CID = This "number" defines the version of SE's protection present in the phone.New CIDs are deployed from time to time, for the sole reason of preventing them from beeing unlocked/flashed/tampered with by non-SE service tools. Current CIDs in use by SE are 29/36/37/49/50/51/52/53. SE-based LG/Sharp phones use the same system (but different versions). The OTP (One Time Programmable memory) and EROM of a phone might be protected by different CIDs, usually the case in newer K600s/K608s.

CDA = This "number" defines which variant of a specific firmware a phone is supposed to have. It lets, among others, SEUS (Sony Ericsson Update Service) know which language-pack/branding/bandlocks a phone is to be flashed with. A generic (unbranded) K750 for use in Scandinavia will be CDA102337/12, whilst a Telenor-branded K750 will be CDA102338/62. Both will be flashed with the same languages/dictionaries, but the latter will be flashed with Telenor-branded firmware.

BLUE/BROWN/RED:This "color" defines what kind of phone we are dealing with. BLUE phones have been assembled at the factory, but never been programmed with software/GDFS/IMEI (remember kids: the IMEI is stored in the OTP (One Time Programmable memory). BROWN phones are "developer phones", for testing. Less restrictions are present, as these are used for "debugging/beta" purposes. As of CID36, a phone has to be converted to BROWN to unlock it.RED phones are your typical retail ones.

GDFS:This is the phones "stash", where all settings and calibration data is stored (this also goes for the firmwares IMEI-resource as well as the SIMlocks). Similar to other brands use of NVRAM (Non-Viotile Random Access Memory).

IMEI = International Mobile Equipment Identity. A 15-digit number which includes information on the origin, model, and serial number of the device. The model and origin comprise the initial 8-digit portion of the IMEI, known as the "Type Allocation Code/TAC". The remainder of the IMEI is manufacturer-defined, with a "Luhn check digit" at the end (which is never transmitted). The "Luhn check digit" is calculated from the rest of the IMEI.
It should be noted that in SE-based phones, the IMEI is stored in two places, the OTP (One Time Programmable memory) and GDFS. The GDFS IMEI is normally read from the OTP, but this can be circumvented by SETool function to "change" the IMEI. This patches the firmware into allowing different OTP/GDFS IMEIs. It is the GDFS IMEI that is reported to the network, so changing this will "de-bar" blocked phones. SEUS is not fooled by this, on the other hand, and it should also be noted that doing this is illegal in most countries.

EMMA = Service software/solution by SE themselves. Protected by the EMMA smartcard to prevent non-licensed usage. Current version is EMMA3, though EMMA2 is still alive (but kinda useless on newer phones). The EMMA smartcard contains an algorithm that allows EMMA to communicate directly to/with the phones CID, so performing operations the way they were intended. The smartcard and its algorithm has not been cracked. Current EMMA access levels exists: Service Update - Can't unlock phones. Service Update Pro - Can't unlock phones. Network Operator - Can't unlock phones (but sure as hell can lock them ). Service Center Std - Can't unlock phones. Service Center Rc - Can unlock phones, as they have a special version of the smartcard with a CSCA key. Research & Development - Can unlock phones, as they have a special version of the smartcard with a CSCA key.

DB2000, DB2010, DB2020, DB3150, DB3210 = SEMC (Sony Ericsson Mobile Communications) hardware platforms. It's something similar to chipset in PC. DB2000 (another name is Marita) is a GSM+3G (UMTS) capable platform, SE K600/K608/V600/Z800/W900, Sharp 802sh, 902sh, 903sh and LG 3G phones are based on it. DB2010/2012 (Marita compact) is GSM-only, non-3G, platform. Most not very old and modern SE phones like K300,K500,K700,K750,S700,W300,W550,W800,Z520,Z530 are based on this chipset. DB2020 is the newest product of SEMC. K800, K790, K610, Z710 etc, Sharp 904sh feature this most secure (from SE's point of view) platform.
Newer phones uses the DB3150 platform, K850, W910, etc...
Sony Ericsson Smartphones uses the DB2001 platform (need more info), Like the W960...
The newest SE phones run on DB3210. DB3210 supports Capuchin (java+flash lite project), WiFi and built-in GPS. C905, G705, W705 and W715 run on this platform.

