Lithium Battery Modbus

Communications Protocol

Issue 1.02

Date 2019-10-15

HUAWEI TECHNOLOGIES CO., LTD.

Copyright © Huawei Technologies Co., Ltd. 2019. All rights reserved.
No part of this document may be reproduced or transmitted in any form or by any means without prior
written consent of Huawei Technologies Co., Ltd.

Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.
All other trademarks and trade names mentioned in this document are the property of their respective
holders.

Notice
The purchased products, services and features are stipulated by the contract made between Huawei and
the customer. All or part of the products, services and features described in this document may not be
within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements,
information, and recommendations in this document are provided "AS IS" without warranties, guarantees or
representations of any kind, either express or implied.
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute a warranty of any kind, express or implied.

Huawei Technologies Co., Ltd.

Address: Huawei Industrial Base
Bantian, Longgang
Shenzhen 518129
People's Republic of China

Website: http://e.huawei.com

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential i

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol About This Document

About This Document

Purpose
This document provides guides to get the lithium battery modbus communications protocol.

Intended Audience
This document is intended for:
 Technical support engineers
 Maintenance engineers

Symbol Conventions
The symbols that may be found in this document are defined as follows.

Symbol Description
Alerts you to a high risk hazard that could, if not avoided,
result in serious injury or death.

Alerts you to a medium or low risk hazard that could, if not

avoided, result in moderate or minor injury.

Alerts you to a potentially hazardous situation that could, if not

avoided, result in equipment damage, data loss, performance
deterioration, or unanticipated results.
Provides a tip that may help you solve a problem or save time.
Provides additional information to emphasize or supplement
important points in the main text.

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential ii

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol About This Document

Change History
Date Version CR ID/Defect ID Sec No. Change Description Author
2017-01-16 1.00 Completed the initial draft. Hu Tian (employee
ID: 00184956)
2017-02-16 1.01 Archived after reviewed Hu Tian (employee
by the Telecom Energy ID: 00184956)
Controller SEG
2019-10-15 1.02 Archived after reviewed Wang Qian
by the Telecom Energy (employee ID:
Controller SEG 00483403)

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential iii

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol Contents

Contents

About This Document .................................................................................................................... ii

1 Introduction.................................................................................................................................... 1
2 Terms ............................................................................................................................................... 2
3 Communications Protocol Overview ........................................................................................ 3
4 Physical Layer ................................................................................................................................ 4
5 Data Link Layer ............................................................................................................................. 5
5.1 Addressing Mode ............................................................................................................................................. 5
5.2 Frame Structure ................................................................................................................................................ 5
5.3 Data Encoding .................................................................................................................................................. 5
5.4 Interaction Process ........................................................................................................................................... 6
5.5 CRC Checking ................................................................................................................................................. 6

6 Specifications in the Protocol ..................................................................................................... 7

7 Application Layer .......................................................................................................................... 8
7.1 Function Code List ........................................................................................................................................... 8
7.2 Exception Code List ......................................................................................................................................... 8
7.3 Reading and Writing Registers ......................................................................................................................... 9
7.3.1 Register Read Command ........................................................................................................................ 9
7.3.2 Single-Register Write Command .......................................................................................................... 10
7.3.3 Multiple-Register Write Command ....................................................................................................... 10

8 Signal List ..................................................................................................................................... 12

8.1 Collecting Signals .......................................................................................................................................... 12
8.2 Setting Parameter Signals ............................................................................................................................... 17

9 Data Type Description ............................................................................................................... 18

10 Data Transmission and Reception ......................................................................................... 19

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential iv

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 1 Introduction

1 Introduction

The document stipulates the protocol for command control and data exchange between the
ESM-4850A1/48100A1 lithium battery (slave node) and the monitoring module (master
node).
Functions defined in the protocol include:
1. The master node obtains the information by sending a read command.
2. The master node configures the relevant parameters and controls actions by sending a
write command.
The master node is the host in the communication process. The information exchange is done
by a question-and-answer method. The information and parameters of the slave node use
register addresses as storage addresses. The master node executes the read/write command by
accessing the registers. The protocol supports the networking of one master node and multiple
slave nodes. Slave nodes are identified by addresses. On the same communications bus,
addresses of slave nodes must be unique.

