A representative version of the user's manual follows:
Exhibit 8
MOTOROLA HSPA LGA Module User Guide
HSPA LGA module (HTM1100-L)
User Guide
DOCUMENT CONTROL NUMBER:
Version No.: 1.0
Date: March 2010
Copyright 2010 Motorola Inc. All rights reserved. This document and the
information contained in it is CONFIDENTIAL INFORMATION of Motorola,
and shall not be used, published, disclosed, or disseminated outside of Motorola
in whole or in part without Motorola’s consent. This document contains trade
secrets of Motorola. Copyright notice does not imply publication of this document.
Motorola Confidential Proprietary – Disclosed Under NDA
USER GUIDE ............................................................................................................................................... 1
Figure 9: LGA Module test set up .................................................................................... 28
Figure 10 : LGA module inside Test Socket .................................................................... 31
Motorola Confidential Proprietary – Disclosed Under NDA
Page 3 of 43
MOTOROLA HSPA LGA Module User Guide
1. Introduction
1.1 Revision History
Revision Date Author Description
Customer
1.0 March 2010
1.2 Purpose
This document describes the product design and specification for HSPA LGA
module (HTM1100-L). The HTM1100-L supports multi-mode (2G/3G) with
HSDPA/HSUPA capabilities.
Operations –
Lauren Holmes
(GTJM87)
Initial Draft
1.3 Scope
This document describes platform architecture, hardware/software interactions,
Technical/Electrical Specifications.
1.4 Target Audience
This document is intended to provide design details about HSPA LGA module
(HTM1100-L) to the teams involved in product integration.
Motorola Confidential Proprietary – Disclosed Under NDA
Page 4 of 43
MOTOROLA HSPA LGA Module User Guide
1.5 Abbreviations
AES Advanced Encryption Standard
AGPS Assisted Global Positioning System
AMR-NB Adaptive Multi-Rate Narrow Band
AMR-WB Adaptive Multi-Rate Wide Band
AP Applications Processor
BP Baseband Processor
DES Data Encryption Standard
DDR Double Data Rate
DTM Dual Transfer Mode
DUN Dial Up Networking
EDGE Enhanced Data rate for GSM Evolution
EFR Enhanced Full Rate
FPS Frames-Per-Second
FR Full Rate
GEA GSM Encryption Algorithm
GPRS General Packet Radio Service
GPS Global Positioning System
GSM Global System for Mobile communications
HR Half Rate
HS High Speed
HSDPA High-Speed Downlink Packet Access
HSUPA High-Speed Uplink Packet Access
IMEI International Mobile Equipment Identity
IMS IP Multimedia Subsystems
IPC Inter Processor Communications
LGA Land Grid Array
NAND Not AND (electronic logic gate)
OHA Open Handset Alliance
OMA Open Mobile Alliance
OTG On-The-Go
PCI Peripheral Component Interconnect
PMIC Power Management IC
RF Radio Frequency
SAM Stand Alone Modem
SDRAM Synchronous Dynamic Random Access Memory
SIM Subscriber Identity Module
UEA UMTS Encryption Algorithm
UICC Universal Integrated Circuit Card
USB Universal Serial Bus
USIM Universal SIM
W3G Wrigley3G (Motorola 3G baseband processor)
WCDMA Wideband Code Division Multiple Access
WLAN Wireless Local Area Network
WWAN Wireless Wide Area Network
Motorola Confidential Proprietary – Disclosed Under NDA
Page 5 of 43
MOTOROLA HSPA LGA Module User Guide
2. References
HTM1100-L is compliant with 3GPP specification Release6, December 2006 version.
Release 6 specifications can be found at www.3gpp.org
HTM1100-L pads comply with electrical specifications of PCIe Express specification 1.2.
PCIe Express specification 1.2 can be downloaded from
http://www.pcisig.com/specifications/pciexpress/
HTM1100-L USB signals and remote host wake up mechanism comply with USB
specification 2.0. USB2.0 specification can be downloaded from
http://www.usb.org/developers/docs/
JEDEC standards: http://www.jedec.org/
ESD protection is in compliance with JESD22-A114.
