Abreviatures of NOKIA

A/D - converter - Analog-to-digital converter
A2DP - Advanced Audio Distribution Profile
ACI - Accessory Control Interface
ADC - Analog-to-digital converter
ADSP - Application DPS (expected to run high level tasks)
AGC - Automatic gain control (maintains volume)
ALS - Ambient light sensor
AMSL - After Market Service Leader
ARM - Advanced RISC Machines
ARPU - Average revenue per user (per month or per year)
ASIC - Application Specific Integrated Circuit
ASIP - Application Specific Interface Protector
B2B - Board to board, connector between PWB and UI board
BB - Baseband
BC02 - Bluetooth module made by CSR
BIQUAD - Bi-quadratic ,type of filter function)
BSI - Battery Size Indicator
BT - Bluetooth
CBus - MCU controlled serial bus connected to UPP_WD2,UEME and Zocus
CCP - Compact Camera Port
CDSP - Cellular DSP (expected to run at low levels)
CLDC - Connected limited device configuration
CMOS - Complimentary metal-oxide semiconductor circuit (low power consumption)
COF - Chip on Foil
COG - Chip on Glass
CPU - Central Processing Unit
CSR - cambridge silicon radio
CSTN - Color Super Twisted Nematic
CTSI - Clock Timing Sleep and interrupt block of Tiku
CW - Continuous wave
D/A - converter - Digital-to-analouge converter
DAC - Digital-to-analouge converter
DBI - Digital Battery Interface
DBus - DSP controlled serial bus connected between UPP_WD2 and Helgo
DCT-4 - Digital Core Technology
DMA - Direct memory access
DP - Data Package
DPLL - Digital Phase Locked Loop
DSP - Digital Signal Processor
DtoS - Differential to Single ended
EDGE - Enhanced data rates for global/GSM evaluation
EGSM - Extended GSM
EM - Energy management
EMC - Electromagnetic compability
EMI - Electromagnetic interference
ESD - Electrostatic discharge
FCI - Functional cover interface
FPS - Flash Programming Tool
FR - Full rate
FSTN - Film compensated super twisted nematic
GND - Ground, conductive mass
GPIB - General-purpose interface bus
GPRS - General Packet Radio Service
GSM - Group Special Mobile/Global System for Mobile communication
HF - Hands free
HFCM - Handsfree Common
HS - Handset
HSCSD - High speed circuit switched data (data transmission connection faster than GSM)
HW - Hardware
I/O - Input/Output
IBAT - Battery current
IC - Integrated circuit
ICHAR - Charger current
IF - Interface
IHF - Integrated hands free
IMEI - International Mobile Equipment Identity
IR - Infrared
IrDA - Infrared Data Associasion
ISA - Intelligent software architecture
JPEG/JPG - Joint Photographic Experts Group
LCD - Liquid Crystal Display
LDO - Low Drop Out
LED - Light-emitting diode
LPRF - Low Power Radio Frequency
MCU - Micro Controller Unit (microprocessor)
MCU - Multiport control unit
MIC, mic - Microphone
MIDP - Mobile Information Device Profile
MIN - Mobile identification number
MIPS - Million instructions per second
MMC - Multimedia card
MMS - Multimedia messaging service
NTC - Negative temperature coefficient, temperature sensitive resistor used as a temperature sensor
OMA - Object management architechture
OMAP - Operations, maintenance, and administartion part
Opamp - Operational Amplifier
PA - Power amplifier
PDA - Pocket Data Application
PDA - Personal digital assistant
PDRAM - Program/Data RAM (on chip in Tiku)
Phoenix - Software tool of DCT4.x
PIM - Personal Information Management
PLL - Phase locked loop
PM - (Phone) Permanent memory
PUP - General Purpose IO (PIO), USARTS and Pulse Width Modulators
PURX - Power-up reset
PWB - Printed Wiring Board
PWM - Pulse width modulation
RC - filter - Resistance-Capacitance filter
RF - Radio Frequency
RF PopPort TM - Reduced function PopPortTM interface
RFBUS - Serial control Bus For RF
RSK - Right Soft Key
RS-MMC - Reduced size Multi Media Card
RSSI - Receiving signal strength indicator
RST - Reset Switch
RTC - Real Time Clock (provides date and time)
RX - Radio Receiver
SARAM - Single Access RAM
SAW filter - Surface Acoustic Wave filter
SDRAM - Synchronous Dynamic Random Access Memory
SID - Security ID
SIM - Subscriber Identity Module
SMPS - Switched Mode Power Supply
SNR - Signal-to-noice ratio
SPR - Standard Product requirements
SRAM - Static random access memory
STI - Serial Trace Interface
SW - Software
SWIM - Subscriber/Wallet Identification Module
TCXO - Temperature controlled Oscillator
Tiku - Finnish for Chip, Successor of the UPP, Official Tiku3G
TX - Radio Transmitter
UART - Universal asynchronous receiver/transmitter
UEME - Universal Energy Management chip (Enhanced version)
UEMEK - See UEME
UI - User Interface
UPP - Universal Phone Processor
UPP_WD2 - Communicator version of DCT4 system ASIC
USB - Universal Serial Bus
VBAT - Battery voltage
VCHAR - Charger voltage
VCO - Voltage controlled oscillator
VCTCXO - Voltage Controlled Temperature Compensated Crystal Oscillator
VCXO - Voltage Controlled Crystal Oscillator
Vp-p - Peak-to-peak voltage
VSIM - SIM voltage
WAP - Wireless application protocol
WD - Watchdog
XHTML - Extensible hypertext markup language
Zocus - Current sensor, (used to monitor the current flow to and from the battery)

