logo elektroda
logo elektroda
X
logo elektroda

SP548E LED SPI IoT Controller with Beken BK7238 - Discovery Trail

divadiow 4434 8
ADVERTISEMENT
  • First look at SP548E with Beken BK7238

    #1 21150972
    divadiow
    Level 38  
    Posts: 5221
    Help: 449
    Rate: 918
    Hi. I've just taken delivery of ANOTHER LED/SPI IoT controller. This is the SP548E from Ali Express https://fr.aliexpress.com/item/1005007039123431.html

    LED/SPI IoT Controller SP548E with remote control.

    Not knowing what it would come with, I was surprised to see it has a Beken BK7238, my first, at its core.

    LED/SPI IoT controller SP548E circuit board with Beken BK7238 chip. Black LED/SPI IoT controller SP548E with three buttons on top.

    I'll post as I discover more.
    Attachments:
    • BK7238_Datasheet.pdf (825.79 KB) You must be logged in to download this attachment.
  • ADVERTISEMENT
  • BK7238 uses non-standard encryption key

    #2 21150976
    divadiow
    Level 38  
    Posts: 5221
    Help: 449
    Rate: 918
    reminded me of this https://github.com/openshwprojects/BK7231GUIFlashTool/issues/30

    Added after 2 [hours] 8 [minutes]:

    RT-Threads bootloader

    Code: Text
    Log in, to see the code


    Easy UART Flasher successfully reads the coeff key in BK-N mode but fails to backup firmware.

    Screenshot of BK7231 Easy UART Flasher software showing configuration and results of flashing operation with settings for COM6 port for BK7231N chip.

    Code: Text
    Log in, to see the code


    BK-T mode reads the flash but fails CRC at the end, so no file saved.

    Screenshot of Easy UART Flasher software with a CRC error message.

    Attempt with BKFIL bk_loader.exe was successful

    Code: Text
    Log in, to see the code


    dump attached.

    Circuit board panel with three buttons and labels: GND, 1TX, 1RX, and CEN.

    log out and flash download was both on 1RX/1TX
    Attachments:
    • BKFIL_x1_dump_20240711_154437_0x0_0x200000.bin (2 MB) You must be logged in to download this attachment.
  • ADVERTISEMENT
  • BanlanX app link and OTA offset 0x132000

    #3 21151364
    divadiow
    Level 38  
    Posts: 5221
    Help: 449
    Rate: 918
    The QR code in the manual links you to some weird non-store APK download from https://download.ledhue.com/page/scenex/

    www.ledhue.com just redirects to https://github.com/Spled/spled.github.io

    The app is called BanlanX and is also available in the Play Store https://play.google.com/store/apps/details?id=com.spled.scenex&hl=en_GB

    App screen displaying the process of adding a device named SP548E. Mobile app settings screen with options like Wi-Fi, color correction, and more. BanlanX app screen with main view showing available SP548E device. App interface for controlling SP548E device with options for dynamic, solid, music, and DIY modes. Smartphone screen with two app download icons.

    Added after 43 [minutes]:

    OTA is 0x132000 and if you flash OBK rbl:

    Code: Text
    Log in, to see the code


    doesn't boot of course
  • ADVERTISEMENT
  • #4 21158176
    p.kaczmarek2
    Moderator Smart Home
    Posts: 14771
    Help: 659
    Rate: 12914
    Nice finding, have you tried to check "Skip key check" in Advanced so this operation can continue:
    
    ^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^
    WARNING! Non-standard encryption key!
    Please report to forum https://www.elektroda.com/rtvforum/forum51.html 
    Or just try using BK7231M mode 
    ^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^
    There was no result to save.
    Helpful post? Buy me a coffee.
  • ADVERTISEMENT
  • #5 21158182
    divadiow
    Level 38  
    Posts: 5221
    Help: 449
    Rate: 918
    p.kaczmarek2 wrote:
    Nice finding, have you tried to check "Skip key check" in Advanced so this operation can continue:

    I'm sure I covered all the bases by trying all options but will do it again
  • Easy Flasher restores erased BK7238 flash backups

    #6 21158802
    divadiow
    Level 38  
    Posts: 5221
    Help: 449
    Rate: 918
    argh. clouded by the excitement I guess. yes, it dumps with skip key check in N and M mode. that's embarrassing. I know the skip check is there

    Screenshot of BK7231 Easy UART Flasher program with a green success reading message.

