disturbances it might cause. Protection is secured either by shielding the surrounding electronics or by moving the antenna away from the electronics and the external signals cable. LZ T 123 7 605 P1C 42 9. SAFETY AND PRODUCT CARE

The Control Terminal and antenna may be damaged if either come into contact with ground potentials other than the one in your application. Beware, ground potential are not always what they appear to be. LZ T 123 7 605 P1C 43 10. INSTALLATION OF THE CONTROL TERMINAL 10. Installation of the Control Terminal This chapter gives you advice and helpful hints on how to integrate the Control Terminal into your application from a hardware perspective. Please read the information given in Safety and Product Care, page 41 and then the read the information in this section before starting your integration work. 10.1 Where to Install the Control Terminal There are several conditions which need to be taken into consideration when designing your application as they might affect the Control Terminal and its function. They are:

10.1.1 Environmental Conditions The Control Terminal must be installed so that the environmental conditions stated in the Technical Data chapter, such as temperature, humidity and vibration are satisfied. Additionally, the electrical specifications in the Technical Data section must not be exceeded. 10.1.2 Signal Strength The Control Terminal has to be placed in a way that ensures sufficient signal strength. To improve signal strength, the antenna can be moved to another position. Signal strength may depend on how close the Control Terminal is to a radio base station. You must ensure that the location at which you intend to use the Control Terminal, is within the network coverage area. Degradation in signal strength can be the result of a disturbance from another source, for example an electronic device in the immediate vicinity. More information about possible communication disturbances can be found in section 10.3.5, page 47. When an application is completed, you can verify signal strength by issuing the AT command AT+CSQ. See the GR47/GR48 AT Commands Manual for more details. Tip!

Before installing the Control Terminal, use an ordinary mobile telephone to check a possible location for it. In determining the location for the Control Terminal and antenna, you should consider signal strength as well as cable length LZ T 123 7 605 P1C 44 10. INSTALLATION OF THE CONTROL TERMINAL 10.1.3 Connection of Components The integrator is responsible for the final integrated system. Incorrectly designed or installed, external components may cause radiation limits to be exceeded. For instance, improperly made connections or improperly installed antennas can disturb the network and lead to malfunctions in the Control Terminal or equipment. 10.1.4 Network and Subscription

Before your application is used, you must ensure that your chosen network provides the necessary telecommunication services. Contact your service provider to obtain the necessary information.

If you intend to use SMS in the application, ensure this is included in your (voice) subscription.

Consider the choice of the supplementary services described in section Short Message Service, page 11. 10.2 How to Install the Control Terminal 10.2.1 Power Supply

Use a high-quality power supply cable with low resistance. This ensures that the voltages at the connector pins are within the allowed range, even during the maximum peak current.

When the unit is powered from a battery or a high current supply, connect a fast 1.5A fuse in line with the positive supply. This protects the power cabling and Control Terminal. 10.2.2 Securing the Control Terminal

Before securing the Control Terminal take into account the amount of additional space required for the mating connectors and cables that will be used in the application.

Where access is restricted, it may be easier to connect all the cables to the Control Terminal prior to securing it in the application.

Securely attach the Control Terminal to the host application using two 3mm diameter pan-head screws of appropriate length as shown below. Caution! Do not exceed a torque of 25Ncm when tightening the fixings screws. Excessive torque applied to the screws can crack the plastic case. LZ T 123 7 605 P1C 45 10. INSTALLATION OF THE CONTROL TERMINAL 10.3 Antenna 10.3.1 General The antenna is the component in your system that maintains the radio link between the network and the Control Terminal. Since the antenna transmits and receives electromagnetic energy, its efficient function will depend on:

the type of antenna (for example, circular or directional);

the placement of the antenna;

communication disturbances in the vicinity in which the antenna operates. In the sections below, issues concerning antenna type, antenna placement, antenna cable, and possible communication disturbances are addressed. In any event, you should contact your local antenna manufacturer for additional information concerning antenna type, cables, connectors, antenna placement, and the surrounding area. You should also determine whether the antenna needs to be grounded or not. Your local antenna manufacturer might be able to design a special antenna suitable for your the application. Make sure that you choose the right type of antenna for the Control Terminal. Consider the following requirements:

the antenna must be designed for the dual frequency bands in use:

EGSM 900/GSM 1800 for GT47, GSM 850/ GSM 1900 for GT48

the impedance of the antenna and antenna cable must be 50

the antenna output-power handling must be a minimum of 2W;

the VSWR value should be less than 3:1 to avoid damage to the Control Terminal. 10.3.2 Antenna Type 10.3.3 Antenna Placement The antenna should be placed away from electronic devices or other antennas. The recommended minimum distance between adjacent antennas, operating in a similar radio frequency band, is at least 50cm. If signal strength is weak, it is useful to face a directional antenna at the closest radio base station. This can increase the strength of the signal received by the Control Terminal. The Control Terminals peak output power can reach 2W. RF field strength varies with antenna type and distance. At 10cm from the antenna the field strength may be up to 70V/m and at 1m it will have reduced to 7V/m. LZ T 123 7 605 P1C 46 10. INSTALLATION OF THE CONTROL TERMINAL In general, CE-marked products for residential and commercial areas, and light industry can withstand a minimum of 3V/m. 10.3.4 The Antenna Cable Use 50 impedance low-loss cable and high-quality 50 impedance connectors (frequency range up to 2GHz) to avoid RF losses. Ensure that the antenna cable is as short as possible. The Voltage Standing-Wave Ratio (VSWR) may depend on the effectiveness of the antenna, cable and connectors. In addition, if you use an adapter between the antenna cable and the antenna connector, it is crucial that the antenna cable is a high-quality, low-loss cable. Minimize the use of extension cables, connectors and adapters. Each additional cable, connector or adapter causes a loss of signal power. 10.3.5 Possible Communication Disturbances Possible communication disturbances include the following:

Noise can be caused by electronic devices and radio transmitters.

Path-loss occurs as the strength of the received signal steadily decreases in proportion to the distance from the transmitter.

Shadowing is a form of environmental attenuation of radio signals caused by hills, buildings, trees or even vehicles. This can be a particular problem inside buildings, especially if the walls are thick and reinforced.

Multi-path fading is a sudden decrease or increase in the signal strength. This is the result of interference caused when direct and reflected signals reach the antenna simultaneously. Surfaces such as buildings, streets, vehicles, etc., can reflect signals.

Hand-over occurs as you move from one cell to another in the GSM network. Your mobile application call is transferred from one cell to the next. Hand-over can briefly interfere with communication and may cause a delay, or at worst, a disruption. 10.4 Accessories The Control Terminal has been type approved together with a range of accessories including:

Power Supply (GT47 only) 1. AC-DC Power Adaptor with customised d.c. lead

(Model # AD-0901000BS) Input: 230Va.c., 50Hz, 2m mains lead (UK and Euro plug options) LZ T 123 7 605 P1C 47 10. INSTALLATION OF THE CONTROL TERMINAL Output: 9Vd.c., 1A. 2m d.c. lead with RJ11 connector. CE marked. Antennas (GT47 only) 2. Dual Band Minimag Antenna (900/1800MHz)

(Model # 1140.26-FME/F) Magnetic-mount antenna, 0dB radiator, 2.6m RG174 cable with FME female connector. 3. Dual Band Antenna (900/1800MHz)

(Model # EHD1890-FME/F) Bulkhead-mount antenna, 0dB radiator, 0.8m low loss cable with FME female connector. Cable (GT47 and GT48) 4. RS232 9-way Serial Cable

(Model # C-E-RS232-2M) 2m, 9-way cable, DB9 (female) to DB9 (male) connectors. Please contact Sony Ericsson distribution channels for availability. LZ T 123 7 605 P1C 48 11. TECHNICAL DATA 11. Technical Data Data Features CSD Up to 9.6kbps, transparent and non-

transparent HSCSD (2+1) Up to 28.8kbps GPRS Class B (4+1)

