MCA reverse video

Reverse engineer CAN-Bus communications of automotive modules
Go4IT
Posts: 255
Joined: 08 Feb 2019, 12:25

Re: MCA reverse video

Post by Go4IT » 01 May 2019, 13:23

oscarboiro, what you tell is only the steering wheel remote control, which is connected directly to the radio. I don't know the Convers in the Kuga (or whatever cluster it uses), but if there is no software support to show radio station, change input channel and such, what would you do?

oscarboiro
Posts: 65
Joined: 19 Feb 2019, 21:50

Re: MCA reverse video

Post by oscarboiro » 03 May 2019, 11:57

Go4IT wrote:
01 May 2019, 13:23
oscarboiro, what you tell is only the steering wheel remote control, which is connected directly to the radio. I don't know the Convers in the Kuga (or whatever cluster it uses), but if there is no software support to show radio station, change input channel and such, what would you do?
Hello, in the kuga 1 don’t exist the convers+ only 2 models with monochrome screen, one small screen and another big, the big screen only are In the kuga with navigation system. I only want know all options to control NX, i have Installed a steering wheel of a kuga 2 with more buttons in my mk1 and I think to control a nx in the future with unused buttons.

DGAlexandru
Posts: 15
Joined: 04 Aug 2019, 22:47

Re: MCA reverse video

Post by DGAlexandru » 18 Aug 2019, 12:06

A SRM module (BlueTooth) can control the BP NX / FX by CAN messages. Also, you can answer the phone using the SET button of the IPC of Focus 2 / C-Max / Kuga.
The reverse signal is broadcasted by the GEM (BCMII) on CAN and BP NX can read it and then it selects the video input.
Also, a while ago I had a NX SD (MCA) with camera from a Kuga installed on my Mondeo (with screen of NX DVD Mondeo, but with screen MB of Kuga) and it worked with Converse and it also knew about lights (to have the buttons iluminated or not and screen luminosity).
What it didn't work was the CCC auto-config and I had to use ELM Config to have it configured for my car.

So, the only thing you have to do is to sniff on MS-CAN for reverse signal by looking at the addresses that GEM is using to bradcast its information. The audio source selection for audio units in Fords stayed the same starting with Denso Nav units (2003), so its the same with Mondeo MK4.
Last edited by DGAlexandru on 18 Aug 2019, 12:37, edited 1 time in total.

Go4IT
Posts: 255
Joined: 08 Feb 2019, 12:25

Re: MCA reverse video

Post by Go4IT » 18 Aug 2019, 12:31

Send CAN-ID 433 with those bytes 00 00 00 02 00 A0 00 00 to simulate reverse gear engaged on MM-CAN. Use sending period of at least 1 second to keep it stable. It's Byte D3 (read from left, starting with D0) having value of 0x02 to enable and value of 0x00 to disable reverse gear.
Also send IGNITION_ON, shure.

Go4IT
Posts: 255
Joined: 08 Feb 2019, 12:25

Re: MCA reverse video

Post by Go4IT » 18 Aug 2019, 12:35

DGAlexandru wrote:
18 Aug 2019, 12:06
... and it also knew about lights (to have the buttons iluminated or not and screen luminosity).
This light think puzzles me since a long time. I know the Focus, Kuga uses different kind than Mondeo, S-Max, Galaxy. The former ones uses a PWM-signal on the Quadlock (which i know and can simulate), the later ones uses strickt CAN messages (which i also know). But what is causing the board to behave the one or the other way? I've tried to switch Firmwares in two FX units, but this would not help. The Mondeo unit (8S7T) still uses CAN only, even with Focus Firmware. And the Focus unit (8M5T) lost the ability to use PWM when using the Mondeo Firmware. So there must be a hardware difference somehow, somewhere, but i did not find any. The Board-IDs are equal.
Maybe this is something the RU (V850 Radio processor) is doing...?

DGAlexandru
Posts: 15
Joined: 04 Aug 2019, 22:47

Re: MCA reverse video

Post by DGAlexandru » 18 Aug 2019, 12:46

Try moving both EEPROM dump and Sector 507 dump from one to another.
I didn't noticed any HW difference on PCBs of NX DVD; don't remember of seeing any Mondeo FX PCB - I think only the Focus ones break their RAMs :P; between FX and NX I also think the only difference on main PCB is the DVD connector and NX DVD extra Flash for Nav data... of course there are different PCB revisions even for the same BP audio unit type.

oscarboiro
Posts: 65
Joined: 19 Feb 2019, 21:50

Re: MCA reverse video

Post by oscarboiro » 08 Oct 2019, 09:56

Hello!!! this is my video module made with arduino:
Esquema Modulo Video.jpg
I use:
-step down to convert 12v to 5v
-Arduino nano
-2 units of MCP2515
-Axicom IM26 Relay
-MAX4314

I install the relay to work fine The travelpilot NX/MCA withouth ignition, when put ignition, this relay separate the can bus signals.
To switch video i use a MAX4314, but is possible use a transistors.

this is the sketch:

https://drive.google.com/open?id=1jbQMd ... zyVDzQ26fR_

To work, put the travelpilot NX/MCA in AUX mode and press Mode button in the steering wheel control. When you put the rear knob, automatically show the cam signal.
The MAX4314 have 4 inputs, my next steep is install a front camera. I think to activate when the car run down 5Km/h and acitave parking sensors, but first i need found the can bus signal to activate PDC, in the kuga, the signal from the PDC button is a analog, and i want activate using a con bus signal.

Go4IT
Posts: 255
Joined: 08 Feb 2019, 12:25

Re: MCA reverse video

Post by Go4IT » 08 Oct 2019, 13:41

Great job, oscarboiro!
The setup looks like mine i did in 2018
prototype_breadboard.jpg
expect that i used an MAX4311 for the muxing, but nearly any would do.

> To work, put the travelpilot NX/MCA in AUX mode and press Mode button in the steering wheel control.
I wonder why do you made it this way because it should also work without this, just putting in thge reverse gear?

To switch between front and rear cam you could use the reverse gear position and the PDC status. So if you want to have front cam, you push and aktivate PDC and your CAN module activate the front cam. If you put in the reverse gear, PDC is automatically engaged and your CAN module use the rear cam. There is only one issue with that: to activate the camera input on the satnav it must detect the reverse gear. So you need to fake this signal. This can be done with your two CAN-boards to have them as a permanent filter between the IPC and the radio. In case of forward PDC activation it does not pass the reverse gear signal to the radio, but creates a faked one, letting the radio think that reverse gear is set.

> I think to activate when the car run down 5Km/h and acitave parking sensors, but first i need found the can bus signal to activate PDC, in the kuga, the signal from the PDC button is a analog, and i want activate using a con bus signal.
Currently i found no way of doing this. The current functionalty comes from the BCM, where the PDC switch is also connected. One method could be to use a relais (or OC transistor) to simulate the switch from one of your CAN boards. The board could read the current car speed. BUT, this would mean as soon as you start the car, the PDC is activated and shows the front cam.

Post Reply