    Comparison of two binary files in a hex editor with a message indicating the files are identical.

    Added after 56 [minutes]:

    and from a totally erased flash, not even bootloader, you can restore backup using Easy Flasher too

    Screenshot of Easy UART Flasher program with a successfully completed writing process.

    boots again
    Console screen showing logs related to the BK7238 processor.

    so I guess you could say EF supports BK7238. Maybe just needs a new select chip type menu option so saved backups have the right filename? any other tests I should perform?
  • #7 21159041
    p.kaczmarek2
    Moderator Smart Home
    Posts: 14771
    Help: 659
    Rate: 12914
    So basically, I need to copy BK7231N path, rename to BK7238, and change key?
    Helpful post? Buy me a coffee.
  • #8 21159086
    divadiow
    Level 38  
    Posts: 5221
    Help: 449
    Rate: 918
    p.kaczmarek2 wrote:
    So basically, I need to copy BK7231N path, rename to BK7238


    it seems so.

    p.kaczmarek2 wrote:
    and change key?


    change it so it ignores key check automatically with BK7238 mode or that it finds 94017a00 94017a00 94017a00 94017a00 as an acceptable key and to carry on regardless?

    I wonder what other keys are in use on BK7238 devices. Do Tuya use their BK-N key on their BK7238 devices?
  • Helpful post

    BK7238 pinout and WS2811 color issues observed

    #9 21625998
    divadiow
    Level 38  
    Posts: 5221
    Help: 449
    Rate: 918
    Giving this another look now that BK7238 and SPI is supported.

    SP548E SPI RGB LED controller with label and cable connector White LED controller with three buttons labeled M, power, and S

    P28 S button
    P22 M button
    P21 Power button
    P0 PCB blue led (D5)
    P1 PCB green led (D4)
    P16 MOSI/SPI

    P9 IR pad (no IR on my device) is connected. 100ohm resistor in path (R22).
    Close-up of a PCB with IR+, IR-, W, C labels and several resistors, capacitors, and LEDs.

    Didn't have to overwrite bootloader on this device for OTA to work as original is already set for 0x132000

    Code: Text
    Log in, to see the code


    is my autoexec.bat. WS2811 strip behaves a little odd - speed and colour doesn't match how it behaves on BK7231N/CBU. No switching of RGB/BRG etc corrects it. Pure green/red/blue are not correct prime colours. Power on/off is either ineffective or pauses colours instead of turning off.





    WS2812B behaves as expected.


Topic summary

LABEL_AI_GENERATED
Discussion of the SP548E LED/SPI IoT controller from AliExpress, which was found to use a Beken BK7238 SoC running an RT-Thread bootloader. Initial flashing attempts with Easy UART Flasher showed that firmware backup failed in BK-N mode unless “Skip key check” was enabled; with that option, dumping worked in both BK7231N and BK7231M modes. The device’s OTA partition was identified at 0x132000, and an OpenBK/OBK RBL image could be flashed and restored even from a fully erased flash, confirming recovery support. The controller uses the BanlanX app ecosystem, with a QR code pointing to ledhue.com/download and the app also available in Google Play. Later testing after BK7238 and SPI support was added identified GPIO mappings for buttons, LEDs, MOSI/SPI, and an IR pad, and showed that WS2812B strips behaved correctly while WS2811 strips had incorrect color/speed behavior and power control issues.
AI summary based on the discussion. May contain errors.
ADVERTISEMENT