- P channels

- Coding schemes CS1 - CS4 85.6kbps (subject to network support and terminal location) GSM 07.10 multiplexing protocol Short Message Service Features SMS Text and PDU Point to point (MT/MO) Cell broadcast concatenation of up to 6 SMS Voice Features Fax Features Full Rate, Enhanced Full Rate and Half Rate

(FR/EFR/HR)/GT48 also (AMR) Adaptive Multi Role Echo Cancellation and Noise Reduction Dual Tone Multi Frequency (DTMF) Group 3 Class 1 and 2 LZ T 123 7 605 P1C 49 11. TECHNICAL DATA Data Storage SMS storage capacity 40 in the module In addition, the unit can handle as many SMS as the SIM can store Phone book capacity 100 Power Supply Supply voltage range 5 to 32V d.c. Radio Specifications Frequency bands GT47: EGSM 900 and GSM 1800 (dual band) GT48: GSM 850 and GSM 1900 (dual band) Maximum RF output power Antenna impedance Static sensitivity 2W (EGSM 900/GSM 1800) 1W (GSM 850/GSM 1900) 50 Better than 102dBm Audio Specifications Parameter Output level (differential) Output level (dynamic load = 32) Distortion at 1kHz and maximum output level Offset, BEARP to BEARN Ear-piece mute-switch attenuation Limit 4.0Vpp 2.8Vpp 5%

30mV 40dB Ear piece model Impedance Tolerance Dynamic ear piece Dynamic ear piece Piezo ear piece

[32 + 800H] // 100pF

[150 + 800H] // 100pF 1k + 60nF 20%

20%

20%

LZ T 123 7 605 P1C 50 11. TECHNICAL DATA SIM Card Reader Voltage type Support for 3 V and 5 V SIM cards Electrical Connectors and LED Plug-in power supply connector and extended I/O RJ12 6-way Handset audio connector RJ9 4-way Antenna connector FME male RS232 port LED high density socket, 15 pin Green Mechanical Specification Length Width Height Weight 77.4mm 66.4mm 26.2mm

<110g LZ T 123 7 605 P1C 51 11. TECHNICAL DATA Environmental specifications Operating temperature range Storage temperature range Relative humidity Stationary vibration, sinusoidal Stationary vibration, random Non-stationary vibration, including shock Bump Free fall transportation Rolling pitching transportation Static load Low air pressure/high air pressure 30C to +75C 40C to +85C 5 to 95%, non-condensing Displacement: 7.5mm Acceleration amplitude: 20m/s and 40m/s Frequency range: 2 to 8Hz, 8 to 200Hz, 200 to 500Hz Acceleration spectral density (m/s):

0.96, 2.88, 0.96 Frequency range:

5 to10Hz, 10 to 200Hz, 200 to 500Hz, 60min/axis Shock response spectrum I, peak acceleration:

3 shocks in each axis and direction;

300m/s, 11ms Shock response spectrum II, peak acceleration:

3 shocks in each axis and direction;

1000m/s, 6ms Acceleration: 250m/s 1.2m Angle: 35degrees; period: 8s 10kPa 70kPa/106kPa Current Consumption in Standard Operation Supply Voltage Power Down Mode:

5V 12V 32V Av Max 15 5 Av Max 15 5 Av Max 50 20 mA Av Max 110 26 26 120 Av Max 43 45 9 9 Av Max 6 6 20 mA 19 mA Av Max 220 1230 170 960 Av Max 520 90 70 350 Av Max 40 30 200 mA 140 mA Standby Mode (typical):

Frequency 850/900 MHz 1900/1800 MHz Talk Mode (typical):

Frequency 850/900 MHz 1900/1800 MHz Power Down Mode: DC power is applied but the Control Terminal is switched OFF. Standby Mode: The module is switched ON and attached on to the network. No call in progress. LZ T 123 7 605 P1C 52 11. TECHNICAL DATA Talk Mode: The module is switched ON and a voice/data call is in progress. The power consumption during transmission in Talk Mode is measured at maximum transmit power. The power consumption in Standby Mode is measured at the maximum paging rate (Paging Rate 2). Current Consumption with external +4.8V Supply Active For the following calculations it was assumed that the external +4.8V load is 70mA. Supply Voltage Power Down Mode:

5V 12V 32V Av Max 15 5 Av Max 15 5 Av Max 20 50 mA Standby Mode (typical):

Frequency 850/900 MHz 1900/1800 MHz Talk Mode (typical):

Frequency 850/900 MHz 1900/1800 MHz Av Max 196 112 112 206 Av Max 306 1316 256 1046 Av Max 79 45 45 81 Av Max 19 19 33 mA 32 mA Av Max 556 126 106 386 Av Max 53 43 213 mA 153 mA These tables do not include the power consumption associated with any drive current supplied via further Control Terminal outputs, e.g. OUT-1 or OUT-2. LZ T 123 7 605 P1C 53 11. TECHNICAL DATA Current Consumption of UART Transceiver in Standard Operation with active/inactive serial Transmitter1 Note!

It is assumed that every driving signal of the UART1 transceiver component inside the Control Terminal is driving an impedance of 3 K to its output level of max. 5.4V (see data sheet of RS232 device: e.g. MAX3237). The signals that are driven are: RXD, CTS, DSR, DTR, RI Signal Voltage Power down mode of serial transmitter:

5V 4.3 Serial transmitter active (no load):

0.9 Serial transmitter active (3 K load):

11.7 12V 1.8 0.4 4.9 32V 0.7 0.15 1.8 A mA mA Certification Directive 1999/5/EC Tested according to GCF-CC EMC: EN 301 489-1 EMC: EN 301 489-7 Safety: EN 60950-1 GSM 3GPP TS 51.010-1 1) Internal reg ulato r efficiency >90%

LZ T 123 7 605 P1C 54

GT47/GT48 Technical Description Product Photo/Illustration The information contained in this document is the proprietary information of Sony Ericsson Mobile Communications International.The contents are confidential and any disclosure to persons other than the officers, employees, agents or subcontractors of the owner or licensee of this document, without the prior written consent of SonyEricsson Mobile Communications International, is strictly prohibited. Further, no portion of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording, without the prior written consent of Sony Ericsson Mobile Communications International, the copyright holder. First edition (June 2003) Sony Ericsson Mobile Communications International publishes this manual without making any warranty as to the content contained herein. Further Sony Ericsson Mobile Communications International reserves the right to make modifications, additions and deletions to this manual due to typographical errors, inaccurate information, or improvements to programs and/or equipment at any time and without notice. Such changes will, nevertheless be incorporated into new editions of this manual. All rights reserved. Sony Ericsson Mobile Communications International, 2003 Publication number: LZT 123 7607 R1B Printed in UK Contents 1. Introduction .............................................................................................................. 4 Description 1.1

........................................................................................... 4 1.2 Highlights

........................................................................................... 4 1.3 Main Features and Services............................................................................... 5 Service and Support ......................................................................................... 9 1.4 1.5 Precautions

........................................................................................... 9 2. Mechanical Description .......................................................................................... 10

......................................................................................... 10 Overview Physical Dimensions...................................................................................... 11 2.1 2.2 3. Electrical Description ............................................................................................. 12 Power Supply and Extended I/O Connector ................................................... 12 RS232 Serial and Extended I/O Interface ....................................................... 16 Audio Connector

......................................................................................... 22 Antenna Connector........................................................................................ 24 SIM Card Reader

......................................................................................... 25 Real Time Clock ......................................................................................... 25 Software Updates ......................................................................................... 26 3.1 3.2 3.3 3.4 3.5 3.6 3.7 4. Embedded Applications ......................................................................................... 27

......................................................................................... 27

......................................................................................... 27 Features Implementation 4.1 4.2 5. TCP/IP Stack........................................................................................................... 29

......................................................................................... 29 Implementation 5.1 6. Operation................................................................................................................. 30 Switching the GT47 On ................................................................................ 30 Switching the GT47 Off................................................................................ 30 Operating States/LED.................................................................................... 30

......................................................................................... 31 Power Save Controller Mode

