Products > Programming

Pylontech sc0500 protocol "hacking"

(1/3) > >>

ArCoN:
Hello Good people of the world

I need some reverse engineering expertise to decode some CANbus data.
Maybe there is some smart eev's that can help. ;D

I have a SPH10000TL3 BH and a diy battery i love to get working.

We have the pylontech battery system at work, so i have sniffed some data between the inverter and BMS.

I made a C# program to try help decode the data, but i have a little trouble figuring out where the data is located. i need to find battery voltage and state of charge as a minimum, for the inverter to function (i think).

The files:
Program (use as you like, not pretty but kinda works, C# is not my main expertise ;D)
inverter tx.log - the CAN tgm's from inverter only
inv-bat-stby_full.log - The battery is approx 90% SOC, log is done over night without load.
batt full discharge.log - The battery is approx 90% SOC, log is done over night with load to around 0% SOC.

Thanks ArCoN

ArCoN:
Maybe it's worth mentioning that the battery system consists of sc0500 + 3 x H48050. so voltage range should be somewhere between 135- 162Vdc. minor details  ;)

buovjaga:
Example from inv-bat-stby_full.log
one line a respond to CAN ID: 0x4200   [8]  02 00 00 00 00 00 00 00

00:42:35:6880 Rx 1 0x7320 x 8 2D 00 03 0F 90 00 32 00

to interprete this CANBUS answer we have
Obs! Byte#4==0x90 and Byte#5==0x00 by swapping them we have 0x0090==144 decimal
Also  Byte#6==0x32 and Byte#7==0x00 by swapping them we have 0x0032==50   decimal

Byte#0 = 0x2D Battery Module Qty or Total number of batteries 0x2D = 45 or 3 packs of 15 cells
Byte#1 = 0x00 reserve
Byte#2 = 0x03 Battery Module in series Qty.Number of battery modules in series in one cabinet = 3
Byte#3 = 0x0F 15 Cell Qty. in one battery module Number of battery cells in a module = 15
Byte#4 = 0x90 144=45*3.2 Voltage Level or Voltage platform, resolution: 1V
Byte#5 = 0x00 Offset: 0
Byte#6 = 0x32 50 AH number Resolution 1AH Charging capacity
Byte#7 = 0x00 Offset: 0

The other canbus lines can be interpreted in a similar way

cheers b

manny87:
Hello ArCoN,

Bin working on a dbc file for the battery communication.

I have some questions:
   What whas the discharge power?
   Ambient temperature?
   Full-charge voltage?
   Discharge voltage?

Already found the soc data and high and low cell voltage needs a scaling factor.

Thanks Manny

ArCoN:
Hi Manny

Ok, its a long time ago now ;P
Sorry I can't remember what inverter it was. maybe a SPH3600. ~3.6Kw
18-21dC
 "voltage range should be somewhere between 135- 162Vdc"

Try ask buovjaga. I think he has a good understanding of what the data means

BR ArCoN

Navigation

[0] Message Index

[#] Next page