EROM = Extended ROM. This is the base part of the software which isn't flashed in normal update operations. It controls the flashing interface, the boot loader, etc.

FOTA = Flash Over The Air. The Sony Ericsson Remote Update Service is a convenient way to easily and remotely update your mobile phone to the latest available software version. This is done over the air; no connection to a PC is needed. The cost for using Sony Ericsson Remote Update Service is your operator's fee for transferring the data to your phone. This varies widely between different operators; if you are uncertain you should contact your operator. User content in the phone, such as images, music, ringtones and videos, is not affected by the update.

Customization = Changing or replacing original content of the phone, like ringtones, wallpapers, icons, themes, that come with branded or unbranded phones. It's nothing more than first default configuring of the phone after flashing FS file. Usually the process is:
1. Writing customize.xml and server & java certificates in /tpa/preset/custom in sonics folder to /tpa/presest/custom folder in the phone's internal file system
2. When the phone starts after flashing, it parses that xml file, puts settings written in that xml into the phone's GDFS and works out certificates (some go to Trusted certificates, some got Java certificate etc)
If you open customize.xml you can change almost any initial settings like time zone, date, internet profiles etc.

Branded Phones = Some network providers place their own ringtones, themes, icons, links etc within phone's software. (eg. vodafone/telenor, orange, t-mobile, rogers, cingular etc.) Debranding means removing all this content and restoring phone to it's original factory SONYERICSSON condition. This will not damage phone in any way! You will loose Operator Icons, and links, WAP, and MMS settings however these you can get via http://www.sonyericsson.com/spg.jsp?...=pg&tl=support
select region then PHONE SETUP.

Finalization = Completing flashing operations and storing basic settings that phone needs to properly operate.

Firmware has two parts:
1. FS: Containing languages, images, sounds, animations, settings, etc. Anything that isn't pure software.
2. Main: Containing the base system software.

LIST OF PHONE'S PLATFORMS:

pnx5230:
- W350, W380, Z310, Z555
DB2000:
- K600, K608, V600, V800, V802, W900, Z500, Z800, Z1010
DB2000 (PDA/Smartphones):
- G700, G900, M600, M608, P990, W950, W960, P1
DB2010:
- D750, J300, K300, K310, K500, K510, K700, K750, K758, S700, W300, W550, W600, W700, W800, W810, Z520, Z525, Z530, Z550, Z558
DB2012:
- K320, W200
DB2020:
- K530, K550, K610, K770, K790, K800, K810, K818, S500, T650, V630, W580, W610, W660, W710, W830, W850, W880, W888, Z610, Z710
DB3150 (A2):
- C702, C902, G502, K630, K660, K850, V640, W760, W890, W910, W980, Z750, Z770, Z780
DB3210 (A2)
- C905, G705, W705, W715,

Good work, pinned.

I would like to know more about the gdfs and imei, the checksums and how its done etc.. anybody holds that kind of info?

The International Mobile Equipment Identity is a number unique to every GSM and UMTS mobile phone. It is usually found printed on the phone underneath the battery and can also be found by dialing the sequence *#06# into the phone.

The IMEI number is used by the GSM network to identify valid devices and therefore can be used to stop a stolen phone from accessing the network. For example, if a mobile phone is stolen, the owner can call his or her network provider and instruct them to "ban" the phone using its IMEI number. This renders the phone useless, regardless of whether the phone's SIM is changed.

