Chapter One: General Informations
This communication protocol is based on the TCP IP protocol. For a better understanding of the following content, the reader is invited to learn about TCP IP from other documents.
TCP IP protocol is a data flow protocol. It is only responsible for sending and receiving data. It is not responsible for explaining the content and structure of data flow. The communication of this agreement is based on the frame implementation, so the following regulations are made on the format of the data stream:
Frames are the basic unit of communication. The unit of data sent and received in one communication is one frame.
The frame consists of a frame header, a frame body, and a CRC16 checksum. The frame header occupies two bytes, which indicates the length of the frame. The frame body is used to save the valid data that needs to be transmitted. The CRC16 check code occupies two bytes to ensure the integrity of the frame. The structure diagram is as follows:

Example: The frame length is FL, Then DL=FL-2-2.
The controller is implemented as a TCPIP server (communication parameters are set in the controller. Because TCPIP itself is a reliable communication protocol, CRC16 is not enabled by default). After the client establishes a connection with the controller, The frame can be constructed according to the above frame format and sent to the controller.
For example, send the hexadecimal data “00 01 02 03 04 05 06 07 08 09” to the controller, Then the frame “00 0c 04 05 06 07 08 09” is constructed. And send the controller, After the controller receives this frame, it will remove “00 0c”. Then get “00 01 02 03 04 05 06 07 08 09”.
What does “00 01 02 03 04 05 06 07 08 09” mean? The following begins to introduce the controller after receiving valid data, How to identify and process these valid data. The controller supports two types of frames: read register frame and write register frame.
Read Register Frame:

Write Register Frame:

This communication protocol supports reading and writing of the register data area. Communication implementation regulations: The register is a 16-bit data and the number of registers is 65536.
Chapter Two: Device Information (Register Offset 0)
This communication protocol is based on the TCP IP protocol. For a better understanding of the following content, the reader is invited to learn about TCP IP from other documents.
TCP IP protocol is a data flow protocol. It is only responsible for sending and receiving data. It is not responsible for explaining the content and structure of data flow. The communication of this agreement is based on the frame implementation, so the following regulations are made on the format of the data stream:
Frames are the basic unit of communication. The unit of data sent and received in one communication is one frame.
The frame consists of a frame header, a frame body, and a CRC16 checksum. The frame header occupies two bytes, which indicates the length of the frame. The frame body is used to save the valid data that needs to be transmitted. The CRC16 check code occupies two bytes to ensure the integrity of the frame. The structure diagram is as follows:

Example: The frame length is FL, Then DL=FL-2-2.
The controller is implemented as a TCPIP server (communication parameters are set in the controller. Because TCPIP itself is a reliable communication protocol, CRC16 is not enabled by default). After the client establishes a connection with the controller, The frame can be constructed according to the above frame format and sent to the controller.
For example, send the hexadecimal data “00 01 02 03 04 05 06 07 08 09” to the controller, Then the frame “00 0c 04 05 06 07 08 09” is constructed. And send the controller, After the controller receives this frame, it will remove “00 0c”. Then get “00 01 02 03 04 05 06 07 08 09”.
What does “00 01 02 03 04 05 06 07 08 09” mean? The following begins to introduce the controller after receiving valid data, How to identify and process these valid data. The controller supports two types of frames: read register frame and write register frame.
Read Register Frame:

Write Register Frame:

This communication protocol supports reading and writing of the register data area. Communication implementation regulations: The register is a 16-bit data and the number of registers is 65536.
Chapter Two: Device Information (Register Offset 0)
Register | Name | Operation | Description | |||||||||
0 | Device Type | Read |
| |||||||||
1 | Device Model | Read | Please refer to the specific model device manual. | |||||||||
2 | Device Number | Read | 0~9999 Multiple devices that distinguish between the same device type and device model. | |||||||||
3 | Communication Protocol Version | Read | 100:1.0.0 version. |
Chapter Three: Device Status and Manipulation (Register Offset 100)
Register | Name | Operation | Description | |||||||||||||||||||||||
0 | Device Status | Read |
| |||||||||||||||||||||||
1 | Operation Command | Write |
| |||||||||||||||||||||||
2 | Test Mode | Read | 0: Fixed value. 1: program. | |||||||||||||||||||||||
3 | Current Running Program Number | Read | 1~120 | |||||||||||||||||||||||
4 | The Program Sets the Number of Cycles | Read | 0~9999 | |||||||||||||||||||||||
5 | The Number of Program Loops | Read | 0~9999 | |||||||||||||||||||||||
6 | Currently Running Program Links | Read | 0~120 | |||||||||||||||||||||||
7 | Current Segment Number | Read | 1~120 | |||||||||||||||||||||||
8 | Segment Test Set Time (Hours) | Read | User settings. | |||||||||||||||||||||||
9 | Segment Test Set Time (Minutes and Seconds) | Read | User settings. | |||||||||||||||||||||||
10 | Segment Test Remaining Time (Hours) | Read | ||||||||||||||||||||||||
11 | Segment Test Remaining Time (Minutes and Seconds) | Read | ||||||||||||||||||||||||
12 | Total Operating Time (Hours) | Read | 0 to 65,535. | |||||||||||||||||||||||
13 | Total Running Time (Minutes and Seconds) | Read | The high 8 bits are minutes (0 to 59) and the low 8 bits are seconds (0 to 59). | |||||||||||||||||||||||
14 | Timing Function | Read |
| |||||||||||||||||||||||
15 | Total Test Set Time (Hours) | Read | 0~65535。 | |||||||||||||||||||||||
16 | Total Test Set Time (Minutes and Seconds) | Read | The high 8 bits are minutes (0 to 59) and the low 8 bits are seconds (0 to 59). | |||||||||||||||||||||||
17 | Total Test Remaining Time (Hours) | Read | 0~65535。 | |||||||||||||||||||||||
18 | Total Test Remaining Time (Minutes and Seconds) | Read | The high 8 bits are minutes (0 to 59) and the low 8 bits are seconds (0 to 59). | |||||||||||||||||||||||
19 | Test PID Number | Read | 1~15 |
Note 1: In program test mode, The register (offset +3 to offset +19) is valid.
Note 2: In the constant test mode, The register (offset +3 to offset +11) is invalid. The valid registers are divided into the following two cases:
(a) Register (offset +14) takes a value of 0: the timer function is disabled, At this time, the register (offset +15 to offset +18) is invalid. Register (offset 19 valid).
(b) The register (offset +14) has a value of 1: Enable timing function. In this case, the register (offset +15-offset +19) is valid.

Chapter Four: Device Monitoring Parameters (Register Offset 200)
Note 2: In the constant test mode, The register (offset +3 to offset +11) is invalid. The valid registers are divided into the following two cases:
(a) Register (offset +14) takes a value of 0: the timer function is disabled, At this time, the register (offset +15 to offset +18) is invalid. Register (offset 19 valid).
(b) The register (offset +14) has a value of 1: Enable timing function. In this case, the register (offset +15-offset +19) is valid.

