www.iconcox.

com

Version：V1.1.7

Level：Confidential

Concox Information Technology

GPS Tracker
Communication Protocol
（JM-VW01,GT06N,GT06F,GT06E,GV20,ET200,ET210,ET310,GV20A,EG01）

Important Revision History

Versio
Writer Date Audit Approval Description
n
BianYutao 2015-12-9 1.0.0 First edition ( Protocol format modification)
2017-6-23 Revised
2019-4-8 1.1.2 Add Driving behavior analysis
2019-9-11 1.1.3 Add fuel sensor data
2019-9-27 1.1.4 Add EG01
2020-1-4 1.1.5 Add GPS, query address information by phone number
2020-3-10 1.1.6 Add alarm code
2020-7-7 1.1.7 Add JM-VW01 model
2020-3-22 1.1.8 Add ALM4

Content

www.iconcox.com
 www.iconcox.com

1. PROTOCOL PACKET FORMAT --------------------------------------------------------------------------------------------------------------------------- 4

1.1 PROTOCOL NUMBER ------------------------------------------------------------------------------------------------------------------------------------ 4

2. LOGIN MESSAGE PACKET --------------------------------------------------------------------------------------------------------------------------------- 5

2.1. Terminal Sending Data Packet to Server ------------------------------------------------------------------------------------------------------ 5

2.2. Server Responds the Data Packet---------------------------------------------------------------------------------------------------------------- 5
3. HEARTBEAT PACKET ---------------------------------------------------------------------------------------------------------------------------------------- 6
3.1.Heartbeat packet sent by terminal -------------------------------------------------------------------------------------------------------------- 6
3.2. Server Responds The Heartbeat Packet -------------------------------------------------------------------------------------------------------- 7
4. GPS LOCATION PACKET ------------------------------------------------------------------------------------------------------------------------------------ 8
4.1. Location packet sent by terminal ---------------------------------------------------------------------------------------------------------------- 8
4.3. Server location packet response --------------------------------------------------------------------------------------------------------------- 10
5. ALARM PACKET ------------------------------------------------------------------------------------------------------------------------------------------- 11
5.1. Alarm packet sent by terminal ----------------------------------------------------------------------------------------------------------------- 11
5.2. Alarm packet response of server--------------------------------------------------------------------------------------------------------------- 14
6. ONLINE COMMAND -------------------------------------------------------------------------------------------------------------------------------------- 15
6.1. Online command sent by server --------------------------------------------------------------------------------------------------------------- 15
6.2. Online command replied by terminal -------------------------------------------------------------------------------------------------------- 15
7. GPS, PHONE NUMBER QUERYING ADDRESS INFORMATION PACKAGE (0X1A) -------------------------------------------------------------------- 17
7.1 Information from Terminal to Server --------------------------------------------------------------------------------------------------------- 17
7.2 Response package in English -------------------------------------------------------------------------------------------------------------------- 17
8. INFORMATION TRANSMISSION PACKET ----------------------------------------------------------------------------------------------------------------- 19
8.1. Information transmission packet sent by terminal --------------------------------------------------------------------------------------- 19
8.2. Server Response Information Transmission Packet -------------------------------------------------------------------------------------- 23
9. LBS MULTIPLE BASES EXTENSION PACKET ------------------------------------------------------------------------------------------------------------- 24
9.1. Terminal sent LBS multiple bases extension packet -------------------------------------------------------------------------------------- 24
9.2. Server reply: No need to reply. ----------------------------------------------------------------------------------------------------------------- 25

10 TIME CALIBRATION PACKET --------------------------------------------------------------------------------------------------------------------------- 25

10.1．Time request sent by terminal -------------------------------------------------------------------------------------------------------------- 25

10.2. Server response time information -------------------------------------------------------------------------------------------------------- 25

11 EXTERNAL DEVICE TRANSFER PROTOCOL (APPLY GT06E) ------------------------------------------------------------------------------------ 26

11.1．Device send transparent data to server --------------------------------------------------------------------------------------------------- 26

11.2．Server Response transfer data Packet ---------------------------------------------------------------------------------------------------- 27

12 EXTERNAL MODULE TRANSMISSION PROTOCOL （SERVER SEND）（APPLY EG01） -------------------------------------------- 27

12.1．Server send transparent data to module ------------------------------------------------------------------------------------------------ 27

12.2．Server Response transfer data Packet ---------------------------------------------------------------------------------------------------- 27

13 EXTERNAL MODULE TRANSMISSION PROTOCOL （MODULE SEND）（APPLY EG01）------------------------------------------- 28

13.1．Device send transparent data to server ------------------------------------------------------------------------------------------------- 28

13.2．Server Response transfer data Packet ---------------------------------------------------------------------------------------------------- 29

14.APPENDIX ----------------------------------------------------------------------------------------------------------------------------------------------------- 30

www.iconcox.com
 www.iconcox.com

14.1 CODE FRAGMENT OF THE CRC-ITU LOOKUP TABLE ALGORITHM IMPLEMENTED BASED ON C LANGUAGE ----------------------------------------- 30
14.2 DATA FLOW DIAGRAM-------------------------------------------------------------------------------------------------------------------------------- 31

www.iconcox.com
 www.iconcox.com

1. Protocol Packet Format

Length
Format Description
(Byte)
0x780x78（packet length : 1bit）or 0x790x79（packet length 2 bits）
Start Bit 2

Length = Protocol Number + Information Content + Information Serial Number

Packet Length 1(2)
+ Error Check
Protocol Number 1 Transmission packet type（see the following diagram for details）
Information
N Content is defined by specific application and protocol number
Content
Information Serial
2 Serial number of data sent later at each time will be automatically added ‘1’.
Number
Error check (From “Packet Length” to“Information Serial Number”) , are
values of CRC-ITU. CRC error occur when the received information is
Error Check 2
calculated, the receiver will ignore and discard the data packet. (See
Appendix 1)
Stop Bit 2 Fixed value: 0x0D 0x0A

