Company Logo
How to Build an AIS 140 Compliant VLTD

How to Build an
AIS 140 Compliant VLTD

An engineer's checklist for building a Vehicle Location Tracking Device that passes AIS 140 certification and the state Backend Control Centre integration test. It covers the hardware bill of materials with real part numbers, the firmware requirements, the data packet structure, the ARAI and ICAT test preparation, EMC pre-compliance, and a realistic certification timeline.

ORIENTATION Icon

ORIENTATION

Building to the Standard, Not Just Around It

A VLTD looks like a simple product on the surface: a GNSS receiver, a cellular modem, a microcontroller, a battery, and a few buttons in an enclosure. The difficulty is that AIS 140 specifies behavior across all of these subsystems at once, and the device only passes if every clause is satisfied together. A tracker that reports position perfectly but mishandles the emergency packet, or supports GPS but not NavIC, will fail. This guide walks the full hardware and firmware checklist in the order it is actually built, with the part choices used in production.

If you need the regulatory context first, including who must comply and how the state backends work, start with the companion guide on what AIS 140 is and what it requires. This guide assumes you already understand why these features are mandated and focuses on how to implement them. The full device program is described under AIS 140 GPS tracking device development for India.

HARDWARE 1 Icon

HARDWARE 1

GNSS Receiver with NavIC

The single most important component decision is the GNSS module, because NavIC support is a hardware property that cannot be patched in later. The receiver and antenna front end must handle the NavIC L5 band at 1176.45 MHz alongside the GPS L1 band. A common choice is the Quectel L89 (which integrates an active antenna and supports IRNSS L5) or the Quectel LC86G in NavIC variant for designs that use a separate external antenna. Both give multi-constellation fixes across GPS, GLONASS, Galileo, and NavIC, which is what the standard and the better positioning robustness both call for.

The antenna is as important as the receiver. An L5 capable patch antenna with a clean ground plane and a low-noise amplifier sized for the combined L1 and L5 bands is required to actually acquire NavIC satellites. A frequent mistake is to specify a NavIC capable module but pair it with an L1-only antenna, after which the device never locks onto an IRNSS satellite during testing. The receiver, the antenna, and the RF path have to be designed as one. This is covered under NavIC and IRNSS tracker development, and the RF specifics live in antenna and RF design for trackers.

Checklist for this block: multi-GNSS receiver with confirmed NavIC L5 support, L1 plus L5 capable active antenna, LNA gain and noise figure budgeted for the cable run, and a tested time-to-first-fix under 35 seconds cold and a few seconds hot. Validate NavIC lock specifically, since a module can pass on GPS alone and still satisfy your bench test while failing the standard.

HARDWARE 2 Icon

HARDWARE 2

Modem, Dual SIM, and Backup Battery

AIS 140 requires the device to keep reporting across network outages, which is why dual SIM is part of the standard. A common choice is the Quectel EC200 series LTE Cat 1 modem, which gives adequate throughput for telemetry with good India network compatibility and a manageable power profile. The two SIM slots let the firmware fail over between operators, and at least one SIM should be on a network with strong rural coverage. The modem talks to the MCU over UART or USB with hardware flow control, and the firmware drives it through an AT command layer wrapped in a robust state machine.

The internal backup battery is mandatory so the device keeps reporting for a defined period after main vehicle power is cut, which is exactly the scenario in a tamper or accident event. A small lithium polymer or LiFePO4 cell sized for at least the standard's minimum backup duration, paired with a charger IC and a fuel gauge, covers this. LiFePO4 is worth the slightly higher cost for the automotive temperature range and cycle life. The power tree feeds the GNSS, the modem (which has high peak current during transmit bursts), and the MCU, so the regulator and the battery both have to handle that peak. The power state management that makes the backup behavior reliable is part of GPS tracker firmware development.

Checklist for this block: dual SIM with automatic operator failover, LTE Cat 1 or better modem with India band support, internal backup cell sized above the minimum backup time with margin, charger and fuel gauge, and a regulator rated for modem transmit peaks. Confirm the device reconnects cleanly after a network drop and after a SIM switch without losing buffered data.