......................................................................................... 31 6.1 6.2 6.3 6.4 6.5 7. Technical Data ........................................................................................................ 32 8. AT Command Summary......................................................................................... 36 9. Abbreviations and Definitions............................................................................... 42 LZT 123 7607 R1B

1. INTRODUCTION 1. Introduction 1.1 Description The GT47/GT48 is an intelligent GSM/GPRS control terminal that encapsulates everything you need for wireless M2M capability in one compact unit. In conjunction with Sony Ericssons M2mpower package the GT47/48 can host and control your wireless application, minimising the need for extra components. Alternatively, it can be used as a powerful standalone GPRS modem with its intrinsic TCP/IP stack. The GT47/48 is a self contained terminal with its own SIM card reader and standard connector interface, minimising the need for further hardware development.Its wide and useful range of IOs can be reconfigured to add functions and features that make your M2M solution both innovative and cost effective. The GT47/GT48 can be used to provide a communications link for a variety of wireless applications including fleet and asset management, vending, security and alarm monitoring, e-maintenance and other telemetry applications. The ease of application development and hosting on the GT47/48 means M2M solutions in area of personal leisure (e.g.boats and caravans) and around the home can be addressed. With dual band 900/1800 MHz (GT47) and 850/1900 MHz (GT48) versions available, your applications can be used all over the world. The control terminal comes with a library of sample script applications to give developers a head start where needed. The GT47/GT48 incorporates Sony Ericsson's GR47/GR48 GSM/GPRS engine. Note!

When the GT47 is referred to in the text the description covers the GT48 as well; unless specifically mentioned. All functions described inside this Technical Description are only possible when the SIM-Card is inserted. 1.2 Highlights

Intelligent, versatile GSM/GPRS control terminal

Dual band, EGSM 900/1800 MHz

Customised applications can be embedded and run independently

Self contained terminal with standard connectors

2 x RS232 interfaces with a useful range of configurable IOs

TCP/IP stack

Data: GPRS, HSCSD, CSD, SMS

Voice: full rate, enhanced full rate, half rate LZT 123 7607 R1B 4 1. INTRODUCTION

SMS: mobile-originated, mobile-terminated, cell broadcast

Fax: Group 3, Classes 1 & 2

15 way high density connector

5 V - 32 V d.c. input

4-wire audio connection

Antenna connection (FME male)

R&TTE type approved (GT47) 1.3 Main Features and Services The GT47 performs a set of telecom services (TS) according to GSM standard phase 2+, ETSI and ITU-T. The services and functions of the GT47 are implemented by issuing customised applications embedded on the device, or by AT commands issued internally, or over the RS232 serial interface. 1.3.1 Types of Mobile Station The GT47 is a dual band control terminal with the GSM radio characteristics shown in the table below. GT47 Frequency Range (MHz) Channel spacing Number of channels E-GSM 900 TX: 880-915 RX: 925-960 200 kHz GSM 1800 TX: 1710-1785 RX: 1805-1880 200 kHz 174 carriers *8 time slots E-GSM: channels 0 to 124 channels 975 to 1023 374 carriers *8 time slots DCS: channels 512 to 885 Modulation GMSK GMSK TX phase accuracy

< 5 RMS phase error (burst)

< 5 RMS phase error (burst) Duplex spacing Receiver sensitivity at antenna connector 45 MHz

< 102 dBm Transmitter output power at antenna connector Class 4 2 W (33 dBm) Automatic hand-over between EGSM 900 and GSM 1800 95 MHz

< 102 dBm Class 1 1 W (30 dBm) LZT 123 7607 R1B 5 1. INTRODUCTION GT48 Frequency Range (MHz) GSM 850 TX: 824-849 RX: 869-894 Channel spacing 200 kHz GSM 1900 TX: 1850-1910 RX: 1930-1990 200 kHz Number of channels 124 carriers *8 time slots GSM: channels 128 to 251 299 carriers *8 time slots PCS: channels 512 to 810 Modulation GMSK GMSK TX Phase Accuracy

< 5 RMS phase error (burst)

< 5 RMS phase error (burst) Duplex spacing Receiver sensitivity at antenna connector 45 MHz

< 102 dBm Transmitter output power at antenna connector Class 4 2W (33 dBm) Automatic hand-over between GSM 850 and GSM 1900 80 MHz

< 102 dBm Class 1 1 W (30 dBm) 1.3.2 Short Message Service The GT47 supports the following SMS services:

Sending; MO (mobile-originated) with both PDU (protocol data unit) and text mode supported.

Receiving; MT (mobile-terminated) with both PDU and text mode supported.

CBM (cell broadcast message); a service in which a message is sent to all subscribers located in one or more specific cells in the GSM network

(for example, traffic reports). This feature is network dependent.

SMS STATUS REPORT according to GSM 03.40.

SMS COMMAND according to GSM 03.40. The maximum length of an SMS message is 160 characters when using 7-

bit encoding. For 8-bit data, the maximum length is 140 characters. The GT47 supports up to 6 concatenated messages to extend this function. The GT47 offers the capability of mobile originated and mobile terminated voice calls, as well as supporting emergency calls. Multi-party, call waiting and call divert features are available. Some of these features are network-operator specific. For the inter-connection of audio, the GT47 offers a balanced 4-wire analogue interface. DTMF (Dual Tone Multi Frequency) is supported. The GT48 also supports the Adaptive Multi Rate (AMR) type of vocoder. 1.3.3 Voice Services LZT 123 7607 R1B 6 1. INTRODUCTION 1.3.4 Data Services The GT47 supports the following data protocols:

*356*HQHUDO3DFNHW5DGLR6HUYLFH

GT47 is a Class B terminals, which provide simultaneous activation and attachment of GPRS and GSM services. GT47 is a GPRS class 8

(4+1) enabled devices, which are capable of transmitting in one timeslot per frame (up link), and receiving at a maximum of four timeslots per frame (down link).

&6'&LUFXLW6ZLWFKHG'DWD

GT47 is a capable of establishing a CSD communication at 9.6 kbps.

+6&6'+LJK6SHHG&LUFXLW6ZLWFKHG'DWD

GT47 supports HSCSD class 2 (2+1) communication, with one timeslot per frame capacity in the up link and two timeslots per frame capacity in the down link. 1.3.5 Fax Services The GT47 allows fax transmissions to be sent and received by commercial fax software installed on the application computer. Group 3 fax Classes 1 and 2 are supported. 1.3.6 Supplementary Services

Call forwarding

Call hold, waiting and multiparty

Calling/called number identification

Advice of charge

USSD

Alternate line service

Customer service profile

Preferred networks

Operator selection

Network registration

Call barring

Call transfer 1.3.7 Serial Communication The GT47 enables an end-to-end communication path to be established between the telemetry/telematics application, either hosted internal or connected externally, and a remote terminal or host, via the GSM network. LZT 123 7607 R1B 7 1. INTRODUCTION Once a path has been set up, voice or data communication can take place. An RS232 9-signal serial interface is available via the GT47s 15-way high density data connector. This primary serial interface can be used to:

1. Control the GT47 via an external PC or micro-controller using AT commands;

2. Send and receive data. The GT47 supports the full set of AT commands according to GSM 07.05 and GSM 07.07. It also supports an extended set of Ericsson proprietary AT commands to add extra functionality. AT commands are used to operate the GT47 with a broad range of functions including:

configuring general parameters of the GT47

setting up and controlling communications to and from the GSM network

obtaining GSM network status information Additionally the GT47 provides a second RS232 serial interface, operating as a 4-signal and GND interface, with hardware flow control (Rx, Tx, CTS and RTS). This 4-signal serial interface is controllable via embedded applications and may be used to control external accessories e.g. a GPS receiver. For more detail on the AT commands supported by the GT47 see AT Command Summary, page 36. 1.3.8 Extended I/O Interface The control terminal contains several general purpose, configurable, input and output signals. Signals may be reconfigured by AT command or by intrinsic function when using embedded applications.

