Description of the GSM-GPS vehicle tracker unit

With free tools on www.budgetcom.nl/tools/

Version 4, English (Obey-no-1 v1.0)
Contents:

Connecting the unit 2

The SIM-card 2

Testing the unit 2

You did not receive a position-string 3

Access Denied 3

The red GSM status LED 3

Communication in general 4

Serial communication 4

Request position 4

The NMEA/RMC position string 5

Private communication 5

SMS message center 5

System and alarm settings of the unit 6

Operational settings 7

General unit settings 7

Auto-tracking 7

Base numbers 8

Password 8

Installing outgoing messages 9

Unit history settings 10

Geo-zones 10

Geo Cloax 11

Dallas keys 12

Snooze 12

Set preset text 12

Unknown commands 12

Cable connections 13
2

Connecting the unit

Follow these instructions to connect the unit for its use.

1. Connect both antennas (GSM and GPS) to the unit

2. Make sure that the GPS antenna is placed horizontally with clear view of the sky
3. Connect the red wire to +12 volt, and the black wire to ground
4. The blue wire is the contact-wire. Also connect it to +12 volt
5. Leave the other wires unconnected for now
6. It may take some time before the GPS achieves a valid position reading. This is
normal for every GPS in the world; it takes time before enough satellites have been
found. This can (but will usually not) take up to 15 minutes
7. If the position that you receive from the unit is located in England, this is the default
factory setting. Be patient, and wait for a valid GPS position. It may help if you
reposition the GPS antenna more advantageous; ensure that it has free view of the
sky.

The SIM-card
A valid GSM SIM-card must be placed in the unit (through slot in side of the unit). Please
read the following important points carefully.
The SIM -card must be enabled for sending SMS text messages. Therefore, it
must have prepay-balance for SMS messages available!
Some providers, such as for example T-Mobile in The Netherlands, do not allow
sending of SMS text messages if the prepaid balance is lower than 2 EURO. Keep
this in mind! Using a normal GSM phone you can check to see if SMS messages
can be sent from the SIM -card.
The pin code (personal identification number) must be deactivated from the SIM
-card! Otherwise, the unit cannot send SMS messages from the SIM -card.
Deactivate the pin code by placing the SIM -card in a normal GSM phone.

To make use the unit for online tracking by butgetmap software you need a Data Number for
the SIM card, this is almost always the case with a Subscription card and not with a prepayd
card.

Testing the unit

To check if everything went well so far, you can test the unit. The best way to do this, is to
request its current position with an -RPOS (request position) command. To do this, send an
SMS text message from a GSM phone to the phone-number of the SIM-card in the unit. The
SMS text message must contain the following text exactly (take care of uppercase letters and
the space character between -RPOS and #): -RPOS #

The unit should respond shortly after receiving the message, by sending back another SMS
text message with a complex-looking NMEA position-string inside. If this is the case,
communication with the unit went well.
3

You did not receive a position-string

If your unit does not respond by sending a position-string by SMS, please check all the steps
above ( Connecting the unit and The SIM-card ). Did you send the -RPOS # command
correctly? If the problem cannot be solved by the above steps, read The red status LED
below. Possibly, the SMS message center number must be changed (see SMS message
center ).
Please keep the following in mind:
It may take some time before the GPS achieves a valid position reading. This is
normal for every GPS in the world; it takes time before enough satellites have been
found. This can (but will usually not) take up to 15 minutes
If the position that you receive from the unit is located in England, this is the default
factory setting. Be patient, and wait for a valid GPS position. It may help if you
reposition the GPS antenna more advantageous; ensure that it has free view of the
sky.

Access Denied!
When you send a command to the unit, it may sometimes respond by sending back Access
Denied . In this case the command that you sent to the unit is not recognized as a valid
command (remember uppercase letters, space characters, etcetera). It may also be because
you sent a password-secured command, without sending the required password with it. Some
password-secured commands can be found further in this document. The default (standard)
password of the unit is PassWord (please note the two uppercase letters).

Private communication
To prevent others from intercepting communication with your unit, changing of unit settings
must always be preceded by switching on the private communication mode. This is done via
the SPRIV (set private) command. For example, to switch private communication on:
-SPRIV 1
For example, to switch private communication mode off:
-SPRIV 0
Don t forget to start communication with your unit with -SPRIV 1 and to end it with
-SPRIV 0 . If you forget this, many commands will not be recognized by the unit.