Unlike the Electronic Serial Number or MEID of CDMA and other wireless networks, the IMEI is only used to identify the device, and has no permanent or semi-permanent relation to the subscriber. Instead, the subscriber is identified by transmission of an IMSI number, which is stored on a SIM card which can (in theory) be transferred to any handset. However, many network and security features are enabled by knowing the current device being used by a subscriber.
Contents
* 1 Structure of the IMEI and IMEISV
* 2 Retrieving IMEI information from a GSM device
* 3 IMEI and the law
* 4 Blacklist of stolen devices
* 5 Difficulties

Structure of the IMEI and IMEISV

The IMEI (14 digits plus check digit) or IMEISV (16 digits) includes information on the origin, model, and serial number of the device. The structure of the IMEI/SV are specified in 3GPP TS 23.003. The model and origin comprise the initial 8-digit portion of the IMEI/SV, known as the Type Allocation Code (TAC). The remainder of the IMEI is manufacturer-defined, with a Luhn check digit at the end (which is never transmitted).

As of 2004, the format of the IMEI is AA-BBBBBB-CCCCCC-D, although it may not always be displayed this way. The IMEISV drops the Luhn check digit in favour of an additional 2 digits for the Software Version Number (SVN) in the format AA-BBBBBB-CCCCCC-EE
AA BBBBBB CCCCCC D EE
Reporting Body Identifier, indicating the GSMA-approved group that allocated the model TAC The remainder of the TAC Serial sequence of the model Luhn check digit of the entire number (or zero) Software Version Number (SVN).

Prior to 2002, the TAC was 6 digits long and followed by a two-digit Final Assembly Code (FAC), which was a manufacturer-specific code indicating the location of the device's construction.

For example the IMEI code 35-209900-176148-1 or IMEISV code 35-209900-176148-23 tells us the following:
TAC: 352099 so it was issued by the BABT and has the allocation number 2099
FAC: 00 so it was numbered during the transition phase from the old format to the new format (described below)
SNR: 176148 - uniquely identifying a unit of this model
CD: 1 so it is a GSM Phase 2 or higher
SVN: 23 - The 'software version number' identifying the revision of the software installed on the phone. 99 is reserved.

The format changed from April 1, 2004 when the Final Assembly Code ceased to exist and the Type Approval Code increases to eight digits in length and became known as the Type Allocation Code. From January 1, 2003 until this time the FAC for all phones was 00.

The Reporting Body Identifier is allocated by the Global Decimal Administrator; the first two digits must be decimal (ie less than 0xA0) for it to be an IMEI and not an MEID.

The new CDMA Mobile Equipment Identifier (MEID) uses the same basic format as the IMEI.

Retrieving IMEI information from a GSM device

On many devices the IMEI number can be retrieved by entering *#06#. The IMEI number of a GSM device can be retrieved by sending the command AT+CGSN. For more information refer the 3GPP TS 27.007, Section 5.4 /2/ standards document.

Retrieving IMEI Information from an Ericsson or Sony Ericsson handset can be done by entering these keys: Right * Left Left * Left * (Other service menu items will be presented with this key combination).

The IMEI information can be retrieved from most Nokia mobile phones by pressing *#92702689# (*#WAR0ANTY#), this opens the warranty menu in which the first item is the serial number (the IMEI). The warranty menu also shows other information such as the date the phone was made and the life timer of the phone.

The IMEI can frequently be displayed through phone menus, under a section titled 'System Information', 'Device', 'Phone Info' or similar. Many phones also have the IMEI listed on a label in the battery compartment.

IMEI and the law

Many countries have acknowledged the use of the IMEI in reducing the effect of mobile phone theft, which has increased exponentially over the last few years[citation needed]. For example, in the United Kingdom under the Mobile Telephones (Re-programming) Act, changing the IMEI of a phone, or possessing equipment that can change it, is considered an offence under some circumstances.

There is a misunderstanding amongst some regulators that the existence of a formally allocated IMEI number range to a GSM terminal implies that the terminal is approved or complies with regulatory requirements. This is not the case. The linkage between regulatory approval and IMEI allocation was removed in April 2000 with the introduction of the European R&TTE Directive. Since that date, IMEIs have been allocated by BABT (acting on behalf of the GSM Association) to legitimate GSM terminal manufacturers without the need to provide evidence of approval.