1 analogue input

3 digital inputs

5 digital outputs

+ 4.8V DC output In addition, 6 of the control signals on the primary RS232 interface can be reconfigured for use as digital inputs or outputs if required. The drivers controlling certain outputs have been designed to carry higher currents than normal logic IOs. They can be used to activate or power external devices, for example a switch or a relay. A+4.8V output is available, if required, to power external devices. LZT 123 7607 R1B 8 1. INTRODUCTION 1.3.9 Interfacing with the GT47 The GT47 uses the following industry standard connectors;

15 pin high density socket (RS232 serial port and extended I/O interface)

RJ12 (plug-in power supply and extended I/O connector)

RJ9 (handset audio connector)

Integral SIM card reader

FME male (antenna connector) 1.4 Service and Support To contact customer support please use the details below:

Customer Support Sony Ericsson Mobile Communications Maplewood Building Chineham Business Park Basingstoke RG24 8YB E-mail: modules.support@sonyericsson.com or modules.info@sonyericsson.com Information about Sony Ericsson and its products is available on the following web site:

http://www.SonyEricsson.com/M2M 1.5 Precautions The GT47 as a standalone item is designed for indoor use only. To use outdoors it must be integrated into a weatherproof enclosure. Do not exceed the environmental and electrical limits as specified in Technical Data, page 32. LZT 123 7607 R1B 9 2. MECHANICAL DESCRIPTION 2. Mechanical Description 2.1 Overview The pictures below show the mechanical design of the module along with the positions of the different connectors and mounting holes. The module case is made of durable PC/ABS plastic. LED Antenna connector RS232 serial and extended I/O connector Access to SIM card Figure 2.1 Module viewed from the left side Mounting hole (x2) Power supply and extended I/O connector Audio connector Figure 2.2 Module viewed from the right side LZT 123 7607 R1B 10 2. MECHANICAL DESCRIPTION 2.2 Physical Dimensions 3.5

x 2

) 7 1

. 5 3

. 5 4 4

. 6 6 55.3

. 6 0 1 0

. 1 5 11.0 0 9

. 2 6 2 11.0 77.4 Measurements are given in millimetres. See also Technical Data, page 32. LZT 123 7607 R1B 11 3. ELECTRICAL DESCRIPTION 3. Electrical Description All electrical connections to the module are protected in compliance with the standard air (8 kV) and contact (4 kV) Electrostatic Discharge (ESD) tests, of EN 61000-4-2. The module uses the following industry standard connectors:

High density 15 pin (RS232 serial and extended I/O interface)

RJ12 6-way (power supply and extended I/O connector)

RJ9 4-way (handset connector)

SIM card reader

FME male coaxial jack (antenna connector) 3.1 Power Supply and Extended I/O Connector An RJ12 6-way connector, as shown and described below, serves as a means of supplying and controlling d.c. power to the modem. Additionally there are several extended input/output signals available that can be used to control or interface external systems and devices. General signal description:

1 VIN 2 OUT-2 3 IN-1 4 TO_IN 5 OUT-1 6 GND LZT 123 7607 R1B 12 3. ELECTRICAL DESCRIPTION The power connector electrical characteristics are listed below:

Pin Signal Dir Limits Description 1 2 3 4 5 6 VIN OUT-2 IN-1 TO_IN OUT-1 GND I O I I O I 5 - 32 V Positive power input 32V, 0.25A Low side switch, short circuit protected 0.5 - 32 V 0.5 - 32 V Digital Input VIH > 3V, VIL < 2.8 V Internal Pull Down of 40K Active low control line used to switch the GT47 off/on. VIH > 5 V, VIL < 2 V Power off/on: t > 0.2 s Internal Pull Up to VIN of 20K VIN, 0.4A High side switch, short circuit protected

Negative power (ground) input and return path for TO_IN and the extended inputs and outputs Note!

Signal OUT-2 on the RJ12 connector is switched in parallel to signal OUT-4 on the 15-pin high density socket. The individual output signals are generated by two different low side switches inside the module driven from a common control signal. 3.1.1 Power Supply Interface The supply voltage VIN, required by the GT47, is in the range 5V - 32V d.c. VIN and GND are reverse polarity and over voltage protected. The GT47 switches on automatically once the 5V-32V dc supply voltage is applied. Note! The GT47 will not switch on if TO_IN is shorted to ground when the dc supply is applied. Note!

For more information on switching the GT47 on and off please see section 6. Operation, page 30. Note! Please be aware that the total current carried via either the VIN or GND pins will be the sum of the intrinsic power consumption of the GT47 and any drive current supplied via OUT-1 or OUT-2 (or other IOs). The current on either of the VIN or GND pins must not exceed 1.5A. It is recommended that the system integrator provides appropriate fusing otherwise the GT47 may be damaged. Caution!

LZT 123 7607 R1B 13 3. ELECTRICAL DESCRIPTION Current Consumption at Standard Operation Supply Voltage 5V 12V 32V Power Down Mode:

AV Max AV Max AV Max 5 15 20 15 50 5 Standby Mode (typical):

Frequency 850/900 MHz 1900/1800 MHz Talk Mode (typical):

Frequency 850/900 MHz 1900/1800 MHz AV Max AV Max AV Max 26 26 110 120 43 45 20 19 9 9 6 6 AV Max AV Max AV Max 220 170 1230 90 960 70 520 350 40 30 200 mA 140 mA Notes! Power Down Mode: DC power is applied but the GT47 is switched OFF. Standby Mode: The module is switched ON and camped on to the network. No call in progress. Talk Mode: The module is switched ON and a voice/data call is in progress. The power consumption during transmission in Talk Mode is measured at maximum transmitted power. The power consumption in Standby Mode is measured at the maximum paging rate (Paging Rate 2). Current Consumption with external +4.8V Supply Active For the following calculations it was assumed that the external +4.8V load is 70mA. Supply Voltage 5V 12V 32V Power Down Mode:

AV Max AV Max AV Max 5 15 20 15 50 5 Standby Mode (typical):

Frequency 850/900 MHz 1900/1800 MHz Talk Mode (typical):

Frequency 850/900 MHz 1900/1800 MHz AV Max AV Max AV Max 112 112 196 206 79 81 19 19 45 45 33 32 AV Max AV Max AV Max 306 256 1316 126 1046 106 556 386 53 43 213 mA 153 mA mA mA mA mA mA mA Note! These tables do not include the power consumption associated with any drive current supplied via further GT47 outputs, e.g. OUT-1 or OUT-2. LZT 123 7607 R1B 14 3. ELECTRICAL DESCRIPTION

([WHQGHG,26LJQDOV Digital Inputs The digital input IN-1 is available on pin 3 of the RJ12 connector. Its state is detected by IO5 of the embedded GR47 engine, see GT47-GR47 signal cross reference table, page 21. The distinction between low level and high level signals is at the voltage level of 3 V. Voltages above 3 V are detected as high level voltages and voltages below 2.8 V are detected as low level. Digital Outputs The RJ12 power supply connector has two different output drivers:

OUT-1 is driven by a high side switch that applies VIN to pin 5 of the RJ12 connector. IO1 of the embedded GR47 engine is used to activate the OUT-1 signal, see GT47-GR47 signal cross reference table, page 21.

