Function group Request  

SID Response   SID Service

0x10 0x50 Diagnostic Session Control

0x11 0x51 ECU Reset

Diagnostic and
Communications
Management 0x27 0x67 Security Access

0x28 0x68 Communication Control

0x29 0x69 Authentication

0x3E 0x7E Tester Present

0x83 0xC3 Access Timing Parameters

0x84 0xC4 Secured Data Transmission

0x85 0xC5 Control DTC Settings

0x86 0xC6 Response On Event

0x87 0xC7 Link Control

0x22 0x62 Read Data By Identifier

0x23 0x63 Read Memory By Address

0x24 0x64 Read Scaling Data By Identifier

0x2A 0x6A Read Data By Identifier Periodic

Data Transmission

0x2C 0x6C Dynamically Define Data Identifier

0x2E 0x6E Write Data By Identifier

0x3D 0x7D Write Memory By Address

0x14 0x54 Clear Diagnostic Information

Stored Data Transmission

Stored Data Transmission
0x19 0x59 Read DTC Information

Input / Output Control 0x2F 0x6F Input Output Control By Identifier

Remote Activation of Routine 0x31 0x71 Routine Control

0x34 0x74 Request Download

0x35 0x75 Request Upload

Upload / Download 0x36 0x76 Transfer Data

0x37 0x77 Request Transfer Exit

0x38 0x78 Request File Transfer

0x7F Negative Response

 Description

UDS uses different operating sessions, which can be changed using the "Diagnostic Session Control". Depending
on which session is active, different services are available. On start, the control unit is by default in the "Default
Session". Other sessions are defined, but are not required to be implemented depending on the type of device:

"Programming Session" used to upload software.

"Extended Diagnostic Session" used to unlock additional diagnostic functions, such as the adjustment of sensors.

"Safety system diagnostic session" used to test all safety-critical diagnostic functions, such as airbag tests.
In addition, there are reserved session identifiers that can be defined for vehicle manufacturers and vehicle
suppliers specific use.
The service "ECU reset" is used to restart the control unit (ECU). Depending on the control unit hardware and
implementation, different forms of reset can be used:
"Hard Reset" simulates a shutdown of the power supply.

"key off on Reset" simulates the drain and turn on the ignition with the key.

"Soft Reset" allows the initialization of certain program units and their storage structures.

Again, there are reserved values that can be defined for vehicle manufacturers and vehicle suppliers specific use.

Security check is available to enable the most security-critical services. For this purpose a "Seed" is generated and
sent to the client by the control unit. From this "Seed" the client has to compute a "Key" and send it back to the
control unit to unlock the security-critical services.
With this service, both the sending and receiving of messages can be turned off in the control unit.
An update (2020) of the standard added this service to provide a standardized approach to more modern methods
of authentication than are permitted by the Security Access (0x27) service, including
bidirectional authentication with PKI-based Certificate Exchange.
If no communication is exchanged with the client for a long time, the control unit automatically exits the current
session and returns to the "Default Session" back, and might go to sleep mode. Therefore, there is an extra service
which purpose is to signal to the device that the client is still present.
In the communication between the controllers and the client, certain times must be observed. If these are
exceeded, without a message being sent, it must be assumed that the connection was interrupted. These times
can be called up and changed.

Enable or disable the detection of any or all errors. This is important when diagnostic work is performed in the car,
which can cause an anomalous behavior of individual devices.

The Service Link Control is used to set the baud rate of the diagnostic access. It is usually implemented only at the
central gateway.

With this service, it is possible to retrieve one or more values of a control unit. This can be information of all kinds
and of different lengths such as Partnumber or the software version. Dynamic values such as the current state of
the sensor can be queried. Each value is associated to a Data Identifier (DID) between 0 and 65535. Normal CAN
signals are meant for information that some ECU uses in its functionality. DID data is sent on request only, and is
for information that no ECU uses, but a service tool or a software tester can benefit from.

Read data from the physical memory at the provided address. This function can be used by a testing tool, in order
to read the internal behaviour of the software.

With this service, values are sent periodically by a control unit. The values to be sent must be defined to only using
the "Dynamically Define Data Identifier".

This service offers the possibility of a fix for a device specified Data Identifier (DID) pool to configure another Data
Identifier. This is usually a combination of parts of different DIDs or simply a concatenation of complete DIDs.

The requested data may be configured or grouped in the following manner:

Source DID, position, length (in bytes), Sub-Function Byte: defineByIdentifier

Memory address length (in bytes), Sub-Function Byte: defineByMemoryAddress

Combinations of the two above methods through multiple requests.

With the same Data Identifier (DID), values can also be changed. In addition to the identifier, the new value is sent
along.
The “Write Memory By Address” service allows the external diagnostic tool to write information into the ECU at one
or more contiguous memory locations.
Delete all stored DTC
DTC stands for "Diagnostic Trouble Codes". Each DTC handled by the control unit fault is stored with its own code in the error

This service allows an external system intervention on internal / external signals via the diagnostic interface.
By specifying a so-called option bytes additional conditions for a request can be specified, the following values are
specified:
ReturnControlToECU: The device must get back controls of the mentioned signals.

ResetToDefault: The tester prompts to reset signals to the system wide default value.

Freeze Current State: The device shall freeze the current signal value.

ShortTermAdjustment: The device shall use the provided value for the signal

The Control service routine services of all kinds can be performed. There are three different message types:
With the start-message, a service can be initiated. It can be defined to confirm the beginning of the execution or to
notify when the service is completed.
With the Stop message, a running service can be interrupted at any time.

The third option is a message to query the results of the service.

The start and stop message parameters can be specified. This makes it possible to implement every possible
project-specific service.

Downloading new software or other data into the control unit is introduced using the "Request Download". Here,
the location and size of the data is specified. In turn, the controller specifies how large the data packets can be.

The service "request upload" is almost identical to the service "Request Download". With this service, the software
from the control unit is transferred to the tester. The location and size must be specified. Again, the size of the data
blocks are specified by the tester.
For the actual transmission of data, the service "Transfer Data" is used. This service is used for both uploading
and downloading data. The transfer direction is notified in advance by the service "Request Download" or "Upload
Request". This service should try to send packets at maximum length, as specified in previous services. If the data
set is larger than the maximum, the "Transfer Data" service must be used several times in succession until all data
has arrived.
A data transmission can be 'completed' when using the "Transfer Exit" service. This service is used for comparison
between the control unit and the tester. When it is running, a control unit can answer negatively on this request to
stop a data transfer request. This will be used when the amount of data (set in "Request Download" or "Upload
Request") has not been transferred.
This service is used to initiate a file download from the client to the server or upload from the server to the client.
Additionally information about the file system are available by this service.
This response is given when a service request could not be performed, for example having a not supported Data
Identifier. A Negative Response Code will be included