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 1

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 2 Terms

2 Terms

 Master node: During master-slave communication, the party that initiates a

communication request is referred to as the master node.
 Slave node: During master-slave communication, the party that responds to a
communication request is referred to as the slave node.
 Slave node address: The addresses of slave nodes can be configured in the range of 1 to
247.
 Broadcast address: The value is fixed to 0.
 Register address: The address of a register is recorded in two bytes.

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 2

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 3 Communications Protocol Overview

3 Communications Protocol Overview

The Modbus communications protocol consists of the following layers:

Figure 3-1 Layers of the Modbus communications protocol for energy products

Application layer

Data link layer

Physical layer

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 3

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 4 Physical Layer

4 Physical Layer

 2-wire or four-wire RS485 communication is implemented through a serial port.

 The baud rate can be 9600 bit/s, 19200 bit/s, 38400 bit/s, 115200 bit/s, or higher.
 Data is transferred in asynchronous RTU mode. Each frame consists of one start bit,
eight payload data bits, and two stop bits (11 bits in total). In this protocol, there is one
stop bit. For details, see chapter 6.

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 4

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 5 Data Link Layer

5 Data Link Layer

5.1 Addressing Mode

The protocol supports the unicast and broadcast modes. The following table describes the
address allocation rule.

Broadcast Address Slave Node Address Reserved

0 1–247 248–255

5.2 Frame Structure

Address Function Data Cyclic Redundancy
Code Check (CRC) Code

1 byte 1 byte 2xN bytes 2 bytes

NOTE

 The maximum size of a frame is 256 bytes.

 In a CRC code, the bit on the leftmost is least significant.
 Frame structure definitions in this document include only the function code and data.

5.3 Data Encoding

Modbus uses a big-Endian representation for addresses and payload data. When multiple
bytes are sent, the most significant payload bit is sent first.
An example ESN after combination is as follows:

Register Size Value

16 bits 0x1234

The first byte sent is 0x12, and then 0x34.

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 5

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 5 Data Link Layer

5.4 Interaction Process

A communication process is always initiated by the master node. Slave nodes do not initiate
communication processes.
In unicast mode, a slave node returns one response for each request from the master node. If
the master node does not receive any response from the slave node in 500 ms, the
communication process is regarded as timed out.
In broadcast mode, slave nodes receive instructions from the master node, but do not send
responses to the instructions.

5.5 CRC Checking

CRC applies to all bytes in front of the CRC code, which consists of 16 bits. The reference
code is as follows:
unsigned short count_CRC(unsigned char *addr, int num)
{
unsigned short CRC = 0xFFFF;
int i;
while (num--)
{
CRC ^= *addr++;
for (i = 0; i < 8; i++)
{
if (CRC & 1)
{
CRC >>= 1;
CRC ^= 0xA001;
}
else
{
CRC >>= 1;
}
}
}
return CRC;
}

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 6

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 6 Specifications in the Protocol

6 Specifications in the Protocol

In addition to the general specifications, the following special specifications apply to this
protocol:

1. The Lithium Battery address is in the range of 214 to 221，224 to 231. The address is 214
by default.
2. The baud rate is 9600 bit/s by default.
3. The data field in a frame is 64 bytes at most, that is, the maximum number of registers is
32.
4. Note the following points:
− Data is transferred in asynchronous RTU mode. Each frame consists of one start bit,
eight payload data bits, and one stop bit (10 bits in total).
− The CRC checking uses the calculation algorithm.

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 7

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 7 Application Layer

7 Application Layer

7.1 Function Code List

Function Code Sub-function Meaning Remarks
Code
0x03 Read command Continuously reads a
single register or multiple
registers.
0x06 Single-register write Writes into a single
command register.
0x10 Multiple-register Continuously writes into
write command multiple registers.

7.2 Exception Code List

Exception Exception Code Name Description
Code

0x01 Illegal Function Code The slave node receives a function code or
incorrect operation code which is not
supported by Modbus.
0x02 Illegal Data Address The received data address is invalid, or the
request register is not in the range of valid
registers.
0x03 Illegal Data Value A slave node receives invalid data such as
CRC checking error.
0x04 Slave Node Execution Failed A slave node fails to respond.
0x05 Confirm During transparent data transmission, if it
takes a long time for the slave node to
execute a command, the slave node sends a

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 8

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 7 Application Layer

Exception Exception Code Name Description

Code
message to indicate that the command has
been received before the communication
times out.