OUT-2 is driven by a low side switch that shorts pin 2 of the RJ12 connector to ground when activated. IO3 of the embedded GR47 engine is used to activate OUT-2, see GT47-GR47 signal cross reference table, page 21. VIN Monitoring The voltage, VIN, can be monitored internally by the GT47, for example if the control terminal is supplied from an external battery. ADC1 on the GR47 is used for this purpose, see GT47-GR47 signal cross reference table, and is calibrated to operate in the voltage range 0 31.875 V. The resolution of the 8 bit converter, ADC1, provides a measurement accuracy of approximately 3%. LZT 123 7607 R1B 15 3. ELECTRICAL DESCRIPTION 3.2 RS232 Serial and Extended I/O Interface The GT47 supports a standard 9 signal RS232 serial interface (EIA/TIA 574) on the 15 pin high density connector together with a range of configurabe I/Os including a second 4-wire RS232 interface. 11 12 6 7 8 1 2 3 13 14 15 9 10 4 5 1 DCD 2 RD 3 TD 4 IN-3 5 OUT-3 6 DSR 7 RTS 8 CTS 9 4.8V 10 RI 11 IN-2 12 OUT-4 13 DTR 14 GND 15 ANA_IN Signals that support an alternative configuration can be reconfigured using the appropriate AT command (e.g. AT+E2IO) or via an intrinsic function if using an embedded application. Note! When reconfiguring a GT47 signal, via AT command or intrinsic function, the corresponding GR47 signal name must be used, see GT47-

GR47 signal cross reference table, page 21. The electrical characteristics of the serial port signals are shown below:

Pin GT47 Signal Dir 1 2 3 4 5 6 7 8 DCD RD TD IN-3 OUT-3 DSR RTS CTS O O I I O O I O Max. Voltage limits 13.2V 13.2V 25V Description RS232 signal Data carrier detect VRXW 5V RS232 signal:

Received data VRXW 5V RS232 signal:

Transmitted data V,/ < 0.6V, V,+ > 2.4V

-0.5 - 32V Digital input V,+ > 3V, V,/ < 2.8V PullDown with 40K 32V, 0.25A low side switch, short circuit protected 13.2V 25V 13.2V RS232 signal:

Data set ready VRXW 5V RS232 signal:

Request to send V,/ < 0.6V, V,+ > 2.4V RS232 signal:

Clear to send VRXW 5V LZT 123 7607 R1B 16 3. ELECTRICAL DESCRIPTION Pin GT47 Signal Dir Description Max. Voltage limits 9 4.8V 10 RI 11 IN-2 12 13 OUT-4 DTR 14 GND 15 ANA_IN O O I O I I I 0 - +4.8V, 75mA Voltage supply for external devices Supply voltage +4.8V, max. current 75mA 13.2V RS232 signal:

Ring indicator VRXW 5V

-0.5 - 32V Digital input V,+ > 3V, V,/ < 2.8V PullDown with 40K 32V, 0.25A low side switch, short circuit protected 25V

RS232 signal:

Data Terminal Ready V,/ < 0.6V, V,+ > 2.4V Ground connection and return path for the extended inputs/outputs

-0.5 - 32V Analog input measurement range: 0 -

12.75V 3.2.1 Standard RS232 Serial interface and Signals The module supports a standard RS232 serial interface (EIA/TIA 574) via its 15 pin high density connector, shown above. 3.2.2 Serial Data The GT47 supports the standard data character format of 1 start bit, 8 bit data, no parity plus 1 stop bit, in total 10 bits per character. In line with serial communication terminology the module is the data circuit-

terminating equipment (DCE) and the external application or computer is the data terminating equipment (DTE). 3.2.3 Serial Data Signals - RD, TD The default baud rate is 9.6 kbps, however higher bit rates up to 230.4 kbps are supported and can be set by AT commands. At start-up the module transmits and receives data at the default rate of 9.6 kbps in either standard AT mode or binary mode (the first received data - AT or binary format -

determines the operating mode). 6HULDO'DWD)URP*75'

3LQ

RD is an output signal that the GT47 uses to send data to the external application. 6HULDO'DWD7R*77'

3LQ

TD is an input signal, used by the external application to send data to the GT47. LZT 123 7607 R1B 17 3. ELECTRICAL DESCRIPTION 3.2.4 Control Signals - RTS, CTS, DTR, DSR, DCD, RI RTS and CTS are capable of transmitting at 1/10 th of the data transmission speed for data rates up to 230.4kbps (byte-oriented flow control mechanism). 5HTXHVWWR6HQG576 3LQ

Used to condition the GT47 for data transmission. The default level is inactive by internal pull down. The exact behaviour of RTS is defined by an AT command. Software or hardware control can be selected. Hardware flow is the default control. The application must pull RTS high to enable transmission from the GT47.

&OHDU7R6HQG&76 3LQ

CTS indicates that the GT47 is ready to transmit data. The default level is high. You can define the exact behaviour of CTS through an AT command, and can select software or hardware flow control.

'DWD7HUPLQDO5HDG\'75 3LQ

DTR indicates that the DTE is ready to send and receive data. It also acts as a hardware hang-up, terminating calls when switched low. The signal is active high. You can define the exact behaviour of DTR with an AT command.

'DWD6HW5HDG\'65 3LQ

An active DSR signal is sent from the GT47 to the application (DTE) to confirm that a communications path has been established. DSR has two modes of operation, use the AT command AT&S to set the mode.

'DWD&DUULHU'HWHFW'&'

3LQ

DCD indicates that the GT47 is receiving a valid carrier (data signal) when high. You can define the exact behaviour of DCD with an AT command. 5LQJ,QGLFDWRU5, 3LQ

RI indicates that a ringing signal is being received by the GT47 when high. You can define the exact behaviour or RI with an AT command. LZT 123 7607 R1B 18 3. ELECTRICAL DESCRIPTION Alternative Configuration It is possible to reconfigure one or more of the signals in this section (RTS, CTS, DTR, DSR DCD and RI) to be used as digital inputs or outputs if the full RS232 serial interface is not required. Configuration is achieved using AT command (AT+E2IO) or via embedded application intrinsic functions, please refer to GT47-GR47 signal cross reference table, page 21. To be reconfigured as a digital IO, each signal must retain the direction and the logic voltage levels attributed to it when used as an RS232 signal. For example DSR can only be reconfigured as a digital output with VRXW 5V. 3.2.5 Extended I/O Signals Please refer to GT47-GR47 signal cross reference table, page 21, for more information on the relationship between signal names and pin numbers of the GT47 and the embedded GR47 engine.

'LJLWDO,QSXWV 3LQ 

Digital inputs IN-2 and IN-3 are available on the HD15 connector via pins 11 and 4 respectively. The inputs are detected via signals IO4 and IO7 of the embedded GR47 engine. Note! As an alternative configuration signals IN-2 and IN-3 can be used to support a second RS232 serial interface as RTS-2 and TD-2. Further information is given below.

$QDORJ,QSXW 3LQ

The signal ANA_IN can be used for measuring analog input values in the range 0 -12.75V. ADC2 of the embedded GR47 is used to detect ANA_IN. The resolution of the converter is 8 bit with an measurement accuracy of about 3%. The input impedance of the ANA_IN pin is 50 K.

'LJLWDO2XWSXWV 3LQ 

Digital outputs OUT-3 and OUT-4 are available on the HD15 connector via pins 5 and 12 respectively. The outputs are controlled via signals IO8 and IO3 of the embedded GR47 engine. Signal OUT-4 on the HD15 connector is switched in parallel to signal OUT-2 on the RJ12 connector. The individual output signals are generated by two different low side switches inside the terminal driven from the common control signal, IO3. All GT47 output signals driven by LZT 123 7607 R1B 19 3. ELECTRICAL DESCRIPTION low side switches return to open circuit when deactivated. This allows the external application hardware to determine the desired logic voltage levels with the appropriate pull-up. The output drivers are low side switches which short the pin to GND if they are activated. Note! As an alternative configuration signals OUT-3 and OUT-4 can be used to support a second RS232 serial interface as CTS-2 and RD-2. Further information is given below.