The red GSM status LED

On one side of the unit, there is a small round hole in the casing. Through this hole, you can
see a red status LED. This LED gives some information about the status of the unit s GSM
connection (not the GPS positioning system). The following table shows the meaning of the
LED.

GSM LED Meaning

Constant on The unit attempts to contact a GSM cell

Very slow flash There is contact with a GSM cell
Fast flash GSM communication takes place
Does not light up at all GSM communication is not possible
4

Communication in general
All the commands described in this document work via
SMS text messages
modem connection
direct serial connection to PC

This means that you can configure the unit both from a distance, but also directly connected
to your PC. When an invalid or unknown command is received by the unit, it responds with
the string ACCESS DENIED! .
All commands must be written using uppercase characters only. Commands to the unit are
preceded by a - (minus-character), responses from the unit are preceded by a + (plus
character).

Serial communication
Besides SMS communication and online modem communication, the unit can be connected
directly to the serial port of your PC. This is very useful when configuring the unit, with all
the commands mentioned in this document. For this, use a simple terminal application, such
as for example HyperTerminal (supplied with Windows operating systems). The unit
communicates at 4800 bps, 8N1, no flow control. See the following table.

Bits per second 4800

Data bits 8
Parity None
Stop bits 1
Flow control None

Request position
The command to request the last known exact position of the unit is RPOS (request position).
The unit responds by sending back a standard NMEA/RMC string message. This is a
standard way for every GPS device in the world to record position and other data. The string
contains exact position, speed, direction, date and time information. For example, the
command to request position is: -RPOS #

The unit responds with:

+CPDM$GPRMC,153122.155,A,5325.9224,N,00229.9388,W,0.38,331.22,
310100,,*10

Likewise, the unit responds to the RPAT command with the same NMEA/RMC string,
followed by some additional unknown data (among which a UTC timestamp, possibly the
engine switch-off time). For example: -RPAT #
The unit responds with:
+CPDM$GPRMC,153122.155,A,5325.9224,N,00229.9388,W,0.38,331.22,
310100,,*10,0,0,155953,310100

When requesting position you will get a different response regarding the status of the unit e.g

+CPSM System Disarmed Probably Safe Mode

+CPIM System Armed Probably Imobillizer Mode
+CPDM Ignition ON Probably Drive Mode
5

The NMEA/RMC position string

The unit will always return its last known exact position by way of an NMEA/RMC position
string. This is a standard way for every GPS device in the world to record position and other
data. The string contains exact position, speed, direction, date and time information.
An NMEA/RMC position string looks more complex than it is in reality. On the internet, you
will find many descriptions of this standard format. To make life easier for you, we
developed some free tools on the internet that help you to analyze NMEA/RMC strings.
Among others, it contains a tool to generate detailed maps with the exact position of your
unit. Our tools can be found at: www.budgetcom.nl/tools/

SMS message center

One of the most important settings of the unit is the SMS message center phone number. To
send SMS text messages, for example in case of an alarm situation, the unit must know the
phone number of the SMS message center of the telecom provider used. As a result, this
number depends on the SIM-card being used inside the unit. Below we mention few message
center numbers from telecom providers in The Netherlands. These numbers are publicly
available, so you can request them easily from your own provider.

Provider SMS message center number

Provider SMS message center

KPN abonnement +31653131313
KPN prepay +31653131314
Vodafone +316540881000
T-Mobile +31624000000
Telfort +31626000230
Orange +31628500561

To install this number into your unit, you must use the -SBN 8 command. The standard
password of the unit is PassWord (note the two uppercase letters). For example:
-SBN 8 PassWord +31653131313
To request the currently installed message center number of the unit, use the following
command:
-RBN 8 PassWord
6

System and alarm settings of the unit

With the SALM (set alarm) command, the alarm and response settings from the below list
can be switched on/off in the unit. The SALM command must be followed by a single
number that is the sum of all the parameters that are switched on.

