Author Topic: Sensing an RFID car key?  (Read 4787 times)

0 Members and 1 Guest are viewing this topic.

Offline iXodTopic starter

  • Frequent Contributor
  • **
  • Posts: 350
  • Country: us
Sensing an RFID car key?
« on: August 30, 2019, 05:02:51 pm »
Is there an electronic way to locate a lost car key? It’s a 2004-vintage transponder key which uses the immobilizer system (315 MHz?)

I can get to within 12” (30 cm) of where I suspect the key is. I have a spare key to experiment with if necessary.

No need to communicate (challenge/response) with the key—indeed this is beyond my skills.

A new key and programming is more than US$200 so I’m motivated to try something geeky...

Thanks..
« Last Edit: August 30, 2019, 05:06:40 pm by iXod »
 

Offline Yansi

  • Super Contributor
  • ***
  • Posts: 3930
  • Country: 00
  • STM32, STM8, AVR, 8051
Re: Sensing an RFID car key?
« Reply #1 on: August 30, 2019, 05:10:18 pm »
Immobiliser is 125kHz.

And I strongly doubt you can locate it very far, especially using simple equipment.

If you are just a foot away from where it is, then just stick there a hand and take it out. Not sure what kind of localisation would you help with searching a cubic foot.
« Last Edit: August 30, 2019, 05:11:50 pm by Yansi »
 
The following users thanked this post: iXod

Offline iXodTopic starter

  • Frequent Contributor
  • **
  • Posts: 350
  • Country: us
Re: Sensing an RFID car key?
« Reply #2 on: August 30, 2019, 05:24:46 pm »
I can get to within 12”—along 1000 feet (330 m) surface—of the area I need to search.

Let’s stick to the viability of electronic means to search.

Thanks.
 

Offline Yansi

  • Super Contributor
  • ***
  • Posts: 3930
  • Country: 00
  • STM32, STM8, AVR, 8051
Re: Sensing an RFID car key?
« Reply #3 on: August 30, 2019, 05:39:51 pm »
Okay understood then! Just get/build yourself a GDO (resonance dip meter for 125kHz). It should be possible to detect the 125kHz resonant circuit in the RFID transponder even at such distance, if the meter will be sensitive enough. (Which you can of course test and improve before searching it ib the wild)

I hope you don't have it inside sone metal tube or sorts. That would not work.
 
The following users thanked this post: iXod

Online mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 14117
  • Country: gb
    • Mike's Electric Stuff
Re: Sensing an RFID car key?
« Reply #4 on: August 30, 2019, 05:47:13 pm »
I'm not familiar with the specific protocols used in keyfob transponders, but in some cases all you need to do is create a 125kHz field and look for any modulation in the loading of it  - a simple diode detector can do this.
For 12" range you'd want an antenna of similar diameter. A possible issue is that the antennas in keys are rather directional, so you will either need to try the antenna in different orientations, or use multiple antennas with different orientations.
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 
The following users thanked this post: iXod

Offline Yansi

  • Super Contributor
  • ***
  • Posts: 3930
  • Country: 00
  • STM32, STM8, AVR, 8051
Re: Sensing an RFID car key?
« Reply #5 on: August 30, 2019, 05:58:03 pm »
 NO, most of the transponders do NOT send any data (modulate the carrier), unless challenged to using correct command.

You can only detect the presence of a resonant circuit by the energy dissipated in the  circuit.