Main chips of platform BB5

Platform BB5 (Base Band 5) based on processor RAP3G
and OMAP1710 or OMAP 2420 (n93)

RAP3G - nokia brand processor (Radio Application Processor 3rd Generation)
OMAP1710 - manufactured by Texas Instruments

Mobile phones BB5 S40 has only RAP3G

6270 RAGGSM v1.1 PA product code 4377223
6280 RAP3G v3.00 E product code 4377151
6630 RAP3G v2.10E PA product code 4377061
6680 RAP3G v2.0E PA product code 4377061
6681 RAP3G v2.0E PA product code 4377061
7370 RAPGSM v1.1 PA product code 4377223
E60 RAP3G v2.20E PA product code n/a
E62 RAPGSM v1.1 PA product code n/a
E70 RAP3G v2.20E PA product code n/a
N70 RAP3G v2.20 PA product code 4377103
N72 RAP v2.21E PA product code 4377183
N80 RAP3GS v2.0E PA product code n/a
N90 RAP3G v2.11 PA product code 4396177
N91 RAP3G v2.20E PA product code n/a
N93 RAP3GS v2.0E PA product code n/a


OMAP

6630 OMAP 1710 product code 4377049
6680 OMAP 1710 product code 4377049
6681 OMAP 1710 product code 4377049
E60 OMAP 1710 product code n/a
E62 OMAP 1710 product code n/a
E70 OMAP 1710 product code n/a
N70 OMAP 1710 product code 4377049
N72 OMAP 1710 product code 4377049
N80 OMAP 1710 product code n/a
N90 OMAP 1710 product code 4396177
N91 OMAP 1710 product code 4377207
N93 OMAP 2420 product code n/a


TAHVO

3250 TAHVO v5.2 LF product code 4376533
6270 TAHVO v5.2 LF product code 4376533
6280 TAHVO v5.2 LF
6630 TAHVO v4.1 product code 4376383
6680 TAHVO v4.1 product code 4376383
6681 TAHVO v4.1 product code 4376383
7370 TAHVO v5.2 LF product code 4376533
E60 TAHVO v4.1 product code 4376383
E62 ? product code n/a
E70 TAHVO v5.2 LF product code 4376533
N70 TAHVO v4.1 product code 4376383
N72 TAHVO v5.2 LF product code 4376533
N80 BETTY v2.1 LF product code 4376535
N90 TAHVO v4.1 product code n/a
N91 TAHVO v5.2 LF product code 4376533
N93 BETTY v2.1 LF product code 4376535


RETU (Audio Codecs and User Interface)

3250 RETU v3.02 product code 4396177
6270 RETU v3.02 product code 4396177
6280 RETU v3.02 product code 4396177
6630 RETU v3.02 product code 4396177
6680 RETU v3.02 product code 4396177
6681 RETU v3.02 product code 4396177
7370 RETU v3.02 product code 4396177
E60 RETU v3.02 product code 4396177
E62 ? product code n/a
E70 RETU v3.02 product code 4396177
N70 RETU v3.02 product code 4396177
N72 RETU v3.02 product code 4396177
N80 VILMA v1.04C product code 4396281
N90 RETU v3.02 product code 4396177
N91 RETU v3.02 product code 4396177
N93 VILMA v1.04C product code 4396281


RF

3250 AHNE v3.01A product code 4380129
6270 AHNE v3.01A product code 4380129
6280 PIHI v2.11 product code 4396245
6630 HINKU v3.10A + VINKU v3.14A product code n/a + n/a
6680 HINKU v3.10A + VINKU v3.14A product code
6681 HINKU v3.10A + VINKU v3.14A product code
7370 AHNE v3.01A product code 4380129
E60 HINKU v3.10A + VINKU v3.14A product code n/a + n/a
E62 AHNE v3.01A product code 4380129
E70 HINKU v3.10A + VINKU v3.14A product code n/a + n/a
N70 HINKU v3.10A + VINKU v3.14A product code 4380039 + 4380041
N72 HINKU v3.10A + VINKU v3.14A product code 4380039 + 4380041
N80 PIHI v2.22A product code 4396275
N90 HINKU v3.10A + VINKU v3.14A product code n/a + n/a
N91 HINKU v3.10A + VINKU v3.14A product code n/a + n/a
N93 PIHI v2.22A product code 4396275

