XnT unlock your car/do whatever you want with it
  • BenbeezyBenbeezy May 2016
    So I didn't know of a better way to show people this so I am just making a new post. I have seen people that use their tag to unlock a car, or unlock their house and I wanted to do the same thing. but I didn't know how the hell they were doing it with like custom kits and things. So when looking up how to do it I decided that it all sucks and I wanted to do it my self. So I took my car key fob apart and took the battery and buttons off of it. I then wired the parts for the battery into an arduino with some firmware on it (will put link at the bottom) and a NFC reader from adafruit. I then soldered the button for unlock to be always pushed and I was done. I just needed power and I can now unlock my car by scanning my hand. But the cool thing about this is the firmware I wanted to make something that would scan your hand and do *blank* whatever you wanted! so now we all have firmware that we can put in with existing project that can act as a button press or more a motor, or something like that.

    So please check it out and feel free to make your own car unlock system or whatever you want. If you want I would also be willing to make some systems for people so you can look cool in front of your friends.

  • I used an rfid unlock scanner similar to the one that DT sells. Just wired it up to my door locks. A little complicated, but it worked. Sucked that I had a VW beetle. They have the most terribly complex door locks.

    Can't wait to look more into what you made. I might consider installing an rfid reader onto my apartment complex... I bet everyone would just assume the complex did it...
  • ightdenightden May 2016
    so i've built this arduino driven relay circuit a long time ago with the intent of wiring it into my car's ignition to unlock and start my car automatically while still being able to use the key.  turns out i don't know shit about cars though, so if anyone knows cars and can help me feel free to PM me :)

  • I know nothing about cars. I just used google to figure out how to take the door apart and then consulted the owners manual.
  • McSTUFFMcSTUFF May 2016
    Like Trybalwolf I used a low frequency reader similar to DT’s xEM Access Controller and wired to a spare key fob with an interposing relay. Like Benbeezy my controller presses a button.


    My car had some security feature where the unlock button couldn’t be pressed from inside a locked car or I would have wired it there instead of using battery operated fob.

  • So im going to be doing this to my truck this summer after i start my new job and get some funds coming in. Most of you know that is one of my goals.

    I was planning on trying to directly wire into the locking system and run the reader up to my door where i would normally place my hand to unlock it.

    My question is why are you using a keyfob? Is this just because you do not want to/ know how to or where to wire into the truck as i said i will be doing?
  • McSTUFFMcSTUFF May 2016
    I should have been more clear. I cannot press the unlock button on the car’s door. It’s clearly to keep someone from sticking a pole through the window and unlocking the car. When I use the fob, even from inside the car, it worked fine.
  • ightdenightden May 2016
    @meanderingpaul  yeah he probably wired into the key fob because it's easier than wiring in to the ignition.  that's what i'm not sure about how to do.
  • JohnDoeJohnDoe May 2016
    Just cause I feel like this is worth adding, I see a lot of people are focusing on cars here. Has and on thought of a RFID kill switch? Like let's say they did get past the RFID lock/ignition something like th fuel pump wouldn't turn on. Just a another thought in a attempt a while back to justify getting magnets was two use reed switches in the handle bars to act as kill switchs for additional security. I add that as well because I think that could be easy enough to adapt for a cars use.

    John Doe
  • McSTUFFMcSTUFF May 2016
    Like Biff's car from Back to the Future.
    "No one can start this car but me!"
  • @McSTUFF my car's the same, so I have my reader wired to the circuit for the key hole on the door.
  • McSTUFFMcSTUFF May 2016
    @CitrusBolt, I never looked there. Very clever.
  • JohnDoeJohnDoe May 2016
    Yea I am kinda paranoid about a bike I have been saving up for getting stolen....
  • @ightden I would give you some pointers but every car is different. I haven't even looked in my door panel or under my dash for this truck yet. I believe I should be able to just trace the lock back to the computer and get in that way but I won't know till I open some things up.

    I may also need to be creative if that proves to complex. Good thing is I only have two doors to unlock ;)
  • ightdenightden May 2016
    well here's my schematics for anyone else who wants to drive some relays with an arduino to start their car. http://imgur.com/a/hAXBB  you'll need to add a voltage regulating circuit as well, though, as i don't have that shown in these schematics.

    my problem is i dont know how to actually wire it into my car's starter/accessory wires/battery.  i drive a 2002 ford expedition if it helps, but i cant find any sort of information on which wires i need to hook into on my car.
  • So I think I figured out a simpler route while finding out I shorted my lock button this afternoon.

