CANTRACK PROTOCOL

SHENZHEN CANTRACK TECHNOLOGY CO.,LTD

A/3
CONFIDENTIAL

Dec. 2021

Contents
1 / 12
 CANTRACK PROTOCOL

A Command structure ................................................................................ 3

1. Structure of Sending command from server ....................................... 3

2. Structure of device response to server .............................................. 3

B Data Packet Type ................................................................................... 4

1. Login data(V0)： ....................................................................... 4

2. Heartbeat data(HTBT)： ............................................................ 4

3. GPS data format(V1)： ...............................................................4

4. V3 data（LBS data） ..................................................................5

C Status & Events for alarm： .................................................................... 6

D Server GPRS command format ............................................................... 9

E GPRS Command List ..............................................................................9

2 / 12
 CANTRACK PROTOCOL

A Command structure

1. Structure of Sending command from server

*XX,YYYYYYYYYYYYYYY,CMD,HHMMSS,PARA1,PARA2,…#

* command head
XX supplier name, ASCII character
, separator
YYYYYYYYYYYYYYY 15digit IMEI number
CMD command code
HHMMSS time：h/m/s
PARA parameter
# ending character
Must use capital letter for the initial Letter of command character without any space.

2. Structure of device response to server

General information：

*XX,YYYYYYYYYYYYYYY,V1,HHMMSS,S,latitude,D,longitude,G,speed,direction,DDMM
YY,equ _status #

*HQ,865205030330012,V1,145452,A,2240.55181,N,11358.32389,E,0.00,0,100815,FFF
FFBFF#

GPS data：

*XX,YYYYYYYYYYYYYYY,V2,HHMMSS,S,latitude,D,longitude,G,speed,direction,DDMM
YY,equ_status #

*HQ,865205030330012,V2,150421,A,2240.55841,N,11358.33462,E,2.06,0,100815,FFF
FFBFF#

Confirm data：

*XX,YYYYYYYYYYYYYYY,V4,CMD,hhmmss,HHMMSS,S,latitude,D,longitude,G,speed,d
irection,DDMMYY,equ_status #

*HQ,865205030330012,V4,S2,150950,151007,A,2240.55503,N,11358.35174,E,0.85,0,1
00815, FFFFFBFF #

3 / 12
 CANTRACK PROTOCOL

B Data Packet Type

1. Login data(V0)：

*HQ, YYYYYYYYYYYYYYY,V0#
*HQ,135790246811220,V0#
Device upload：*HQ,135790246811220,V0#
Server response：*HQ,135790246811220,V0#

2. Heartbeat data(HTBT)：

*XX,YYYYYYYYYYYYYYY, HTBT,Bat_Percent#
*HQ,135790246811220,HTBT,100#
For example：
Device upload：*HQ,135790246811220,HTBT,100#
Server response：*HQ,135790246811220,HTBT,100#

Bat_Percent means Battery level

when power on or device wake up, device won't update heartbeat data.
After connected server successfully and Got GPS signal, device will send
heartbeat data to server at every 2 minutes.

3. GPS data format(V1)：

* command head
XX Supplier name,ASCII character
, separator
YYYYYYYYYYYYYYY 15digit IMEI number
V1/V2/V3/V4 comamnd code
CMD to be confirmed command
hhmmss time value of confirmed command
HHMMSS Time
S data valid byte （A/V/B），
A represent valid data signal, V represent invalid data signal, B represent Beidou valid
data signal
Latitude latitude，format DDMM.MMMMM
D latitude symbol（N：north，S：south）
Longitude Longitude，format DDDMM.MMMMM
G Longitude symbol（E：East，W：west）
Speed range 000.00 ~ 999.99 byte （must be 3 digits XXX, if
speed is 60km/h, so it need reserve a “space” in front of
60 value）
Direction direction,true north is 0 degree,resolution 1 dgree,
clockwise
DDMMYY date/month/year
equ_status （refer < Status & Events for alarm >）
4 / 12
 CANTRACK PROTOCOL

# ending

PS: prococol calculate method is decimal system. Calculate by knot. It require

transformation when analyze speed in your platform. So can not calculate by km/h
directly. For example: if it show 10 in your platform, the real speed is 10 knot/h,
10*1.852=18.52km/h.

4. V3 data（LBS data）

*XX,YYYYYYYYYYYYYYY,V3,HHMMSS,Base_Info,Battery_Info,Failure_Info,Cont,DDM
MYY,equ_status#
* command head
XX Supplier name,ASCII character
, separator
YYYYYYYYYYYYYYY 15digit IMEI number
CMD comamnd code
HHMMSS terminal time

Base_Info：Base station information format asbelow:

MCC,MNC,Base_Number,LAC1,Cell_ID1,RS1,dBm1, LAC2,Cell_ID2,RS2,dBm2,…
MCC country code, china is 460
MNC network code, china mobile 00, China Union 01
Base_Number Cell ID quantity, 00-99
LAC Base station area code
Cell_ID Cell ID number
RS signal strength, the data show empty if no signal
dBm receiving signal strength, the data show empty if no
signal
Battery_Info battery info, 0x0000-0x0299 hexadecimal represent
battery voltage
Failure_Info reboot info, 0-9
Cont ending of data for extend protocol “X” represent
DDMMYY
equ_status （refer<Status & Events for alarm >）
# End

*HQ,865205030330012,V3,000201,46000,07,009350,004022,132,-
88,009350,004032,140,,009350,004031,139,,009350,004023,133,,009350,004033,127,,
009350,004021,124,,010351,003942,118,,0256,0,X,010915,FFFFFBFF#

Explain：

1. the data represent receiving 7 Cell ID signal, battery voltage

0x256/0x400=598/1024=0.584*5.6V =3.27V, battery level is 3.27V/3.6V*100%=90.8%
without reboot.

2. Battery percentage nominal voltage is 3.6V, battery percentage top and button
limitation 1%-100%， if the upload voltage over than battery percentage top and button
limitation, it regards to parse the data based on battery percentage top and button
limitation.

5 / 12
 CANTRACK PROTOCOL

C Status & Events for alarm：

equ_status
Vehicle status：total 4 bytes, means vehicle status and alarm status etc. Use
ASCII character represents Hexadecimal values, the following is the exact
meaning of single bit of variate each byte, bit represents adopt negative logic,
namely bit=0 is valid.
Important: Need convert to Binary format to get the Bit value; Check the
converted data as arrow from end to front.
Binary data is read from left to right, and from end to up data as arrow remark.

Bit order 1st byte 2nd byte 3rd byte 4th byte

0 1 Reserved 1 Reserved 1 Reserved 1 Reserved

1 1 1 Arm(0)/Disarm(1 Movement
Reserved Reserved 0 0
) condition alarm

2 0 0 Overs
Removal alar
SOS Alarm 0 ACC off 0 peeding
m
alarm

3 0 0: Cut fuel 0 Device

status powered by
0 Vibration alarm 1 Reserved
1: resume the backup
fuel status battery

4 0 Power cut 0 External

alarm power Low battery Fence-in
0 0
disconnected alarm alarm
status

5 1 Reserved 1 Reserved 0 Sharp Turning 0 Fatigue

driving alarm

6 1 Reserved 0 ACC ON 0 Harsh 0 Harsh

alarm acceleration braking

7 1 Reserved 0 ACC OFF Fence-out

1 Reserved 0
alarm alarm

6 / 12
 CANTRACK PROTOCOL

How to parse Events & status packet “FFFF FFFF”?

7 / 12
CANTRACK PROTOCOL

8 / 12
 CANTRACK PROTOCOL

D Server GPRS command format

Command Format:
*XX, YYYYYYYYYYYYYYY,CMD,HHMMSS,command#
“command” refers to command list ( see Part E command list below)

For example：
Send: *HQ,865205039927404,CMD,130305,stop654321#
Reply: stop engine succeed

Send: *HQ,865205039927404,CMD,130305,stop654321#
Reply: resume engine succeed

E GPRS Command List

(Note all GPRS command password default 654321)

Command format Function

apn654321 APN APNname APNpassword Set APN

adminip654321 www.gps2828.com 7018 Set IP Port

password654321 888888 Change password

smslink654321 google link

fix020s060m***n654321 Set upload interval,moving at 20s, stopping at 60mins

ANGLE654321 30 Set angle change upload interval 30 degree

acc654321 ACC ON OFF alarm

noacc654321 Cancel ACC ON OFF alarm

acc654321 1 Activate ACC ON alarm via speaker sound

acc654321 0 Cancel ACC ON alarm via speaker sound

quickstop654321 Set fast cut fuel mode

noquickstop654321 Set delayed cut fuel when speed less than 20km/h(default)

stop654321 Cut fuel to stop car

9 / 12
 CANTRACK PROTOCOL

resume654321 resume fuel

arm654321 Set arm mode when ACC OFF

disarm654321 Cancel arm mode

silent654321 Silent mode(speaker not sound but send SMS alarm)

lowbattery654321 on Activate Low battery alarm(default)

lowbattery654321 off Cancel Low battery alarm

extpower654321 on Activate device removal alarm(default)

extpower654321 off Cancel device removal alarm

move654321 0200 movement alarm(200meters)

nomove654321 Cancel movement alarm

vibrate654321 1 Activate vibrate alarm

vibrate654321 0 Cancel vibrate alarm(default)

sensitivity654321 1 Set vibrate level 1

sensitivity654321 2 Set vibrate level 2

sensitivity654321 3 Set vibrate level 3

sleep654321 on GSM/GPS sleep when vehicle parking

sleep654321 off Cancel sleep mode(default)

suppress654321 Activate GPS drifting during parking

nosuppress654321 Cancel GPS drifting

check654321 Check device parameters

IPAPN654321 IP APN Checking

time zone654321 -5 Set timezone west timezone 5

reset654321 Reset device

KC654321 0 Cancel alarm

KC654321 1 GPRS alarm (default)

KC654321 2 GPRS+SMS alarm

10 / 12
 CANTRACK PROTOCOL

KC654321 3 GPRS+SMS+call alarm

admin654321 15018500598 Set admin number

noadmin654321 15018500598 Delete admin number

authnum654321 Check admin number

foward654321 10086 SIM Card Balance Enquiry: eg, set operator number 10086

balance654321 10086 ye SIM Card Balance Enquiry: eg, set operator code ye

X:0, driving status judge via ACC or Vibration(default)

drv654321 X
X: 1, driving status judge via ACC

Device will stop connect server enter deeply sleep after stop 5
Less gprs654321 on mins or ACC off; when driving or ACC on again will wake up
device.

Less gprs654321 off Default

Harsh Acceleration

X: 0 or 1 (cancel or activate).

accthr654321 X X: unit:km/h, value range 25-100,default 40.

Alarm triggered by speed difference within 5s.

Send APP alarm 1 time, send SMS alarm 1 time within 10mins.

Harsh Braking

X: 0 or 1 (cancel or activate).

brakethr654321 X X: unit:km/h, value range 25-100,default 40km/h.

Alarm triggered by speed difference within 5s.

Send APP alarm 1 time, send SMS alarm 1 time within 10mins.

Harsh Turning

X: 0 or 1 (cancel or activate).

turnthr654321 X X: unit:degree, value range 25-100,default 50 degree.

Alarm triggered by degree difference within 5s.

Send APP alarm 1 time, send SMS alarm 1 time within 10mins.

Fatigue Driving alarm

fatigue654321 X X: 0 or 1 (cancel or activate)

X: unit:degree, value range 25-100,default 50 degree.

11 / 12
 CANTRACK PROTOCOL

Alarm triggered by continuously driving 4 hours.

Send APP alarm 1 time, send SMS alarm 1 time within 10mins.

Ver654321 Check version

OTA654321 100.245.15.11 8989 OTA Firmware

begin654321 Back to factory settings

12 / 12