7.3 Reading and Writing Registers

7.3.1 Register Read Command
Table 7-1 Frame Format of a Request from a Master Node

Function Code 1 byte 0x03

Register Start Address 2 bytes 0x0000–0xFFFF

Number of Registers 2 bytes 1–125

NOTE
Function codes are describes in tables without addresses and CRC checking. The same applies to the rest
of the document.

Table 7-2 Frame Format of a Normal Response from a Slave Node

Function Code 1 byte 0x03

Number of Bytes 1 byte 2xN

Register Value 2xN bytes

NOTE
N is the number of registers.

Table 7-3 Frame Format of an Abnormal Response from a Slave Node

Error Code 1 byte 0x83

Exception Code 1 byte See the Exception Code

List.

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 9

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 7 Application Layer

7.3.2 Single-Register Write Command

Table 7-4 Frame Format of a Request from a Master Node

Function Code 1 byte 0x06

Register Address 2 bytes 0x0000–0xFFFF

Register Value 2 bytes 0x0000–0xFFFF

Table 7-5 Frame Format of a Normal Response from a Slave Node

Function Code 1 byte 0x06

Register Address 2 bytes 0x0000–0xFFFF

Register Value 2 bytes 0x0000–0xFFFF

Table 7-6 Frame Format of an Abnormal Response from a Slave Node

Error Code 1 byte 0x86

Exception Code 1 byte See the Exception Code

List.

7.3.3 Multiple-Register Write Command

Table 7-7 Frame Format of a Request from a Master Node

Function Code 1 byte 0x10

Register Start Address 2 bytes 0x0000–0xFFFF

Number of Registers 2 bytes 0x0000–0x007b

Number of Bytes 1 byte 2xN

Register Value 2 bytes Value

NOTE
N is the number of registers.

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 10

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 7 Application Layer

Table 7-8 Frame Format of a Normal Response from a Slave Node

Function Code 1 byte 0x10

Register Address 2 bytes 0x0000–0xFFFF

Number of Registers 2 bytes 0x0000–0x007b

Table 7-9 Frame Format of an Abnormal Response from a Slave Node

Error Code 1 byte 0x90

Exception Code 1 byte See the Exception Code List.

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 11

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 8 Signal List

8 Signal List

8.1 Collecting Signals

No. Name Unit Register Address Data Type Remarks
Busbar voltage V 0x0000 Unsigned int 16 Precision: 0.01
Battery voltage V 0x0001 Unsigned int 16 Precision: 0.01
Battery current A 0x0002 Signed int 16 Precision: 0.01
Remaining Battery % 0x0003 Unsigned int 16 Precision: 1
Capacity Percent (SOC)
Reserved 0x0004
Maximum cell °C 0x0005 Signed int 16 Precision: 1
temperature
Minimum cell °C 0x0006 Signed int 16 Precision: 1
temperature
Reserved \ 0x0007–0x000D
Module mode \ 0x000E Unsigned int 16

NOTE
0: hibernating; 1: low power; 2: charge; 3: discharge; 4: standby; 0xFFFF: unknown

Reserved \ 0x000F–0x0011 Unsigned int 16

Cell 1 temperature °C 0x0012 Signed int 16 Precision: 1
Cell 2 temperature °C 0x0013 Signed int 16 Precision: 1
Cell 3 temperature °C 0x0014 Signed int 16 Precision: 1
Cell 4 temperature °C 0x0015 Signed int 16 Precision: 1
Cell 5 temperature °C 0x0016 Signed int 16 Precision: 1
Cell 6 temperature °C 0x0017 Signed int 16 Precision: 1
Cell 7 temperature °C 0x0018 Signed int 16 Precision: 1

