Getting useful data from a dirt cheap RFID reader

posted Nov 19th 2011 1:27pm by
filed under: misc hacks

cheap-rfid-reader

[Aaron] was looking for a cheap RFID reader that had some easy to follow documentation and a standardized interface. Most everything he saw was pretty expensive, so he decided to buy a cheap $10 reader from eBay to see how easy it would be to work with.

The reader came with very little documentation, but [Aaron] did know that the device identifies itself as a USB keyboard, outputting scan tag data into a text editor. That functionality wasn’t incredibly useful, so he took it apart to see if he could interface with it in some other manner. Exposing the PCB revealed an unknown IC for which he could find no documentation, but the board did include some breakout pins, so [Aaron] started by probing those for data.

He tried reading the data in both a terminal program and with a logic analyzer, but nothing seemed to make a whole lot of sense. He turned the sampling rate of the sniffer down, and things started looking a little better. After comparing the data from the sniffer with known tag codes, he noticed that each digit had an offset of 39 applied, so he whipped up a bit of code to correct the numbers.

[Aaron] did a good amount of legwork to get usable data from the reader, but at a cost of $10 it can’t be beat. We certainly know what we’re going to be hunting for on eBay this afternoon…



19 Responses to Getting useful data from a dirt cheap RFID reader

  • Deven says:

    WOW, we didn’t expect this much traffic, please hold on for a bit (should be an hour or two) while we upgrade the server that currently hosts thetransistor.com

    Thanks

  • mjrippe says:

    “Waiting for thetransistor.com…” 4:25 EST

  • Haku says:

    BTW this appears to be the same RFID reader, at around $10 and they’ve got hundreds in stock: http://cgi.ebay.co.uk/ws/110774361494

    Think I’ll order one for the hell of it, something to tinker with on a rainy day, especially at that price and the great work Aaron put into hacking this thing for microcontroller usage.

  • error404 says:

    You can get a cheap, UART-based RFID reader with documentation from iTeadStudio: http://iteadstudio.com/store/index.php?main_page=product_info&cPath=16&products_id=6

  • Wonko The Sane says:

    I’ve just done a bit of decoding, the Data is sent in packets -

    189 – Start of Packet
    5 – Number of keypresses
    39 – USB Key Code for “0″ 27 Hex
    39 – USB Key Code for “0″ 27 Hex
    30 – USB Key Code for “1″ 1E Hex
    33 – USB Key Code for “4″ 21 Hex
    38 – USB Key Code for “9″ 26 Hex
    5 – ??? End of packet / Check Digits
    3 – ??? End of packet / Check Digits

    (delay of 100 ms)

    189 – Start of Packe
    6 – Number of Keypresses
    31 – USB Key Code for “2″ 1F Hex
    31 – USB Key Code for “2″ 1F Hex
    32 – USB Key Code for “3″ 20 Hex
    35 – USB Key Code for “6″ 23 Hex
    36 – USB Key Code for “7″ 24 Hex
    40 – USB Key Code for “Enter” 28 Hex
    5 – ??? End of packet / Check Digits
    ? – ??? End of packet / Check Digits

    Usb scan codes from http://www.quadibloc.com/comp/scan.htm

    • Haku says:

      Great sleuthing work there, it also brings up the question; could it be possible to inject codes from a microcontroller into the RFID board somehow to produce key presses on the USB keyboard output.

  • idontknow says:

    Can somebody explain me why he had to lower the Logic Sniffer’s scan rate frequency to get the correct data???

    • weknow says:

      It’s to do with sampling theorem. Once you start sampling at a rate that is inverse square of the input frequency, the signal becomes messy. Just need to back things off a little.

      You can always Google it for more info.

    • Koplimi says:

      Oh the data was correct. He just didn’t get all of it. I guess lowering the frequency made it possible to capture a longer timespan.

  • Nick says:

    I puked a little in my mouth when I saw the USB-A-Plug to USB-A-Plug cable :-(

  • TomF says:

    Quite interesting. I had a quick look around and found that there is another cheap reader / door-opener available through ebay.

    It is called M236B. Does anyone have any experience with it? Apparently it is a standalone device.

  • Leave a Reply

    XHTML: You can use these tags: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <pre> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

    Hack a Day serves up fresh hacks each day, every day from around the web as well as hacking related news.

    Send us your hacks






         




    Hacks

    Resources