HARDWARE 3 Icon

HARDWARE 3

MCU, Inputs, Accelerometer, and Tamper

For the controller the STM32 family fits well, typically an STM32L4 for the low-power profile or an STM32F4 where more compute headroom is wanted. The STM32 gives enough UARTs for the modem and GNSS, SPI and I2C for sensors, ADC channels for the analog inputs, and the low-power modes needed to manage the backup battery budget. It also has a mature toolchain and long-term availability, which matters for a product that must stay in production through a multi-year certification and fleet lifecycle. The broader embedded scope is described under STM32 firmware development.

The device needs digital inputs for ignition sense and door status, analog inputs for sensor signals such as fuel level, and at least one panic button input. A three-axis accelerometer is required for motion and event detection, useful for both harsh-driving alerts and for confirming the vehicle is actually stationary before entering a low-power state. Tamper detection covers enclosure open detection and antenna disconnect detection, both of which must raise an alert to the backend. The panic button input must be debounced in hardware and firmware and routed so a press can preempt whatever the device is currently doing.

Checklist for this block: STM32L4 or STM32F4 class MCU with spare UART, SPI, I2C, and ADC, ignition and door digital inputs, analog sensor inputs, three-axis accelerometer, one or more panic button inputs, enclosure tamper switch, and antenna disconnect detection. This sensor and input layer is the part most often under-specified when a generic tracker is retrofitted for AIS 140. The full device build is covered under GPS tracking device development.

FIRMWARE Icon

FIRMWARE

Firmware Requirements

The firmware is where AIS 140 conformance is really decided. The reporting interval must be configurable over the air, defaulting to roughly 60 seconds with ignition on and a longer interval with ignition off, and the backend must be able to change it remotely. Store-and-forward is essential: when the network is down, the device buffers position records in non-volatile memory and flushes them in order once the link returns, so the backend never sees a gap. The buffer needs enough depth to cover a realistic outage, often several hours of records, and the flush must preserve chronological order.

The device must support over-the-air firmware update with a safe bootloader and rollback, because state backends and packet formats change over the device lifetime and a fleet of thousands cannot be recalled to a workshop for a firmware change. Server failover logic lets the device report to multiple destinations, typically the operator platform and the state Backend Control Centre, and recover if one is unreachable. The emergency packet must have absolute priority: when the panic button fires, the firmware preempts the current transmission, sends the emergency packet first, and ensures it goes out even when running on the backup battery after main power loss.

Checklist for this block: configurable reporting intervals set over the air, store-and-forward buffering in non-volatile memory with ordered flush, OTA update with bootloader and rollback, multi-server reporting with failover, emergency packet priority and power-fail delivery, dual-SIM failover handling, and health reporting that includes battery, signal, and tamper state. This is the heart of GPS tracker firmware development, where the queueing and failover logic separates a device that passes from one that fails the state integration test.

PROTOCOL Icon

PROTOCOL

The AIS 140 Data Packet to the BCC

The device communicates with the state Backend Control Centre using a structured packet protocol derived from the AIS 140 data specification. The connection lifecycle starts with a login packet that identifies the device by its IMEI and unique vehicle identity, followed by periodic location packets and heartbeat packets, with emergency packets inserted at the front of the queue when triggered. Each packet carries a header, a packet type, the vehicle identity, a timestamp, latitude and longitude, speed, heading, the number of satellites, the GNSS fix status, ignition and input states, the network and signal information, and a checksum.

The exact field order, delimiters, and packet types vary by state because each state implemented its own variant of the base specification. This is the part that most often surprises teams: a device can be functionally certified and still need per-state packet handling. The protocol layer is built to be data-driven so a new state format is a configuration change rather than a firmware fork. The transport is usually a persistent TCP connection to the state-designated IP and port, with the device reconnecting and resuming store-and-forward on any drop. Designing this packet and transport layer cleanly is part of AIS 140 device work and the broader telematics and GPS tracking platform engineering behind it.

Checklist for this block: login packet with IMEI and vehicle identity, periodic location and heartbeat packets, priority emergency packet, correct field order and checksum per the target state format, persistent TCP transport with reconnect, and ordered store-and-forward replay after reconnection. Validate against the actual state BCC test endpoint, not just a local mock, before you submit for state approval.

CERTIFICATION Icon

CERTIFICATION

ARAI / ICAT Test Prep and EMC Pre-Compliance

Certification at ARAI or ICAT tests functional conformance to AIS 140 plus the environmental and electrical robustness expected of an automotive component. Before you book the accredited slot, run pre-compliance in-house or at a local lab. EMC pre-compliance catches the common killers cheaply: radiated emissions from the modem and switching regulators, conducted emissions on the vehicle power line, and immunity to the electrical transients present in a 12V or 24V automotive supply. A failure at the accredited lab means a redesign, a rebuild, and a re-test, which is the most expensive way to discover a missing filter capacitor or a poor ground plane.