1.1 Protocol Number

Login Information 0x01
Positioning Data 0x12
Status Information (Heartbeat Packet 0x13
Alarm Data 0x16
LBS Multiple Base Station Extended Information Packet 0x18
Demand Information Sent to Terminal by Server 0x80
Online command response 0x15
GPS, query address information by phone number 0x1A
Time Calibration Packet 0x8A
Information Transmission Packet 0x94
External device transfer Packet(apply GT06E) 0x9B
External module transmission Packet 0x9B
Server Response transfer data Packet 0x9C

www.iconcox.com
 www.iconcox.com

2. Login Message Packet

Description：
 Login packet is the information packet connecting the terminal and platform, it can send terminal
information to platform.
 If a GPRS connection is established successfully, the terminal will send a first login message packet to
the server and, within five seconds, if the terminal receives a data packet responded by the server, the
connection is considered to be a normal connection; if not, the terminal will send login packet again.
 If no packet returned by server within 5 seconds, then the response of login packet is timeout.
 Terminal reboot automatically after 3 timeouts.

2.1. Terminal Sending Data Packet to Server

Length Description
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content + Information
Packet Length 1
Serial Number + Error Check
Protocol Number 1 0x01
Information Example：IMEI number is 123456789123456，terminal ID is：0x01
Terminal ID 8
Content 0x23 0x45 0x67 0x89 0x12 0x34 0x56
Information Serial Serial number of data sent later at each time will be automatically
2
Number added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when the
Error Check 2
received information is calculated, the receiver will ignore and
discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A
Example：78 78 0D 01 03 53 41 90 33 41 28 36 00 0D 33 51 0D 0A

2.2. Server Responds the Data Packet

Length Description
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content + Information Serial
Packet Length 1
Number + Error Check
Protocol Number 1 0x01
Information Serial Serial number of data sent later at each time will be automatically added
2
Number ‘1’.
Error check (From “Packet Length” to“Information Serial Number”) ,
are values of CRC-ITU. CRC error occur when the received information
Error Check 2
is calculated, the receiver will ignore and discard the data packet. (See
Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A
Example：78 78 05 01 00 05 9F F8 0D 0A

www.iconcox.com
 www.iconcox.com

3. Heartbeat Packet
Description：
 Heartbeat packet is a data packet to maintain the connection between the terminal and the server.
 If a GPRS connection is established successfully, the terminal will send a first login message packet to
the server and, within five seconds, if the terminal receives a data packet responded by the server, the
connection is considered to be a normal connection; if not, the terminal will send login packet again.
 If no packet returned by server within 5 seconds, then the response of heartbeat packet is timeout.
 Terminal reboot automatically after 3 timeouts.

3.1.Heartbeat packet sent by terminal

Length
Description
(Byte)
Start Bit 2 0x780x78
Length = Protocol Number + Information Content +
Packet Length 1
Information Serial Number + Error Check
Protocol Number 1 0x13
Terminal
Information 1 See the following diagram for details
Content
0x00：No Power (shutdown)
0x01：Extremely Low Battery (not enough for calling or
sending text messages, etc.)
0x02：Very Low Battery (Low Battery Alarm)
Voltage Level 1
0x03：Low Battery (can be used normally)
Information 0x04：Medium
Content 0x05：High
0x06：Very High
0x00: no signal;
0x01: extremely weak signal;
GSM Signal
1 0x02: very weak signal;
Strength
0x03: good signal;
0x04: strong signal.
Language/Extended
2 latter bit 0x01 Chinese 0x02 English
Port Status
Serial number of data sent later at each time will be
Serial Number 2
automatically added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when
Error Check 2
the received information is calculated, the receiver will
ignore and discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value: 0x0D0x0A
Example：78780A134004040001000FDCEE0D0A

www.iconcox.com
www.iconcox.com

Terminal Information
One byte is consumed defining for various status information of the mobile phone.
Bit Code Meaning
1: Oil and electricity disconnected
Bit7
0: Oil and electricity connected
1: GPS tracking is on
Bit6
0: GPS tracking is off
Bit3～Bit5 Extended Bit
BYTE 1: Charge On
Bit2
0: Charge Off
1: ACC high
Bit1
0: ACC Low
1: Defense Activated
Bit0
0: Defense Deactivated

3.2. Server Responds The Heartbeat Packet

Length
Description
(Byte)
Start Bit 2 0x780x78
Length = Protocol Number + Information Content + Information
Packet Length 1
Serial Number + Error Check
Protocol Number 1 0x13
Serial number of data sent later at each time will be automatically
Serial Number 2
added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when the
Error Check 2
received information is calculated, the receiver will ignore and
discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value: 0x0D0x0A
Example ：78780513000F008F0D0A

www.iconcox.com
 www.iconcox.com

4. GPS location packet

Description：
 Data packet used to transmit terminal location
 Upload locating data based on rule after successfully connected and positioned.
 Re-upload locating data after successfully connected.