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 12

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 8 Signal List

No. Name Unit Register Address Data Type Remarks

Cell 8 temperature °C 0x0019 Signed int 16 Precision: 1
Cell 9 temperature °C 0x001A Signed int 16 Precision: 1
Cell 10 temperature °C 0x001B Signed int 16 Precision: 1
Cell 11 temperature °C 0x001C Signed int 16 Precision: 1
Cell 12 temperature °C 0x001D Signed int 16 Precision: 1
Cell 13 temperature °C 0x001E Signed int 16 Precision: 1
Cell 14 temperature °C 0x001F Signed int 16 Precision: 1
Cell 15 temperature °C 0x0020 Signed int 16 Precision: 1
Cell 16 temperature °C 0x0021 Signed int 16 Precision: 1
Cell 1 voltage V 0x0022 Unsigned int 16 Precision: 0.001
Cell 2 voltage V 0x0023 Unsigned int 16 Precision: 0.001
Cell 3 voltage V 0x0024 Unsigned int 16 Precision: 0.001
Cell 4 voltage V 0x0025 Unsigned int 16 Precision: 0.001
Cell 5 voltage V 0x0026 Unsigned int 16 Precision: 0.001
Cell 6 voltage V 0x0027 Unsigned int 16 Precision: 0.001
Cell 7 voltage V 0x0028 Unsigned int 16 Precision: 0.001
Cell 8 voltage V 0x0029 Unsigned int 16 Precision: 0.001
Cell 9 voltage V 0x002A Unsigned int 16 Precision: 0.001
Cell 10 voltage V 0x002B Unsigned int 16 Precision: 0.001
Cell 11 voltage V 0x002C Unsigned int 16 Precision: 0.001
Cell 12 voltage V 0x002D Unsigned int 16 Precision: 0.001
Cell 13 voltage V 0x002E Unsigned int 16 Precision: 0.001
Cell 14 voltage V 0x002F Unsigned int 16 Precision: 0.001
Cell 15 voltage V 0x0030 Unsigned int 16 Precision: 0.001
Cell 16 voltage V 0x0031 Unsigned int 16 Precision: 0.001
Reserved \ 0x0032–0x0041 Unsigned int 16
Battery discharge times Times 0x0042–0x0043 Unsigned int 32 Statistics data (4 bytes)
(The number of
discharge times is
counted once while the
mode is switched to
discharge and the
discharge time is greater
than 5 min)

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 13

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 8 Signal List

No. Name Unit Register Address Data Type Remarks

Discharge AH AH 0x0044–0x0045 Unsigned int 32 Statistics data (4 bytes)
Critical battery alarm \ 0x0046 Unsigned int 16 Expressed in bit
status 1

NOTE
1: alarm; 0: normal or reserved
Bits0: warning
Bits 1–6: fault
Bits 7–15: reserved

Critical battery alarm \ 0x0047 Unsigned int 16 Expressed in bit

status 2

NOTE
1: alarm; 0: normal or reserved
Bit 0–15: fault
Please query the 0x0320 register to obtain the cell fault alarm while the number of battery cells is greater than 16

Major battery alarm \ 0x0048 Unsigned int 16 Expressed in bit

status

NOTE
1: alarm; 0: normal or reserved
Bit 0–14: protection
Bit 15: reserved

Minor battery alarm \ 0x0049 Unsigned int 16 Expressed in bit

status

NOTE
1: alarm; 0: normal or reserved
Bit 0–9: warning
Bits 10–15: reserved

Module alarm status \ 0x004A Unsigned int 16 Expressed in bit

NOTE
1: alarm; 0: normal or reserved
Bit 0; Bit 2; Bit 4; Bit 9; Bit 10; Bit 12: warning
Bit 3; Bit 5; Bit 7; Bit 8; Bit 11: protection
Bit 6; Bit 13: fault
Bits 14–15: reserved

Software version \ 0x0101 Unsigned int 16

Hardware version \ 0x0102 Unsigned int 16
BootLoader version \ 0x0103 Unsigned int 16
Device type \ 0x0104 Unsigned int 16

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 14

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 8 Signal List

No. Name Unit Register Address Data Type Remarks

NOTE
0x01: The BMS and lithium battery are integrated.
0x02: The BMS and lithium battery are separate.

Manufacturer \ 0x0105 Unsigned int 16

NOTE
0x00: Huawei

Sub-software ID \ 0x0106 Unsigned int 16

Battery capacity Ah 0x0107 Unsigned int 16 Precision: 1
Number of battery cells Cell 0x010F Unsigned int 16
Output power W 0x0204 Unsigned int 16 Precision: 1
External busbar voltage V 0x0205 Unsigned int 16 Precision: 0.01
Accumulated Battery Hour 0x209–0x020A Unsigned int 32 Statistics data (4 bytes)
Running Time
Cell 17 temperature °C 0x0300 Signed int 16 Precision: 1(This
command is valid only
when the number of
battery cell is greater
than 16)
Cell 18 temperature °C 0x0301 Signed int 16 Precision: 1(This
command is valid only
when the number of
battery cell is greater
than 16)
Cell 19 temperature °C 0x0302 Signed int 16 Precision: 1(This
command is valid only
when the number of
battery cell is greater
than 16)
Cell 20 temperature °C 0x0303 Signed int 16 Precision: 1(This
command is valid only
when the number of
battery cell is greater
than 16)
Cell 21 temperature °C 0x0304 Signed int 16 Precision: 1(This
command is valid only
when the number of
battery cell is greater
than 16)
Cell 22 temperature °C 0x0305 Signed int 16 Precision: 1(This
command is valid only
when the number of
battery cell is greater

