🚗 EMP2 - TouchEmulator

Disclaimer ⚠️

• The shown content is just done for learning and educational purposes on private ground
• You should not modify anything in your vehicle nor influence the CAN-Bus, especially not if you are using your vehicle on public roads or areas
• You are fully responsible for your actions and noone else
• If you have questions/problems with your vehicle, please contact your dealer
• All shown informations are gathered by ...
  • ... trial and error search electrical wiring for CAN-Buses
  • ... sniffing CAN and reverse engineer CAN behaviour when e.g. StSt function is toggled

Description

Automation of user-inputs as if the touch-display was used, by sending messages on vehicle CAN-Bus from a rapid prototyping device.

Main goal:

• Toggle Start-Stop Button after each vehicle start automatically to OFF

Vehicles

Development

The shown content (Pins, Colors, Positions, IDs, ...) are detemined from a Toyota Proace City, thats why you have to expect deviations to other models

Compatibility

The below described device to emulate user inputs via CAN-Bus could/should work for all vehicles built on the EMP2 Platform.

Examples

• Toyota Proace (City) (Used for development)
• Citroen Berlingo
• Peugeot Partner/Rifter
• Vauxhall/Opel Combo
• Fiat Doblo
• ...

Used CAN-Bus interface

CAN-Bus name

• CAN INFO DIV

Used connector

Central BSI-Unit, located at drivers footrest on top of fuse box. Yellow Connector as shown below:

Configuration

Baudrate: 125 kBaud

Pin	Description	Wire Color
34	CAN INFO DIV High	Brown
36	CAN INFO DIV Low	Blue

Functions

Turn OFF StartStop

Description	Message ID	Byte	Bit	Values
StSt Status	0x227	3	2	true = StSt OFF
Toggle StSt	0x1A9	6	7	true = Toggle command

Message example

Function	Message ID	Payload
NOT TOGGLE	0x1A9	0x** 0x** 0x** 0x** 0x** 0x** 0x50 0x**
TOGGLE	0x1A9	0x** 0x** 0x** 0x** 0x** 0x** 0xD0 0x**
StSt ON	0x227	0x** 0x** 0x** 0x10 0x** 0x** 0x** 0x**
NOT TOGGLE	0x227	0x** 0x** 0x** 0x14 0x** 0x** 0x** 0x**

Activate Android Auto

Seems not to be controlled via CAN INFO DIV

Deactivate Lane Assistant

Seems not to be controlled via CAN INFO DIV

Solution

Devices

• CANPico Board
• Firmware

Wiring

• CANPico CAN High and Low connected to the corresponding Pins in the vehicle
• PiPico micro-USB supply connected to the USB charging-port, placed in the rear-compartment (This one is ON and OFF, corresponding to the vehicle ignition)
• Termination Resistor Jumper has to be taken OFF the board, to not add additional resistors to the already running vehicle-network

Code

• main.py written in pyton
• Just open the code and download it to the PiPico with Thonny

Target behavior example

Just an example and may not always be up to date with the current python-script, so please have a look at the current scripts for detailled functionality.

1. Vehicle turned ON > Turns ON the PiPico
2. LED set to be ON
3. Initialize CAN-controller
4. Wait 20s
5. Read last Message with ID 0x1A9
6. Get payload of this message
7. Set bit 7 on byte 6 via binary-OR-operation
8. Send same frame but with new payload
9. StSt-Button should be toggled
10. Infinite waiting loop with blinking LED