4.1. Location packet sent by terminal

Length Description
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content + Information
Packet Length 1
Serial Number + Error Check
Protocol Number 1 0x12（device time zone and time ）
Year（1byte）Month（1byte）Day（1byte）Hour（1byte）Min
Date Time 6
（1byte）Second（1byte）（converted to a decimal）(Date Time)
Quantity of
GPS The first character is GPS information length，The second
1
information character is positioning satellite number（converted to a decimal）
satellites
Latitude 4 Convert to a decimal and divide 1800000
Informatio
Longitude 4 Convert to a decimal and divide 1800000
n Content
Speed 1 Convert to a decimal
Convert to binary number of 16 bits and calculate by bits (see the
Course, Status 2
following diagram)
MCC 2 Mobile Country Code(MCC) (converted to a decimal)
MNC 1 Mobile Network Code(MNC)(converted to a decimal)
LAC 2 Location Area Code (LAC) (converted to a decimal)
Cell ID 3 Cell Tower ID(Cell ID)(converted to a decimal)
Serial number of data sent later at each time will be
Serial Number 2
automatically added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when the
Error Check 2
received information is calculated, the receiver will ignore and
discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A
Example：78 78 23 12 12 02 02 10 2A 17 CB 02 6C 17 8C 0C 38 D0 3C 00 54 2E 01 CC 00 28 66 00 0F 6F 00
00 00 00 00 05 1C D6 0D 0A

www.iconcox.com
www.iconcox.com

Course & Status

Two bytes are consumed, defining the running direction of GPS. The value ranges from 0°to 360°measured
clockwise from north of 0°.
0: ACC OFF
Bit7 0
1: ACC ON
Bit6 0 1
Bit5 GPS real-time/differential positioning
BYTE_1 Bit4 GPS having been positioning or not
Bit3 East Longitude, West Longitude
Bit2 South Latitude, North Latitude
Bit1
Bit0
Bit7
Bit6
Bit5
Course
Bit4
BYTE_2
Bit3
Bit2
Bit1
Bit0
Note:
1. If the Bit6 in BYTE_1 is 1, then the Bit7 is valid. In this case, if Bit7 is 1, means ACC ON; if it is 0, means
ACC OFF. If the Bit6 in BYTE_1 is 0, then the Bit7 is invalid In this case, the there is no Acc info included
2. The status information in the data packet is the status corresponding to the time bit recorded in the data
packet.
For example: the value is 0x15 0x4C, the corresponding binary is 00010101 01001100,
BYTE_1 Bit70
BYTE_1 Bit60
BYTE_1 Bit50 (real time GPS)
BYTE_1 Bit41 (GPS has been positioned)
BYTE_1 Bit30 (East Longitude)
BYTE_1 Bit21 (North Latitude)
BYTE_1 Bit10
BYTE_1 Bit01
BYTE_2 Bit70
BYTE_2 Bit61
BYTE_2 Bit50Course 332°(0101001100 in Binary, or 332 in decimal)
BYTE_2 Bit40
BYTE_2 Bit31
BYTE_2 Bit21
BYTE_2 Bit10
BYTE_2 Bit00
which means GPS tracking is on, real time GPS, location at north latitude, east longitude and the course is 332°.

www.iconcox.com
www.iconcox.com

4.2. Mileage location data packet （transmit mileage fields after function is turned on）

Format Length Description

Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content +
Packet Length 1
Information Serial Number + Error Check
Protocol Number 1 0x12（device time zone and time ）
Year（1byte）Month（1byte）Day（1byte）Hour
Date Time 6 （1byte）Min（1byte）Second（1byte）
（converted
to a decimal）(Date Time)
Quantity of
GPS
Informat 1 Convert to a decimal and divide 1800000
information
ion
satellites
Content
Latitude 4 Convert to a decimal and divide 1800000
Longitude 4 Convert to a decimal and divide 1800000
Information
Speed 1 Convert to a decimal
Content
Convert to binary number of 16 bits and calculate by
Course, Status 2
bits (see the following diagram)
Mobile Country Code(MCC) (converted to a
MCC 2
decimal)
LBS
Mobile Network Code(MNC)(converted to a
Informat MNC 1
decimal)
ion
LAC 2 Location Area Code (LAC) (converted to a decimal)
Cell ID 3 Cell Tower ID(Cell ID)(converted to a decimal)
Mileage, mileage statistics (hexadecimal)
Mileage 4 Divided by 1000 after turn HEX into decimal. (Only
available for devices with this function),unit:km
Serial number of data sent later at each time will be
Serial Number 2
automatically added ‘1’.
Error check (From “Packet Length”
to“Information Serial Number”) , are values of
CRC-ITU. CRC error occur when the received
Error Check 2
information is calculated, the receiver will ignore
and discard the data packet. (See
Appendix 1)
Stop Bit 2 Fixed value: 0x0D 0x0A
Example: 78 78 23 12 12 02 02 10 2A 17 CB 02 6C 17 8C 0C 38 D0 3C 00 54 2E 01 CC 00 28 66 00 0F 6F 00
00 00 00 00 05 1C D6 0D 0A

4.3. Server location packet response

Location packet server no need to response
www.iconcox.com
 www.iconcox.com

5. Alarm Packet
Description：
 Transmit alarm content defined by terminal
 Server response and parse longitude and latitude into address and re-upload to terminal after receiving
the alarm content
 Terminal send address to pre-set SOS number of device.

5.1. Alarm packet sent by terminal

Lengh Description
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content +
Packet Length 1
Information Serial Number + Error Check
Protocol Number 1 0x16
Year（1byte）Month（1byte）Day（1byte）Hour（1byte）
Date Time 6 Min（1byte）Second（1byte）
（converted to a decimal）(Date
Time)
Quantity of GPS The first character is GPS information length，The second
information 1 character is positioning satellite number（converted to a
satellites decimal）
Latitude 4 Convert to a decimal and divide 1800000
Longitude 4 Convert to a decimal and divide 1800000
Speed 1 Convert to a decimal
Convert to binary number of 16 bits and calculate by bits (see
Course, Status 2 the following diagram)（same as GPS packet, see GPS packet
for details）
Total length of LBS information :
=Its length+MCC+MNC+LAC CELLID=09;
Information LBS Length 1
06E /GV20: (MCC+MNC+LAC CELLID)=08;
Content
Parse of this byte is not mandatary, can be skipped
MCC 2 Mobile Country Code(MCC) (converted to a decimal)
MNC 1 Mobile Network Code(MNC)(converted to a decimal)
LAC 2 Location Area Code (LAC) (converted to a decimal)
Cell ID 3 Cell Tower ID(Cell ID)(converted to a decimal)
Terminal
1 See the following diagram
Information
0x00：No Power (shutdown)
0x01：Extremely Low Battery (not enough for calling or
sending text messages, etc.)
Voltage Level 1 0x02：Very Low Battery (Low Battery Alarm)
0x03：Low Battery (can be used normally)
0x04：Medium
0x05：High