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 15

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 8 Signal List

No. Name Unit Register Address Data Type Remarks

than 16)
Cell 23 temperature °C 0x0306 Signed int 16 Precision: 1
(This command is valid
only when the number
of battery cell is greater
than 16)
Cell 24 temperature °C 0x0307 Signed int 16 Precision: 1
(This command is valid
only when the number
of battery cell is greater
than 16)
Cell 17 voltage V 0x0310 Unsigned int 16 Precision: 0.001
(This command is valid
only when the number
of battery cell is greater
than 16)
Cell 18 voltage V 0x0311 Unsigned int 16 Precision: 0.001
(This command is valid
only when the number
of battery cell is greater
than 16)
Cell 19 voltage V 0x0312 Unsigned int 16 Precision: 0.001
(This command is valid
only when the number
of battery cell is greater
than 16)
Cell 20 voltage V 0x0313 Unsigned int 16 Precision: 0.001
(This command is valid
only when the number
of battery cell is greater
than 16)
Cell 21 voltage V 0x0314 Unsigned int 16 Precision: 0.001
(This command is valid
only when the number
of battery cell is greater
than 16)
Cell 22 voltage V 0x0315 Unsigned int 16 Precision: 0.001
(This command is valid
only when the number
of battery cell is greater
than 16)
Cell 23 voltage V 0x0316 Unsigned int 16 Precision: 0.001
(This command is valid
only when the number

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 16

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 8 Signal List

No. Name Unit Register Address Data Type Remarks

of battery cell is greater
than 16)
Cell 24 voltage V 0x0317 Unsigned int 16 Precision: 0.001
(This command is valid
only when the number
of battery cell is greater
than 16)
Critical battery alarm \ 0x0320 Unsigned int 16 Expressed in bit
status 3

NOTE
1: alarm; 0: normal or reserved
Bits 0–7: fault
Bits 8–15: reserved
This command is valid only when the number of battery cell is greater than 16

Report battery model \ 0x0332~033D Unsigned int 16 For example：

ESM-48100B1
ASCLL:
0x4553 0x4D5F 0x3438
0x3130 0x3042 0x31FF
0xFFFF 0xFFFF
0xFFFF 0xFFFF
0xFFFF 0xFFFF
Discharge WH WH 0x0342–0x0343 Unsigned int 32 Statistics data (4 bytes)

8.2 Setting Parameter Signals

No. Name Register Address Default Value Range Remarks
1 Year 0x1000 2000–2199
2 Month 0x1001 1–12
3 Day 0x1002 1–31
4 Hour 0x1003 0–23
5 Minute 0x1004 0–59
6 Second 0x1005 0–59

NOTE
When a parameter signal is set, the signal collection command must be supported. In other words, the
register must be readable and writable.

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 17

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 9 Data Type Description

9 Data Type Description

Data Type Description Invalid Value

Unsigned int 32 Unsigned integer (four bytes) 0xFFFFFFFF
Unsigned int 16 Unsigned short integer (two bytes) 0xFFFF
Signed int 16 Signed short integer (two bytes) 0x8000
Unsigned int 8 Unsigned short integer (one byte) 0xFF
Signed int 8 Signed short integer (one byte) 0x80

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 18

Copyright © Huawei Technologies Co., Ltd.
Lithium Battery Modbus
Communications Protocol 10 Data Transmission and Reception

10 Data Transmission and Reception

Data in this protocol:

 If the data precision is 0.1 (one decimal point), the TX and RX data should be multiplied
by 10.
 If the precision is 0.01(two decimal point), the TX and RX data should be multiplied by
100.
 If the precision is 0.001(three decimal point), the TX and RX data should be multiplied
by 1000.

Issue 1.02 (2019-10-15) Huawei Proprietary and Confidential 19

Copyright © Huawei Technologies Co., Ltd.