Microchip specifications and ontef information

OMAP
289 solder balls 12õ12 ìì MicroStar BGA™ Package
Up to 220 MHz ARM926TEJ V5 architecture (maximum frequency)
32KB I-cache; 16KB D-cache
Java acceleration
Support for 32-bit and 16-bit (thumb mode) instruction sets
Data and program MMUs
Two 64-entry translation look-aside buffers (TLBs) for MMUs
17-word write buffer

Security Acceleration in Hardware
Secure bootloader
48 kB of secure ROM
16 kB of secure RAM
Hardware acceleration for security standards and random number generator
Unique die ID cell
Third-party Security software library


RAP3G ASIC is a 3G Radio Application Processor.
processor works on GSM/GPRS/EDGE/UMTS
RAM memory is integrated into RAP3G.
In general RAP3G consists of three separate parts:
• Processor subsystem (PSS) that includes the main processor and related functions
• MCU peripherals that are mainly controlled by MCU
• DSP peripherals that are mainly controlled by DSP
RM-57/58
RAP3G memories NOR flash and SDRAM

Modem memory consists of 64 Mbit SDRAM and 64 Mbit NOR flash memories.
SDRAM is a dynamic memory for ISA SW.
NOR is used for ISA SW code and PMM data and CDSP SW code.
16-bit wide SDRAM interface consists of DDR SDRAM controller from ARM, DCDL/DLLs and wrapper logic. 32-bit
wide flash interface is implemented by using EMC module.
SDRAM core voltage (1.8V) is generated from Retu VDRAM and I/O voltage (1.8V) is from VIO. NOR flash uses VIO
for both core and I/O voltages.

ARM929 MCU - the main processor RAP3G
lEAD3 PH3 - DSP

POWER
Core Voltage VCORE=1,4V (local mode) generate by TAHVOÂ in sleep mode VCORE down to 1,05v
I/O voltage VIO=1,8v generate by RETU
VRFC olso generate by RETU
RFCLK=38,4 Mhz base fraquency
SleepCLK=32,768Khz controlled by RETU

RETU - base chip, which control the power
ASIC Speshial chip (ASIC) - This chip not intended for general use, and for a specific device or project.

RETU partially uses functions in the management of UEM
power, but does not perform security functions UEM
Functions of RETU
Power and restart
Detection of power (charging) and monitoring the voltage of the battery
UI features such as vibration, audio amplifier, SIM interface
AD converter
Digital Interface – CBUS

NPC - Nokia Public Certificate
check sum crypted by Nokia Private Key
NPC contain:
Public Key
IMEI
Product code
Bluetuth ID
MAC àäðåññ
Terminal Public Key

BB5 phones have two processor architecture
2 processors EPOC è NOS
EPOC - Tracking user activity, NOS - phone

Therefore, the structure BB5 divided into 2 parts
Cellular Mobile TelePhone - CMT and
Aplication Engine - APE
Whot we see when flash the phone!
RF, RETU, TAHVO, SDRAM, NOR FLASH – are parts of CMT (controlled by RAP3G)
DDR RAM and Nand Flash - APE (controlled by OMAP1710)
Between RAP3G and OMAP1710 exist a bus.
Both parts has OS.
ÎÑ RAP3G - unknown. ÎÑ OMAP1710 - SYMBIAN.
RAP3G - is not a processor for sale OMAP - has an open architecture, but is made individually for manufacturers with millions of consumption. OMAP is not unlike RAP3G brand Nokia.
When phone is locked part of the crypted data contained in APE part in the CMT data are not accurate. (DeJean believes that the code is contained in RAP3G)
Accordingly, the possibility of unlocking depends on finding bugs in some OS, APE or CMT. Nokia subsequent exit firmvare respectively closes these bugs. Especially since everyone knows that BB5 is not flash with downgrade. Unlock is possible with the help of Winlock 5 and nokia smart card SX5 with FPS-10 prommer + CU-4 station + F-Bus Flash Adapter AD-XXFS
What is available for service centers 3-4 levels

health into the hands of skilled labor

thanks for sharings.

Thanks a ton for posting this, I found it quite informative, and it answered most with the concerns I had.

It was really helpful thanks for sharing this !!

Very much thanks for your great information friends...... Your abbreviates is very useful for me..... Thanks a lot....

thankssssssssssssssssssssss