www.iconcox.com
 www.iconcox.com

0x06：Very High

0x00: no signal;
0x01: extremely weak signal;
GSM Signal
1 0x02: very weak signal;
Strength
0x03: good signal;
0x04: strong signal.
Alarm/Language 2 See the following diagram
Serial number of data sent later at each time will be
Serial Number 2
automatically added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when
Error Check 2
the received information is calculated, the receiver will
ignore and discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A
Example：
78 78 25 16 13 03 0A 12 0C 0C CC 02 6C 19 3C 0C 38 D0 F0 00 55 5D 08 01 CC 00 28 66 00 0F 6F 48 06 04
03 02 00 02 E6 65 0D 0A
|
i. Terminal Information
Bit Code Meaning
1:Oil and electricity disconnected
Bit7
0: Oil and electricity connected
1: GPS tracking is on
Bit6
0: GPS tracking is off
100: SOS
011: Low Battery Alarm
Bit3～Bit5 010: Power Cut Alarm
BYTE 001:Vibration Alarm
000: Normal
1: Charging
Bit2
0: Not Charge
1: ACC high
Bit1
0: ACC Low
1: Defense Activated
Bit0
0: Defense Deactivated

ii. Alarm language

0x00: Normal

www.iconcox.com
www.iconcox.com

0x01: SOS
0x02: Power cut alarm
0x03: Vibration alarm
0x04: Enter fence alarm
0x05: Exit fence alarm
0x06: Over speed alarm
0x09: Displacement alarm
0x0A: Enter GPS dead zone alarm
0x0B: Exit GPS dead zone alarm
0x0C: Power on alarm
0x0D: GPS First fix notice
0x0E: Low battery alarm
0x0F: Low battery protection alarm
0x10: SIM change notice
0x11: Power off alarm
0x12: Airplane mode alarm
0x13: Disassemble alarm
0x14: Door alarm
0x15: Shutdown alarm due to low power
0x16: Sound alarm
0x17: Pseudo base-station alarm
0x18: Open cover alarm
0x19: Internal low Battery Alarm
0x20: Sleep mode alarm
0x21: Reserve
0x22: Reserve
0x23: Fall alarm
0x24: Insert charger alarm(Asset tracker)
0x29: Harsh acceletation alarm
0x30: Harsh braking alarm
0x2A: Sharp Left Turn Alarm
0x2B: Sharp Right Turn Alarm
0x2C: Sharp Crash Alarm
0x2D: Vehicle Rolling alarm
0x47: Fatigued Driving alarm
0x4B: Tilting alarm
0x4C: Sharp turn alarm
0x4D: Abrupt lane switching alarm
0x4E: Vehicle stability
0x4F: Vehicle angle abnormality

www.iconcox.com
www.iconcox.com

0xFE: ACC On alarm

0xFF: ACC Off alarm
0x01: Chinese
Byte 2 0x02: English
0x00 No need for reply

5.2. Alarm packet response of server

Length Description
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content + Information
Packet Length 1
Serial Number + Error Check
Protocol Number 1 0x16
Serial number of data sent later at each time will be automatically
Information Serial Number 2
added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when the
Error Check 2
received information is calculated, the receiver will ignore and
discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A
Example：78 78 05 16 00 1C 1B 28 0D 0A

www.iconcox.com
 www.iconcox.com

6. Online command
Description：
 Use server online command to control terminal to execute task.
 Terminal response results to server.

6.1. Online command sent by server

Length Description
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content + Information
Length of data bit 1
Serial Number + Error Check
Protocol Number 1 0x80
Length of
1 Server flag bit + command content length
Command
Informatio Leave for server identification. Terminal receives the original
Server Flag Bit 4
n Content data in Binary in response packet
Command Character string replied in ASCII coding. Command content is
M
Content compatible with SMS command.
Serial number of data sent later at each time will be
Information Serial Number 2
automatically added ‘1’.
Serial Number (including “Packet Length” and “Information
Serial Number”) , are values of CRC-ITU. CRC error occur
Error Check 2
when the received information is calculated, the receiver will
ignore and discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A
Example ：78 78 0E 80 08 00 00 00 00 73 6F 73 23 00 01 6D 6A 0D 0A
6.2. Online command replied by terminal
Terminal reply（general command）
Length Description
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content + Information
Length of data bit 1
Serial Number + Error Check
Protocol Number 1 0x15
Length of
1 Server flag bit + command content length
Command
Server Flag Leave for server identification. Terminal receives the original data
Informatio 4
Bit in Binary in response packet
n Content
Command
M Character string replied in ASCII coding.
Content
Language 2 Chinese:0x00 0x01 English:0x00 0x02
Serial number of data sent later at each time will be automatically
Information Serial Number 2
added ‘1’.

www.iconcox.com
www.iconcox.com

Error check (From “Packet Length” to“Information Serial

Number”) , are values of CRC-ITU. CRC error occur when the
Error Check 2
received information is calculated, the receiver will ignore and
discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A
Example：78 78 28 15 20 00 00 00 00 53 4F 53 31 3A 31 33 34 32 31 36 33 32 36 39 39 20 53 4F 53 32 3A 20
53 4F 53 33 3A 00 01 00 2A C3 9C 0D 0A

www.iconcox.com
 www.iconcox.com

7. GPS, Phone Number Querying Address Information Package (0X1A)

sending address Terminal sending
querying information request information
by SOS number to the server.
1 2
Terminal with
Terminal Server
Family Number
4 3
Terminal sending Address information
the processed is processed and
address information returned by the
to the SOS terminal. server.

