Table of Contents

Ericsson / Alpha-American 4200C LED Sign

This page documents the large LED sign acquired by Hackeriet, gifted by pere and asle.

Overview

This is an Ericsson-branded, Alpha-American / Adaptive Micro Systems 4200C LED sign.

It is a programmable LED display commonly used for transit, public information, or industrial messaging systems.

Microcontroller

The Microcontroller is TS80C32x2 which is compatible with Intel 8051.

Datasheet: https://ww1.microchip.com/downloads/en/devicedoc/doc4184.pdf

Intel MCS 51 MICROCONTROLLER FAMILY USER’S MANUAL: https://datasheets.chipdb.org/Intel/MCS51/MANUALS/27238302.PDF

Firmware

The device seemingly runs a custom firmware, the label on the epromm is “4200c CUST 1018-6008e”, and it displays CUST during boot.

The firmware is here:

The firmware is 128k (131072 bytes). SHA-1: e5e3bdad5e507f658a874d40483de60161152777 The Intel 8051 is designed as a Harvard architecture with two independend 16bit address buses. So the 128k dump is used as two separate ROMs of 64k each (PROM and XRAM).

Firmware Analysis

Ports

The sign has a RJ-style modular port on the back panel with:

It also has an IR sensor hidden behind a red sticker, visible when removing a panel.

Dongle

A small dongle with resistors was included, likely serving as a RS-485 termination and bias dongle.

Communication

The sign probably uses the Alpha Sign Communications Protocol, which is:

Serial Configuration

Suggestion for initial connection (untested):

RJ-12 Pinouts, from left, clip down

  1. ground → GND TTL / db9 pin 5
  2. RS485 (+)
  3. RXD → TXD TTL / db9 pin 3
  4. TXD → RXD TTL / db9 pin 2
  5. RS485 (-)
  6. +5V (200ma max)

Logic analyser dump -- Cable between main board and driver board chain

The driver board consists of: - 2x data lines (R channel + G channel) - 2x clock lines (R channel + G channel) - + 2 more lines

This analysis was performed on a dump with duplicate channels and some missing channels, so some blanks have been filled in by reasoning.

The total pixel surface of this board is 16 rows by 200 columns. We have 8 bits per module, with 25 modules per row. Total of 200 bits per row, per channel.

The entirety of one line is blasted out starting from the bottom row of the display, batched in groups of 8 bits (one-and-one matrix module, left to right). Once the red channel has been output, the same is done for the green channel on separate lines. Afterwards, the row selection is shifted one row up and the next line is output.

The line selection automatically wraps around, however it's suspected that the previous output latches are being reset using a pulse at the end of the _first line_ of a given frame.

Infrared

It seems that normal configuration of the sign is done over IR with a remote control or with an IR message loader attached via the RJ-12 connector.

The a quick look at the usual resources do not appear to have a capture of the remote.

Resources