The remote control combines functionality for the set top box and for the TV.
Set Top Box : 36kHz
- Numerical buttons (for selecting channels) : 1, 3, 7
- 1 button : green : subtitles on/off
Reverse engineering CISCO IR Protocol
The output of the TSOP1736 receiver had quite some jitter on it, so I measured the pulses directly on the IR-diode of the remote control.
Later I compared the output of the IR-diode to the output of the TSOP1736 receiver. The receiver simply acts too slow. It needs at least 10 pulses per burst, while RCMM only sends six.
Data pulses are sent out at a rate of 36kHz. That corresponds to a pulse period of 27.5µs.
Capturing the signals has been done using a Saleae Logic Analyzer.
The CISCO ISB6030 set top box uses pulse distance coding. The protocol is very similar to the Philips RCMM protocol. The 32-bit version is also called Nokia32.
- 16 pulses : 16 x 27.5µs = 441µs
- 10 pulses pause : 10 x 27.5µs = 275µs
Always 6 pulses, followed by a predefined pause length. We notice that there are four different pause lengths used. So we can assume that each length encodes two bits. The bit encoding found on SB-projects is added here as a reference.
- 10 pulses pause : 10 x 27.5µs = 275µs --> 00
- 16 pulses pause : 16 x 27.5µs = 440µs --> 01
- 22 pulses pause : 22 x 27.5µs = 605µs --> 10
- 28 pulses pause : 28 x 27.5µs = 770µs --> 11
A packet is comprised of a header, followed by 17 pulse trains. So 32 bits are being encoded. The 17th pulse train is only there to show the pause length after the 16th pulse train.
The packet lasts about 10ms. Every 100ms, the packet is repeated as long as the button is pressed.
Following keys have been decoded:
- key subtitles on/off : 0x22C0263C
- key 1 : 0x22C02601
- key 3 : 0x22C02603
- key 7 : 0x22C02607
The last 20 bits of the measured codes of the numerical keys correspond to data published here.
[Rafi Khan's] IR-remote library served as a starting point. The RCMM protocol has been added. This library implements timings using delays. For a slow 8MHz controller, this leads to noticeable jitter on the timing of data bursts. The solution would be to use the Timer2 interrupt instead.
Remark the active high signal polarity. When pin 3 of the Arduino is high, the LED must be on.
Samsung TV : 38kHz
- TV on/off (decoder remains always on)
- 2 buttons : volume up/down
Decoding needed buttons
Connecting TSOP1736 to Arduino Pro Mini. Loading "IRrecvDumpV2" from the examples directory.