element14 Community
element14 Community
    Register Log In
  • Site
  • Search
  • Log In Register
  • Community Hub
    Community Hub
    • What's New on element14
    • Feedback and Support
    • Benefits of Membership
    • Personal Blogs
    • Members Area
    • Achievement Levels
  • Learn
    Learn
    • Ask an Expert
    • eBooks
    • element14 presents
    • Learning Center
    • Tech Spotlight
    • STEM Academy
    • Webinars, Training and Events
    • Learning Groups
  • Technologies
    Technologies
    • 3D Printing
    • FPGA
    • Industrial Automation
    • Internet of Things
    • Power & Energy
    • Sensors
    • Technology Groups
  • Challenges & Projects
    Challenges & Projects
    • Design Challenges
    • element14 presents Projects
    • Project14
    • Arduino Projects
    • Raspberry Pi Projects
    • Project Groups
  • Products
    Products
    • Arduino
    • Avnet & Tria Boards Community
    • Dev Tools
    • Manufacturers
    • Multicomp Pro
    • Product Groups
    • Raspberry Pi
    • RoadTests & Reviews
  • About Us
    About the element14 Community
  • Store
    Store
    • Visit Your Store
    • Choose another store...
      • Europe
      •  Austria (German)
      •  Belgium (Dutch, French)
      •  Bulgaria (Bulgarian)
      •  Czech Republic (Czech)
      •  Denmark (Danish)
      •  Estonia (Estonian)
      •  Finland (Finnish)
      •  France (French)
      •  Germany (German)
      •  Hungary (Hungarian)
      •  Ireland
      •  Israel
      •  Italy (Italian)
      •  Latvia (Latvian)
      •  
      •  Lithuania (Lithuanian)
      •  Netherlands (Dutch)
      •  Norway (Norwegian)
      •  Poland (Polish)
      •  Portugal (Portuguese)
      •  Romania (Romanian)
      •  Russia (Russian)
      •  Slovakia (Slovak)
      •  Slovenia (Slovenian)
      •  Spain (Spanish)
      •  Sweden (Swedish)
      •  Switzerland(German, French)
      •  Turkey (Turkish)
      •  United Kingdom
      • Asia Pacific
      •  Australia
      •  China
      •  Hong Kong
      •  India
      •  Japan
      •  Korea (Korean)
      •  Malaysia
      •  New Zealand
      •  Philippines
      •  Singapore
      •  Taiwan
      •  Thailand (Thai)
      •  Vietnam
      • Americas
      •  Brazil (Portuguese)
      •  Canada
      •  Mexico (Spanish)
      •  United States
      Can't find the country/region you're looking for? Visit our export site or find a local distributor.
  • Translate
  • Profile
  • Settings
NFC/RFID
  • Challenges & Projects
  • Project14
  • NFC/RFID
  • More
  • Cancel
NFC/RFID
Forum RFID tag in car/motorcycle key
  • Blog
  • Forum
  • Documents
  • Events
  • Polls
  • Files
  • Members
  • Mentions
  • Sub-Groups
  • Tags
  • More
  • Cancel
  • New
Join NFC/RFID to participate - click to join for free!
Actions
  • Share
  • More
  • Cancel
Forum Thread Details
  • Replies 9 replies
  • Subscribers 8 subscribers
  • Views 2988 views
  • Users 0 members are here
  • rfid
  • nfc
Related

RFID tag in car/motorcycle key

Kilohercas
Kilohercas over 5 years ago

Hello,
Does any one has more information what kind NFC tag is used in car/motorcycle key ?

Any key-less car key can turn on car without need of battery, and i would like to know what kind of standard dues it use.

I tested my car keys with phones NFC reader, but it did not provide any lock on RFID chip inside it, so how can i read it ?

And also, is it static code, or is it some-kind dynamic, so i can't clone int that easy ?

Thank you !

  • Sign in to reply
  • Cancel

Top Replies

  • Jan Cumps
    Jan Cumps over 5 years ago in reply to Kilohercas +2
    In recent cars, the communication is via certificates and keys (sic). Record and playback will (hopefully for car owners) not work. If you succeed, record and document it and you'll have a speaking spot…
  • Kilohercas
    Kilohercas over 5 years ago +1
    Did some probing, it turns out to be 133kHz signal. SO it looks like i will be making my own pick up and transmitter circuit based on MCU
  • Kilohercas
    Kilohercas over 5 years ago in reply to Jan Cumps +1
    Probing showed static data. So it does not look to be anything fancy. One fancy thing is that in excitation stage, it does generate some data. That can be that if only this data is present, key RFID chip…
Parents
  • Kilohercas
    Kilohercas over 5 years ago

    Did some probing, it turns out to be 133kHz signal. SO it looks like i will be making my own pick up and transmitter circuit based on MCU image

    • Cancel
    • Vote Up +1 Vote Down
    • Sign in to reply
    • Cancel
  • Jan Cumps
    Jan Cumps over 5 years ago in reply to Kilohercas

    In recent cars, the communication is via certificates and keys (sic). Record and playback will (hopefully for car owners) not work.

    If you succeed, record and document it and you'll have a speaking spot on the next Black Hat conference.

    • Cancel
    • Vote Up +2 Vote Down
    • Sign in to reply
    • Cancel
Reply
  • Jan Cumps
    Jan Cumps over 5 years ago in reply to Kilohercas

    In recent cars, the communication is via certificates and keys (sic). Record and playback will (hopefully for car owners) not work.

    If you succeed, record and document it and you'll have a speaking spot on the next Black Hat conference.

    • Cancel
    • Vote Up +2 Vote Down
    • Sign in to reply
    • Cancel
Children
  • Kilohercas
    Kilohercas over 5 years ago in reply to Jan Cumps

    Probing showed static data.

    So it does not look to be anything fancy. One fancy thing is that in excitation stage, it does generate some data. That can be that if only this data is present, key RFID chip will send back any data to motorcycle.

    In this scenario, it is perfectly safe, since you can't read key and replay it off the motorcycle, but if you are at the coil when you normally unlock motorcycle with RFID, you will know what data was send, and what data was replayed. And you just need to replay data you capture after excitation ping.

    So as safety logic goes, if you already have good key in correct location, where is no point of doing any scrambling/rolling code generation, since that means you have original key. But if you try to copy it outside motorcycle, you will need to generate correct key to do it. Where is 20bit code, and it is send around 100ms, that means in order to copy code, you have to probe it 100 000s or 30minutes.

    I would say it is perfectly safe. It would be more safe is key would generate ther data on different ping message, in that case, you will have to replay all messages, it would take days of work to unlock it..

     

    Ping message:

    image

    • Cancel
    • Vote Up +1 Vote Down
    • Sign in to reply
    • Cancel
element14 Community

element14 is the first online community specifically for engineers. Connect with your peers and get expert answers to your questions.

  • Members
  • Learn
  • Technologies
  • Challenges & Projects
  • Products
  • Store
  • About Us
  • Feedback & Support
  • FAQs
  • Terms of Use
  • Privacy Policy
  • Legal and Copyright Notices
  • Sitemap
  • Cookies

An Avnet Company © 2026 Premier Farnell Limited. All Rights Reserved.

Premier Farnell Ltd, registered in England and Wales (no 00876412), registered office: Farnell House, Forge Lane, Leeds LS12 2NE.

ICP 备案号 10220084.

Follow element14

  • X
  • Facebook
  • linkedin
  • YouTube