• ECM Engine ECU Main Body ECU ID-Code Box Steering Lock ECU Certification ECU Outside Handle Antenna Touch Sensor Lock Switch Door Oscillator Tuner & Electrical Key Antenna Front Room
Trang 1Hi-Tech Update 973B
Technician Handbook
Trang 2Technical Training
Section 1 1
Objectives 1
Parts Catalog Identification 2
Definitions 3
Entry to Start Steps 4
2007 Camry System Diagram: Overview 5
Entry to Start –Group 1 6
Entry to Start -Step 1 7
Entry to Start -Step 4 8
2005 CY Smart Entry & 9
Start System: Door Unlock 9
Signal Sequence 10
Entry to Start – Groups 2 & 3 11
Entry to Start – Group 4 12
Entry to Start – Group 5 13
Entry to Start – Step 11 14
Entry to Start – Step 16 15
Entry to Start – Group 5 16
Entry to Start – Group 6 17
Smart Entry & Start System Overview of Engine Start Process 18
Entry to Start – Groups 6 & 7 20
Smart Entry & Start: Engine Start 21
Entry to Start – Group 8 22
Smart Entry & Start System: Engine Start 23
Entry to Start – Group 8 24
Smart Key Operation Summary 25
Starting Questions 26
Smart Entry & Start System: Immobilizer Override 27
Case Example: Smart Key Battery Life 28
Case Example: Electromagnetic Interference and System Malfunctions 29
Table of Contents
Trang 3Section 2 30
Objectives 30
ID Code Registration 31
Registration Procedure: Lost key 32
If Key Registration Fails 34
Use Remaining Key to Register 35
Replace Certification ECU: Key Available 36
Replace Certification ECU 37
Automatic/Manual Registration Process 38
Automatic/Manual Registration Process 39
New ECU/ECM Registration 40
Lost All Keys 41
Unmatched S Codes 42
Some Keys Lost, Key ID Codes cannot be erased 43
Replace Steering Lock Actuator 44
Replacing with a Previously Registered Engine ECM 45
Communication Check Utility 46
Section 3 47
Objectives 47
Techstream Data List Screen Shot 48
Data List Definitions 49
Trang 4Technical Training 1
Smart Key System Operation
Identify sequential system operation of Smart entry and Smart start
• Verify normal and abnormal Smart Key System operation
• Locate key information in Repair Manual and EWD
• Interpret smart key system signal patterns
•
Section 1 Objectives
Trang 5Parts Catalog Identification • Certification ECU manages the Smart Key system
ID Code Box is considered the Immobilizer ECU for the System
• Tuner name is used in the NCF to indicate a Door Lock Control
• Receiver with the Antenna inside the box.
Door Lock Control Receiver name will be used in other service
• publications
Certification ECU Computer Assy, Smart Key
ID Code Box Computer, Immobilizer Code Steering Lock ECU Actuator Assy, Steering Lock
Door Lock Control Receiver Receiver, Door Control Electrical Key Antenna Antenna, Electrical Key Oscillator (Exterior) Oscillator, Door Electrical Key Front Room Oscillator (Interior) Oscillator, Indoor Electrical Key
Trang 6Technical Training 3
Definitions 1 Vehicle ID Code – Hard code in the Certification ECU Used as
the 1st layer of security to verify that the key is registered to this vehicle Written to the electronic key during the 1st step of key registration
2 Key ID Code – Part of the key software that is programmed in the
key during manufacturing Unique code for each key This code is linked to the S code Written into the Certification ECU during the 1st step of key registration Infinite number of codes.
3 S Code – Generated by the Certification ECU when the Key
ID Code for each key is registered in the ID Code Box and the Certification ECU This code is registered during the 2nd part of key registration.
4 L Code – Generated by the Certification ECU but stored in the
ID Code Box and Steering Lock ECUs The L code verification and Unlock confirmation information must be received by the Certification ECU before a 3-bit code command will be sent
5 3 Bit Code – Temporary fuel and spark allow to shorten crank to
start time and improve customer satisfaction When this code is sent the Security light turns off Only 1, 3-bit code is sent per key cycle.
6 G Code – Allows fuel and spark to the engine after the 3-bit code
If the G code fails the engine will crank, start and stall If G code fails the security light will turn back on.
Electronic Key Sometimes called the Fob, this key allows access for entry and start
functions without the use of a mechanical key Vehicle ID Code and Key
ID Code are stored in this component
Vehicle ID Code A code in each Certification ECU Written to the electronic key during the
1ststep of key registration
Key ID Code Unique code in each electronic key This code is written into the
Certifica-tion ECU during key registraCertifica-tion
S Code Commonly called the Security Code This code is stored in the
Certifica-tion ECU and ID Code Box and is used in theft prevenCertifica-tion
L Code Commonly called the Lock Code This code is stored in the ID Code Box
and the Steering Lock ECU This code must be verified before the ing will unlock
steer-3 Bit Code A temporary fuel and spark allow command from the ID Code Box to the
Engine ECM This is a strategy used to reduce cranking time and to allow the vehicle to start more quickly
G Code Commonly called the Go Code This Code allows spark and fuel to the
engine after an NE signal is generated by the crank sensor
Trang 7Each group will lead to a diagnostic conclusion.
Entry to Start Steps
There are 30 Steps from Entry to Start These are broken down into 8 groups.
Trang 8•
ECM (Engine ECU)
Main Body ECU
ID-Code Box
Steering Lock ECU
Certification ECU
Outside Handle
Antenna Touch Sensor Lock Switch
Door Oscillator
Tuner &
Electrical Key Antenna
Front Room Oscillator (Console) Rear Room Oscillator (Rear Seat)
Trang 9The Certification ECU will not ask for the Key ID Code until the Vehicle
3 Electronic Key (including battery) – battery must have at least 2.2V
in order to flash the LED The key will operate between 2.0V & 2.2V but the LED will not flash Below 2.0V the electronic key will not respond properly.
4 Wireless Door Lock Receiver/Tuner
5 Component circuitry
6 Vehicle battery Also you know the key has been at least partially registered to this vehicle.
Key transmits using RF Use SST 00002-09001-01 RF reader to verify transmission.
Entry to Start –
Group 1
1 Car is locked Certification ECU is pulsing Exterior Oscillators, looking for a key
2 Driver brings a registered key within the detection area of a door oscillator
3 The Certification ECU uses oscillator broadcast signals to command the key:
A Transmit the Vehicle ID Code, then
B Transmit the Key ID Code to tuner
4 Key transmits “Key ID Code” to the tuner Red LED on key
flashes
Trang 10Technical Training 7
Channel A (blue) CLG1-LF door oscillator command from the
Certification ECU Channel B (red) CLG2-RF door oscillator command from the
Certification ECU Channel C (green) RSSI, command from Certification ECU to
Tuner to listen for a Key reply through the antenna
Channel D (yellow) RDA, data reply from the Tuner to the
Certification ECU with the Key reply data
Certification ECU door oscillator command (CLG1/CLG2) occurs every
250 ms.
All door oscillators broadcast at the same time
• Channels A thru D occur in this order:
• C
Trang 11Entry to Start -
Step 4
Key comes into the LF door oscillator detection area.
Channel A sends “wake up request” then “vehicle ID code request” then “key ID code request”
Channel B stops looking for a key while the “handshake” or “key verification” process occurs It will then continue to look for a key every 250ms.
Channel C commands the tuner to listen more frequently based on additional data requests sent from the Certification ECU via the LF door oscillator
Channel D shows the additional data sent from the key to the tuner and then to the Certification ECU
After the key is in the LF door oscillator detection area, and the LF door
is not opened, the Certification ECU will verify that the key is still in the
LF door detection area every 3 seconds If the key does not respond
to the 3 second verification request, the Certification ECU judges that the key is not in the detection area and will return to the every 250 ms pulsing.
Service tip: When a key is in a door detection area and the touch
Trang 12Technical Training 9
Oscillators only broadcast.
Tuner only receives.
2005 CY Smart Entry &
Start System: Door Unlock
Certification ECU
Outside Handle
Antenna Touch Sensor Lock Switch
Door Oscillator
Tuner &
Electrical Key AntennaLF
RF
Trang 13Signal Sequence Door lock to door unlock sequence
1 → 2 → 3 → 4 → 5 → 6 → 7 → 8 Signal for altering the Tuner
Outside Handle
Door Oscillator
Trang 14Technical Training 11
Entry to Start – Groups 2 & 3
Additional known good components/functions at this point:
1 Key is registered to this vehicle.
2 Body ECU (or equivalent) is functioning
3 Communication between Certification ECU and Body ECU is good (if CAN then the Main BUS can be judged OK)
4 Door lock circuitry is OK
5 Door courtesy switch and circuitry is OK
Step Action Verification Data List
Certification ECU Certification ECU verifies the registered Key ID Code
Puddle lights (if equipped) and dome light come on
No changes from Yes
Response-to No
6 Driver touches the Touch Switch on the door handle Floor lights come on. D-Door Touch Sensor-Changes from OFF
to ON
Main Body ECU to unlock the door (or doors, depending on customize setting)
Double beep and light flash (depending on customized settings)
Door unlocks
8 Driver opens LF Door Door Courtesy Switch ON
9 Body electrical system detects Door
Trang 15Step Action Verification Data List
10 Body electrical system sends “Door Open” signal to Certification ECU
11 Certification ECU begins pulsing interior oscillators
12 Key excited by room oscillator pulse
13 Key transmits “Key ID Code” to less door lock receiver (tuner) Same process as in Step 5
wire-Red LED on key flashes
Trang 16Technical Training 13
No Response data list refresh rate is very slow It is easier to see with only this parameter on a custom data list, then Snapshot the event and review the snapshot in graph or LED mode.
Entry to Start –
Group 5
Step Action Verification Data List
14 Tuner sends “Key ID Code” to Certification ECU Same process as
in Step 6
No changes from Yes
Trang 19Diagnostic update:
1 Stop light switch works
2 At least part of the engine switch is working
3 Certification ECU to engine switch communication occurred (through Main Body ECU or equivalent)
Entry to Start –
Group 5
Step Action Verification Data List
17 Driver depresses the brake pedal Brake lights on
18 STP ON signal sent to Certification ECU
19 Certification ECU tells the Main Body ECU to turn on the green light in the engine (push button, power) switch
Green light in Engine switch, comes on
Trang 20Each event must occur in order
Example: If S Code verification step fails the system stops The system does not retry the failed step or move to the next step.
Entry to Start –
Group 6
Step Action Verification Data List
22 Certification ECU sends a signal to the Main Body ECU to wake up the Steering Lock ECU
Steering Lock Sleep Condition -changes from Yes to No
23 ID Code Box verifies “L” Code with the Steering Lock ECU and notifies Certification ECU that “L” Codes are matched
L Code - changes from OK to NG if unmatched
Trang 21(Driver with Smart Key pushes engine switch while depressing brake pedal)Main Body ECU recognizes brake pedal depressed
energizes ACC, IG1 and IG2 relays
Certification ECU verifies the S code with the ID Code Box
Engine ECM for temporary Immobilizer disable
The engine begins to crank
16
When engine speed reaches 500 rpm or more, engine control ECU senses
17
Smart Entry & Start System
Overview of Engine Start
Process
ECM (Engine ECU)
Main Body ECU
ID-Code Box
Steering Lock ECU
Certification ECU
Tuner &
Electrical Key Antenna
Front Room Oscillator (Console) Rear Room Oscillator (Rear Seat)
Trang 22Technical Training 19
Protect Functions
Starter does not operate:
When engine is ON.
• When driver keeps pressing (holding) the engine/power switch
• When engine speed is greater than 1,200 rpm - 30 sec after
• pressing the engine switch.