Dead man operation disabled 1

Silent Panic (no Led or Immobilize) 2
Sound alarm for panic activation 4
24-hour panic SMS notification (only on ignition, otherwise) 8
Intruder response sound on (silent alarm, otherwise) 16
Automatic arming of alarm after ignition switches off (Arm only,disarm by Dallas) 32
Use external arming input (use Dallas key, otherwise) 64
Automatic door locking on alarm 128
Automatic door unlocking on disarm 256
Enable active door pull-up output 512
Enable active remote arming inputs pull-up 1024
Enable PC internet / fax connection 2048
Geo cloak permanently disabled 4096
Single button dialing enabled 8192
Entry warning buzzer enabled 16384
Automatic modem reboot 32768

For example, to switch the first and last option on, and all others off::
-SALM 32769
For example, to switch the third and fifth options, and the single button dialing enabled on,
and all other options off:
-SALM 8212
With the RALM (request alarm) command, the current settings of the above list can be
requested. For example:
-RALM #
Operational settings
7

The SOPS command sets several operational settings of the unit. The SOPS command must
be followed by a single number that is the sum of all the parameters that are switched on (see
list below).

Immobilize vehicle (Status led blinks fast, only resets with –SOPS 2, System stays Armed) 1
Reset –SOPS 1, System stays Armed (Status led blinks slow) 2
(unknown) 4
(unknown) 8
Activate siren 16
Activate lights 32
Close doors 64
(unknown) 128
Activate snooze 256
Activate sleep 512
Arm System with no exit delay 1024
Disarm System (as with Dallas key) 2048

For example, to switch all settings off: -SOPS 0

For example, to activate both siren and lights: -SOPS 48
For example, reset Alarm and Disarm System, -SOPS 2050

General unit settings

Setting Units Set command Request command

Settings Units Set Command Request Commands

Entry Delay 0.1 sec -SENT 300 -RENT #
Alarm silence (pause) duration 0.05 sec -SNDY 1200 -RNDY #
Alarm sounder duration 0.05 sec -SNTM 2400 -RNTM #
Exit Delay on Dallas Key 0,1 sec -SEXT 1200 -REXT #
Exit Delay on Ignition OFF 0,05 sec -STARM 300 -RTARM #
Free dial barring 0 = no barring -BAR 0

Auto-tracking
With auto-tracking, the unit will repeatedly send out its exact position/speed/direction/etc.
Using this mode, the unit/vehicle can be followed continuously over an open data-connection
(modem connection).

Set auto tracking frequency (in seconds) -SGUDR 300

Request auto tracking frequency (in seconds) -RGUDR #
Set auto tracking duration (in seconds) -SKUT 1800
Set auto tracking continuous -SKUT 0
Request auto tracking duration (in seconds) -RKUT #
Enable auto tracking -EGPS #
Disable auto tracking -DGPS #
8

Base numbers
Using the -SBN (set base number) command, maximally 7 base telephone numbers can be
installed inside the unit, numbered 0-6. Using SMS test messaging, the unit can contact these
telephone numbers in case of an alarm situation. For example, to install the phone number of
base 3:
-SBN 3 PassWord +31651234567

With the -RBN (request base number) command, the currently installed phone numbers of the
bases can be requested. For example:
-RBN 3 PassWord

With the -STEXT (set text) command, for each of the bases a descriptive text can be installed
in the unit. For example, base 3:
-STEXT 3 CheckpointCharlie

With the -RTEXT (request text) command, the currently installed descriptive text of each
base can be requested from the unit. For example, base 0: -RTEXT 0

Password

The standard password of the unit is PassWord (note the two uppercase letters)

To read the password use –RPASS #

To change the password use –SPASS oldpassword newpassword
Example change PassWord to HELLO: -SPASS PassWord HELLO
9

Installing outgoing messages

With the -SSMSF (set SMS field) command, you can determine at which event an SMS
message must be sent to which base phone numbers. There are 7 base phone numbers
available in total, numbered 0-6. The SSMSF command must be followed by an event-code
(0-13). The event codes are listed in the following table:

Event Number Code

Break in 0 IT
Panic 1 PN
Start 2
Stop 3
Connections 4
Aux high reset 5
Aux low reset 6
Geo-zone exit 7 GO
Geo-zone entry 8 GI
Connection upper limit 9
Connection lower limit 10
11
12
13

After the password the bases that should be notified must be mentioned. This is the sum of
the base-values in the following table:
Base 0 1
Base 1 2
Base 2 4
Base 3 8
Base 4 16
Base 5 32
Base 6 64

For example, to send an SMS text message to bases 0, 1, and 6, in case of break-in:
-SSMSF 0 PassWord 67

For example, to send an SMS text message to all bases in case of geo-zone exit:
-SSMSF 7 PassWord 127