EDIT also interesting to note as your key is not probably a "keyless entry" type, you will have to have the generated field quite in parallel with the orientation of the transponder coil. (Most cases the coil axis is the same as the axis of the key inserted to the keyway. Keyless entry systems use "3D" coils and the field orientation does not matter).
« Last Edit: August 30, 2019, 06:01:20 pm by Yansi »
 
The following users thanked this post: iXod

Online mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 14117
  • Country: gb
    • Mike's Electric Stuff
Re: Sensing an RFID car key?
« Reply #6 on: August 30, 2019, 07:35:49 pm »
NO, most of the transponders do NOT send any data (modulate the carrier), unless challenged to using correct command.
As lots of things will attenuate 125K, what you probably want to do is transmit alternate 125k and 100k and look for a difference in the attenuation between the two frequencies to detect the 125k absorbtion by the key, or do a sweep and look for a dip
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 
The following users thanked this post: iXod

Offline iXodTopic starter

  • Frequent Contributor
  • **
  • Posts: 350
  • Country: us
Re: Sensing an RFID car key?
« Reply #7 on: August 31, 2019, 04:01:15 am »
This needs to be portable and the smallest scope I have is a Tek 2465 series. Can an analog meter be used to watch for dip?

Something like: a sweeping (100k-150k ?) signal source driving a coil antenna, with an analog meter movement across the antenna (with rectifier and suitable multiplier resister in series with the movement)?

I have an Agilent 33120A arb gen that has a HV output. Specs say 10v p-p into 50 ohms; 20v p-p open-circuit.

Please help me by recommending a better circuit.

Thanks.
 

Offline Psi

  • Super Contributor
  • ***
  • Posts: 10385
  • Country: nz
Re: Sensing an RFID car key?
« Reply #8 on: August 31, 2019, 05:01:06 am »
I wonder if you removed the ignition key assembly from the car, and apply power to it, if it will request data from any key in the lock.
Then you'd just have to figure out how to boost it's range to 30cm and make a simple receiver to watch for that data modulation.
Or if you're lucky maybe the module has a output pin that chances when it senses any RFID key

But im guessing you're kinda time limited as you want to find the key before it rains.
« Last Edit: August 31, 2019, 05:06:27 am by Psi »
Greek letter 'Psi' (not Pounds per Square Inch)
 
The following users thanked this post: iXod

Offline iXodTopic starter

  • Frequent Contributor
  • **
  • Posts: 350
  • Country: us
Re: Sensing an RFID car key?
« Reply #9 on: August 31, 2019, 05:47:06 am »
The rfid antenna is a ring around the key hole in the ignition switch. All that’s there is the antenna. The car’s ECU generates the RF signal and transmits & receives key IDs.

Your solution would require the antenna and an ECU. Looking at the car’s wiring diagram, there’s no “valid key” output. With a valid key the fuel pump runs and the ignition coils work.
 

Offline Psi

  • Super Contributor
  • ***
  • Posts: 10385
  • Country: nz
Re: Sensing an RFID car key?
« Reply #10 on: August 31, 2019, 05:51:19 am »
The rfid antenna is a ring around the key hole in the ignition switch. All that’s there is the antenna. The car’s ECU generates the RF signal and transmits & receives key IDs.

Your solution would require the antenna and an ECU. Looking at the car’s wiring diagram, there’s no “valid key” output. With a valid key the fuel pump runs and the ignition coils work.

I doubt the ECU is generating RF and sending it to keyswitch module. Since that would need shielded RF cable running ECU to Keyswitch module.
It must be a digital link to ECU So keyswitch module will have some smarts to talk RF to key.
Keyswitch module will talk over RF to the key and the ECU will talk digitally to the Keyswitch module.

So it's possible that even without an ECU connected the keyswitch module may poll for a key, even if it doesn't know what to do with it.
But yeah, im just guessing.
« Last Edit: August 31, 2019, 06:01:30 am by Psi »
Greek letter 'Psi' (not Pounds per Square Inch)
 

Offline Yansi

  • Super Contributor
  • ***
  • Posts: 3930
  • Country: 00
  • STM32, STM8, AVR, 8051
Re: Sensing an RFID car key?
« Reply #11 on: August 31, 2019, 07:22:35 am »
All the electronics of the RFID reader is near the keyway. No coaxial cables.

