Notices
997 Forum 2005-2012
Sponsored by:
Sponsored by:

Key Transponder - Questions for RF Engineers

Thread Tools
 
Search this Thread
 
Old 10-20-2020, 06:49 PM
  #1  
Bruce In Philly
RL Community Team
Rennlist Member
Thread Starter
 
Bruce In Philly's Avatar
 
Join Date: Dec 2012
Location: Philadelphia
Posts: 6,144
Likes: 0
Received 1,536 Likes on 925 Posts
Default Key Transponder - Questions for RF Engineers

2009 C2S 162K miles

Battery was dying... would not open the trunk... had to get close to unlock the door. OK, in replacing the battery, I decided to get out a bottle of alcohol and some Q-tips and clean all the contacts. I don't know how crud gets in there but it does.

So with my nerd (or is it geek?) Opti Visor Magnifier I see this little chicklet with no electrical connections:

Opti Visor magnifier Opti Visor magnifier
Transponder Chip: pcf7936as

This is a Security Transponder (HITAG2).

How does this thing work? How does this work with no power supply?

Peace
Bruce in Philly

See the chicklet security module below at about the 7-8 o'clock position in the battery cavity:


Last edited by Bruce In Philly; 10-20-2020 at 06:54 PM.
Old 10-20-2020, 07:02 PM
  #2  
Rich_Jenkins
Rennlist Member
 
Rich_Jenkins's Avatar
 
Join Date: Apr 2018
Posts: 2,088
Received 714 Likes on 479 Posts
Default

Originally Posted by Bruce In Philly

How does this thing work? How does this work with no power supply?
The short answer is the power comes from an external antenna; a signal is beamed "to" the transponder, and it emits a coded signal "back" to the external system.

https://en.wikipedia.org/wiki/Transponder
Old 10-20-2020, 07:07 PM
  #3  
ZuffenZeus
Nordschleife Master
 
ZuffenZeus's Avatar
 
Join Date: Oct 2015
Location: Zuffenhausen, Georgia
Posts: 5,265
Received 1,828 Likes on 1,003 Posts
Default

Originally Posted by Bruce In Philly
2009 C2S 162K miles

Battery was dying... would not open the trunk... had to get close to unlock the door. OK, in replacing the battery, I decided to get out a bottle of alcohol and some Q-tips and clean all the contacts. I don't know how crud gets in there but it does.

So with my nerd (or is it geek?) Opti Visor Magnifier I see this little chicklet with no electrical connections:

Opti Visor magnifier
Transponder Chip: pcf7936as

This is a Security Transponder (HITAG2).

How does this thing work? How does this work with no power supply?

Peace
Bruce in Philly

See the chicklet security module below at about the 7-8 o'clock position in the battery cavity:
The little "pill" in your keyfob is officially called an RFID and is energized by the car's transmitter. When the car sends out a RF signal, it energizes the RFID and returns an encrypted rolling code that only your car's ECU/security module can decode. Once they complete a successful handshake, the ECU tells the car it's ok to start. Does the process pretty quick too. lol

Old 10-20-2020, 07:12 PM
  #4  
ZuffenZeus
Nordschleife Master
 
ZuffenZeus's Avatar
 
Join Date: Oct 2015
Location: Zuffenhausen, Georgia
Posts: 5,265
Received 1,828 Likes on 1,003 Posts
Default

Check this thread out from Skip (i.e. Porschetech3). Skip was a Porsche Gold Meister Technician before retiring at 40 years in the automotive service industry.

https://rennlist.com/forums/996-foru...spare-key.html
Old 10-21-2020, 10:11 AM
  #5  
Petza914
RL Community Team
Rennlist Member
 
Petza914's Avatar
 
Join Date: Oct 2007
Location: Clemson, SC
Posts: 25,827
Received 6,453 Likes on 4,114 Posts
Default