In Singapore, however, despite the high usage of mobile phones and the increasingly frequent cases of mobile phone theft, there is apparently no infrastructure available to "ban" the use of a stolen phone, given the IMEI. None of the local service providers seem to be aware of the IMEI or its use and most service providers believe that most phones still do not possess the technology to allow the service providers to "ban" the use of a stolen phone[citation needed].

Blacklist of stolen devices

When mobile equipment is stolen or lost, the operator or owner will typically contact the Central Equipment Identity Register (CEIR) which blacklists the device in all operator switches so that it will in effect become unusable, making theft of mobile equipment a useless business.

The IMEI number is not supposed to be easy to change, making the CEIR blacklisting effective. However this is not always the case: IMEI may be easy to change with special tools and operators may even flatly ignore the CEIR blacklist.

Difficulties

* "New IMEIs can be programmed into stolen handsets and 10% of IMEIs are not unique." According to a BT-Cellnet spokesman quoted by the BBC. [1]
* Facilities do not exist to unblock numbers listed in error on all networks. This is possible in the UK, however, where the user who initially blocked the IMEI must quote a password chosen at the time the block was applied.

Also try this links (IMEI) :

http://www.numberingplans.com/?page=analysis&sub=imeinr

http://www.babt.com/gsm-imei-number-allocation.asp

That's copy pasted and not your work.. Anyway, what i ment was how to reculculate the checksums in the gdfs and to what, all the variables etcetc for w810i cid49

Awesome job. I learned a thing or two, thanks! (or maybe 10, shut up!)

~Ibrahim~

FINALLY!!!

GREAT info here

impressive!!!!!!!!!!!nice work mate

atleast he took the time to copy and paste the information and have it available for us.

there is just one thing i want to add...although there is blacklist, as i know, only a very few operators provide searching for devices...like vodafone UK...when my mom's phone was stolen, in Orange they said they could find it, in cooperation with police. That's a hoax the never did and they never will...as majority of other operators However, they could if the wanted to, because whenever a stole phone is turned on and it connects to the network, every operator can find it using IMEI (if it wasn't changed)...it's a mystery why they don't do that...

...that's my addition, maybe you think it's useless and maybe you are right it's just a brainstorming

Hi mates. I hope that u don't mind that I put into my own language and it is now on sek750i.pl pages? http://sek750i.pl/content/view/118/56

no problem mate.

Please help! W810i problem

The problem:
1/ When I switch on my phone it displays a white screen then the SonyEricsson Logo and it again shows a white screen and continues on blinking whit a white screen.

2/ The phone can only be switched off by removing the battery.





Here is what was recorded in XS++ v1.2 Log

16:29:09| XS++ v1.2 Ready !
16:29:24| Attempting to open the interface...
16:29:24| ++++++++++++++++++++++++++++++++++
16:29:24| Turn off phone
16:29:24| Hold C Button on phone and connect phone.
16:29:24| You have 30 seconds.
16:29:24| ++++++++++++++++++++++++++++++++++
16:29:32| PORT STATUS: ACTIVE
16:29:32| Baseband ID: 8040
16:29:32| Hardware Platform: db2010 Marita compact
16:29:32| Protocol Version: 3.1
16:29:32| Sending loaders\db2010_cid00_prodid_p3k.bin...
16:29:32| This is a PRODUCTION_ID loader
16:29:32| Activating GDFS...
16:29:33| Warning: IMEI name does not match GDFS name (IMEI:NULL GDFS:W810)
16:29:33| ...using GDFS name
16:29:33| ++++++++++++++++++++++++++++++++++
16:29:33| PHONE INFO
16:29:33| ++++++++++++++++++++++++++++++++++
16:29:33| DBID: db2010
16:29:33| OTP CID: 49
16:29:33| EROM CID: 49
16:29:33| EROM color: Red
16:29:33| IMEI: 35462301xxxxxx
16:29:33| Phone: W810
16:29:34| Operator: S_ASIA_LEVAN
16:29:34| CDA: CDA102555/110 R2A
16:29:34| Firmware: R4ED001
16:29:34| EROM: n/a
16:29:34| ++++++++++++++++++++++++++++++++++
16:29:34| Ready for operation!
16:33:23| Disconnected... Unplug the phone
16:33:33| Shutting down...