Not sure what would you need all those bulky measurement instruments for. Build a damn GDO! It is just a couple of trannies and a analog needle meter.

https://www.google.com/search?q=grid+dip+oscillator&client=firefox-b-d&channel=trow&source=lnms&tbm=isch&sa=X&ved=0ahUKEwjR_uS8yazkAhVHLFAKHfdMCTQQ_AUIESgB&biw=1442&bih=775
« Last Edit: August 31, 2019, 07:36:12 am by Yansi »
 

Offline Psi

  • Super Contributor
  • ***
  • Posts: 10385
  • Country: nz
Re: Sensing an RFID car key?
« Reply #12 on: August 31, 2019, 08:58:24 am »
Build a damn GDO!

It's a car, not a Stargate.

 :-DD

Yeah, i know what you mean.


Greek letter 'Psi' (not Pounds per Square Inch)
 

Online mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 14117
  • Country: gb
    • Mike's Electric Stuff
Re: Sensing an RFID car key?
« Reply #13 on: August 31, 2019, 09:51:17 am »
This needs to be portable and the smallest scope I have is a Tek 2465 series. Can an analog meter be used to watch for dip?

Something like: a sweeping (100k-150k ?) signal source driving a coil antenna, with an analog meter movement across the antenna (with rectifier and suitable multiplier resister in series with the movement)?

I have an Agilent 33120A arb gen that has a HV output. Specs say 10v p-p into 50 ohms; 20v p-p open-circuit.

Please help me by recommending a better circuit.

Thanks.
You could probably do it using audio - the ear is very good at hearing patterns and changes - I'd suggest something like sweeping the carrier with maybe a 1khz sinewave, and feeding the detector to an audio amp and headphones. Use the key you have to optimise the sweep range and audio sensitivity. It may also be possible to just switch between 2 frequencies instead of sweeping.
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 
The following users thanked this post: iXod

Online mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 14117
  • Country: gb
    • Mike's Electric Stuff
Re: Sensing an RFID car key?
« Reply #14 on: August 31, 2019, 10:00:20 am »

I doubt the ECU is generating RF and sending it to keyswitch module. Since that would need shielded RF cable running ECU to Keyswitch module.

It's only 125KHz, barely RF. I've definitely seen schematics showing only the coil in the key/button assembly, don't know if they used shielded cable or not. Bear in mind these are only polled at startup, so it won't have noise from engine or other systems to contend with.
 
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 
The following users thanked this post: iXod

Offline vk6zgo

  • Super Contributor
  • ***
  • Posts: 7855
  • Country: au
Re: Sensing an RFID car key?
« Reply #15 on: August 31, 2019, 10:04:39 am »
Is it a "real" car key, with a metal bit you put into the ignition & turn?

If so, you would be better off forgetting any "high tech" methods related to its RFID function, & just look for it with a metal detector.

They are usually sensitive enough to detect wedding rings & the like, so  they should be able to pick up the key.
In a pinch, the copper on the PCB may be detectable.
 

Offline Yansi

  • Super Contributor
  • ***
  • Posts: 3930
  • Country: 00
  • STM32, STM8, AVR, 8051
Re: Sensing an RFID car key?
« Reply #16 on: August 31, 2019, 12:29:24 pm »

I doubt the ECU is generating RF and sending it to keyswitch module. Since that would need shielded RF cable running ECU to Keyswitch module.

It's only 125KHz, barely RF. I've definitely seen schematics showing only the coil in the key/button assembly, don't know if they used shielded cable or not. Bear in mind these are only polled at startup, so it won't have noise from engine or other systems to contend with.

No they are not polled only at startup. Most of them not.
 

Offline Yansi

  • Super Contributor
  • ***
  • Posts: 3930
  • Country: 00
  • STM32, STM8, AVR, 8051
Re: Sensing an RFID car key?
« Reply #17 on: August 31, 2019, 12:31:18 pm »
Is it a "real" car key, with a metal bit you put into the ignition & turn?

If so, you would be better off forgetting any "high tech" methods related to its RFID function, & just look for it with a metal detector.

They are usually sensitive enough to detect wedding rings & the like, so  they should be able to pick up the key.
In a pinch, the copper on the PCB may be detectable.