Instructor note: Currently there are no Toyota or Scion models able with a manual transmission and smart key The only current vehicle for our market with a manual transmission and smart key is the Lexus IS250 In other markets the Yaris and Corolla are available with smart key and a manual transmission.
avail- continued
Trang 23The 3 Bit Code is approximately a 5 second permission (Immobilizer unset) for the engine to run if cranked This covers the gap from Engine switch ON until G Code verification to reduce engine crank time.
Step 25 Diagnostic update:
Step Action Verification Data List
24 Certification ECU sends an unlock command to the Steering Lock ECU Unlock Request Receive - Changes
from NG to OK
unlocked Steering Unlock changes from Unset
to Set
Steering Lock changes from Set to Unset
26 Steering Lock ECU sends a “Steering Wheel Unlocked” message to the Certification ECU
Engine Start Condition
Trang 24Request-Technical Training 21
Smart Entry & Start:
Engine Start
ECM (Engine ECU)
Main Body ECU
Trang 25Data list item “EFI Code Receive” will change from NG to OK after G Code is verified, remain OK for about 10 seconds (depending on the refresh rate) then return to NG.
back on – G code not verified The engine will only start 1 time per
key ON cycle, because the 3 bit code will only be sent immediately after steering unlock confirmation Cycle the engine switch OFF then ON to send another 3 bit code, verify if the engine starts and stalls, or starts and continues to run.
Entry to Start –
Group 8
Step Action Verification Data List
28 Certification ECU sends a “Crank Request” to the Main Body ECU Engine Start Request - changes from NG
to OK
Box and Engine ECM after NE signal
is generated
EFI Code Receive changes from NG to OK
EFI Communication changes from NG to OK
Trang 26Technical Training 23
Smart Entry & Start System:
Engine Start G code verification is done between the Engine ECM and ID Code Box.
ECM (Engine ECU)
Main Body ECU
Trang 27Diagnostic update:
The smart entry and start system are OK.
Entry to Start –
Group 8
Step Action Verification Data List
30 The engine starts and stays running
Trang 28Technical Training 25
Smart Key Operation
Summary
1 When approaching a vehicle the LED on the Electronic Key flashes • Key is partially registered (Vehicle ID Code) to this vehicle
Certification ECU is functioning
• Door oscillator is functioning
• Tuner is functioning
• Key battery is above 2.2V
• Vehicle battery is good enough to energize some ECUs
•
2 Puddle/Dome lights come on • Certification ECU verified Vehicle ID and Key ID codes
that were transmitted by the Key Body ECU (or equivalent) is functioning
Trang 29car or get into the car?
Can you verify key RF transmission with SST?
Trang 30Technical Training 27
Smart Entry & Start System:
Immobilizer Override
(low key battery)
If the Key battery is below 2.0V the key cannot communicate with the vehicle using the oscillators and tuner.
Holding the key up to the Engine/Power switch allows the transponder coil to energize the key to allow communication with the vehicle.
The key transmits the Key ID Code through the transponder coil.
S, L & G code verification are still necessary.
ECM (Engine ECU)
Main Body ECU
Trang 31If it plugs into a wall, or has a battery, it could continually “energize” the key and wear out the battery early.
TMC indicates the average life of a Key battery should be 1 to 2 years
Field experience indicates that using a non-Toyota replacement key battery may render key inoperative.
Service hints for key battery operation verification:
When depressing a key button the LED should blink and the
• wireless function should operate.
Load test the key battery using the self check function (depress the
•
“Lock” or “Unlock” button on the key 3 times, after the 3rd press the LED should blink immediately [no delay] If there is a delay in the LED blink after the 3rd press of a button, the battery is failing).* Put the battery in a know good key and see if the known good key
• stops operating properly.
Case Example:
Smart Key Battery Life
Trang 32Technical Training 29
Case Example:
Electromagnetic Interference
and System Malfunctions
Smart Entry & Start System may not operate properly under these conditions:
Near structures that generate strong electromagnetic waves
• (e.g., TV towers, electric power stations, broadcasting stations
Automatic payment machines (e.g., gas stations)
• Wireless remote control operations near your vehicle
•