Interfacing with Paradox Spectra Security Systems

Hello,
I'm trying to comunicate with Paradox alarm system via serial connector (programming connector).
My idea to decode the protocol is to capture serial packets sent from winload (default paradox programming software).

How you have connected the paradox serial connector to the PC/Arduino serial port?

Yes, I have. I tried to look at the packets sent by Paradox, but somehow forsaken this activity :~

I cannot comunicate with the alarm system. Can you help me?
The pcb serial is RS232 or RS485? I can comunicate directly from a PC serial or I need an interface?
My PC mount a RS232/485 card.

You need only simple RS232 To TTL Converter for communication between Paradox and computer.

Thank you. I have built the pcb and the comunication is working.

Very good. It's time to decode the packets. But the question is HOW? :slight_smile:

I have the Paradox programming software (Winload). I try to sniff the packets.
I have also received from Paradox the ASCII and CBUS protocol documentation. I don't know if the data exchanged via serial connector uses one of this protocol specifications.
If needed I can send to you the documents.

It would be great to get these documents.

Thomas80,

Have you managed something?

I tried to sniffer this system’s serial interface and found that one packet length is 37 bytes. The first 6 bytes are always the same. When zone status changes then the 9th byte is zone number. From 16th to 31th is reported zone’s name. What means other bytes I have not managed yet.

And found similar testing on the web in Martin's blog:

1 Like

Hi
I have SP6000 Paradox. I use the babyware software and I have a simple usb-ttl converter to communicate.

Byte 8: zone status. If==0 zone is closed if==1 zone is opened
Byte 9: zone number
Byte 10: partition of the current zone.
I made a program, and I can see the status of the zones on PC. I tryed to monitor the serial port to know what the other bytes mean, but it's difficult. I would like to manage all the functions of the system. Arm, disarm, alarm, troubles atc....

An update:
Byte 1: unknown
Bytes from 2 to 3: year
Byte 4: month
Byte 5: day
Byte 6: hour
Byte 7: minutes
Byte 8: zone status. If==0 zone is closed if==1 zone is opened
Byte 9: zone number
Byte 10: partition of the current zone
Bytes from 16 to 31: zone’s name
...

Hello, I am playing with Spectra 1738 panel. Connected the serial port to my Debian server using RS232 to USB converter. The boud rate I am using is 9600. But can see only 7 bytes sent when an event is triggered. It seems the bytes differ from the ones Mauzer described.
Here is a sample of what I am dumping:
(the first value is the time i inserted - not from the Paradox system)
1381052775 11 5b b0 8 1 5b b0
1381052775 11 5b b0 8 11 5b b0
1381052795 81 60 0 8 1 60 0
1381052795 81 60 0 8 11 60 0
1381052799 41 60 0 8 1 60 0
1381052799 41 60 0 8 11 60 0

It seems the 5th byte reports sensor state.

Just in case anyone is still looking for this, you can find the protocol doc for the Digiplex online. The file name is, "DIGIPLEX-ASCII-EP00-eng.pdf". (Sans quotes.)

For example: http://www.elektro-mahl.cz/dokumenty/DIGIPLEX/DIGIPLEX-ASCII-EP00-eng.pdf

You need to have the PRT3 module in, and configured to, "Home Automation," mode. Hope this helps. :slight_smile:

1 Like

An update:
Byte 1: packet beginning??
Bytes from 2 to 3: year
Byte 4: month
Byte 5: day
Byte 6: hour
Byte 7: minutes
Byte 8: zone status. If==0 zone is closed if==1 zone is opened
Byte 9: zone number
Byte 10: partition of the current zone
Bytes from 16 to 31: zone’s name
...
Byte 37: 1 byte checksum

Which kind of Spectra, 1738?

SP7000

found :slight_smile:

Hi,

I also own a Spectra 1738. I want to interfacing with it using arduino.

The data here is very usefull for my project: Monitoring my house :slight_smile:
For now, i have temperature, humidity, sound detection, flood warning, etc... But nothing from my alarm system... Everything can be accessed by web.

My biggest problem is that I cant find which pin is what on the serial ouput port? can you tell me which pin is Tx, gnd and VCC?

I tried to find the ground of the board but couldn't find it... I'm pretty new to electronic and without a known ground, it's hard to find the pin used for ground.

This is the pinout of the paradox serial connector.:

Hi,

Topic revival!!
I've been able to get data from my Spectra 1738. But the Paradox Serial Protocol posted here isn't the same as on my spectra 1738.

Note that the spectra 1738 doesn't have a year or a date, just a time.

Here's the bytes i get when i open and close the door.

Open and close the door 6 times at 17h47.
<97><00><00>

<00><97><00>_
<97><00><00>
<00><97><00>_
<97><00><00>
<00><97><00>_
<97><00><00>
<00><97><00>_
<97><00><00>
<00><97><00>_
<97><00><00>
<00><97><00>_

Open and close the door 5 times at 17h48.
<97><00><07>

<07><97><00>_
<97><00><07>
<07><97><00>_
<97><00><07>
<07><97><00>_
<97><00><07>
<07><97><00>_
<97><00><07>
<07><97><00>

If you isolate remove the DD, you get the same bytes but in at weird order...
<97><00><00> This is opening door at 17h47.
<00><97><00> And this is closing door at 17h47.

Few questions comes up.
What is that DD byte... is the last bytes a checksum, so 07 and the last 00 could be checksum ?

Any of you have been able to translate the bytes you get from the spectrsa 1738 ?