Difference between revisions of "CO2MeterHacking"

From RevSpace
Jump to: navigation, search
Line 24: Line 24:
 
The CO2 sensor in the CO-100 looks very much like the [http://www.zyaura.com/products/ZG_module.asp ZyAura ZG-01 module].
 
The CO2 sensor in the CO-100 looks very much like the [http://www.zyaura.com/products/ZG_module.asp ZyAura ZG-01 module].
 
According to the description, this uses a proprietary ZyAura digital protocol.
 
According to the description, this uses a proprietary ZyAura digital protocol.
 +
 +
The ZG-01 sensor apparently uses a SPI protocol.
  
 
Other sensors on the market:
 
Other sensors on the market:
 
* [http://www.ge-mcs.com/en/co2/co2-modules/6615.html Telaire T6613/T6615]
 
* [http://www.ge-mcs.com/en/co2/co2-modules/6615.html Telaire T6613/T6615]
 
* [http://www.winsensor.com/en/ProShow223.html Winsensor MH-Z14], looks nearly identical to the Telaire module
 
* [http://www.winsensor.com/en/ProShow223.html Winsensor MH-Z14], looks nearly identical to the Telaire module
 +
 +
== Future work ==
 +
Possible further investigation:
 +
* Sniff the ZG01 SPI connection, e.g. using a bus pirate or an Arduino
 +
* Check if the empty footprint on the PCB matches a max232

Revision as of 19:43, 18 March 2014

Project CO2MeterHacking
Status Initializing
Contact bertrik
Last Update 2014-03-18

Introduction

This project is about hacking the Voltcraft CO-100 CO2-sensor, such that we can read the exact ppm value as displayed on the LCD.

This particular CO2-sensor is present in the klusbunker at RevSpace and is currently used to control the ventilation in a crude manner (by monitoring the warning LEDs on the display module). Having the CO2 ppm value available as a number allows for nice things such as logging the levels over time, announce them on IRC, show them on the LedBanner , etc.

The user manual of the Voltcraft CO-100 says "Attention! The RJ45 connection (see chapter 7, item „K“) must not be used. The connection is only intended for the manufacturer". Of course, a claim like that can only be interpreted as a challenge! :)

Investigation

CO-100 internals

The CO2 sensor inside the CO-100 (in the left of the picture) has a sticker saying ZGw063RY. Googling for this number reveals a CO2 module that looks just like the Voltcraft CO-100, so it appears that the CO-100 is basically just a rebranded ZyAura ZGw063RY module.

The CO-100 seems to miss a bunch of components that can be mounted on the PCB, close to the RJ45 connection (possibly an RS232 chip with step-up capacitors).

components around the RJ45 connector

CO2 sensor

The CO2 sensor in the CO-100 looks very much like the ZyAura ZG-01 module. According to the description, this uses a proprietary ZyAura digital protocol.

The ZG-01 sensor apparently uses a SPI protocol.

Other sensors on the market:

Future work

Possible further investigation:

  • Sniff the ZG01 SPI connection, e.g. using a bus pirate or an Arduino
  • Check if the empty footprint on the PCB matches a max232