BSL100 - the next generation: Infineon Tricore
You cannot see BSL100 as a direct successor of BDM100, but it takes direct access on processor and EPROM memory of the ECU over a dedicated port like the BDM system.
Commonly named as bootmode this port is the Infineon pendent to the Motorola/Freescale BDM port. In contrast to the BDM port, whose pins only have this purpose, the bootmode is done over one of the CAN busses of the processor.
Because new assembled ECUs are programmed over this port, Bosch has put it on a 14 pin pad array. It looks like the BDM port but works completely different.
To put the processor into the bootmode a modification on the printed circuit board is necessary. This modification depends on the type of the processor and so the type of the ECU. In the most simple case one pin of the processor must be connected to ground. Therefore a contact needle with a wire and a tripod is attached to the system. The wire must be connected to the BSL130.L probe.
The power is also supplied over the probe, but is spite to the BDM system the voltage is not manually switchable but automatically controlled by the BSL100.
Currently implemented is an automatically recognition of the processors TC1766, TC1767, TC1796 and TC1797, as well as the external Eproms 29CD16, 29CD32, 58BW16BB and BT.
To connect the ECU the positioning frame BDM140.P with the corresponding probe BSL130 or BSL131 will be needed.
Bootmode Password = TPROT Level
The ECU manufacturers have recognized quickly the bootmode read/programming as security hole. Depending on the car manufacturers and their directions this security hole was close by setting a bootmode password. That is the case at TPROT8-10.
Depending on the car manufacturer it is possible to read out the password with some tricks. This is the case at VAG and older BMW. At other car manufacturers like Volvo it is not possible.
With the new BSL-ADP also passwords can be read which could not be read with the BSL100 alone.