With the RSMSF (request SMS field) command you can request the currently installed bases
that are sent a message in case of the alarm events. For example, to request which bases are
informed in case of a panic event (event 1), send the command:
-RSMSF 1 PassWord
10

Unit history settings

With the -SGHR command, the History Capture Rate can be set (expressed in seconds). For
example: -SGHR 600

With the RGHS (request GPS history status) command the history capture rate and logging
status are requested. For example: -RGHS #

With the SGPSS command, a number of history settings can be toggled. Using the following
table, the parameter-value of the SGPSS command can be compiled binary. For example:
SGPSS 65

History logging enabled 1

Vehicle ignition on/off logging enabled 2
Periodic logging enabled 4
Periodic analogue logging enabled 8
Power save logging enabled 16
Analogue logging enabled 32
Analogue high/low logging enabled 64

Geo-zones
A geo-zone is a circular geographical zone in which the unit may or may not be present.

Geo zones can be including or excluding, meaning that an alarm is generated when the unit
enters or leaves the geo-zone. A unit can contain multiple geo-zones. Besides the radius of the
zone, a re-arm radius must also be supplied. This must be bigger (in absolute sense) than the
geozone radius for excluding geo-zones, and smaller (in absolute sense) than the geo-zone
radius for including geo-zones. There is both a -SGZ (set geo-zone) and -RGZ (request geo-
zone) command.

For example, to de-activate zone 1: -SGZ 1 0 0 0 0

For example: zone 5, excluding (minus-signs), center-coordinates, zone radius 3000m, re-arm
radius 3200m: -SGZ 5 05.2304 52.0011 -3000 -3200
For example: zone 7, including, center-coordinates, zone radius 4000m, re-arm radius 3800m
-SGZ 7 05.2304 52.0011 4000 3800

The geo-zones present inside the unit can be requested with the -RGZ (request geo-zone)
command. For example, to request geo-zone number 3: -RGZ 3

Leaving a GEO Zone gives a +CPGO SMS

Entering a GEO Zone gives a +CPGI SMS
11

Geo Cloax

Geo Cloax is a “fence” around the unit with a certain radius, when the unit leaves this fench a
alarm is triggerd.

The location of this fence is stored in memory when the unit is armed by ignition or dallas
key or by –SGEO 1

Set GEO Cloax on (direct without arming) –SGEO 1

Set GEO Cloax off (direct without disarming) –SGEO 0
Set Geocloax radius (in meters) –SGCT 300
Read Geocloax radius (in meters) –RGCT #
Read GeoCloax memory reference Location –RGEOL #
Rearming time and delay time –RGEOT #

-RGEOL # gives 0, lat , long (the 0 stands for seconds outside the fence)
-RGEOT # gives A:100 T:20 (the T stands for second outside fence before SMS is send,
when you return in time T to GC Radius there will be no SMS)

A GEO CLOAX Alarm will give a +CPGC sms

Ps, –SGEO 1 and –SGEO 0 are somewhat strange commands, it seems that you can turn
GEO CLOAX on with –SGEO 1 and turn it of with –SGEO 0 without switching the alarm
on or off .

When –SGEO 1 is on and used again it uses the A (-RGEOT # command) to delay the
setting of GEO CLOAX (when using the –RGEOL # command you can see the first digit
going up till time A)
12

Dallas keys
There are 20 Dallas key buffers, that can be set individually. Each buffer can contain the
unique serial number of a Dallas key. The following commands relate to these buffers and
keys.

Set Dallas key position 3 in unit: -SDALE 3 [12-digit key number]

Remove Dallas key 0 from unit (must be 12 capital F-characters): -SDALE 0

FFFFFFFFFFFF

Request Dallas key in unit position 1 (12 F-characters means empty): -RDALE 1

Request the current Dallas key (Key on Reader). Returns the serial number of currently
connected Dallas key: -RDALK #

Snooze
After a preset activation period, the unit may switch to snooze mode. When in snooze mode,
the unit is alternately asleep and awake to check for received messages. With the -SSNZ (set
snooze) command, snooze mode parameters are set. For example, the following command
sets snooze mode (1 = on, 0 = off), with wakeup period of 10 minutes, sleep period of 50
minutes, and snooze activation period of 24 hours (1440 minutes).
-SSNZ 1 10 50 1440
With the -RSNZ (request snooze) command, the current snooze settings are requested:
-RSNZ #

Set preset text

With an additional unit installed inside the vehicle, the vehicle operator can send preset text
messages to its command center (max 10 messages, 2 x 16 characters each). With the -
SMESS
(set message) command these messages are installed into the unit. For example:
-SMESS 3 This_is_da_first This_number_two!

With the -RMESS (request message) command, the currently installed messages are
requested. For example, to request the text of message 0:
-RMESS 0

Unknown commands
Of the following commands we do not know their exact functionality or purpose:
-SMOOF 252 ( audio monitor )
-SMOOF 25+31612345678 ( normal audio )
13

Cable connections
The following cable shows the connections of the cable/connector. It concerns the 15-pins
DB15 ( game port ) connector of the unit.

DB 15 connector:

Pin Wire color Description Connect to

nr
1 Purple NC NC
2 Violet NC NC
3 Yellow Panic button in Via panic button to +12V
4 Blue Ignition Connect to ignition +
5 Grey Dallas + VE Dallas key reader (Grey)
6 White Immobilize out Immobilize relay to ground and white wire
7 Orange Status LED LED to ground and orange wire
8 Black Ground minus Ground via fuse
9 white/black Vehicle door in Vehicle interior reading-light +12V to
white/black wire
10 thin/brown Programmer RX 9-pins D connector pin 3
11 thin/black Programmer TX 9-pins D connector pin 2
12 thin/red Programmer V 9-pins D connector pin 5
13 Green Dallas V Dallas key reader (black)
14 Brown Signal ground NC
15 Red +12V +12V supply

RJ 45 connector:

Pinnr Wire Description Connection

1 Speaker NC
2 Speaker NC
3 Red Mic +
4 Ground Mic gnd
5 Yellow Buzzer +
6 Green NC
7 Brown NC
8 White Buzzer gnd
14

SMS response :

SMS Meaning:
+CPPN Panic Alarm
+CPIM RPOS After Panic Ignition OFF
+CPRM RPOS After Panic Ignition ON
+CPG0 Leaving Geo zone
+CPGI Entering Geo Zone
+CPDM RPOS Normal state with Ignition ON
+CPSM RPOS Normal state with Ignition OFF
+CPIT Alarm after ignition ON or Alarm on Door
+CPGC Geo Cloax alarm

External Status LED

LED ext Betekenis

ON Exit time on dallas key Door can be opened to leave car
Blink fast 2 hz Panic Alarm Reset only by -SOPS 2 alarm stays Armed
Opening door triggers Entry time, ignition on
Blink Slow 1hz Alarm is ON
triggers immobilizer and +CPIT sms
OFF Alarm is OFF

Immobilizer only active after ignition is turned ON

Examples

Arm System with dallas key (Ralm 49156)

Action Status led Buzzer Immobillize Soft Control

Dallas key in On Off Off

Exit time On Off Off -REXT # / -SEXT
System Armed Blink Slow Off Off
Open door (entry Blink Slow Beep 1hz Off -RENT # / -SENT
time)
Dallas Key in Off Off Off -SOPS 2048

Arm System with dallas key and create alarm on Door (White/black wire) (Ralm 49156)

Action Status led Buzzer Immobillize Soft Control

Dallas Key in On Off Off

Exit time On Off Off -REXT # / -SEXT
System Armed Blink Slow Off Off
Open door (entry Blink Slow Beep 1hz Off -RENT # / -SENT
time)
After Entry time Blink Slow Beep 1hz Off
Ignition On Blink Slow Beep 1hz On
Ignition Off Blink Slow Beep 1hz On
Dallas Key In Off Off Off -SOPS 2048

Panic Button (Ralm 49156)

Action Status led Buzzer Immobilize Soft Control

Press Panic Button Blink Fast Off Off

Ignition On On Beep 2hz On
Ignition Off Blink Fast Beep 2hz Off after
25sec
Only Soft Off Blink Slow Off Off -SOPS 2
Dallas Key in Off Off Off -SOPS 2048

Arm System without dallas key Disarm with dallas key (-RALM 49190)

Action Status led Buzzer Immobillize Soft Control

Ignition off Off Off Off -STARM / -RTARM

After Exit time Blink Slow Off Off
System Armed Blink Slow Off Off
Open door Blink Slow Beep 1hz Off -SENT / -RENT #
Dallas Key in Off Off Off -SOPS 2048