92XWSXW6XSSO\

3LQ

There is a voltage regulator implemented inside the module that is capable of supplying an external voltage source of +4.8V with a maximum current of 75 mA. The voltage source can be switched on/off with the DAC signal of the internal GR47 GSM engine. By default the voltage source is switched on. A high level of 2.75V at the DAC output of the GR47 GSM engine will switch the voltage source off. Note! The +4.8V source may be switched on/off via an embedded or external application and so may be used as an optional digital output with levels of

+4.8V and open circuit. 3.2.6 Second RS232 Serial Interface IN-3 and OUT-3 can be automatically reconfigured as signals TD-2 and RD-2, of a second serial interface, by enabling UART3 of the internal GR47. UART 3 may be enabled using AT command or intrinsic function. In addition, IN-2 and OUT-4 can be automatically reconfigured as signals CTS-2 and RTS-2 of the second serial interface by enabling hardware flow control for UART3 on the internal GR47. Hardware flow control can be enabled using intrinsic function only. Note! The signal level thresholds for each of the digital inputs of the second serial interface are: 3V<V,+<32V and V,/< 2.8V. An external RS232 transceiver component may be used to convert the serial interface to standard RS232 electrical levels. The GT47s +4.8 V output can be used to provide power for the transceiver. 3.2.7 Relationship between GT47 and GR47 signals When reconfiguring a GT47 signal, via AT command or intrinsic function, the corresponding GR47 signal name must be used, see the GT47-GR47 signal cross reference tables overleaf. LZT 123 7607 R1B 20 3. ELECTRICAL DESCRIPTION GT47 - GR47 Signal Cross-reference Table A GT47 / GT48 Relationship to the GR47/GR48 engine GT47 Pin GT47 Primary Dir. GR47 Corresponding GR47 Signal Pin Signal HD15 Connector 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 DCD RD TD IN-3 OUT-3 DSR RTS CTS

+4.8V RI IN-2 OUT-4 DTR GND ANA_IN RJ12 Connector 1 2 3 4 5 6 VIN OUT-2 IN-1 TO_IN OUT-1 GND GT47 Internal Function VIN Monitoring Power Save Mode O I O I O O I O O O I O I I O I O I O 38 42 41 43 44 32 39 40 20 36 24 23 37 27 23 13 21 26 22 DCD RD TD IO7 IO8 DSR RTS CTS DAC RI IO4 IO3 DTR ADC2 IO3 I05 IO1 ADC1 IO2 IO3 on the embedded GR47 provides the common control signal for both GT47 signals OUT-2 and OUT-4. LZT 123 7607 R1B 21 3. ELECTRICAL DESCRIPTION GT47-GR47 Signal Cross-reference Table B GT47 / GT48 Relationship to GR47/GR48 engine GT47 Pin GT Alternative Dir. Pin Corresponding signal GR47 Signal HD15 Connector OUT-6 TD-2 RD-2 OUT-7 IN-4 OUT-8 OUT-5 OUT-9 RTS-2 CTS-2 IN-5 O I O I O O I O O O I O I 38 42 41 43 44 32 39 40 20 36 24 23 37 O1 TD3 RD3 O3 IO9 O4 DAC O2 IO4 IO3 IN1 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 3.3 Audio Connector A 4-way RJ9 connector, as shown below, allows a telephone handset to be plugged into the GT47, giving access to the microphone and earpiece signals. The connector may also be used to drive other analogue audio sub-

systems or devices. The module is configured to work with a range of handsets. If necessary, changes can be made to the characteristics of the audio interface by sending the GT47 appropriate AT commands. LZT 123 7607 R1B 22 3. ELECTRICAL DESCRIPTION Audio signal descriptions are listed below:

Pin Signal Dir Description 1 2 3 4 MICN BEARN BEARP MICP I O O I Microphone negative input Earpiece negative output Earpiece positive output Microphone positive input MICP and MICN are balanced differential microphone input signals. These inputs are compatible with an electret microphone. BEARP and BEARN are the speaker output signals. These are differential-mode outputs. The electrical characteristics are given in the table below. Parameter Output level (differential) Output level (dynamic load = 32 ) Distortion at 1 kHz and maximum output level Offset, BEARP to BEARN Ear piece mute switch attenuation Limit 4.0 VSS 2.8 VSS 5 %

30 mV 40 dB The following table shows the ear piece impedances that can be connected to BEARP and BEARN. Ear piece model Impedance Tolerance Dynamic ear piece Dynamic ear piece Piezo ear piece

[32 + 800 H] // 100 pF

[150 + 800 H] // 100 pF 1 k + 60 nF 20 %

20 %

20 %

LZT 123 7607 R1B 23 3. ELECTRICAL DESCRIPTION 3.4 Antenna Connector The antenna connector allows transmission of radio frequency (RF) signals between the GT47 and an external customer-supplied antenna. The module is fitted with a 50 , FME male coaxial jack as shown below. RF Signal GND The table below shows the antenna electrical characteristics:

Parameter Limit Description Nominal impedance 50 (SWR better than 2.5:1) Output Power Static Sensitivity 2 Watt peak (Class 4) EGSM 850/ 900 1 Watt peak (Class 1) GSM 1800/1900 Better than 102 dBm EGSM 850/ 900 Better than 102 dBm GSM 1800/1900 LZT 123 7607 R1B 24 3. ELECTRICAL DESCRIPTION 3.5 SIM Card Reader The module is fitted with a SIM card reader designed for 3 V and 5 V SIM cards. It is the flip-up type which is lockable in the horizontal position and is accessed through a removable panel as shown below. The SIM card reader incorporates a SIM presence switch which detects whether a SIM card is inserted. The full operation of the GT47 relies on a SIM card being inserted. Caution! Some GT47 functionality may be lost if you try to operate the control terminal without a SIM card. The SIM presence switch also ensures that when a SIM card is inserted or removed the unit is reset, as long as the GT47 is switched ON. 3.6 Real Time Clock The module contains a real time clock (RTC) to maintain accurate timekeeping and to enable timestamping of messages. The RTC is powered all the time that the GT47 is turned on. When the GT47 is powered off, a storage energy device within the module provides back-up power to maintain the RTC for several hours - please contact Sony Ericsson Customer Support for more information. LZT 123 7607 R1B 25 3. ELECTRICAL DESCRIPTION 3.7 Software Updates It is possible, and sometimes necessary, to update the module software. Updates must be carried out by a Sony Ericsson approved technician. Please contact your supplier for details (see Service and Support, page 9). LZT 123 7607 R1B 26 4. EMBEDDED APPLICATIONS 4. Embedded Applications The module has the capability to store and run customer written code in the form of a script during the processors idle time, through the use of an on board interpreter. 4.1 Features Main features of embedded applications are as follows.

C based scripting language (Sony Ericsson specific)

Over the air upgrade of scripts (NOT GSM software)

Library of intrinsic functions

Multiple on radio device script support 4.2 Implementation 4.2.1 Limitations The module has up to 44kbytes of space available for storage of two scripts in the scripting language and 25kbytes of operating RAM. Structures included in this language are:

If - then - else statements

While loops

For loops All hardware interfaces that are normally available to the module through the AT commands are available to the embedded application. Further drivers have been written such as M bus and I2C for use by the embedded application (EA) through the use of the I/O pins. Since the module is processing the script using its own memory, limitations are placed onto the scripts that are run.

A direct comparison cannot be made to a fully compiled C program in terms of size but a gauge of script size is that if each line were 128 characters long in the script then the script could be 350 lines long.

Processing power is something that needs to be considered as the script is run as a low priority process within the software. However, controller mode stops GSM operation and provides all the processing power for the script to be run. See the Application Guide for more details.

Code cannot be ported directly from an existing application and loaded directly onto the radio device. It must be re written in the Sony Ericsson Mobile script language so that the radio device interpreter can function correctly. LZT 123 7607 R1B 27 4. EMBEDDED APPLICATIONS 4.2.2 M2mpower IDE (Integrated Developers Environment) The IDE is a windows based package which allows the user to write, simulate, debug and download the application into a radio device with the embedded application (EA) software. The standard version is designed to run on Windows XP and 2000, other versions are available for 98 if required. A guide is available for implementing applications using the developers kit and the embedded application (EA) functionality. This is a required package to be able to implement an embedded application (EA). For further information please contact SEM customer support. LZT 123 7607 R1B 28 5. TCP/IP STACK 5. TCP/IP Stack An on board IP/TCP/UDP stack has been integrated into the software negating the need for the customer to implement one in their own code base. For early software releases this is only accessible through the embedded applications (see previous section) using intrinsic functions. 5.1 Implementation The following types of commands allow various functions:

Open/closing IP connection - Negotiates/closes a dynamic IP address with the web server.

Send/Receive TCP packets - Performs all TCP operations to send and receive packets.

Send/Receive UDP packets - Performs all UDP operations to send and receive packets.