7.1 Information from Terminal to Server

The information is received by the terminal.
The format is basically same to the format mentioned as GPS information content, and the difference is that phone number
for querying address is added here.
Length
Format
(Byte)
Start Bit 2
Packet Length 1
Protocol Number 1
Date Time 6
Length of GPS information,
1
quantity of positioning satellites
GPS Latitude 4
Information
Information Longitude 4
Content
Speed 1
Course, Status 2
Phone Number 21
Language 2
Information Serial Number 2
Error Check 2
Stop Bit 2

7.2 Response package in English

Considering the address or other foreign address in English is generally longer than that in Chinese, one data bit is not
enough, so the data bit is occupied in 2 bytes.
Note: only the length of data bit corresponding to the protocol number of response address information is changed into
two bytes.
Command Start Bit 2

packet sent Length of data bit 2

from the Protocol Number 1

server to the Length of Command 2
Information
terminal Server Flag Bit 4
Content
(15+M+N Command ADDRESS 7

www.iconcox.com
 www.iconcox.com

Byte) Content && 2

Address
M
Content

&& 2

Phone
21
Number

## 2

Information Serial Number 2

Check Bit 2

Stop Bit 2

The Protocol Number of request English address response is 0X97.

Command Content: ADDRESS&&Address Content&&Phone Number##(ADDRESS, &&, ## are fixed strings)

Example of English address response information:

7878 //Start Bit
00D1 //Data Length
97 //Response Protocol Number
00CA //Length of Command, i.e., length of the information of the transmitted content
00000001 //Server Flag Bit
41444452455353 //ADDRESS
2626 //&& Separator
0053004F00530028004C //English address is sent in UNICODE
0029003A005300680069
006D0069006E00200046
0061006900720079006C
0061006E006400200057
00650073007400200052
0064002C004800750069
006300680065006E0067
002C004800750069007A
0068006F0075002C0047
00750061006E00670064
006F006E00670028004E
00320033002E00310031
0031002C004500310031
0034002E003400310031
0029004E006500610072
00620079
2626 //&& Separator
313235323031333739303737343035310000000000 //Phone Number
2323 //## terminator of content
0007 // Serial No.
72b5 //Check Bit
0D0A //Stop Bit
www.iconcox.com
 www.iconcox.com

8. Information transmission packet

Description：
 Terminal transmits all types of non-position data.

8.1. Information transmission packet sent by terminal

Length Description
Start Bit 2 0x790x79
Length = Protocol Number + Information Content +
Length of data bit 2
Information Serial Number + Error Check
Protocol Number 1 0x94
00 External power voltage
01~03（defined by customer）
Information Type 04 terminal status synchronization
（Sub-protocol 1 05door status
Information
Number） 0A ICCID of SIM card
Content
0D Fule sensor data
……to add
Different information type results in different
Data Content N
transmission content. See the following for details.
Serial number of data sent later at each time will be
Information Serial Number 2
automatically added ‘1’.
Error check (From “Packet Length” to“Information
Serial Number”) , are values of CRC-ITU. CRC error
Error Check 2 occur when the received information is calculated, the
receiver will ignore and discard the data packet. (See
Appendix 1)
Stop Bit 2 Fixed value:0x0D0x0A
Example ：
7979007F9404414C4D313D43343B414C4D323D43433B414C4D333D34433B535441313D43303B4459443D
30313B534F533D2C2C3B43454E5445523D3B46454E43453D46656E63652C4F4E2C302C32332E31313138
30392C3131342E3430393236342C3430302C494E206F72204F55542C303B4D4946493D4D4946492C4F4646
000A061E0D0A

Transmitted information content

When type is 00，the bit transmit external battery. This bit is two-digit hexadecimal value. Hexadecimal value
converted to decimal value and divide 100
Example：0X04,0X9F, 049F converted to decimal is 101183，then divide 100 is 11.83, which means external
voltage is 11.83V
When type is 04, the bit transmits information of terminal status synchronization. The bit length extended.
Transmission is ASCII code.

www.iconcox.com
www.iconcox.com

Definition of content identifier

Definition Identifier
Alarm Bit1 ALM1
Alarm Bit 2 ALM2
Alarm Bit 3 ALM3
Alarm Bit 4 ALM4
Status Bit 1 STA1
SOS Number SOS
Centre Number CENTER
Fence FENCE
Fuel/Electricity Cutoff Status DYD
Mode MODE

 ALM1 Definition (Status)

Bit Definition Mark
bit7 Vibration Alarm 1 ON 0 OFF
bit6 Network Alarm 1 ON 0 OFF
bit5 Phone Alarm 1 ON 0 OFF
bit4 SMS Alarm 1 ON 0 OFF
bit3 Displacement Alarm 1 ON 0 OFF
bit2 Network Alarm 1 ON 0 OFF
bit1 Phone Alarm 1 ON 0 OFF
bit0 SMS Alarm 1 ON 0 OFF

 ALM2 Definition (Status）

Bit Definition Mark
bit7 Low Battery Alarm 1 ON 0 OFF
bit6 Network Alarm 1 ON 0 OFF
bit5 Phone Alarm 1 ON 0 OFF
bit4 SMS Alarm 1 ON 0 OFF
bit3 Low Battery Alarm 1 ON 0 OFF
bit2 Network Alarm 1 ON 0 OFF
bit1 Phone Alarm 1 ON 0 OFF
bit0 SMS Alarm 1 ON 0 OFF