What does these things in red mean? I'm a newbie can you explain and help please?

Try to flash main again with xs and it should be ok...i had the same problem and it worked for me

Please delete this post,
sorry...

Great infos, many thanks

Mee to man !
Thanks for this !

okay i m having a similar problem like d one above after flashing from K750 to W800, when connected to XS++ it shows this...:-s
my fone is working fine. but yet why is it showing K750 n that IMEI message??
what do i do?? or i just leave it as it is?


13:33:15| ++++++++++++++++++++++++++++++++++
13:33:31| PORT STATUS: ACTIVE
13:33:31| Baseband ID: 8040
13:33:31| Hardware Platform: db2010 Marita compact
13:33:31| Protocol Version: 3.1
13:33:31| Sending loaders\db2010_cid00_prodid_p3k.bin...
13:33:32| This is a PRODUCTION_ID loader
13:33:32| Activating GDFS...
13:33:32| Warning: IMEI name does not match GDFS name (IMEI:K750 GDFS:W800)
13:33:32| ...using IMEI name
13:33:32| ++++++++++++++++++++++++++++++++++
13:33:32| PHONE INFO
13:33:32| ++++++++++++++++++++++++++++++++++
13:33:32| DBID: db2010
13:33:32| OTP CID: 49
13:33:32| EROM CID: 49
13:33:32| EROM color: Red
13:33:32| IMEI: 35785000xxxxxx
13:33:32| Phone: K750
13:33:32| Operator: EMEA_6
13:33:32| CDA: CDA102430/6 R2A
13:33:32| Firmware: R1BC002
13:33:32| EROM: n/a
13:33:32| ++++++++++++++++++++++++++++++++++
13:33:32| Ready for operation!

waiting for reply...
thnx
tc
Mohit

well i have done nohting to my mobile its still original though i bought a used one and sure the person hasnt done something to it.... but when i run XS++ it gives me this.. as I HAVE K750

13:04:05| PORT STATUS: ACTIVE
13:04:05| Baseband ID: 8040
13:04:05| Hardware Platform: db2010 Marita compact
13:04:05| Protocol Version: 3.1
13:04:05| AutoReturnCollectingSending loaders\db2010_cid00_prodid_p3k.bin...
13:04:05| This is a PRODUCTION_ID loader
13:04:05| ***** Read flash vendor & id (cmd 0D)
13:04:05| ***** Read otp (cmd 24)
13:04:05| Activating GDFS...
13:04:05| Warning: IMEI name does not match GDFS name (IMEI:W800 GDFS:K750)
13:04:05| ...using IMEI name
13:04:05| Return
13:04:05| PHONE INFO
13:04:05| DBID: db2010
13:04:05| OTP CID: 49
13:04:05| EROM CID: 49
13:04:05| EROM color: Red
13:04:05| IMEI: 35967200xxxxxx
13:04:05| Phone: W800
13:04:05| Operator: EMEA_6
13:04:05| CDA: CDA102337/103 R3A
13:04:05| Firmware: R1CA021
13:04:05| EROM: n/a
13:04:06|
13:04:06| Ready for operation!
13:06:25| +++ Sendinging shutdown signal to phone...
13:06:26| +++ Done.. You may now connect again...
13:06:26| Shutting down...

i want to increase the SMS limit but didnt understand the whole...http://forums.se-nse.net/index.php?showtopic=2764
i have DCU-60 Cable... unable to get any SETOOLS or FARMANAGER and didnt undertand the directory structure thing as well... all i can do right now is to open XS++ and get the above information which is know something a msytery for me...

