EZX Platform Overview

From OpenEZX

Taken from Harald Welte's OpenEZX slide presentation (Dec 2005) available here as a pdf.

Original Disclaimer: All Information is based on observation (mainly of A780), and may be wrong

Contents 1 Hardware 1.1 Family Names 1.2 Processors 1.2.1 Application Processor (PXA270) 1.2.2 Baseband Processor (Neptune LTE Platform) 1.2.3 AGPS Processor (Motorola Telematics MG4100) 1.3 PCAP2 1.4 RF Subsystems (A780) 1.4.1 RF6003 1.4.2 RF2722 1.4.3 RF3144 1.5 Internal Flash 1.6 "Enhanced Mini USB" (EMU) 1.6.1 Port Modes 1.6.2 USB Configurations

Hardware

Family Names

Bulverde refers to the Intel PXA CPU platform, of which all EZX phone models are currently a subset.

EZX family subset names and their handsets (some help here)

• A780: A780,E680
• Barbados: maybe E895
• Martinique: A910
• Hainan: A1200
• Sumatra: Rokr E2
• Macau: Rokr E6
• Penglai: maybe A1600
• Ohau:

Processors

• A Motorola Neptune LTE based mobile phone (BP) plus
• A PXA270 Xscale (AP) based PDA in one case
• Freescale SCM-A11 (ZN5)

Application Processor (PXA270)

• Runs heavily modified linux-2.4.20 kernel
• 48MB RAM
• 32MB "wireless" StrataFlash
  • contains bootloader, kernel, rootfs, /ezxlocal, /usr/setup and a logo bitmap.
• software-configurable clock speed up to 400MHz
• JTAG port on test pads, BSDL file and JFlash available
• SPI/SSP interface to PCAP and BP
• directly attached to LCD display
• directly attached to touch screen, buttons
• directly attached to camera module

Baseband Processor (Neptune LTE Platform)

• contains ARM7TDMI for GSM stack
• contains 566xx DSP for digital baseband
• JTAG port on test pads, but no BSDL file
• Connected to Application processor via USB
• SPI/SSP interface to PCAP and AP
• UART connected to AGPS processor
• Connects to GSM SIM module
• 8MB external flash
• 2MB external RAM

AGPS Processor (Motorola Telematics MG4100)

• Attached to UART of BP
• Has it's own Flash and RAM (2MB?)

PCAP2

• Power management, Clock and Audio Peripheral (PCAP)
• produces 16 different voltages
• handles all mono/stereo audio
• connected to 2 speakers, microphone, vibrator
• clock generation
• SPI/SSP interface to AP and BP
• Backlight control

RF Subsystems (A780)

RF6003

• fractional-n RF synthesizer

RF2722

• GPRS/EDGE capable receiver (RX) datasheet

RF3144

• quad-band power amplifier (TX)

Internal Flash

• On Gen1 hardware:
  • 48MB SDRAM
  • 64MB DiskOnChip G3 (NAND) DiskOnChip based MCP
    • contains /diska and /usr/language
  • 32MB Intel Strataflash (NOR)
    • contains the bootloader, kernel, most of the rootfs, and logo.

• On Gen2 hardware:
  • 48MB SDRAM
  • 64MB Intel Strataflash (NOR)
    • Contains the bootloader, AP and BP rootfs and kernels, some partitions for flex settings, AP config...

"Enhanced Mini USB" (EMU)

Port Modes

• Depending on pullup/pulldown/... resistors
• USB device port
• Serial port (RS232 at 3.3V levels)
• Stereo audio signal
• 500mA charger
• Carkit (easy install, professionally installed)
• Factory test

USB Configurations

• Official configs
  • cdc_acm (serial modem emulation for host pc)
  • USB mass storage (transflash and VFAT-on-TFFS devices)
• Undocumented configs
  • usbnet "network-BLAN"
    • Network device over USB
    • Allows telnet into phone
  • PST
    • Mode used by PST Windows App
  • DSPlog
    • Apparently a way to dump data from DSP
  • NetMonitor
    • supposedly for GSM network monitor
  • cfg11 (ROKR E2)
    • ??