Hyundai Tucson: TP Read Protocol

Description

The immobilizer system will disable the vehicle unless the proper ignition key is used, in addition to the currently available antitheft systems such as car alarms, the immobilizer system aims to drastically reduce the rate of auto theft.

1. Transponder (TP) - IMMO ECU Communication

TP Read Protocol

1. IMMO_ECU after IGN on(or CPU Reset cancellation) is sent Challenge to TP and confirmed Serial Number and Signature.
2. When response of input transponder is not correct, input is retry.
3. When response of input transponder is correct, The data that calculate Encryption operation in the EEPROM program compared with received data from TP.

   When Codes is same, input is finished.

   If the codes are not same, input are continued until when codes are same.

4. If IMMO_ECU EEPROM code is not programming, when correct transponder is inputted (C'RC Check OK), input is finished.
5. After IGN1 on(CPU Reset cancellation), IMMO_ECU is reading the maximum 5times Transponder Code
6. In the IGN1 ON&EMS_state=Lock state, when received ANKNOWLEDGE, TP is re-authenticated

2. Transponder / IMMO ECU / EMS authentication

Components Operations

1. Transponder (Built-in keys)

The transponder has an advanced encryption algorithm. During the key teaching procedure, the transponder will be programmed with vehicle specific data. The vehicle specific data are written into the transponder memory. The write procedure is once only; therefore, the contents of the transponder can never be modified or changed.

Master Folding Key

Assistant Master Key

2. Antenna Coil

The antenna coil (A) has the following functions..

• The antenna coil supplies energy to the transponder.
• The antenna coil receives signal from the transponder.
• The antenna coil sends transponder signal to the IMMOBILIZER.

  It is located directly in front of the steering handle lock.

3. ENCRYPTED IMMOBILIZER unit

The IMMOBILIZER carries out communication with the built-in transponder in the ignition key. This wireless communication runs 011RF (Radio frequency of 125 kHz). The IMMOBILIZER is mounted behind of the crash pad close to center cross bar.

The RF signal from the transponder, received by the antenna coil, is converted into messages for serial communication by the IMMOBILIZER device. And. the received messages from the PCM(ECM) are converted into an RF signal, which is transmitted to the transponder by the antenna.

The IMMOBILIZER does not carry out the validity check of the transponder or the calculation of encryption algorithm. This device is only an advanced interface, which converts the RF data flow of the transponder into serial communication to the PCM(ECM) and vice versa.

4. PCM (Power Train Control Module)

The PC'M(ECM) (A) carries out a check of the ignition key using a special encryption algorithm, which is programmed into the transponder as well as the PCM(ECM) simultaneously. Only if the results are equal, the engine can be started. The data of all transponders, which are valid for the vehicle, are stored in the PC'M(ECM).

ERN (Encrypted Randorm Number) value between EMS and encrypted smartra unit is checked and the validity of coded key is decided by EMS.

READ NEXT: