mirror
/
wmbusmeters
kopia lustrzana https://github.com/weetmuts/wmbusmeters
1
0
Forkuj 0
Kod Zgłoszenia Projekty Wydania Wiki Aktywność

Now decodes the info codes and target volume.

pull/5/head
weetmuts 2017-08-30 20:08:02 +02:00
rodzic 5239326db1
commit 858f685c77
6 zmienionych plików z 229 dodań i 43 usunięć
Pokaż statystyki Ściągnij plik aktualizacji Ściągnij plik porównania Expand all files Collapse all files

3
README.md
Wyświetl plik

@ -46,6 +46,8 @@ https://www.infineon.com/dgdl/TDA5340_AN_WMBus_v1.0.pdf
http://fastforward.ag/downloads/docu/FAST_EnergyCam-Protocol-wirelessMBUS.pdf
http://www.multical.hu/WiredMBus-water.pdf
The AES source code is copied from:
https://github.com/kokke/tiny-AES128-C
@ -56,6 +58,7 @@ https://github.com/ffcrg/ecpiww
https://github.com/tobiasrask/wmbus-client
Code can print total water consumption! But everything else is
missing. CRC checks anyone? :-) Don't rely on these measurements
for anything really important!

15
main.cc
Wyświetl plik

@ -29,11 +29,19 @@
using namespace std;
void printMeter(Meter *meter) {
printf("%s\t%s\t% 3.3f m3\t%s\n",
printf("%s\t%s\t% 3.3f m3\t%s\t% 3.3f m3\t%s\n",
meter->name().c_str(),
meter->id().c_str(),
meter->totalWaterConsumption(),
meter->datetimeOfUpdate().c_str());
meter->datetimeOfUpdate().c_str(),
meter->targetWaterConsumption(),
meter->statusHumanReadable().c_str());
// targetWaterConsumption: The total consumption at the start of the previous 30 day period.
// statusHumanReadable: DRY,REVERSED,LEAK,BURST if that status is detected right now, followed by
// (dry 15-21 days) which means that, even it DRY is not active right now,
// DRY has been active for 15-21 days during the last 30 days.
}
int main(int argc, char **argv)
@ -70,6 +78,9 @@ int main(int argc, char **argv)
wmbus->setLinkMode(C1a);
if (wmbus->getLinkMode()!=C1a) error("Could not set link mode to C1a\n");
// We want the data visible in the log file asap!
setbuf(stdout, NULL);
if (num_meters > 0) {
Meter *meters[num_meters];

236
meter_multical21.cc
Wyświetl plik

@ -31,20 +31,38 @@
using namespace std;
#define INFO_CODE_DRY 0x01
#define INFO_CODE_DRY_SHIFT (4+0)
#define INFO_CODE_REVERSE 0x02
#define INFO_CODE_REVERSE_SHIFT (4+3)
#define INFO_CODE_LEAK 0x04
#define INFO_CODE_LEAK_SHIFT (4+6)
#define INFO_CODE_BURST 0x08
#define INFO_CODE_BURST_SHIFT (4+9)
struct MeterMultical21 : public Meter {
MeterMultical21(WMBus *bus, const char *name, const char *id, const char *key);
string id();
string name();
float totalWaterConsumption();
float targetWaterConsumption();
string statusHumanReadable();
string datetimeOfUpdate();
void onUpdate(function<void(Meter*)> cb);
private:
void handleTelegram(Telegram*t);
float processContent(vector<uchar> &d);
void processContent(vector<uchar> &d);
string decodeTime(int time);
int info_codes_;
float total_water_consumption_;
float target_volume_;
time_t datetime_of_update_;
string name_;
@ -52,10 +70,11 @@ private:
vector<uchar> key_;
WMBus *bus_;
function<void(Meter*)> on_update_;
};
MeterMultical21::MeterMultical21(WMBus *bus, const char *name, const char *id, const char *key) :
total_water_consumption_(0), name_(name), bus_(bus)
info_codes_(0), total_water_consumption_(0), target_volume_(0), name_(name), bus_(bus)
{
hex2bin(id, &id_);
hex2bin(key, &key_);
@ -82,6 +101,11 @@ float MeterMultical21::totalWaterConsumption()
return total_water_consumption_;
}
float MeterMultical21::targetWaterConsumption()
{
return target_volume_;
}
string MeterMultical21::datetimeOfUpdate()
{
char datetime[20];
@ -143,87 +167,217 @@ void MeterMultical21::handleTelegram(Telegram *t) {
string s = bin2hex(ivv);
verbose("IV %s\n", s.c_str());
uchar back[16];
AES_ECB_encrypt(iv, &key_[0], back, 16);
uchar xordata[16];
AES_ECB_encrypt(iv, &key_[0], xordata, 16);
uchar decrypt[16];
xorit(back, &content[0], decrypt, 16);
xorit(xordata, &content[0], decrypt, 16);
vector<uchar> dec(decrypt, decrypt+16);
string answer = bin2hex(dec);
// The total water consumption data is inside the first 16 bytes for
// both short and full frames. So this code does not even bother
// to decrypt later bytes! Its aes-ctr mode, so add 1 to IV to
// decrypt next 16 bytes, add 2 to IV to decrypt the next next 16 bytes
// and so on and so forth...
//
// There is supposedly more interesting data, like the water temperature
// and warning flags, like leak, burst, dry etc.
verbose("Decrypted >%s<\n", answer.c_str());
total_water_consumption_ = processContent(dec);
if (content.size() > 22) {
fprintf(stderr, "Received too many bytes of content from a Multical21 meter!\n"
"Got %zu bytes, expected at most 22.\n", content.size());
}
if (content.size() > 16) {
// Yay! Lets decrypt a second block. Full frame content is 22 bytes.
// So a second block should enough for everyone!
size_t remaining = content.size()-16;
if (remaining > 16) remaining = 16; // Should not happen.
incrementIV(iv, sizeof(iv));
vector<uchar> ivv2(iv, iv+16);
string s2 = bin2hex(ivv2);
verbose("IV+1 %s\n", s2.c_str());
AES_ECB_encrypt(iv, &key_[0], xordata, 16);
xorit(xordata, &content[16], decrypt, remaining);
vector<uchar> dec2(decrypt, decrypt+remaining);
string answer2 = bin2hex(dec2);
verbose("Decrypted second block >%s<\n", answer2.c_str());
// Append the second decrypted block to the first.
dec.insert(dec.end(), dec2.begin(), dec2.end());
}
processContent(dec);
datetime_of_update_ = time(NULL);
if (on_update_) on_update_(this);
}
float MeterMultical21::processContent(vector<uchar> &c) {
float consumption = 0.0;
void MeterMultical21::processContent(vector<uchar> &c) {
/* int crc0 = c[0];
int crc1 = c[1]; */
int frame_type = c[2];
if (frame_type == 0x79) {
verbose("Short frame\n");
/* int ecrc0 = c[3];
verbose("Short frame %d bytes\n", c.size());
if (c.size() != 16) {
fprintf(stderr, "Warning! Unexpected length of frame %zu. Expected 16 bytes!\n", c.size());
}
/*int ecrc0 = c[3];
int ecrc1 = c[4];
int ecrc2 = c[5];
int ecrc3 = c[6];
int ecrc3 = c[6];*/
int rec1val0 = c[7];
int rec1val1 = c[8];*/
int rec1val1 = c[8];
int rec2val0 = c[9];
int rec2val1 = c[10];
int rec2val2 = c[11];
int rec2val3 = c[12];
/* int rec3val0 = c[13];
int rec3val0 = c[13];
int rec3val1 = c[14];
int rec3val2 = c[15];
int rec3val3 = c[16];*/
int tmp = rec2val3*256*256*256 + rec2val2*256*256 + rec2val1*256 + rec2val0;
// This scale factor 1000, is dependent on the meter device.
// The full frame has info on this, here it is hardcoded to
// the domestic meter setting.
consumption = ((float)tmp) / ((float)1000);
info_codes_ = rec1val1*256+rec1val0;
verbose("short rec1 %02x %02x info codes\n", rec1val1, rec1val0);
int consumption_raw = rec2val3*256*256*256 + rec2val2*256*256 + rec2val1*256 + rec2val0;
verbose("short rec2 %02x %02x %02x %02x = %d total consumption\n", rec2val3, rec2val2, rec2val1, rec2val0, consumption_raw);
// The dif=0x04 vif=0x13 means current volume with scale factor .001
total_water_consumption_ = ((float)consumption_raw) / ((float)1000);
// The short frame target volume supplies two low bytes, the remaining two hi bytes are picked from rec2.
int target_volume_raw = rec2val3*256*256*256 + rec2val2*256*256 + rec3val1*256 + rec3val0;
verbose("short rec3 (%02x %02x) %02x %02x = %d target volume\n", rec2val3, rec2val2, rec3val1, rec3val0, target_volume_raw);
target_volume_ = ((float)target_volume_raw) / ((float)1000);
// Which leaves one unknown byte.
verbose("short rec3 %02x = unknown\n", rec3val2);
} else
if (frame_type == 0x78) {
verbose("Full frame\n");
/* int rec1dif = c[3];
verbose("Full frame %d bytes\n", c.size());
if (c.size() != 22) {
fprintf(stderr, "Warning! Unexpected length of frame %zu. Expected 22 bytes!\n", c.size());
}
int rec1dif = c[3];
int rec1vif = c[4];
int rec1vife = c[5];
int rec1val0 = c[6];
int rec1val1 = c[7];
*/
/*int rec2dif = c[8];
int rec2vif = c[9];*/
int rec2dif = c[8];
int rec2vif = c[9];
int rec2val0 = c[10];
int rec2val1 = c[11];
int rec2val2 = c[12];
int rec2val3 = c[13];
/*
int rec3dif = c[14];
int rec3vif = c[15];
int rec3val0 = c[16];
int rec3val1 = c[17];
int rec3val2 = c[18];
int rec3val3 = c[19];
*/
int tmp = rec2val3*256*256*256 + rec2val2*256*256 + rec2val1*256 + rec2val0;
consumption = ((float)tmp) / ((float)1000);
// There are two more bytes in the data. Unknown purpose.
int rec4val0 = c[20];
int rec4val1 = c[21];
if (rec1dif != 0x02 || rec1vif != 0xff || rec1vife != 0x20 ) {
fprintf(stderr, "Warning unexpected field! Expected info codes\n"
"with dif=0x02 vif=0xff vife=0x20 but got dif=%02x vif=%02x vife=%02x\n", rec1dif, rec1vif, rec1vife);
}
info_codes_ = rec1val1*256+rec1val0;
verbose("full rec1 dif=%02x vif=%02x vife=%02x\n", rec1dif, rec1vif, rec1vife);
verbose("full rec1 %02x %02x info codes\n", rec1val1, rec1val0);
if (rec2dif != 0x04 || rec2vif != 0x13) {
fprintf(stderr, "Warning unexpected field! Expected current volume\n"
"with dif=0x04 vif=0x13 but got dif=%02x vif=%02x\n", rec2dif, rec2vif);
}
int consumption_raw = rec2val3*256*256*256 + rec2val2*256*256 + rec2val1*256 + rec2val0;
verbose("full rec2 dif=%02x vif=%02x\n", rec2dif, rec2vif);
verbose("full rec2 %02x %02x %02x %02x = %d total consumption\n", rec2val3, rec2val2, rec2val1, rec2val0, consumption_raw);
// The dif=0x04 vif=0x13 means current volume with scale factor .001
total_water_consumption_ = ((float)consumption_raw) / ((float)1000);
if (rec3dif != 0x44 || rec3vif != 0x13) {
fprintf(stderr, "Warning unexpecte field! Expected target volume (ie volume recorded on first day of month)\n"
"with dif=0x44 vif=0x13 but got dif=%02x vif=%02x\n", rec3dif, rec3vif);
}
int target_volume_raw = rec3val3*256*256*256 + rec3val2*256*256 + rec3val1*256 + rec3val0;
verbose("full rec3 dif=%02x vif=%02x\n", rec3dif, rec3vif);
verbose("full rec3 %02x %02x %02x %02x = %d target volume\n", rec3val3, rec3val2, rec3val1, rec3val0, target_volume_raw);
target_volume_ = ((float)target_volume_raw) / ((float)1000);
verbose("full rec4 %02x %02x = unknown\n", rec4val1, rec4val0);
} else {
printf("Unknown frame %02x\n", frame_type);
fprintf(stderr, "Unknown frame %02x\n", frame_type);
}
}
string MeterMultical21::statusHumanReadable() {
string s;
bool dry = info_codes_ & INFO_CODE_DRY;
int time_dry = (info_codes_ >> INFO_CODE_DRY_SHIFT) & 7;
if (dry || time_dry) {
if (dry) s.append("DRY");
s.append("(dry ");
s.append(decodeTime(time_dry));
s.append(")");
}
bool reversed = info_codes_ & INFO_CODE_REVERSE;
int time_reversed = (info_codes_ >> INFO_CODE_REVERSE_SHIFT) & 7;
if (reversed || time_reversed) {
if (dry) s.append("REVERSED");
s.append("(rev ");
s.append(decodeTime(time_reversed));
s.append(") ");
}
bool leak = info_codes_ & INFO_CODE_LEAK;
int time_leak = (info_codes_ >> INFO_CODE_LEAK_SHIFT) & 7;
if (leak || time_leak) {
if (dry) s.append("LEAK");
s.append("(leak ");
s.append(decodeTime(time_leak));
s.append(") ");
}
bool burst = info_codes_ & INFO_CODE_BURST;
int time_burst = (info_codes_ >> INFO_CODE_BURST_SHIFT) & 7;
if (burst || time_burst) {
if (dry) s.append("BURST");
s.append("(burst ");
s.append(decodeTime(time_burst));
s.append(") ");
}
return s;
}
string MeterMultical21::decodeTime(int time) {
if (time>7) {
fprintf(stderr, "Error when decoding time %d\n", time);
}
switch (time) {
case 0:
return "0 hours";
case 1:
return "1-8 hours";
case 2:
return "9-24 hours";
case 3:
return "2-3 days";
case 4:
return "4-7 days";
case 5:
return "8-14 days";
case 6:
return "15-21 days";
case 7:
return "22-31 days";
default:
return "?";
}
return consumption;
}

2
meters.h
Wyświetl plik

@ -35,6 +35,8 @@ struct Meter {
virtual string id() = 0;
virtual string name() = 0;
virtual float totalWaterConsumption() = 0;
virtual float targetWaterConsumption() = 0;
virtual string statusHumanReadable() = 0;
virtual string datetimeOfUpdate() = 0;
virtual void onUpdate(function<void(Meter*)> cb) = 0;

14
util.cc
Wyświetl plik

@ -147,3 +147,17 @@ bool isValidKey(char *key)
vector<uchar> tmp;
return hex2bin(key, &tmp);
}
void incrementIV(uchar *iv, size_t len) {
uchar *p = iv+len-1;
while (p >= iv) {
int pp = *p;
(*p)++;
if (pp+1 <= 255) {
// Nice, no overflow. We are done here!
break;
}
// Move left add add one.
p--;
}
}

2
util.h
Wyświetl plik

@ -45,5 +45,7 @@ void verboseEnabled(bool b);
bool isValidId(char *id);
bool isValidKey(char *key);
void incrementIV(uchar *iv, size_t len);
#endif