UDS – ISO14229-1

Classification of services:
1. Diagnostic and Communication Management functional Unit. – 10
2. Data transmission functional Unit.- 7
3. Stored data functional Unit- 2
4. I/O Control functional Unit – 1
5. Remote activation of Routine Functional Unit – 1
6. Upload Download Functional Unit - 4
Diagnostic and Communication Management
functional Unit. – 10
SERVICE ID HEX DESCRIPTION
DiagnosticSessionControl 0X10 CLIENT request to control diagnostic session with a server(s)
ECUReset 0X11 CLIENT forces server to perform ECU Reset
SecurityAccess 0X27 CLIENT request to unlock a secured Server
CommunicationControl 0X28 CLIENT requests server to control its communication
TesterPresent 0X3E CLIENT indicates to server that it is still Present
AccessTimingParameter 0X83 CLIENT uses it to read/modify timing parameter of an active Communication
SecuredDataTransmission 0X84 CLIENT uses it to perform data transmission with external Link
ControlDTCSetting 0X85 CLIENT controls DTC Setting in Server
ResponseOnEvent 0X86 CLIENT request to start an Event mechanism in Server
LinkControl 0X87 CLIENT request server to control Baud Rate of Communication
DiagnosticSessionControl – 0X10
SUBFUNCTIONS - Hex (Bit 6-0)
SUBFUNCTION DESCRIPTION / IMPORTANT
0x00 – reserved
defaultSession 01 1. Diagnostic Session enables default session by DEFAULT.
0x01 – defaultSession
2. No provision for Session timeout.
0x02 – programmingSession 3. On (+) res from Server – It should again relock if
unlocked.
0x03 – extendedDiagnosticSession
4. On (-) res from Server - active session shall continue.
0x04 – safetySystemDiagnosticSession
Programming 02 1. Enables all services required to support Memory
0x05-0x3F – reserved Session Programming of server.
2. If server runs programming session in Boot SW,
0x40 – 0x5F – vehicleManfacturerSpecific
Programming session is left with only (Session Time Out
0x60-0x7F – systemSupplierSpecific or ECU RESET (0x11).
3. In CASE of timeout valid application SW is implemented
to both side to restart.
Extended 03 1. Extended Session is used to enable all diagnostic
DiagnosticSession services required to support the adjustment such as
IDLE_SPEED, CO_VALUE in server memory.

safetySystemDiagno 04 1. Enables all the diagnostic services required to support the

sticSession safety-related function e.g. : Airbag deployment.
VehicleManufacturer 40-5F 1. Reserve for Vehicle Manufacturer specific use.
Specific
systemSupplier 60-7F 1. Reserve for System Supplier Specific use.
Specific
DiagnosticSessionControl – 0X10

Request Message Definition Positive response

A_Data Parameter Name HEX A_Data Parameter Name HEX
Byte Value Byte Value

#1 Diag Session Control Request 0x10 #1 Diagnostic Response Service Id 50

Id
#2 Diagnostic Session Type 00 – 7F
#2 SUB FUNCTION 00 - FF #3 Session Parameter Record

Supported NRC

HEX Parameter Name

12 Sub Function Not Supported

13 Incorrect Message Length

22 Condition Not Correct
ECUReset – 0X11
SUBFUNCTIONS - Hex (Bit 6-0) SUBFUNCTION DESCRIPTION / IMPORTANT
0x00 – reserved hardReset 01 1. Simulates the POWER_ON/START_UP Sequence
0x01 – hardReset typically performed SERVER is disconnected from Its
POWER_SUPPLY.
0x02 – keyOnOffReset
0x03 – softReset 2. Re-Initialization of NVM and VM.
0x04 – enableRapidPowerShutDown keyOnOffReset 02 1. Simulates the IGN_OFF and back IGN_ON.
2. NVM Value are preserved and VM are initialized.
0x05 - disableRapidPowerShutDown
softReset 03 1. Immediately Restart the APPLICATION.
0x06 – 0x3F – ISOReserved 2. RESTART with LAST LEARNED Value, ADAPTIVE
0x40-5F vehicleManufactureSpecific FACTORS, LONG- TERM ADJUSTMENT.

0X60-7E systemSupplierSpecific enableRapidPowerShut 04 1. Performs the Rapid Power Shut down ( Server on Stand-
Down BY or requested.)
0x7F- ISOReserved
disableRapidPowerShut 05 1. Disable the Rapid Power Shut down function
Down
VehicleManufacturer 40-5F 1. Reserve for Vehicle Manufacturer specific use.
Specific
systemSupplier 60-7E 1. Reserve for System Supplier Specific use.
Specific
ECUReset – 0X11

Request Message Definition Positive response

A_Data Parameter Name HEX A_Data Parameter Name HEX
Byte Value Byte Value

#1 ECU Reset 0x11 #1 ECU Response Service Id 51

#2 Reset Type 00 – 7F
#2 SUB FUNCTION 00 - FF #3 Power Down Time 00 – FF

Supported NRC

HEX Parameter Name

12 Sub Function Not Supported

13 Incorrect Message Length

22 Condition Not Correct
33 Security access denied
Security Access Service – 0X27
SUBFUNCTION DESCRIPTION / IMPORTANT

ISO Reserved 00 ISO Reserved

Request Seed 01 Request Seed with Level of Security defined by Vehicle Manufacturer

Send Key 02 Send key with Level of Security defined by Vehicle Manufacturer

requestSeed 03,05,07,41 Request Seed with different Level of Security defined by Vehicle Manufacturer

Send Key 04,06,08,42 Send Key with different Level of Security defined by Vehicle Manufacturer

ISO Reserved 43- 5D ISO reserved request seed

Request Seed
ISO Reserved 44 – 5E ISO reserved Send Key
Send KeY
Security Access Service – 0X27
Request Message Definition Positive response
A_Data Parameter Name HEX A_Data Parameter Name HEX
Byte Value Byte Value
#1 Security Access 0x27 #1 ECU Response Service Id 51

#2 Reset Type 00 – 7F
#2 SUB FUNCTION 00 - FF
#3 Power Down Time 00 – FF
#3 Security Access Data Record= 00 – FF
[ Parameter 1, … Para ..m] ------
00 – FF
CLIENT request the SEED
Supported NRC
HEX Parameter Name

12 Sub Function Not Supported SERVER send the SEED

13 Incorrect Message Length
22 Condition Not Correct
24 requestSequence Error CLIENT send the KEY
31 Request Out of Range
35 InValid KEY
36 Exceed Number of Attempt
SERVER validates the KEY and UNLOCK itself
37 RequiredTimeDelayNotExpired
Communication Control – 0X28
SUBFUNCTION - Hex (Bit 6-0) DESCRIPTION / IMPORTANT

enableRxAndTx 00 Rx and Tx of messages shall be enabled for specific type of communication

enableRxAndDisableTx 01 Rx = enable , Tx = disable
DisableRxAndEnableTx 02 Rx = disable , Tx = enable

disableRxAndTx 03 Rx=Tx=disable
ISOSAEReserved 04-3F ISOSAEReserved
VehicleManufacturer supplier 40-5F
SystemSupplierSpecific 60-7E
ISOSAEReserved 7F ISOSAEReserved

Note : Control Type is an echo of bits 6 – 0 of the sub function parameter from the request.
The client requests a response message by setting the suppressPosRspMsgIndicationBit (bit 7 of the
subfunction parameter) to “FALSE” (‘0’).
Communication Control – 0x28
Request Message Definition Eg: Positive response (enableRxAndDisableTx=01)
A_Data Parameter Name HEX A_Data Parameter Name HEX
Byte Value Byte Value
#1 Communication Control Request Id 0x28 #1 Communication Control Response id 0x68
#2 SUB FUNCTION = CONTROL Type 00 - FF #2 Control Type 0x01
#3 Communication Type = NETWORK 00 - FF
MANAGEMENT (02)

Supported NRC

HEX Parameter Name

12 Sub Function Not Supported

13 Incorrect Message Length

22 Condition Not Correct
31 requestOutOfRange
Tester Present – 0x3E
Request Message Definition Eg: Positive response
A_Data Parameter Name HEX A_Data Parameter Name HEX
Byte Value Byte Value
#1 Tester present Request Id 0x3E #1 Tester Present Response id 0x7E
#2 SUB FUNCTION = ZeroSubFunction 00 /80 #2 ZeroSubFunction 0x00 / NR

Tester Present Service is used to indicate that the CLIENT is

still connected to VEHICLE and previous services and
Supported NRC communication should remain active.

HEX Parameter Name NR – No response

12 Sub Function Not Supported

13 Incorrect Message Length

AccessTiming Parameter– 0X83 Services
SUBFUNCTION - Hex (Bit 6-0) DESCRIPTION / IMPORTANT

ISO Reserved 00 ISO Reserved

readExtendedTimingParameterSet
setTimingParameterToDefaultValue
readCurrentlyActiveTimingParameter
setTimingParameterToGivenValues
ISO Reserved
01 (+) Res – Server shall send access timing Parameter Values
(-) Res – Server shall send the appropriate Negative response
02 (+) Res – Server shall change all timing Parameter to Default Value
(-) Res – Server shall send appropriate Negative response and maintain current active
Parameter
03 (+) Res – Server shall send Currently active timing Parameter
(-) Res – Server shall appropriate NRC.
04 (+) Res- If all conditions are correct, Server shall perform all necessary actions to change
the value to given Value (suppressPosRspIndicationBit = FALSE Before currents get
active.)
(-) Res – Server shall maintain current active parameter and send NRC
05- FF ISO Reserved
Access Timing Parameter – 0x83 Service
Request Message Definition Eg: Positive response
A_Data Parameter Name HEX A_Data Parameter Name HEX
Byte Value Byte Value
#1 Access Timing Parameter Request Id 0x83 #1 Access Timing Parameter Response Id 0xC3
#2 SUB FUNCTION = Timing Parameter 00 – FF #2 Timing Parameter Access Type 0x00 – FF
Access type
#3 …#n Timing Parameter request record [ 00 – FF #3 Timing Parameter Response record ( Byte1…Byte m) 00 – FF
Byte1 …..Byte#M
00-FF
Access Timing Parameter is used to Read and change the
Supported NRC default timing parameter of the communication Link for the
duration this link is active. It provides four different modes for
HEX Parameter Name the access to the server timing Parameters.
12 Sub Function Not Supported
- readExtendedTimingParameterSet
- setTimingParameterToDefaultValues
13 Incorrect Message Length
- readCurrentlyActiveTimingParameters
22 Condition Not Correct - setTimingParameterToGivenValues.
31 Request Out Of Range
Secured Data Transmission – 0X84 Services

Secure Data transmission services is used to transmit data that is

protected against attacks from the third parties, which could
endanger the data security.
Secured Mode meant here  DATA is protected by some
cryptographic mode.

There are two methods to diagnostic data transfer CLIENT and

SERVER
1. Unsecured Data transmission Mode – Security Sub Layer
Performs a “PASS-THRU” of Data between application and
Application Layer in C & S

2. Secured Data transmission Mode – Security Sub Layer uses

the Secured Data transmission Service for the transmission
and reception of secured DATA. It should be a P2P Comm,
only PHYSICAL addressing is allowed which means only one
Server is involved.

Four Security Sub-layer ( SS_) Service primitives:

1. SS_SecuredMode.req SECURITY SUB LAYER REQUEST

2. SS_SecuredMode.ind SECURITY SUB LAYER INDICATION
3. SS_SecuredMode.resp SECURITY SUB LAYER RESPONSE
4. SS_SecuredMode.conf SEC SUBLAYER CONFIRMATION
Secure Data transmission – 0x84 Service
Request Message Definition Eg: Positive response
A_Data Parameter Name HEX A_Data Parameter Name HEX
Byte Value Byte Value
#1 SecuredDatatransmission Request Id 0x84 #1 SecuredDatatranmission response Id 0xC3
#2 securityDataRecord [] = 00 – FF #2 securityDataResponseRecord [] = 0x00 – FF
{ security Data Parameter 1 { security Data Parameter 1
.. ………………………….. .. …………………………..
security data Parameter n} 00 -- FF security data Parameter n} 00 -- FF

Supported NRC

HEX Parameter Name

13 Incorrect Message Length

38 – reservedByExtendedDataLinkSecurityDocument
4F