Chapter Four: Device Monitoring Parameters (Register Offset 200)
Register | Name | Operation | Description |
0 | Temperature Valid | Read | 0: Invalid. 1: effective. |
1 | Temperature Measurement | Read | Zoom in 100 times. |
2 | Current Temperature Setting | Read | 100 times magnification. |
3 | Temperature Target Setting | Read | 100 times magnification. |
4 | Temperature Output | Read | 100 times magnification. |
5 | Temperature Direction | Read | 1: Up. 2: Down. 3: Keep it. |
6 | Humidity is Effective | Read | 0: Invalid. 1: effective. |
7 | Humidity Measurements | Read | 100x magnification. |
8 | Humidity Current Setting | Read | 100 times magnification. |
9 | Humidity Target Setting | Read | 100x magnification. |
10 | Humidity Reading | Read | 100 times magnification. |
11 | Direction of Humidity | Read | 1: Up. 2: Down. 3: Keep it. |
Note 1: Current settings, This is when the program is running or when it is running with a slope setting. The time-dependent setpoint generated internally by the device due to the need for ramp operation.
Note 2: Target setting, It is the value set by the user, If this value is set, it will not change. When running without slope, The current setting is equal to the target setting.
Chapter Five: General Setting Parameters (Register Offset 300)
Note 2: Target setting, It is the value set by the user, If this value is set, it will not change. When running without slope, The current setting is equal to the target setting.
Chapter Five: General Setting Parameters (Register Offset 300)
Register | Name | Operation | Description |
0 | Test Mode | Read/Write | 0: Fixed value. 1: program. In the test state (hold/travel/pause/standby), the write is invalid. |
1 | Re-start the Power-up Mode after Power off | Read/Write | 0: Stop the test. 1: Retest. 2: Continue testing. |
2 | Reservation Function | Read/Write | 0: Disabled. 1: fixed appointment. 2: Program appointment. The appointment time is reasonable, and in the normal state of stop, enabling the reservation function can be successful. |
3 | Year of Reservation | Read/Write | 2000~2099. |
4 | Appointment Months | Read/Write | 1~12. |
5 | Appointment Date | Read/Write | 1~30. |
6 | When making an Appointment | Read/Write | 0~23. |
7 | Reservations | Read/Write | 0~59. |
8 | Display Language | Read/Write | 0: Chinese. 1: English. |
9 | Keyboard Lock | Read/Write | 0: Disabled. 1: Enabled. |
10 | Screensaver Function | Read/Write | 0: Disabled. 1: Enabled. |
11 | Screen Saver Time | Read/Write | 1 to 9999 minutes. |
Chapter Six: Set Test Setting Parameters (Register Offset 400)
Chapter Seven: Program Test Setting Parameters (Register Offset 500)
Register | Name | Operation | Description |
0 | Temperature Setting | Read/Write | -10000~30000 |
1 | Humidity Setting | Read/Write | 0~10000 |
2 | Timing Function | Read/Write | 0: Disabled. 1: Enabled. |
3 | Regular Time (Hours) | Read/Write | 0~9999 |
4 | Regular Time (Minutes and Seconds) | Read/Write | The high 8 bits are minutes(0~59)and the low 8 bits are seconds (0~59) |
5 | Slope Function | Read/Write | 0: Disabled. 1: Enabled. |
6 | Temperature Slope | Read/Write | 0~10000 |
7 | Humidity Slope | Read/Write | 0~10000 |
8 | Standby Function | Read/Write | 0: Disabled. 1: Enabled. |
9 | Standby Temperature | Read/Write | 0~10000 |
10 | Standby Humidity | Read/Write | 0~10000 |
11 | Standby Time (Hours) | Read/Write | 1~9999hours |
12 | Standby Time (Minutes and Seconds) | Read/Write | 0-59 minutes |
13 | Protective Function | Read/Write | 0: Disabled. 1: Enabled. |
14 | Low Temperature Alarm Range | Read/Write | -10000~30000 |
15 | High Temperature Alarm Range | Read/Write | -10000~30000 |