Resolve URL to an IP address - Similar to nslookup command in DOS When the unit is set up and controlled using the embedded applications either the embedded applications or an external application can generate data to be sent and pass it to the radio device for transmission. This effectively provides a transparent communication link to an internet server from the application over GPRS. LZT 123 7607 R1B 29 6. OPERATION 6. Operation 6.1 Switching the GT47 On The GT47 is turned ON automatically once DC power is applied. If the GT47 is turned OFF, using one of the methods described in 6.2, the control terminal can be turned ON again through one of two methods:

pull signal TO_IN to ground for t >0.2s, then release.

activate the main RS232 control line DTR, low to high for >0.2s The GT47 is fully operational after 4 seconds. Logging onto a network may take longer than this and is outside the control of the GT47. Note! The GT47 will not switch on if TO_IN is shorted to ground when the dc supply is applied. 6.2 Switching the GT47 Off There are two ways to switch off the GT47 as described below.

Use the appropriate AT command (AT+CFUN);

pull signal TO_IN to ground for t >0.2s, then release. 6.3 Operating States/LED The GT47 has a green LED, as depicted below, which is used to indicate various operating states. These states are described in following table. LED Operating state After switching on the GT47 LED On after 4 s GT47 switched off or power removed from the module Off Standby or talk Flashing No network, network search, no SIM card, no PIN entered On LZT 123 7607 R1B 30 6. OPERATION 6.4 Power Save The GT47 can power down the main RS232 IC when not needed in order to minimise power consumption. The IC is powered up automatically at start-up but can be powered down by setting the output of IO2 on the embedded GR47 (pin22) to low via AT command or embedded application. Once powered down, the IC can be woken up by setting the output of IO2 high on the GR47 via AT Command. Even when powered down the IC is able to pass a DTR signal received on the serial interface. Therefore an embedded application that monitors DTR, while the IC is powered down, can be made to wake up the IC, if a signal is received, by setting IO2 on the GR47 high. 6.5 Controller Mode The GT47, when powered up, will normally start up its GSM signalling software and look to register on the GSM network. Any embedded application script runs as a background process as and when the GSM software is idle. As a feature available via embedded applications the GT47 can be placed in controller mode whereby the GT47 powers up with a minimal subset of radio functionality. The GSM signalling software is halted and the embedded applications script has full control of the processor. Controller mode allows an application to run with more predictable response times. LZT 123 7607 R1B 31 7. TECHNICAL DATA 7. Technical Data

'DWD)HDWXUHV CSD HSCSD (2+1) GPRS Class B (4+1)

- P channels

- Coding schemes CS1 - CS4 Up to 9.6 kbps, transparent and non-

transparent Up to 28.8 kbps 85.6 kbps (subject to network support and terminal location) GSM 07.10 multiplexing protocol 6KRUW0HVVDJH6HUYLFH)HDWXUHV SMS 9RLFH)HDWXUHV

)D[)HDWXUHV Text and PDU Point to point (MT/MO) Cell broadcast concatenation of up to 6 SMS Full Rate, Enhanced Full Rate and Half Rate

(FR/EFR/HR) Echo Cancellation and Noise Reduction Dual Tone Multi Frequency (DTMF) Group 3 Class 1 and 2 LZT 123 7607 R1B 32 7. TECHNICAL DATA

'DWD6WRUDJH SMS storage capacity 40 in the module In addition, the unit can handle as many SMS as the SIM can store Phone book capacity 100 3RZHU6XSSO\

Supply voltage range 5 - 32 V d.c. 5DGLR6SHFLILFDWLRQV Frequency range GT47: EGSM 900 MHz and 1800 MHz (dual band) Maximum RF output power 2 W (900 MHz) and 1 W (1800 MHz) Antenna impedance 50 Static sensitivity Better than 102 dBm

$XGLR6SHFLILFDWLRQV Parameter Output level (differential) Output level (dynamic load = 32 ) Distortion at 1 kHz and maximum output level Offset, BEARP to BEARN Ear-piece mute-switch attenuation Limit 4.0 VSS 2.8 VSS 5 %

30 mV 40 dB Ear piece model Impedance Tolerance Dynamic ear piece Dynamic ear piece Piezo ear piece

[32 + 800 H] // 100 pF

[150 + 800 H] // 100 pF 1 k + 60 nF 20 %

20 %

20 %

LZT 123 7607 R1B 33 7. TECHNICAL DATA 6,0&DUG5HDGHU Voltage type Support for 3 V and 5 V SIM cards

(OHFWULFDO&RQQHFWRUVDQG/('

Plug-in power supply connector and extended I/O RJ12 6-way Handset audio connector RJ9 4-way Antenna connector FME male RS232 port LED high density socket, 15 pin Green 0HFKDQLFDO6SHFLILFDWLRQ Length Width Height Weight 77.4 mm 66.4 mm 26.2 mm

< 110 g LZT 123 7607 R1B 34 7. TECHNICAL DATA

(QYLURQPHQWDOVSHFLILFDWLRQV Operating temperature range 30 C to +75 C Storage temperature range 40 C to +85 C Relative humidity 5 - 95 %, non-condensing Stationary vibration, sinusoidal Stationary vibration, random Non-stationary vibration, including shock Displacement: 7.5 mm Acceleration amplitude: 20 m/s and 40 m/s Frequency range: 2-8 Hz, 8-200 Hz, 200-500 Hz Acceleration spectral density (m/s):

0.96, 2.88, 0.96 Frequency range:

5-10 Hz, 10-200 Hz, 200-500 Hz, 60 min/axis Shock response spectrum I, peak acceleration:

3 shocks in each axis and direction;

300 m/s, 11 ms Shock response spectrum II, peak acceleration:

3 shocks in each axis and direction;

1000 m/s, 6 ms Bump Acceleration: 250 m/s Free fall transportation 1.2 m Rolling pitching transportation Angle: 35 degrees; period: 8 s Static load 10 kPa Low air pressure/high air pressure 70 kPa/106 kPa

&HUWLILFDWLRQ Directive 1999/5/EC Tested according to GCF-CC EMC: EN 301 489-1 EMC: EN 301 489-7 Safety: EN 60950-1 GSM 3GPP TS 51.010-1 LZT 123 7607 R1B 35 8. AT COMMAND SUMMARY 8. AT Command Summary The AT standard is a line-oriented command language. AT is an abbreviation of ATtention and it is always used to start sending a command line from the terminal equipment (TE) to the terminal adaptor (TA). The command line consists of a string of alphanumeric characters. It is sent to the GT47 to instruct it to perform the commands specified by the characters. As the list of AT commands supported occasionally changes, it is wise to check the latest listing with Sony Ericsson before starting any software development (see Service and Support, page 9). The AT commands listed below are supported by the GR47/48 (italic) within the GT47. Be aware that not all AT commands will perform valid operations in the GT47 owing to its modified range of IOs. AT Command Description AT AT&C AT&D AT&F AT&S AT&W AT*

