MCA reverse video

Reverse engineer CAN-Bus communications of automotive modules
Go4IT
Pro
Posts: 557
Joined: 08 Feb 2019, 12:25

Re: MCA reverse video

Post by Go4IT » 01 May 2019, 13:23

oscarboiro, what you tell is only the steering wheel remote control, which is connected directly to the radio. I don't know the Convers in the Kuga (or whatever cluster it uses), but if there is no software support to show radio station, change input channel and such, what would you do?

oscarboiro
Active member
Posts: 107
Joined: 19 Feb 2019, 21:50

Re: MCA reverse video

Post by oscarboiro » 03 May 2019, 11:57

Go4IT wrote:
01 May 2019, 13:23
oscarboiro, what you tell is only the steering wheel remote control, which is connected directly to the radio. I don't know the Convers in the Kuga (or whatever cluster it uses), but if there is no software support to show radio station, change input channel and such, what would you do?
Hello, in the kuga 1 don’t exist the convers+ only 2 models with monochrome screen, one small screen and another big, the big screen only are In the kuga with navigation system. I only want know all options to control NX, i have Installed a steering wheel of a kuga 2 with more buttons in my mk1 and I think to control a nx in the future with unused buttons.
Kuga MK1 owner

DGAlexandru
Active member
Posts: 168
Joined: 04 Aug 2019, 22:47

Re: MCA reverse video

Post by DGAlexandru » 18 Aug 2019, 12:06

A SRM module (BlueTooth) can control the BP NX / FX by CAN messages. Also, you can answer the phone using the SET button of the IPC of Focus 2 / C-Max / Kuga.
The reverse signal is broadcasted by the GEM (BCMII) on CAN and BP NX can read it and then it selects the video input.
Also, a while ago I had a NX SD (MCA) with camera from a Kuga installed on my Mondeo (with screen of NX DVD Mondeo, but with screen MB of Kuga) and it worked with Converse and it also knew about lights (to have the buttons iluminated or not and screen luminosity).
What it didn't work was the CCC auto-config and I had to use ELM Config to have it configured for my car.

So, the only thing you have to do is to sniff on MS-CAN for reverse signal by looking at the addresses that GEM is using to bradcast its information. The audio source selection for audio units in Fords stayed the same starting with Denso Nav units (2003), so its the same with Mondeo MK4.
Last edited by DGAlexandru on 18 Aug 2019, 12:37, edited 1 time in total.

Go4IT
Pro
Posts: 557
Joined: 08 Feb 2019, 12:25

Re: MCA reverse video

Post by Go4IT » 18 Aug 2019, 12:31

Send CAN-ID 433 with those bytes 00 00 00 02 00 A0 00 00 to simulate reverse gear engaged on MM-CAN. Use sending period of at least 1 second to keep it stable. It's Byte D3 (read from left, starting with D0) having value of 0x02 to enable and value of 0x00 to disable reverse gear.
Also send IGNITION_ON, shure.

Go4IT
Pro
Posts: 557
Joined: 08 Feb 2019, 12:25

Re: MCA reverse video

Post by Go4IT » 18 Aug 2019, 12:35

DGAlexandru wrote:
18 Aug 2019, 12:06
... and it also knew about lights (to have the buttons iluminated or not and screen luminosity).
This light think puzzles me since a long time. I know the Focus, Kuga uses different kind than Mondeo, S-Max, Galaxy. The former ones uses a PWM-signal on the Quadlock (which i know and can simulate), the later ones uses strickt CAN messages (which i also know). But what is causing the board to behave the one or the other way? I've tried to switch Firmwares in two FX units, but this would not help. The Mondeo unit (8S7T) still uses CAN only, even with Focus Firmware. And the Focus unit (8M5T) lost the ability to use PWM when using the Mondeo Firmware. So there must be a hardware difference somehow, somewhere, but i did not find any. The Board-IDs are equal.
Maybe this is something the RU (V850 Radio processor) is doing...?

DGAlexandru
Active member
Posts: 168
Joined: 04 Aug 2019, 22:47

Re: MCA reverse video

Post by DGAlexandru » 18 Aug 2019, 12:46

Try moving both EEPROM dump and Sector 507 dump from one to another.
I didn't noticed any HW difference on PCBs of NX DVD; don't remember of seeing any Mondeo FX PCB - I think only the Focus ones break their RAMs :P; between FX and NX I also think the only difference on main PCB is the DVD connector and NX DVD extra Flash for Nav data... of course there are different PCB revisions even for the same BP audio unit type.

oscarboiro
Active member
Posts: 107
Joined: 19 Feb 2019, 21:50

Re: MCA reverse video

Post by oscarboiro » 08 Oct 2019, 09:56

Hello!!! this is my video module made with arduino:
Esquema Modulo Video.jpg
I use:
-step down to convert 12v to 5v
-Arduino nano
-2 units of MCP2515
-Axicom IM26 Relay
-MAX4314

