search

emsec / ChameleonMini

The ChameleonMini is a versatile contactless smartcard emulator compliant to NFC. The ChameleonMini was developed by https://kasper-oswald.de. The device is available at https://shop.kasper.it. For further information see the Getting Started Page https://rawgit.com/emsec/ChameleonMini/master/Doc/Doxygen/html/_page__getting_started.html or the Wiki tab above.
Other
1.75k stars 392 forks source link

Unable to emulate a card #269

Closed doublemarkpro closed 4 years ago

doublemarkpro commented 4 years ago

I made the board and SMT all the components by myself. After flashing the hex and eep file by MKII programmer, Rev G can be found at the GUI software. But the RSSI voltage is 0 even when I active one slot and upload the dump file to make the slot a Mifare S50 card.But I can configure the slot to READER mode and read the card type and card number by using GETUID command.

I leave D1 C29 C30 unmounted and C20 is a 150pf capacitor.

Is there a way to find out which part of the circuit is wrong? Like if there should be some waveforms when RSSI works well? Thanks.

Update: I found the issue: #198 and I config the redled as _CODECRX and _CODECTX. It blinks when I use my phone or ACR122 reader. I can also read RSSI value in GUI software which is about 2500mV. I use command logdownload and find that the device only responses 0x04 0x00 which I guess is the card type(Mifare S50 1k). Below is the decoded data"

10118ms <+10118 ms?:CODEC RX (1 bytes) [26] 10118ms <+ 0 ms?:CODEC TX (2 bytes) [0400] 10142ms <+ 24 ms?:CODEC RX (2 bytes) [9201] 11452ms <+ 1310 ms?:CODEC RX (2 bytes) [ff03] 11452ms <+ 0 ms?:CODEC RX (2 bytes) [eb01] 11452ms <+ 0 ms?:CODEC RX (3 bytes) [bddc03] 11452ms <+ 0 ms?:CODEC RX (1 bytes) [31] 11453ms <+ 1 ms?:CODEC RX (4 bytes) [6eeca67e] 11465ms <+ 12 ms?:CODEC RX (1 bytes) [26] 11465ms <+ 0 ms?:CODEC TX (2 bytes) [0400] 11489ms <+ 24 ms?:CODEC RX (1 bytes) [cb] 12440ms <+ 951 ms?:CODEC RX (3 bytes) [38e721] 12441ms <+ 1 ms?:CODEC RX (1 bytes) [56] 12441ms <+ 0 ms?:CODEC RX (1 bytes) [31] 12441ms <+ 0 ms?:CODEC RX (4 bytes) [06ac4c05] 12454ms <+ 13 ms?:CODEC RX (1 bytes) [26] 12454ms <+ 0 ms?:CODEC TX (2 bytes) [0400] 12478ms <+ 24 ms?:CODEC RX (3 bytes) [d9cd03]

So,could anyone help me with that so I can locate the reason why the transmission is wrong?

Thanks again.

doublemarkpro commented 4 years ago

Problem solved.

The IC4 74AHC1G86DCK pin 1(LOADMOD pin) and IC3 pin 4 to Q3 are not mounted well. It works well after I solder them again.

The log system is really useful for me to solve the problem.

Hope everyone can make it successfully. I will close this issue.