The functional test suite exercises the GNSS and NavIC performance, the reporting intervals, the emergency packet behavior, the backup battery operation, the dual-SIM failover, the tamper alerts, and the data packet format. Prepare a test plan that maps every AIS 140 clause to a verification step, and bring a stable firmware build that has already been validated against a representative BCC. This whole path, including resolving non-conformances, is covered through ARAI and ICAT tracker certification support and the underlying AIS 140 NavIC compliance program.

Checklist for this block: EMC pre-compliance on radiated and conducted emissions and automotive transient immunity, a clause-by-clause functional test plan, validated firmware against a representative state backend, environmental margin on temperature and vibration, and a documentation package ready for submission. The cleaner the pre-compliance, the shorter the certified test cycle.

TIMELINE Icon

TIMELINE

A Realistic Certification Timeline

Teams routinely underestimate how long the full path takes. Hardware design and the first prototype run typically take 8 to 12 weeks, including the GNSS and antenna RF validation that confirms NavIC lock. Firmware development, including the store-and-forward, OTA, dual-SIM failover, and the per-state packet layer, runs in parallel but usually needs 10 to 16 weeks to reach a stable build worth submitting. EMC pre-compliance and the fixes it surfaces add another few weeks.

The accredited certification window at ARAI or ICAT itself depends on lab scheduling and the number of non-conformances found, and commonly runs 6 to 12 weeks from submission to certificate. After that, each state Backend Control Centre integration test is a separate step, and the live feed validation for a given state can take an additional few weeks. Budgeting six to nine months from kickoff to a device that is certified and approved in at least one state is realistic for a fresh design. Compressing it usually means running hardware, firmware, and pre-compliance aggressively in parallel rather than skipping steps.

The way to protect the timeline is to validate the riskiest items first: confirm NavIC lock on real hardware early, test the emergency path under power loss early, and run the packet layer against a real state endpoint early. These are the three areas where late discovery forces a redesign. Everything else can usually be fixed without restarting the hardware.

FAQ Icon

FAQ

Frequently Asked Questions

Which GNSS module should be used for an AIS 140 VLTD?

You need a multi-constellation module with confirmed NavIC L5 support, such as the Quectel L89 with integrated active antenna or the Quectel LC86G NavIC variant with an external L1 plus L5 antenna. NavIC support must be in the receiver and antenna, since it cannot be added by firmware to a GPS-only module.

Why is dual SIM required?

AIS 140 expects the device to keep reporting across network outages. Two SIMs on different operators let the firmware fail over so the live feed to the state backend is not lost when one network drops. At least one SIM should be on a network with strong rural coverage.

What does store-and-forward do in a VLTD?

When the cellular link is down, the device buffers position records in non-volatile memory and replays them in order once the link returns. This means the state Backend Control Centre receives a continuous track with no gaps, which is needed for both compliance and useful fleet data.

How is the emergency packet different from a normal report?

The emergency packet is triggered by a panic button press, jumps to the front of the transmission queue, preempts any in-progress report, and must be delivered even when the device is running on its internal backup battery after main vehicle power is cut. The firmware priority queue is what makes this reliable.

Why might a certified device still be rejected by a state?

ARAI or ICAT certification proves functional conformance, but each state runs its own Backend Control Centre integration test with state-specific packet formats and login sequences. A certified device must still pass the live feed validation for the specific state before vehicles can be registered there.

How long does it take to build and certify a VLTD?

A fresh design typically takes six to nine months from kickoff to a device certified and approved in at least one state. Hardware and firmware run in parallel, EMC pre-compliance and the accredited certification window each add weeks, and every state backend integration is a separate step after certification.

AIS 140 VLTDs Designed and Certified End to End

Scope covers GNSS and NavIC hardware, dual-SIM and backup power design, STM32 firmware with store-and-forward and OTA, the per-state packet protocol, EMC pre-compliance, and the full ARAI or ICAT certification path through to state backend approval.

Whether you are starting a new VLTD program or trying to get a stalled certification across the line, share your device details and requirements to get a tailored approach and a realistic timeline.

Schedule a Free Consultation