Originally Posted by b3freak
The little "pill" in your keyfob is officially called an RFID and is energized by the car's transmitter. When the car sends out a RF signal, it energizes the RFID and returns an encrypted rolling code that only your car's ECU/security module can decode. Once they complete a successful handshake, the ECU tells the car it's ok to start. Does the process pretty quick too. lol
So, how does anyone steal these cars without the key that has the coded RFID chip, as I know they get stolen, like the one in New Mexico or Vegas (can't remember which).
Old 10-21-2020, 06:02 PM
  #6  
Porschetech3
Rennlist Member
 
Porschetech3's Avatar
 
Join Date: Oct 2010
Location: Alabama USA
Posts: 6,245
Received 4,579 Likes on 2,074 Posts
Default

Originally Posted by Petza914
So, how does anyone steal these cars without the key that has the coded RFID chip, as I know they get stolen, like the one in New Mexico or Vegas (can't remember which).
You would go on e-bay and buy a matched set/programmed DME/Immobilizer/ key,(about $500) use a slidehammer to yank the ignition lock out, unlock the steering and plug up the DME and Immobilizer, using the matched key to immobilizer antenna, start the car and drive it off.

OR you just use a rollback to drag the car up on it with the tow hook and drive off, then take your time with the electrical swap.

Not that I know anyone who has done this or have done it myself, but that's how it could be done.
Old 10-21-2020, 06:40 PM
  #7  
Petza914
RL Community Team
Rennlist Member
 
Petza914's Avatar
 
Join Date: Oct 2007
Location: Clemson, SC
Posts: 25,827
Received 6,453 Likes on 4,114 Posts
Default

Originally Posted by Porschetech3
You would go on e-bay and buy a matched set/programmed DME/Immobilizer/ key,(about $500) use a slidehammer to yank the ignition lock out, unlock the steering and plug up the DME and Immobilizer, using the matched key to immobilizer antenna, start the car and drive it off.

OR you just use a rollback to drag the car up on it with the tow hook and drive off, then take your time with the electrical swap.

Not that I know anyone who has done this or have done it myself, but that's how it could be done.
Isn't the DME in the back under the Bose subwoofer. Isn't that what I had to access for the twisted pair of wires to connect the 3axis accelerometer to for my DSC controller to work or can this somehow be circumvented at the front once the ignition switch is disconnected?
Old 10-21-2020, 07:33 PM
  #8  
Porschetech3
Rennlist Member
 
Porschetech3's Avatar
 
Join Date: Oct 2010
Location: Alabama USA
Posts: 6,245
Received 4,579 Likes on 2,074 Posts
Default

Originally Posted by Petza914
Isn't the DME in the back under the Bose subwoofer. Isn't that what I had to access for the twisted pair of wires to connect the 3axis accelerometer to for my DSC controller to work or can this somehow be circumvented at the front once the ignition switch is disconnected?
Yep, if you don't have Bose, you just grab the carpet/foam and pull it out exposing the DME and other electronics.
Old 10-21-2020, 08:20 PM
  #9  
Petza914
RL Community Team
Rennlist Member
 
Petza914's Avatar
 
Join Date: Oct 2007
Location: Clemson, SC
Posts: 25,827
Received 6,453 Likes on 4,114 Posts
Default

Originally Posted by Porschetech3
Yep, if you don't have Bose, you just grab the carpet/foam and pull it out exposing the DME and other electronics.
So, we mow have another reason to buy the S over the base - as an anti-theft deterrent
​​​​​
Old 10-21-2020, 08:24 PM
  #10  
Porschetech3
Rennlist Member
 
Porschetech3's Avatar
 
Join Date: Oct 2010
Location: Alabama USA
Posts: 6,245
Received 4,579 Likes on 2,074 Posts
Default

Originally Posted by Petza914
So, we mow have another reason to buy the S over the base - as an anti-theft deterrent
​​​​​
Yea, removing the Bose speakers take a whole 30 seconds, not a lot of deterrent, but every little bit helps..



Quick Reply: Key Transponder - Questions for RF Engineers



All times are GMT -3. The time now is 01:14 PM.