AT*E2APC AT*E2APD AT*E2APR AT*E2CD Attention Command Circuit 109 (DCD) Control Circuit 108 (DTR) Response Set to Factory Defined Configuration Circuit 107 (DSR) response Store User Profile List all Supported AT Commands Application Program Control Application Program Download M2M Audio Profile Manipulation Ericsson M2M Cell Description AT*E2EAMS Ericsson M2M Audio Profile Modification AT*E2EMM Ericsson M2M Engineering Monitoring Mode AT*E2ESC AT*E2FAX AT*E2IO M2M Escape Sequence Guard Time Ericsson M2M Fax Comm. Baud Rate Modification Ericsson M2M Input/Output Read/Write AT*E2OTR Operational Temperature Reporting AT*E2NBTS Ericsson M2M Neighbour BTS AT*E2NMPR Ericsson M2M Set NMEA (GPS) Port Rate AT*E2PBCS Ericsson M2M Phonebook Check Sum AT*E2PHFB Portable Handsfree Button Sense Enable LZT 123 7607 R1B 36 8. AT COMMAND SUMMARY AT Command Description AT*E2SMSRI Ring Indicator for SMS AT*E2SPI AT*E2SPN AT*E2SSD AT*E2SSI AT*E2SSN Serial Peripheral Interface M2M Service Provider Indication M2M Supplementary Service Dispatch M2M Supplementary Service Indications Ericsson M2M SIM Serial Number AT*E2STKC M2M STK Set Up Call AT*E2STKD M2M STK Display Text AT*E2STKG M2M STK Get Inkey AT*E2STKI AT*E2STKL M2M STK Get Input M2M STK Select Item AT*E2STKM M2M STK Set Up Menu AT*E2STKN M2M STK Envelope (Menu Selection) AT*E2STKS SIM Application Toolkit Settings AT*E2STKTO SIM Application Toolkit Settings AT*EALR AT*EALS AT*EAMS AT*EARS Ericsson Audio Line Request Ericsson Request ALS Status Ericsson Audio Mode Selection Ericsson Audio Ring Signal AT*ECAM Ericsson Call Monitoring AT*ECPI AT*ECSP AT*EDIF AT*EDST Ciphering Indicator Ericsson Customer Service Profile Ericsson Divert Function Ericsson Daylight Saving Time AT*EENMEA NMEA (GPS) Mode on UART2 AT*EGIR AT*EIPS AT*ELAM AT*ELIN AT*EMAR AT*EMIC AT*EMIR AT*EPEE Ericsson Group Item Read Identity Presentation Set Ericsson Local Audio Mode Ericsson Line Set Ericsson Master Reset Ericsson Microphone Mode Ericsson Music Mute Indication Request Ericsson Pin Event LZT 123 7607 R1B 37 8. AT COMMAND SUMMARY AT Command Description AT*EPNR AT*EPNW AT*ESAG AT*ESCG AT*ESCN AT*ESDG AT*ESDI AT*ESGR AT*ESIL AT*ESLN AT*ESMA AT*ESMM AT*ESNU Ericsson Read SIM Preferred Network Ericsson Write SIM Preferred Network Ericsson Add to Group Ericsson Create Group Ericsson Set Credit Card Number Ericsson Delete Group Ericsson Delete Group Item Ericsson Group Read Ericsson Silence Command Ericsson Set Line Name Ericsson Set Message Alert Sound Ericsson Settings Minute Minder Ericsson Settings Number AT+CACM Accumulated Call Meter AT+CALA AT+CALD Set Alarm Alarm Delete AT+CAMM Accumulated Call Meter Maximum AT+CAOC Advice of Charge AT+CBST AT+CCFC AT+CCLK Select Bearer Service Type Call Forwarding Number and Conditions Set Clock and Date AT+CCWA Call Waiting AT+CEER AT+CFUN Extended Error Report Set ME Functionality AT+CGACT PDP Context Activate or Deactivate AT+CGATT GPRS Attach or Detach AT+CGDATA Enter Data State AT+CGDCONT Define PDP Context AT+CGEREP GPRS Event Reporting AT+CGMI Read MS Manufacturer Identification AT+CGMM Read MS Model Identification AT+CGMR Read MS Revision Identification AT+CGPADDR Show PDP Address LZT 123 7607 R1B 38 8. AT COMMAND SUMMARY AT Command Description AT+CGQMIN Quality of Service Profile (Minimum Acceptable) AT+CGQREQ Quality of Service Profile (Requested) AT+CGREG GPRS Network Registration Status AT+CGSMS Select Service for MO SMS Messages AT+CGSN Read MS Product Serial Number Identification AT+CHLD AT+CHSC AT+CHSD AT+CHSN AT+CHSR AT+CHSU AT+CHUP AT+CIMI AT+CIND AT+CLAC AT+CLCK AT+CLIP AT+CLIR AT+CMEE AT+CMER Call Hold and Multiparty HSCSD Current Call Parameters HSCSD Device Parameters HSCSD Non Transparent Call Configuration HSCSD Parameters Report HSCSD Automatic User Initiated Upgrading Hang Up Call Subscriber Identification Indicator Control List All Available AT Commands Facility Lock Calling Line Identification Calling Line Identification Restriction Mobile Equipment Error Mobile Equipment Event Reporting AT+CMGC Send Command AT+CMGD Delete Message AT+CMGF AT+CMGL Message Format List Message AT+CMGR Read Message AT+CMGS Send Message AT+CMGW Write Message to Memory AT+CMOD Call Mode AT+CMSS AT+CMUX AT+CNMI Send From Storage Switch to 07.10 Multiplex Protocol New Message Indications to TE AT+CNUM Subscriber Number AT+COLP Connected Line Identification on Presentation LZT 123 7607 R1B 39 8. AT COMMAND SUMMARY AT Command Description AT+COPS Operator Selection AT+CPAS AT+CPBF AT+CPBR AT+CPBS AT+CPBW AT+CPIN AT+CPMS AT+CPUC ME Activity Status Phonebook Find Phonebook Read ME Storage Phonebook Write PIN Control Preferred Message Storage Price Per Unit and Currency Table AT+CPWD Change Password AT+CR AT+CRC Service Reporting Control Cellular Result Code AT+CREG Network Registration AT+CRES AT+CRLP AT+CSAS AT+CSCA AT+CSCB AT+CSCS AT+CSDH AT+CSMP AT+CSMS AT+CSQ AT+CSSN AT+CTZU AT+CUSD AT+CVHU AT+F___ AT+GMI AT+GMM AT+GMR AT+ICF AT+IFC Restore SMS Settings Radio Link Protocol Save Settings Service Centre Address Select Cell Broadcast Message Type Select Character Set Show Text Mode Parameters Set Text Mode Parameters Select Message Service Signal Strength Supplementary Service Notification Automatic Time Zone Update Unstructured Supplementary Service Data Voice Hang-Up Low Level Fax Commands Read Manufacturer Identification Read Model Identification Read Revision Identification Cable Interface Character Format DTE-DCE Local Flow Control LZT 123 7607 R1B 40 8. AT COMMAND SUMMARY AT Command Description AT+ILRR AT+IPR AT+VTS Cable Interface Local Rate Reporting Cable Interface Port Command DTMF and Tone Generation AT+WS46 Mode Selection ATA ATD ATE ATH ATI ATL ATM ATO ATP ATQ ATS0 ATS2 ATS3 ATS4 ATS5 ATS6 ATS7 ATS8 Answer Dial Command Echo Hang up Identification Information Monitor Speaker Loudness Monitor Speaker Control Return to Online Data Mode Select Pulse Dialling Result Code Suppression Automatic Answer Control Escape Sequence Character Command Line Termination Character Response Formatting Character Command Line Editing Character (BACKSPACE) Blind Dial Delay Control Connection Completion Timeout Comma Dial Modifier Delay Control ATS10 Automatic Disconnect Delay Control ATT ATV ATX ATZ Select Tone Dialling DCE Response Format Call Progress Monitoring Control Reset to Default Configuration LZT 123 7607 R1B 41 9. ABBREVIATIONS AND DEFINITIONS 9. Abbreviations and Definitions Abbreviation Explanations CBM CBS CSD DCE DTE DTMF EFR EMC ETSI FR GPRS GSM High Side Switch HR HSCSD ITU-T Low Side Switch ME MO MS MT PDU RLP RF RTC SIM SMS Cell Broadcast Message Cell Broadcast Service Circuit Switched Data Data Circuit Terminating Equipment Data Terminal Equipment Dual Tone Multi Frequency Enhanced Full Rate Electro-Magnetic Compatibility European Telecommunication Standards Institute Full Rate General Packet Radio Service Global System for Mobile Communication Pin is driven high, to Vin, in the active state Half Rate High Speed Circuit Switched Data International Telecommunication Union - Telecommunications Standardisation Sector Pin is driven low in the active state. High state requires external pull up, Mobile Equipment Mobile Originated Mobile Station Mobile Terminated Protocol Data Unit Radio Link Protocol Radio Frequency Real Time Clock Subscriber Identity Module Short Message Service LZT 123 7607 R1B 42 9. ABBREVIATIONS AND DEFINITIONS Abbreviation Explanations TA TE TS Terminal Adapter Terminal Equipment Telecommunication Services USSD Unstructured Supplementary Service Data LZT 123 7607 R1B 43