Difference between revisions of "RC522Hacking"

From RevSpace
Jump to navigation Jump to search
(Add link to image)
Line 24: Line 24:
  
 
With respect to hardware, I ordered two of these boards, and one of them came with a poorly soldered capacitor (C8). This one actually worked with a mifare light card! Properly soldering the capacitor made it no longer work. It also gave me a chance to measure the capacitor value, it has a value about 220 pF.
 
With respect to hardware, I ordered two of these boards, and one of them came with a poorly soldered capacitor (C8). This one actually worked with a mifare light card! Properly soldering the capacitor made it no longer work. It also gave me a chance to measure the capacitor value, it has a value about 220 pF.
 +
 +
The image on the right shows the reverse engineered part of the circuit that sits between the RC522 chip and the reader/writer coil.
 +
The reader/writer coil itself is about 40x30mm, with an estimated inductance of about 1 uH, it is center-tapped to the TVSS signal.
 +
I was able to measure C8/C9 (220 pF), somehow I couldn't get a capacitance reading of circuit parts C6/C7/C10/C11.
 +
 +
This schematic only vaguely resembles the example circuit in the datasheet.
 +
For example, I don't see any resistance in the resonance circuit to bring down the Q (one of the datasheet recommends a Q of about 35).
  
 
=== Results ===
 
=== Results ===
Line 29: Line 36:
 
* replace C8 and C9 with a 100 pF capacitor
 
* replace C8 and C9 with a 100 pF capacitor
  
This enables reading of all cards I currently own.
+
This enables reading of all cards I currently own, but seems to reduce the reading distance a bit for the card that came shipped with it.
  
 
=== References ===
 
=== References ===
 
* NXP [http://www.nxp.com/documents/data_sheet/MFRC522.pdf MFRC522 datasheet]
 
* NXP [http://www.nxp.com/documents/data_sheet/MFRC522.pdf MFRC522 datasheet]
 
* NXP application note [http://eng.utah.edu/~mlewis/ref/NFC/AN1445.pdf AN1445], Antenna design guide
 
* NXP application note [http://eng.utah.edu/~mlewis/ref/NFC/AN1445.pdf AN1445], Antenna design guide

Revision as of 12:42, 12 August 2015

Project RC522Hacking
Status In progress
Contact bertrik
Last Update 2015-08-12

Introduction

This page is about the RC-522 mifare reader board.

This board can be found for a rather low price (about E3,-) on ebay, and usually comes packaged with a mifare 1k card and a mifare 1k key fob. It is 'arduino-compatible' in the sense that you interface with it through a SPI connection. It should be able to read all 'mifare' kind of RFID cards.

The problem with this board however, is that in its default configuration only seems to work reliably with the card/key-fob that it was packaged with. It doesn't to work with other mifare cards (e.g. OV-chipkaart).

This project is about modifying this board to make it actually work with other mifare cards.

Investigation

schematic

My two main suspicions why this board doesn't quite work, are:

  • some software problem, quite a few things can be modified in software (conductance of the driving transistors, sensitivity settings)
  • some hardware problem, either using the wrong circuit between the chip and the antenna, or using sub-standard components in the circuit

I've played a lot already with the software settings, but can't seem to make a change that actually improves performance with the non-working mifare cards.

With respect to hardware, I ordered two of these boards, and one of them came with a poorly soldered capacitor (C8). This one actually worked with a mifare light card! Properly soldering the capacitor made it no longer work. It also gave me a chance to measure the capacitor value, it has a value about 220 pF.

The image on the right shows the reverse engineered part of the circuit that sits between the RC522 chip and the reader/writer coil. The reader/writer coil itself is about 40x30mm, with an estimated inductance of about 1 uH, it is center-tapped to the TVSS signal. I was able to measure C8/C9 (220 pF), somehow I couldn't get a capacitance reading of circuit parts C6/C7/C10/C11.

This schematic only vaguely resembles the example circuit in the datasheet. For example, I don't see any resistance in the resonance circuit to bring down the Q (one of the datasheet recommends a Q of about 35).

Results

TDLR, my most up-to-date fix is:

  • replace C8 and C9 with a 100 pF capacitor

This enables reading of all cards I currently own, but seems to reduce the reading distance a bit for the card that came shipped with it.

References