Hello,
Does any one has more information what kind NFC tag is used in car/motorcycle key ?
Any key-less car key can turn on car without need of battery, and i would like to know what kind of standard dues it use.
I tested my car keys with phones NFC reader, but it did not provide any lock on RFID chip inside it, so how can i read it ?
And also, is it static code, or is it some-kind dynamic, so i can't clone int that easy ?
Thank you !
Ok, I am at total lost now. As far as I understand, this is nothing more than HITAG2 chip because is most commonly used by automakers. Now ok, it says 125Khz, perfect with what I see.
Part I don't understand is how they are communicating. I attached scope to coil antenna so I can see signals that ECU is seeing. problem is, I don't see any response from key-fob, while Motorcycle do acknowledges key and allows you to start the engine. Also, where is no battery in remote, or even worse, I use special key they is designed only emergency and from BMW it cost only 50$, so no way any RF circuitry is inside.
Look at this waveform. This is successful unlock of motorcycle using RFID key. If key is transmitting data, it should produce lower amplitude signal, not a perfect one as for exatation. If key is shorting magnetic field, it would not go to zero.
So what a hell ? How they are communicating ?
Is is bit by bit exploded view of signal:
So, can any one tell me how it's doing communication ? I need to make hardware that captures this response and replays back, but if I don't know what going on, it is impossible....
Ok, I am at total lost now. As far as I understand, this is nothing more than HITAG2 chip because is most commonly used by automakers. Now ok, it says 125Khz, perfect with what I see.
Part I don't understand is how they are communicating. I attached scope to coil antenna so I can see signals that ECU is seeing. problem is, I don't see any response from key-fob, while Motorcycle do acknowledges key and allows you to start the engine. Also, where is no battery in remote, or even worse, I use special key they is designed only emergency and from BMW it cost only 50$, so no way any RF circuitry is inside.
Look at this waveform. This is successful unlock of motorcycle using RFID key. If key is transmitting data, it should produce lower amplitude signal, not a perfect one as for exatation. If key is shorting magnetic field, it would not go to zero.
So what a hell ? How they are communicating ?
Is is bit by bit exploded view of signal:
So, can any one tell me how it's doing communication ? I need to make hardware that captures this response and replays back, but if I don't know what going on, it is impossible....