I install the relay to work fine The travelpilot NX/MCA withouth ignition, when put ignition, this relay separate the can bus signals.
To switch video i use a MAX4314, but is possible use a transistors.

this is the sketch:

NEW LINK Udted 3-12-2019
https://drive.google.com/file/d/1jbQMdC ... sp=sharing

To work, put the travelpilot NX/MCA in AUX mode and press Mode button in the steering wheel control. When you put the rear knob, automatically show the cam signal.
The MAX4314 have 4 inputs, my next steep is install a front camera. I think to activate when the car run down 5Km/h and acitave parking sensors, but first i need found the can bus signal to activate PDC, in the kuga, the signal from the PDC button is a analog, and i want activate using a con bus signal.
You do not have the required permissions to view the files attached to this post.
Last edited by oscarboiro on 03 Dec 2019, 10:00, edited 1 time in total.
Kuga MK1 owner

Go4IT
Pro
Posts: 557
Joined: 08 Feb 2019, 12:25

Re: MCA reverse video

Post by Go4IT » 08 Oct 2019, 13:41

Great job, oscarboiro!
The setup looks like mine i did in 2018
prototype_breadboard.jpg
expect that i used an MAX4311 for the muxing, but nearly any would do.

> To work, put the travelpilot NX/MCA in AUX mode and press Mode button in the steering wheel control.
I wonder why do you made it this way because it should also work without this, just putting in thge reverse gear?

To switch between front and rear cam you could use the reverse gear position and the PDC status. So if you want to have front cam, you push and aktivate PDC and your CAN module activate the front cam. If you put in the reverse gear, PDC is automatically engaged and your CAN module use the rear cam. There is only one issue with that: to activate the camera input on the satnav it must detect the reverse gear. So you need to fake this signal. This can be done with your two CAN-boards to have them as a permanent filter between the IPC and the radio. In case of forward PDC activation it does not pass the reverse gear signal to the radio, but creates a faked one, letting the radio think that reverse gear is set.

> I think to activate when the car run down 5Km/h and acitave parking sensors, but first i need found the can bus signal to activate PDC, in the kuga, the signal from the PDC button is a analog, and i want activate using a con bus signal.
Currently i found no way of doing this. The current functionalty comes from the BCM, where the PDC switch is also connected. One method could be to use a relais (or OC transistor) to simulate the switch from one of your CAN boards. The board could read the current car speed. BUT, this would mean as soon as you start the car, the PDC is activated and shows the front cam.
You do not have the required permissions to view the files attached to this post.

ronald0001
Active member
Posts: 93
Joined: 05 Nov 2019, 10:34

Re: MCA reverse video

Post by ronald0001 » 17 Jan 2020, 12:46

oscarboiro wrote:
08 Oct 2019, 09:56
Hello!!! this is my video module made with arduino:

Esquema Modulo Video.jpg

I use:
-step down to convert 12v to 5v
-Arduino nano
-2 units of MCP2515
-Axicom IM26 Relay
-MAX4314

I install the relay to work fine The travelpilot NX/MCA withouth ignition, when put ignition, this relay separate the can bus signals.
To switch video i use a MAX4314, but is possible use a transistors.

this is the sketch:

NEW LINK Udted 3-12-2019
https://drive.google.com/file/d/1jbQMdC ... sp=sharing

To work, put the travelpilot NX/MCA in AUX mode and press Mode button in the steering wheel control. When you put the rear knob, automatically show the cam signal.
The MAX4314 have 4 inputs, my next steep is install a front camera. I think to activate when the car run down 5Km/h and acitave parking sensors, but first i need found the can bus signal to activate PDC, in the kuga, the signal from the PDC button is a analog, and i want activate using a con bus signal.
i can use this also to block some other id (1e6 and 1e9) to send convers my own messages cuz i want to show my own trackinfo in the convers

like:
fx is on aux -> convers should show aux bt audistreaming,so i need to block this id and send other message on this id with my raspberry pi (someone can look for me the rigth message on id 1e6 cuz i have no bt audio streaming only handsfree)
and then i want to send my own text to the convers
block id 1e9 (is the id where the radiostation name sended to convers, i think is the same id wich is used for trackinfo send to convers) and also send my own message on id 1e9 to show title and artist in convers

i have a raspberry pi in my car and at the moment i only read messages and start some actions...like set system silence when pdc is on...swich the and dim display when ligth is on...and more

and i also dont need the downstepper cuz i can power over the usbhub in the car ...and also why the relais is needed for the can bus?

oscarboiro
Active member
Posts: 107
Joined: 19 Feb 2019, 21:50

Re: MCA reverse video

Post by oscarboiro » 17 Jan 2020, 14:09

I need install the relay for when I turn on travelpilot nx with ignition off the unit can comunícate with instrument cluster and v2c module.
I connect the arduino to ignition signal, and when the ignition is turned off, the relay comunícate directly the nx with the car, and when the ignition is on, the relay switch and comunícate the NX with arduino - arduino with car and viceversa, to filter the rear signal and turn on the video in mode.
Kuga MK1 owner

Post Reply