Doubt a metal detector would pick a smidge of copper on the pcb. It should pickup the mechanical key though quite well.
 

Offline langwadt

  • Super Contributor
  • ***
  • Posts: 4857
  • Country: dk
Re: Sensing an RFID car key?
« Reply #18 on: August 31, 2019, 01:06:14 pm »

I doubt the ECU is generating RF and sending it to keyswitch module. Since that would need shielded RF cable running ECU to Keyswitch module.

It's only 125KHz, barely RF. I've definitely seen schematics showing only the coil in the key/button assembly, don't know if they used shielded cable or not. Bear in mind these are only polled at startup, so it won't have noise from engine or other systems to contend with.

No they are not polled only at startup. Most of them not.

what would be the point of polling other than at startup? don't want the engine to shut driving down the road off just because
the communication with the key is sketchy 

 

Offline RoGeorge

  • Super Contributor
  • ***
  • Posts: 7012
  • Country: ro
Re: Sensing an RFID car key?
« Reply #19 on: August 31, 2019, 01:13:37 pm »
-trained dog
-thermal camera
-magnet dragged through the garden
-metal detector
-RFID reader
-buy another key
-buy another car
 :)

Offline mzzj

  • Super Contributor
  • ***
  • Posts: 1298
  • Country: fi
Re: Sensing an RFID car key?
« Reply #20 on: August 31, 2019, 01:50:56 pm »


what would be the point of polling other than at startup? don't want the engine to shut driving down the road off just because
the communication with the key is sketchy
Theft protection for relay link type attacks?
But yeah, cars I'm familiar keep running even if the "key" is not present after initial startup. Maybe throw a warning.

Keyless system on new Ford Focus gives warning bleeps if you start your car and later leave your keys in the hallway... if you drive off without keys it actually gives you warning after turning off the engine that keys are not present and engine wont re-start after opening the driver side door!
 

Offline Alex Eisenhut

  • Super Contributor
  • ***
  • Posts: 3549
  • Country: ca
  • Place text here.
Re: Sensing an RFID car key?
« Reply #21 on: August 31, 2019, 02:17:41 pm »
I don't get it. You have an area to search but are limited to how close you can get to it? How do you plan on reaching it if you did manage to find it?
Use a Shop Vac over the entire area.
"1000 feet (330 m) surface"

That's a length, not a surface.
Hoarder of 8-bit Commodore relics and 1960s Tektronix 500-series stuff. Unconventional interior decorator.
 

Offline mzzj

  • Super Contributor
  • ***
  • Posts: 1298
  • Country: fi
Re: Sensing an RFID car key?
« Reply #22 on: August 31, 2019, 02:56:34 pm »
I don't get it. You have an area to search but are limited to how close you can get to it? How do you plan on reaching it if you did manage to find it?
Use a Shop Vac over the entire area.
"1000 feet (330 m) surface"

That's a length, not a surface.
Lets guess: Thick grass over one square kilometer so you can detect the keys from 30cm away. Or sand. Or snow. 
 

Offline iXodTopic starter

  • Frequent Contributor
  • **
  • Posts: 350
  • Country: us
Re: Sensing an RFID car key?
« Reply #23 on: August 31, 2019, 03:10:15 pm »
It is a physical, classic key with RFID chip in the “handle”.

Other metal is present in the search area so a metal detector, magnet and shop vac are useless.

Area was searched by hand, no joy. But much opportunity to miss a small key.

Thanks to those continuing to offer creative suggestions.
« Last Edit: August 31, 2019, 03:23:31 pm by iXod »
 

Offline Yansi

  • Super Contributor
  • ***
  • Posts: 3930
  • Country: 00
  • STM32, STM8, AVR, 8051
Re: Sensing an RFID car key?
« Reply #24 on: August 31, 2019, 08:01:22 pm »
I still vote for the GDO. Try building one and pimp it to perfection, to get the most sensitivity out of it.

Similar concept to metal detection, however in this case specifically at 125kHz to detect the resonant circuit in the transponder.
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf