UDS Unified Diagnostic Services - ISO 14229

UDS and OBD Positioning in the ISO/OSI Layer Model Diagnostic Messages - Structures and Types The Sub-Function Byte of UDS Periodic Message Types of UDS Service Overview
International Standard Organization‘s Open System Interconnect 7 Layer Communication Model Request without Sub-Function Service Services without Sub-Function-Byte: $14, $23, $24, $2A, $2E, $2F, $34, $35, $36, $37, $3D, $84 Responses in a CAN data field according to ISO 15765-3 Available in Available for Has
or Positive Response Data Parameter Functional Unit SID Service Name Mnemonic
Identfier Default Session RoE Sub-Function
Suppress Positive Response
Message Indication Bit
$10 ü ü Diagnostic Session Control DSC
Unacknowledged Segmented Data Transfer (USDT)
Layer Description Standards for UDS Standards for OBD $11 ü ECU Reset ER
ü
Response Service Periodic Data Data (≤ 5 Byte in
“8” Diagnostic Application User ISO 15031-5 Type 1 PCI $27 ü Security Access SA
Services with Sub-Function Byte: $10, $11, Identfier Identfier single frame)
Requests with Sub-Function Bit 7 Sub-Function (Bit 6 to 0)
$28 Communication Control CC
ISO 14229-1 Service Sub-Function
Data Parameter $19, $27, $28, $2C, $31, $3E, $83, $85, $87 ü
7 Application Layer ISO 15031-5 Byte Identfier Byte Diagnostic and
ISO 15765-3 Services with Sub-Function Byte and $3E ü Tester Present TP
Bit 7 Bit 6 Sub-Function (Bit 5 to 0) Periodic Data Communication ü
6 Presentation Layer Not applicable Not applicable Storage State Parameter : $86 Type 2 PCI
Identfier
Data (≤ 6 Byte in single frame)
Management $83 ü Access Timing Parameter ATP
5 Session Layer ISO 15765-3 Not applicable $84 Secured Data Transmission SDT

4 Transport layer ISO 15765-2 Not applicable UUDT-Responses Storage State

Unacknowledged Unsegmented Data Transfer (UUDT) $85 ü Control DTC Setting CDTCS
Data Parameter
$86 ü ü Response On Event ROE
3 Network Layer ISO 15765-2 ISO 15765-4 Response Service Periodic Data
Bit 7: suppressPosRspMsgIndicationBit Type 1 Data (≤ 6 Byte) $87 ü Link Control LC
Identfier Identfier
2 Data Link Layer ISO 11898-1 ISO 15765-4 This Bit defines whether a positive response of the ECU is wanted
$22 ü Read Data By Identifier RDBI
‚0‘ = FALSE: the ECU shall send a response, that is, no suppression of a positive response shall be done
ISO 11898-2* Negative Request
$23 Read Memory By Address RMBA
1 Physical Layer ISO 15765-4 Negative Responses Response Service
Response ‚1‘ = TRUE: Suppression of the positive response, that is, the ECU must not send a positive response ü
ISO 11898-3 Code Periodic Data
SID Identifier Negative responses shall be send by the ECU independent of this bit Type 2 Identfier
Data (≤ 7 Byte) $24 ü Read Scaling Data By Identifier RSDBI
Data Transmission $2A ü Read Data By Periodic Identifier RDBPI
Bit 6 to 0: sub-function parameter value
*) The bus physics used is to be selected by the user $2C Dynamically Define Data Identifier DDDI
The Bits 0 to 6 contain the value for a Sub-Function parameter for diagnostic services Responses can be of two different formats/types: ü ü
Therefore, several standards for different physical layer for e.g. High-Speed- (ISO 11898-2) or
$2E ü Write Data By Identifier WDBI
Fault-Tolerant-CAN (ISO 11898-3) can be used
Remark: Type 1: with Response Service Identifier
$3D ü Write Memory By Address WMBA
A service, which uses the suppressPosRspMsgIndicationBit only, shall set the value of the Sub-Function Type 2: without Response Service Identifier
parameter to 0 to support the sending of the bit 7 Stored Data $14 ü Clear Diagnostic Information CDTCI
The Bits 0 to 6 are meaningless then The type is respected by the Service $2A Read Data by Periodic Identifier Transmission $19 ü ü ü Read DTC Information RDTCI
Input Output
$2F ü Input Output Control By Identifier IOCBI
Control
Remote Activation
$31 ü ü ü Routine Control RC
of Routine
$34 Request Download RD
Upload $35 Request Upload RU
Simple/Polling Diagnostic Services Common Response Codes Download $36 Transfer Data TD
$37 Request Transfer Exit RTE
These services consist of one request and one response (max.) for physical addressing, or a group of responses for functional addressing Hex Mnemonic Description
10 GR General reject
Three Potential Polling Communication Flows Erroneous Communication with Sub-Function Byte 11 SNS Service not supported
when using the Sub-Function Byte 1. Positive Response Suppression requested (Bit 7 of Byte 2 is set to “1”, but response is sent by the ECU 12 SFNS Sub-Function not supported Specific conditions driven Response Codes Error Memory Functions
13 IMLOIF Incorrect message length or invalid format
1) Erase Error Memory ($14 Clear Diagnostic Information)
14 RTL Response too long Hex Mnemonic Description
21 BRR Busy repeat request 81 RPMTH rpm too high Parameter 1: Service ID = $14
22 CNC Conditions not correct 82 RPMTL rpm too low Parameter 2: Diagnostic Trouble Code (DTC) with three byte length
$10 $83
24 RSE Request sequence error 83 EIR Engine is running 2) Sub-Functions for Service $19 Read DTC Information