Moisture sensitivity level complies with Ref J-STD-020B section 7.
Reflow process is in compliant with J-STD-020C.
Linux source code drivers for HTM1100-L product are available at
http://opensource.motorola.com
Host Modem communication details are provided in the document HTM1100-L Host
Modem Communication 12-17-09 Ver 1-0-1.pdf
Motorola Confidential Proprietary – Disclosed Under NDA
Page 6 of 43
MOTOROLA HSPA LGA Module User Guide
3. Product Overview
HTM1100-L is a LGA module supporting tri-band HSPA and quad-band EDGE/GPRS,
with data rates of up to 10.1Mbps downlink and 5.76Mbps uplink. Signals on LGA
module comply with Electrical spec of PCIe interface Version 1.2.
HTM1100-L is based on a custom 3G baseband processor that was developed by
Motorola. Other main hardware components on this platform are the RF transceiver from
Infineon, the Power Management IC, the RF analog front end and Power amplifiers.
HTM1100-L has internal DDR SDRAM and NAND flash memories, which were
packaged on top of the baseband processor (POP). HTM1100-L uses USB signals to
connect with a PC, netbook or MID.
J
I
H
G
F
E
D
C
B
A
HTM1100-L Bottom View HTM1100-L Bottom view
(Engineering Sample) (Production version)
Figure 1: HTM1100-L Bottom Pad view
J
I
H
G
F
E
D
C
B
A
Motorola Confidential Proprietary – Disclosed Under NDA
Page 7 of 43
MOTOROLA HSPA LGA Module User Guide
4. Hardware Architecture
Figure 2: HTM1100 high level block diagram
.
Motorola Confidential Proprietary – Disclosed Under NDA
Page 8 of 43
MOTOROLA HSPA LGA Module User Guide
_
_
5. Software Architecture
The HTM1100-L module software architecture is based on:
• Linux kernel running on the ARM9 application processor of the W3G.
• Native services running on top of the Linux kernel in the user space.
• Hardware specific adapters, drivers and software stacks.
• A 3GSM Single Core Modem architecture running on the C55x+ DSP of the
W3G.
The following diagram shows a high level overview of the software partitioning:
SmartiUEMD
RF
W 3 G
RF IF
DDR SDRAM
SDRC
9
ARM
Native Services
Android Kernel
C
55
2G/3
G Stack
HSUSB
OTG
ULPI
CPCAP POWER IC
NAND
FLASH
GPMC
SIM IF
L
G
A
N
T
E
R
F
A
C
E
I
+x
GPIO
USB
XVR
UICC
USB
USB
D+
D-
Figure 3: Software Architecture Partitioning
The ARM9 in W3G hosts Linux kernel and some native services that are running
in the user space. The external peripherals that the LGA module supports are
limited to UICC and PCI Express connector which includes USB connectivity
lines. The internal peripherals that W3G supports are limited to DDR SDRAM
and NAND Flash memories, the RF transceiver SmartiUEMD from Infineon and
the CPCAP power management IC.
Motorola Confidential Proprietary – Disclosed Under NDA
Page 9 of 43
MOTOROLA HSPA LGA Module User Guide
5.1.1 Inter-Processor Communication
The Inter-Processor Communication (IPC) infrastructure between the Single Core
Modem and Application Subsystem is made up of a shared RAM between the
ARM9 and the C55x+, and a mailbox mechanism, on top of which the NetMux
software infrastructure exposes virtual channels to client components on both
Application (AP) and Baseband Processor (BP) sides.
5.1.2 Modem Software Architecture Overview
In this platform, the W3G processor includes a C55x+ DSP that runs the whole
2G/3G modem stack (supporting HSDPA/HSUPA) thus leaving the ARM9 fully
dedicated to native services.
This approach enables native services to run on the application processor without
the complexity of mixing hard real-time software (modem) with the applications.
The SCM architecture enables running all the modem functions: 2G and 3G
Signal Processing Layer (SPL) and 2G Stack and 3G stack on the SAM core
(C55x+ core).
Only what is needed to support modem functions is implemented on the C55x+
DSP core.
Interfaces have been split into 3 main domains: SPL, Stack and Infrastructure.
The Single Core Modem Software architecture is composed of the following
elements:
• The Signal Processing Layer (SPL): this software layer implements the
physical layer.
o Uplink signal processing: channel coding and modulation, GSM
convolutional encoding and WCDMA convolutional encoding or
Turbo-encoding.
o Downlink signal processing: GSM equalization, GSM channel
decoding, WCDMA interface/control and WCDMA hardware
accelerators (3G Sub-System).
• Stack component is the component from L1 Control to L3 handling all the
logical part of the GSM/GPRS/EGPRS and WCDMA protocols:
o GSM/GPRS/EDGE protocols: Layer 1, Layer2-Link Access Protocol
on the Dm channel (L2-LAPDm), GPRS Radio Link Control (RLC),
Logical Link Control (LLC) and the Sub-Network Dependent
Convergence Protocol (SNDCP).
Motorola Confidential Proprietary – Disclosed Under NDA
Page 10 of 43
MOTOROLA HSPA LGA Module User Guide
o WCDMA protocols: WCDMA Layer 1, Radio Resource Control
(RRC), WCDMA Radio Link Control (W-RLC), Broadcast Message
Control (BMC) and the Packet Data Convergence Protocol (PDCP).
o Dual Mode protocols: Layer 1, GPRS Radio Resource/Radio Resource
management (GRR/RR/RRC/RRLP), Mobility Management (MM),
GPRS Mobility Manager (GMM), Session Management (SM),
Intelligent Data Router (IDR) and Connection Management (CM),
which consists of Call Control (CC), Supplementary Services (SS) and
Short Message Management (SMS) entities. A new created entity is
the Translation Layer (TL) which allows the 2G/WCDMA Engine
Layer to interface with the AP (especially L3/L4 interface).
The Infrastructure: this is the component providing the low-level mechanisms required by
other SCM entities (Stack, SPL, IPC, AGPS and Audio control). It contains hardware
drivers required by the others components like interrupt, watchdog, GPIO, and also
entities for communicating with the application processor (IPC). Finally, it contains
modules to relay functions to the application processor like NVM proxy, SIM proxy and
Audio Proxy.
5.1.3 ARM9 Software Architecture Overview
The Application Software Architecture uses the MotoAndroid architecture. The
Android Linux kernel is made of the Linux Kernel with some additional patches
including alarm, ashmem, binder, power management, low memory killer, kernel
debugger, and logger. The Linux kernel version is 2.6.27 and includes several
improvements made by OHA to the reference release in kernel.org.
The layers provide a view in which system functionality is increasingly abstracted
from hardware at the bottom layer, towards user functionality at the top layer.
The Linux kernel provides the operating system kernel services. It separates all
higher layers from the device hardware. Android relies on Linux version 2.6.27
for core system services such as security, memory management, process
management, network stack, and driver model. The kernel also acts as an
abstraction layer between the hardware and the rest of the software stack.
Motorola Confidential Proprietary – Disclosed Under NDA
Page 11 of 43
MOTOROLA HSPA LGA Module User Guide
6. HTM1100-L Module Feature Summary
Key capabilities of the LGA module and associated features of the platform are
listed below. The following summary describes some of the platform capabilities.
6.1 Hardware Revision:
6.2 2G
• 3GPP Release 6 December 2006 version compliant
• Quad-band GSM 850/900/1800/1900 MHz
• GPRS Class 12
• EDGE Class 12
• A5/1-3 (unused because no voice) and GEA/1-3 Encryption
• DARP (Downlink Advanced Receiver Performance)
• 2G to 3G handoffs based on 3GPP specification
• Sensitivity (2% BER in voice call): less than -106dBm (-108dBm typical)
• GPRS/EDGE Tx Output power(GMSK): Power Class 4, 33dBm(850 and
900Mhz) and Power Class1, 30dBm(1800MHz and 1900MHz)
• EDGE Tx Power (8-PSK): Power class E2 (27dBm in 850/900 MHz and