TP Read Protocol

IMMO_ECU after IGN on (or CPU Reset cancellation) is sent Challenge to TP and confirmed Serial Number and Signature.
When response of input transponder is not correct, input is retry.
When response of input transponder is correct, The data that calculate Encryption operation in the EEPROM program compared with received data from TP.
When Codes is same, input is finished.

If the codes are not same, input are continued until when codes are same.
If IMMO_ECU EEPROM code is not programming, when correct transponder is inputted (CRC Check OK), input is finished.
After IGN1 on (CPU Reset cancellation), IMMO_ECU is reading the maximum 5 times Transponder Code
In the IGN1 ON&EMS_state=Lock state, when received ACKNOWLEDGE, TP is re-authenticated

Fig 1: Transponder (TP) System Diagram
Courtesy of KIA MOTORS AMERICA, INC.

2. TP / IMMO ECU / EMS Authentication Flowchart

Fig 2: TP / IMMO ECU / EMS Authentication Flowchart
Courtesy of KIA MOTORS AMERICA, INC.