© 2016 Softing Automotive Electronics GmbH. Despite all due care and attention, Softing accepts no liability and extends no guarantee for the correctness, completeness or currentness of the information.
1. Positive Response Request Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit 25 NRFSC No response from sub-net component 84 EINR Engine is not running
7 6 5 4 3 2 1 0 7 6 5 4 3 2 1 0
10,03 26 FPEORA Failure prevents execution of requested action 85 ERTTL Engine run-time too low Hex Description
Positive Response 0 0 0 1 0 0 0 0 1 0 0 0 0 0 1 1
31 ROOR Request out of range 86 TEMPTH Temperature too high 01 Report number of DTC by Status Mask
50,03
33 SAD Security access denied 87 TEMPTL Temperature too low 02 Report DTC by Status Mask
35 IK Invalid key 88 VSTH Vehicle speed too high 03 Report DTC Snapshot Identification
2. Negative Response Request No Suppression requested, response correctly sent by ECU 36 ENOA Exceeded number of attempts 89 VSTL Vehicle speed too low 04 Report DTC Snapshot Record by DTC number
Negative Response 37 RTDNE Required time delay not expired 8A TPTH Throttle/Pedal too high 05 Report DTC Snapshot Record by Record number
2. Negative Response
38-4F RBEDLSD Reserved by Extended Data Link Security Document 8B TPTL Throttle/Pedal too low 06 Report DTC Extended Data Record by DTC number
70 UDNA Upload/Download not accepted 8C TRNIN Transmission range not in neutral 07 Report number of DTC by Severity Mask Record
71 TDS Transfer data suspended 8D TRNIG Transmission range not in gear 08 Report DTC by Severity Mask Record
10,83
3. Response suppressed Request 72 GPF General programming failure 8F BSNC Brake switch(es) not closed 09 Report Severity Information of DTC
50,83 73 WBSC Wrong Block Sequence Counter 90 SLNIP Shifter lever not in park 0A Report Supported DTC
10,03
78 RCRRP Request correctly received, but response is pending 91 TCCL Torque converter clutch locked 0B Report First Test Failed DTC
7F, 10, 12 7E SFNSIAS Sub-Function not supported in active session 92 VTH Voltage too high 0C Report First Confirmed DTC
7F SNSIAS Service not supported in active session 93 VTL Voltage too low 0D Report Most Recent Test Failed DTC
0E Report Most Recent Confirmed DTC
All values not described are reserved for future definition All values not described are reserved for future definition
0F Report Mirror Memory DTC by Status Mask
10 Report Mirror Memory DTC Extended Data Record by DTC number
11 Report number of Mirror Memory DTC by Status Mask
12 Report number of Emissions Related OBD DTC by Status Mask