 ALM3 Definition (Status）

Bit Definition Mark
bit7 Overspeed Alarm 1 ON 0 OFF
bit6 Network Alarm 1 ON 0 OFF
bit5 Phone Alarm 1 ON 0 OFF
bit4 SMS Alarm 1 ON 0 OFF
bit3 Power Off Alarm 1 ON 0 OFF
www.iconcox.com
www.iconcox.com

bit2 Network Alarm 1 ON 0 OFF

bit1 Phone Alarm 1 ON 0 OFF
bit0 SMS Alarm 1 ON 0 OFF

 ALM4 Definition (Status）

Bit Definition Mark
bit7 SOS alert 1 ON 0 OFF
bit6 Network Alarm 1 ON 0 OFF
bit5 Phone Alarm 1 ON 0 OFF
bit4 SMS Alarm 1 ON 0 OFF
bit3 Voice control alert 1 ON 0 OFF
bit2 Network Alarm 1 ON 0 OFF
bit1 Phone Alarm 1 ON 0 OFF
bit0 SMS Alarm 1 ON 0 OFF

 STA1 Definition (Status）

Bit Definition Mark
bit7 Arm Status 1 Arm0 Disarm
bit6 Automatically Arm 1 ON 0 OFF
bit5 Manually Arm 1 ON 0 OFF
bit4 Remotely Disarm 1 ON 0 OFF
bit3 To Be Defined
bit2 To Be Defined
bit1 Disassembly OFF 1 ON 0 OFF
bit0 Disassembly Alarm Status 1 ON 0 OFF

 Fuel/Electricity Status Definition

Bit Definition Mark
bit7 Undefined
bit6 Undefined
bit5 Undefined
bit4 Undefined
bit3 Deferred execution caused by overspeed 1Valid bit 0 Invalid bit
bit2 Deferred execution caused by GPS un located 1Valid bit 0 Invalid bit
bit1 Oil/Electricity cutoff 1Valid bit 0 Invalid bit
bit0 Oil/Electricity connection 1Valid bit 0 Invalid bit

 SOS definition：adopt ASCII to transmit（use “,” to separate if multiple SOS numbers）

 Center number definition：adopt ASCII to transmit
 Fence definition：adopt ASCII to transmit
 Mode：adopt ASCII to transmit(separate parameters by “，”)

www.iconcox.com
www.iconcox.com

Example ： ALM1=FF;ALM2=FF;ALM3=FF;STA1=CO ； DYD=01 ； SOS=12345 ， 2345 ， 5678 ；

CENTER=987654;FENCE=FENCE,ON,0,-22.277120,-113.516763,5,IN,1；MODE=MODE,1,20,500

Notice：Not all contents are transmitted and please parse based on bits. Different products upload different
contents.

When type is 05，this bit transmit external IO detection( door checking). Transmission is hexadecimal.
Bit Definition Mark
bit7 To Be Defined
bit6 To Be Defined
bit5 To Be Defined
bit4 To Be Defined
bit3 To Be Defined
bit2 IO Status 1 High 0 Low
1High triggering
bit1 Triggering Status
0 Low triggering
bit0 Door Status 1ON0OFF

When the type is 0A, this bit transmits ICCID, which is hexadecimal
eg: If IMEI is 123456789123456，the terminal ID is：0x01 0x23 0x45 0x67
IMEI 8
0x89 0x12 0x34 0x56
eg: If IMSI is 123456789123456，the terminal ID is：0x01 0x23 0x45 0x67
IMSI 8
0x89 0x12 0x34 0x56
eg: If ICCID is 12345123456789123456，the terminal ID is：0X12 0x34
ICCID 10
0x51 0x23 0x45 0x67 0x89 0x12 0x34 0x56

When the type is 0D, this bit is fuel sensor :

Example : 79 79 00 3F 94 0D 11 09 07 08 0C 03 21 41 49 4F 49 4C 2C 30 32 2C 30 32 35 2E 39 30 30 2C 30
32 35 2E 34 30 30 2C 35 31 39 4A 2C 30 32 30 30 2C 30 32 37 2E 31 34 30 2C 30 2C 30 30 2C 39
46 83 A7 0D 12 0D 0A

Packet Type: General Packet data transmission (94)

CRC: CRC is correct, 0D12
Package length = 63 (003F)
Transmission type: fuel sensor (0D), transmission information: time and sensor information (11 09 07 08 0C 03
21 41 49 4F 49 4C 2C 30 32 2C 30 32 35 2E 39 30 30 2C 30 32 35 2E 34 30 30 2C 35 31 39 4A 2C 30 32 30 30
2C 30 32 37 2E 31 34 30 2C 30 2C 30 30 2C 39 46)
Time: 11 09 07 08 0C 03 21
Serial number: 83A7

Sensor information:
21 41 49 4F 49 4C 2C 30 32 2C 30 32 35 2E 39 30 30 2C 30 32 35 2E 34 30 30 2C 35 31 39 4A 2C 30 32 30 30
2C 30 32 37 2E 31 34 30 2C 30 2C 30 30 2C 39 46

www.iconcox.com
www.iconcox.com

Transfer ASCII: !AIOIL,02,025.900,025.400,519J,0200,027.140,0,00,9F

ASCII Description

!AIOIL Head of Protocol

02 Device address

021.800 Liquid level output value（Unit：cm）

000.000 Temperature

4 protocol version number

12 Software version number

z Hardware version number

02 Echo signal number（signal level）

0 Software status code

0 Hardware status code

021.800 Liquid level measurement value（Unit：cm）

0 Motion status code, 0: move. 1: static

06 Multiples of excitation waveform

BF Check code(Sum Check Bit) (capital letter)

8.2. Server Response Information Transmission Packet

Server no Response

www.iconcox.com
 www.iconcox.com

9. LBS Multiple Bases Extension Packet

Description：
For transmission of data packet when device is not located

9.1. Terminal sent LBS multiple bases extension packet

Length Description
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content +
Packet Length 1
Information Serial Number + Error Check
Protocol Number 1 0x18
Year（1byte）Month（1byte）Day（1byte）Hour（1byte）
DATE（UTC） 6 （converted to a decimal）(Date
Min（1byte）Second（1byte）
Time)
MCC 2 Mobile Country Code(MCC) (converted to a decimal)
MNC 1 Mobile Network Code(MNC)(converted to a decimal)
LAC 2 Location Area Code (LAC) (converted to a decimal)
CI 3 Cell Tower ID(Cell ID)(converted to a decimal)
Signal level of community, range 0x00～0xFF,
RSSI 1 0x00 Weakest signal
0xFF Strongest signal
NLAC1 2 Same as LAC
NCI1 3 Same as CI
NRSSI1 1 Same as RSSI
NLAC2 2 Same as LAC
NCI2 3 Same as CI
Information NRSSI2 1 Same as RSSI
Content NLAC3 2 Same as LAC
NCI3 3 Same as CI
NRSSI3 1 Same as RSSI
NLAC4 2 Same as LAC
NCI4 3 Same as CI
NRSSI4 1 Same as RSSI
NLAC5 2 Same as LAC
NCI5 3 Same as CI
NRSSI5 1 Same as RSSI
NLAC6 2 Same as LAC
NCI6 3 Same as CI
NRSSI6 1 Same as RSSI
Value= “Actual time of signal from Mobile Station to
Timing
1 Location base”-“Time of signal from Mobile Station to
Advance
Location base supposed the distance is 0”
LANGUAGE 2 0x00 0x01Chinese 0x00 0x02English

www.iconcox.com
 www.iconcox.com

Serial number of data sent later at each time will be

Serial Number 2
automatically added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when
Error Check 2
the received information is calculated, the receiver will ignore
and discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A
Example： 78 78 3B 18 13 01 0D 02 02 02 01 CC 00 28 7D 00 1F 71 3E 28 7D 00 1F 72 31 28 7D 00 1E 23 2D
28 7D 00 1F 40 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF 00 02 00 05 27 69 0D 0A
9.2. Server reply: No need to reply.

10 Time calibration packet

Description：
Used for checking time request sent by terminal to server, avoiding wrong time.
Generally, Server no need to response as the device can calibrate the time by GPS
if do want to reply, please refer to the bellowing:
Server response right time and format. Time is UTC time.

10.1．Time request sent by terminal

Lengt
h Description
(Byte)
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content +
Packet Length 1
Information Serial Number + Error Check
Protocol Number 1 0x8A
Serial number of data sent later at each time will be
Serial Number 2
automatically added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when
Error Check 2
the received information is calculated, the receiver will
ignore and discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value: 0x0D0x0A
Example：78 78 05 8A 00 06 88 29 0D 0A

10.2. Server response time information

www.iconcox.com
 www.iconcox.com

Length Description
Start Bit 2 0x78 0x78
Length = Protocol Number + Information Content +
Packet Length 1
Information Serial Number + Error Check
Protocol Number 1 0x8A（UTC）
Information Year（1byte）Month（1byte）Day（1byte）Hour（1byte）
Date Time 6
Content Min（1byte）Second（1byte）（converted to a decimal）
Serial number of data sent later at each time will be
Serial Number 2
automatically added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when
Error Check 2
the received information is calculated, the receiver will ignore
and discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value: 0x0D0x0A
Example： 78 78 0B 8A 13 03 10 09 00 15 00 06 ED D3 0D 0A |

11 External device transfer protocol (apply GT06E)

11.1．Device send transparent data to server

Length Description
Start Bit 2 0x79 0x79
Length = Protocol Number + Information Content +
Length of data bit 2
Information Serial Number + Error Check
Protocol Number 1 0x9B

Module type
1 03
Information code
Content
Transparent
N
content
Serial number of data sent later at each time will be
Information Serial Number 2
automatically added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when
Check Bit 2
the received information is calculated, the receiver will
ignore and discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D0x0A
Example：79 79 00 14 9B 03 02 31 42 30 30 31 33 46 37 37 37 38 38 03 00 0B E8 E9 0D 0A

www.iconcox.com
 www.iconcox.com

11.2．Server Response transfer data Packet

Server no Response

12 External module transmission protocol （Server send）（Apply EG01）

For transmission of external module data

12.1．Server send transparent data to module
Length Description
Start Bit 2 0x79 0x79
Length = Protocol Number + Information Content +
Length of data bit 2
Information Serial Number + Error Check
Protocol Number 1 0x9B

Module type
1
Information code
Content
Transparent
N
content
Serial number of data sent later at each time will be
Information Serial Number 2
automatically added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when
Check Bit 2
the received information is calculated, the receiver will
ignore and discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A

Module type code Description

0x03 Serial transmission
0x05 IO Expansion Box IOE-1
0x07 Inertial Navigation UBI Protocol
0x09 Terminal log escalation

12.2．Server Response transfer data Packet

www.iconcox.com
 www.iconcox.com

Length Description
Start Bit 2 0x79 0x79
Length = Protocol Number + Information Content +
Length of data bit 2
Information Serial Number + Error Check
Protocol Number 1 0x9B

Module type
1 Reply is the same as sending
Information code
Content
Transparent
N
content
Serial number of data sent later at each time will be
Information Serial Number 2
automatically added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when
Check Bit 2
the received information is calculated, the receiver will
ignore and discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A

13 External module transmission protocol （Module send）（Apply EG01）

For transmission of external module data

13.1．Device send transparent data to server
Length Description
Start Bit 2 0x79 0x79
Length = Protocol Number + Information Content +
Length of data bit 2
Information Serial Number + Error Check
Protocol Number 1 0x9C

Module type
1 03
Information code
Content
Transparent
N
content
Serial number of data sent later at each time will be
Information Serial Number 2
automatically added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when
Check Bit 2
the received information is calculated, the receiver will
ignore and discard the data packet. (See Appendix 1)

www.iconcox.com
 www.iconcox.com

Stop Bit 2 Fixed value:0x0D 0x0A

Module type code Description

0x03 Serial transmission
0x05 IO Expansion Box IOE-1
0x07 Inertial Navigation UBI Protocol
0x09 Terminal log escalation