16 | Low Temperature Pause Range | Read/Write | -10000~30000 |
17 | High Temperature Pause Range | Read/Write | -10000~30000 |
18 | TS1 Function | Read/Write | 0: Disabled. 1: Enabled. |
19 | TS1 ON Time | Read/Write | 0~9999 seconds |
20 | TS1 OFF Time | Read/Write | 0~9999 seconds |
21 | TS2 Function | Read/Write | 0: Disabled. 1: Enabled. |
22 | TS2 ON Time | Read/Write | 0~9999seconds. |
23 | TS2 OFF Time | Read/Write | 0~9999seconds. |
Register | Name | Operation | Description |
0 | Program Test Start Program Number | Read/Write | 1~120. |
1 | Standby Temperature | Read/Write | 0~10000 |
2 | Standby Humidity | Read/Write | 0~10000 |
3 | Standby Time (Hours) | Read/Write | 1~9999 hours. |
4 | Standby Time (Minutes and Seconds) | Read/Write | 0~59 minutes. |
5 | Protective Function | Read/Write | 0: Disabled. 1: Enabled. |
6 | Low Temperature Alarm Range | Read/Write | -10000~30000 |
7 | High Temperature Alarm Range | Read/Write | -10000~30000。 |
8 | Low Temperature Pause Range | Read/Write | -10000~30000 |
9 | High Temperature Pause Range | Read/Write | -10000~30000 |
10 | TS1 Function | Read/Write | 0: Disabled. 1: Enabled |
11 | TS1 ON Time | Read/Write | 0~9999 seconds |
12 | TS1 OFF Time | Read/Write | 0~9999seconds. |
13 | TS2 Function | Read/Write | 0: Disabled. 1: Enabled. |
14 | TS2 ON Time | Read/Write | 0~9999seconds. |
15 | TS2 OFF Time | Read/Write | 0~9999 seconds |
Chapter Eight: Program Library (Register Offset 1000)
Registers | The Name | Operations | Instructions |
0~63 | Program Name | Read/Write | Unicode string. |
64 | Cycle Frequency | Read/Write | 1~9999. |
65 | Linked Program | Read/Write | 0~120. 0 means no link. |
66 | Segment 1, Temperature Setting | Read/Write | -10000~30000. |
67 | Segment 1, Humidity Setting | Read/Write | 0~10000. |
68 | Segment 1, Timing Time (Hours) | Read/Write | 0~9999. |
69 | Segment 1, Timing (Minutes and Seconds) | Read/Write | The high 8 bits are minutes (0 to 59) and the low 8 bits are seconds (0 to 59). |
70 | Segment 1, Standby Function | Read/Write | 0: Disabled. 1: Enabled. |
71 | Segment 2, Temperature Setting | Read/Write | -10000~30000. |
72 | Segment 2, Humidity Setting | Read/Write | 0~10000. |
73 | Segment 2, Timing Time (Hours) | Read/Write | 0~9999. |
74 | Segment 2, Timing (Minutes and Seconds) | Read/Write | The high 8 bits are minutes (0 to 59) and the low 8 bits are seconds (0 to 59). |
75 | Segment 2, Standby Function | Read/Write | 0: Disabled. 1: Enabled. |
… … | … … | … … | … … |
661 | Segment 120, Temperature Setting | Read/Write | -10000~30000. |
662 | Segment 120, Humidity Setting | Read/Write | 0~10000. |
663 | Segment 120, Timing Time (Hours) | Read/Write | 0~9999. |
664 | Segment 120, Timing (Minutes and Seconds) | Read/Write | The high 8 bits are minutes (0 to 59) and the low 8 bits are seconds (0 to 59). |
665 | Segment 120, Standby Function | Read/Write | 0: Disabled. 1: Enabled. |
● | Note 1: The above is the register description assigned by the first program. The registers allocated by the 2nd to 120th programs can be deduced by analogy. |
● | Note 2: Mark the segment number as SEG. For SEGn (1<=SEGn<=120), Its register start address is: 66+(SEGn-1)*5. |
● | Note 3: Through calculations, we can see that, A program occupies a total of 666 registers. A total of 120 programs occupy 666*120=79920 registers. This has exceeded the size of the communication register area. |
● | Therefore, this communication protocol only supports reading and writing of databases from 1 to 96 programs. 96 programs occupy a total of 666*96=63936 registers. The range of registers used is: registers (offset +0-offset +63935). |