Yeah, mines doing this too.. I'm guessing the changed in phone-name affected this? Fall could be my edited phone name which is Fallen's.

THANKS.[color="#FF00FF"][/color]

what is FS ?
what is diffrent between diffrent FS

the diffrence is languages, images,t9,camera drivers,accoustics...etc..and the customization&certificates....
in fs u have files ``FILE SYSTEM`` menu icons, skins,drivers and a lot of things


srry 4 my english

THANK YOU THANK YOU THANK YOU!! I really needed these details! Now I can reflash my w800i!!!

good information!!!!!!
thanks u very much.... i didn't know a lot of this terms......

this is interesting that you are allowing someone else to use something you stole from me and taking credit for it.

http://www.topsony.com/forum/showthread.php?t=28

*****note the author*****

erm
but i see his post is earlier than u by a day

Ermmm look at the date this was posted compared with the date yours was posted... I think you will find you either copied it or it was got from somewhere else..

Can you explain, what means SFA? It's FS upgrade pack, isn't it?

Cos it was REposted by TopSony, as you can see, since they had server problem at that time and all of the original posts have been lost, along with attachments.
TopSony, reposted it along with the message "author: blah blah blah".
He posted it here as his work instead of crediting the original source, and giving permissions to others to post it elsewhere.
It is not copyrighted material, but his actions are lame.

topsony had already (as i know) crashed 2 times this year, loosing posts database. first time was bad as they had so many download hits that they had to find another provider and move DB over.
in a conversation that i had in january / february this year with topsony and with mauro1947, their main concern was that so many links from different forums were directing traffic over to them, causing serious server issues and delays, and users were registering only to download files.
this conversation led to the idea of implementing restrictions, like users registering for a month and being active in forums for a period of time before they are allowed to download files for free.
pay option was discussed as well and this is why things are the way they are on topsony right now.
this helped ease traffic and turn forums into helpful one for everyone.

o i c
cuz im not registered wit topsony
so i wont know bout those

nice glossary ... i have a question: what actualy is a display driver ? what does it chang at display ? thx

Brighness contrast and stuff like that.

How I find out all this information about my w580i?

nice one mate...this helped me to understand some things about ma fone that i didnt understan..

Thanx...

How do you check all this information? I've been looking around and I can't really find anything... I'd like to flash my phone (k800i), but I don't know whether my phone can be flashed....

(sorry, I'm new to this process)

ive flashed my main firmware, when i turn the phone on after the flashing the "Please wait" screen message on my phone appears and hangs up... what should i do next to fix this problem? thanks..

Maybe you should try re-flashing it? That normally fixes a problem.

Anyway about TopSony, their forums aren't that good compared to here where nearly every question here gets answered and you can get firmware and other stuff for FREE! I don't even visit TopSony any more- Esato is also way better.

Updated the list (a bit), to remove possible "confusion"

Thanks, a lot of useful info there

Everyone says that "make backup of GDFS". How exactly the GDFS backup helps?
I just flashed my k750i to W800i. I didnt make any GDFS backup. But my k750i is working perfectly with new W800i firmware. So please tell me exact use of GDFS backup? Or at which conditions we apply the bakup?

ThanX

The main purpose of GDFS Backup is :

* to create Backup of the phone state and possible Restore of the phone to this state anytime in the future.
* to repair damaged GDFS by copying GDFS content from working phone to damaged phone of the same type (GDFS repair).

Good work unpinned LOL

edit : phone's platform

Very Very GOOD Post!!!!

Hi guys,I'm using SE W660 R6AD001 CID53.I stumbled upon a list of erom (see link below).What is it use for?thanks.

http://iprotebe.cz/sony-ericsson-erom-cid52-section666.html

Thanksss!!!
I'm only gaining knowledge about the SE phones now.
A Big Thank You!

I've updated the DB section