Periodic Service Execution (Service $2A) Response on Event – RoE (Service $86) 13 Report Emissions Related OBD DTC by Status Mask
14 Report DTC Fault Detection Counter
For one Request follows one initial Response. After that, periodically more responses will follow. The sending can be stopped by using a simple diagnostic service For one or two setup and start Requests one or two initial Responses are given, followed by 0 to n event-driven Responses 15 Report DTC with Permanent Status
Service parameter "Transmission Mode" depending on the number of occurrences of tracked events. The distance between several events is non-deterministic.
The frequency of the data transmission can be configured using the the Transmission Mode. The UDS-Standard defines abstract values as: • The RoE mechanism can be activated in any Session, including the Default-Session
Slow = $01 • It does not need Tester Present messages to stay active
Medium = $02
Fast = $03
Stop sending = $04
Generic Event-Driven Communication Flow Example: DTC Status Change Communication Flow
UDS Response Handling Session Handling
The real values in Hertz for each frequency need to be defined between OEM and ECU supplier
Specifics
• All services, which have a parameter "Sub-Function", PowerOn Request other Session Tester
Generic Periodic Communication Flow Type 1 Communication Flow Type 2 Communication Flow support the "Response-Suppression-Handling"
of the ECU ⇒ Reset Event-Logic
A Response Service-ID is sent by the ECU NO Response Service-ID is sent by the ECU
Setup Event-Logic Request 86, 01, 06, 01, 19, 01, 01 • All services to read data do not support this feature
Initial Positive Response t0 C6, 01, 00, 06, 01, 19, 01, 01 1st Step • A service, which uses the suppressPosRspMsgIndicationBit
of the Sub-Function Byte only, must set the other bits of Default Non-Default
Timeout
Session Session
the Sub-Function Byte to 0, to support the transmission of the Bit 7
1. Setup Periodic Transmission 1. Setup Periodic Transmission for Start Event-Logic Request t1 86, 05, 06 2nd Step • SuppressPositiveResponseMsgIndicationBit = TRUE
Request 2A, 03, 0C, 0D 2A, 03, 0C, 0D
two Measurements ($0C, $0D) Positive Response C6, 05, 00, 06 ⇒ Suppression of the positive response
6A 6A Request Default Session Request Default Session Request same or other
Initial Positive Response ⇒ All negative responses are send nevertheless
⇒ Complete Reset ⇒ Reset Event-Logic Session
Event Driven Response t2 ∆ tEvent 59, 0F, 01, 00, 01 3rd Step • For functional requests, some specific negative responses are ⇒ Enable Security ⇒ Reset Event-Logic
6A, 0C, 0A, F0 always to be suppressed, independent of the value of ⇒ Stop Periodic Transmission ⇒ Enable Security
0C, 0A, F0
⇒ Reset Communication State
the Suppress Positive Response Message Indication Bit:
Positive Response 6A, 0D, 82 0D, 82 ⇒ Reset Measurements and Settings
2. Getting Periodic Responses 2. Getting periodic Measurements ∆ trate Final Response t3 C6, 01, 01, 06, 01, 19, 01, 01 4th Step ⇒ Service not supported (NRC $11)
Positive Response ⇒ Subfunction not supported (NRC $12)
Standardized values of Parameter „Diagnostic Session Type“
Positive Response 6A, 0C, 0A, F0 0C, 0A, F0
$01 Default Session
"Respond-to"-Services $02 Programming Session
6A, 0D, 82 0D, 82 Pre-defined values for parameter Event Type (6 Bits)
• ReadDataByIdentifier ($22) $03 Extended Diagnostic Session
$0 Stop Event-Logic
• ReadDTCInformation ($19) $04 Safety System Diagnostic Session
Request $1 Event on change of error memory, e. g. number of errors matching to mask has increased
3. Stop Transmission 3. Stop Transmission 2A, 04, 0C 2A, 04, 0C • RoutineControl ($31)
of Measurement $0C only $3 Event on change of measurement’s value, which is described by a data identifier
Positive Response 6A 6A • InputOutputControlByIdentifier ($2F)
$5 Start Event-Logic
$6 Clear Event-Logic
6A, 0D, 82 0D, 82

O r d e r a d d i t i o n a l c o p i e s : i n f o . a u t o m o t i v e @ s o f t i n g . c o m / w w w. a u t o m o t i v e . s o f t i n g . c o m