13.2．Server Response transfer data Packet

Length Description
Start Bit 2 0x79 0x79
Length = Protocol Number + Information Content +
Length of data bit 2
Information Serial Number + Error Check
Protocol Number 1 0x9C

Module type
1 Reply is the same as sending
Information code
Content
Transparent
N
content
Serial number of data sent later at each time will be
Information Serial Number 2
automatically added ‘1’.
Error check (From “Packet Length” to“Information Serial
Number”) , are values of CRC-ITU. CRC error occur when
Check Bit 2
the received information is calculated, the receiver will
ignore and discard the data packet. (See Appendix 1)
Stop Bit 2 Fixed value:0x0D 0x0A

www.iconcox.com
 www.iconcox.com

14.Appendix
14.1 code fragment of the CRC-ITU lookup table algorithm implemented based on C language
staticconstU16crctab16[]=
{
0X0000,0X1189,0X2312,0X329B,0X4624,0X57AD,0X6536,0X74BF,
0X8C48,0X9DC1,0XAF5A,0XBED3,0XCA6C,0XDBE5,0XE97E,0XF8F7,
0X1081,0X0108,0X3393,0X221A,0X56A5,0X472C,0X75B7,0X643E,
0X9CC9,0X8D40,0XBFDB,0XAE52,0XDAED,0XCB64,0XF9FF,0XE876,
0X2102,0X308B,0X0210,0X1399,0X6726,0X76AF,0X4434,0X55BD,
0XAD4A,0XBCC3,0X8E58,0X9FD1,0XEB6E,0XFAE7,0XC87C,0XD9F5,
0X3183,0X200A,0X1291,0X0318,0X77A7,0X662E,0X54B5,0X453C,
0XBDCB,0XAC42,0X9ED9,0X8F50,0XFBEF,0XEA66,0XD8FD,0XC974,
0X4204,0X538D,0X6116,0X709F,0X0420,0X15A9,0X2732,0X36BB,
0XCE4C,0XDFC5,0XED5E,0XFCD7,0X8868,0X99E1,0XAB7A,0XBAF3,
0X5285,0X430C,0X7197,0X601E,0X14A1,0X0528,0X37B3,0X263A,
0XDECD,0XCF44,0XFDDF,0XEC56,0X98E9,0X8960,0XBBFB,0XAA72,
0X6306,0X728F,0X4014,0X519D,0X2522,0X34AB,0X0630,0X17B9,
0XEF4E,0XFEC7,0XCC5C,0XDDD5,0XA96A,0XB8E3,0X8A78,0X9BF1,
0X7387,0X620E,0X5095,0X411C,0X35A3,0X242A,0X16B1,0X0738,
0XFFCF,0XEE46,0XDCDD,0XCD54,0XB9EB,0XA862,0X9AF9,0X8B70,
0X8408,0X9581,0XA71A,0XB693,0XC22C,0XD3A5,0XE13E,0XF0B7,
0X0840,0X19C9,0X2B52,0X3ADB,0X4E64,0X5FED,0X6D76,0X7CFF,
0X9489,0X8500,0XB79B,0XA612,0XD2AD,0XC324,0XF1BF,0XE036,
0X18C1,0X0948,0X3BD3,0X2A5A,0X5EE5,0X4F6C,0X7DF7,0X6C7E,
0XA50A,0XB483,0X8618,0X9791,0XE32E,0XF2A7,0XC03C,0XD1B5,
0X2942,0X38CB,0X0A50,0X1BD9,0X6F66,0X7EEF,0X4C74,0X5DFD,
0XB58B,0XA402,0X9699,0X8710,0XF3AF,0XE226,0XD0BD,0XC134,
0X39C3,0X284A,0X1AD1,0X0B58,0X7FE7,0X6E6E,0X5CF5,0X4D7C,
0XC60C,0XD785,0XE51E,0XF497,0X8028,0X91A1,0XA33A,0XB2B3,
0X4A44,0X5BCD,0X6956,0X78DF,0X0C60,0X1DE9,0X2F72,0X3EFB,
0XD68D,0XC704,0XF59F,0XE416,0X90A9,0X8120,0XB3BB,0XA232,
0X5AC5,0X4B4C,0X79D7,0X685E,0X1CE1,0X0D68,0X3FF3,0X2E7A,
0XE70E,0XF687,0XC41C,0XD595,0XA12A,0XB0A3,0X8238,0X93B1,
0X6B46,0X7ACF,0X4854,0X59DD,0X2D62,0X3CEB,0X0E70,0X1FF9,
0XF78F,0XE606,0XD49D,0XC514,0XB1AB,0XA022,0X92B9,0X8330,
0X7BC7,0X6A4E,0X58D5,0X495C,0X3DE3,0X2C6A,0X1EF1,0X0F78,
};

//calculate the 16-bit CRC of data with predetermined length.

U16GetCrc16(constU8*pData,intnLength)
{
U16fcs=0xffff;//initialization
while(nLength>0){
fcs=(fcs>>8)^crctab16[(fcs^*pData)&0xff];
nLength--;
pData++;
}
return~fcs;//negated
}

www.iconcox.com
www.iconcox.com

14.2 Data Flow Diagram

Terminal boot &

greater than 20min, terminal reboot
reboot

less than 20min, reconnect

greater than
establish GPRS reconnection time
fail 20 min,
connection? ?
reboot

successful

send login data packet to server send login message packet less than 20min, reconnect reconnection time?

the reply data from the server is

server reply data which is response to the login packet No
correct?

Yes
backend data server

connection is
alarm status
successful

interval of
alarm packet location data packet heartbeat packet
heartbeat packet

send alarm packet to server upload regularly

send location data packet to the server

interval of
uploading the
location data

send heartbeat data packet to the server

fail to receive response
upload regularly from the server within
5min

response of heartbeat packet

yes from the server is normal?
No

server reply data which is response to the heartbeat packet

www.iconcox.com