    Wiring into the lock button would eliminate the need for a fob to be tied in and would make it so you don't need to trace wires back. Bare in mind this is just to unlock the car and not start it.
  • I wanted to set up my car to unlock with my xNT implant, but I ran into some problems. First, my car has manual windows so I'd need to convert them. Usually not a problem since a conversion kit is twenty bucks, but mine has cable locks instead of rod locks, so the conversion kit is about ten times the cost for my model. 

    Second problem is I'm having a hard time getting any reader to find my implant. I know my cell phone's NFC is in the battery and not that great a range to begin with, but it can't even read with the thin plastic case over it. Even the Arduino reader has trouble reading if the module isn't touching my hand. I don't know that I would be able to unlock the door once a mechanism and reader is installed. Kinda bummed because I love the idea of never worrying that I'll lock myself out of the car.
  • BenbeezyBenbeezy May 2016
    @katzevonstich to me it sounds like maybe your tag is to deep in there. and yeah that does suck that you have a car that is not fit to just hack it in.
  • So I've got my replaced door lock button installed in the truck so I have the old one out and able to be tinkered with.

    I found out I actually just had some corrosion on my plug so the button function is fine. My current rt would be simply identifying the prong for unlock and then just crimping the wire into that plug.
  • Just add power (Battery+) to each pin at the base of the switch and see what function occurs or tell me what the year/make/model of your vehicle is and I'll look up the wiring diagram and tell you which color the lock and unlock wires are. I work in the automotive industry.

    I'll be doing some similar automotive bio-integration mods before too long.
  • Well that would save me a bunch of time! It's a 2012 gmc sierra 1500.

    This was the first time I had to actually do anything to this truck. Your saving me time on the looking through the Google for wiring diagrams thank you much @posthumanist.
  • @Meanderpaul I've printed the schematics for your vehicle.  There are two options based on the RPO codes.  If you would kindly take a look inside your glovebox lid there is a white rectangular sticker with a list of 3 character alpha-numeric codes on it.  Could you please tell me if your vehicle RPO list contains AN3, DL3, or AU3?

    I'll consult with my electrical diagnostician once I know which diagram is correct for your vehicle.
  • Au3. Thank you again this is gonna help a lot.

    What mods will you being doing with you vehicle to integrate with you?
  • Good, that's the less complex of the two systems in use.  At the base of the switch and at the lock actuator you will find the two wires you'll require are an (ORANGE/BLACK) wire for the unlock and a (PINK/BLACK) wire for the lock signal.

    This is a grounded circuit, meaning in order to actuate the mechanical lock you will apply a ground to the wire NOT power.
  • Vehicle mods I intend to complete are Door lock/Unlock, start/stop engine, and possibly integrate a security system into the mix all activated via two 125kHz RFID implants.

  • Ok that's a different approach I thought it was going to be power.

    I'm trying to think of a way to use my remote start right now but I haven't been able to think of anything I really like. I'm toying with the idea of implanting a remote start with a Reed switch and using a magnet to trigger it. (I would also have to have a magnet too).

    The remote start I think could be rigged to be keyless also but I haven't really looked into that yet and the obvious problem would be a powers ounce for the remote.
  • Most remote starts are only good to start the vehicle before you enter it. The vehicle MUST remain locked and in park for the remote start to activate. Once activated, the vehicle will shut the engine off unless the key is turned in the ignition.

    The ultimate goal for me would be to install an RFID reader in the driver door handle that would unlock the door, disable the alarm, and start the engine. I would of course need to bypass the steering wheel lock mechanism in the column and wire a dummy load so the remote start thinks the vehicle has a key in the ignition so I can just hop in and go.

    Now, I would need To do that with one chip implanted in my hand and on the other hand, a chip that would send a signal to lock the doors and arm the security system as I exit.
  • I stumbled on this RFID reader/switch combo. Kind of expensive but seems like it would do the trick for both input (RFID) and output (relay/switch triggers power or ground to desired component)


    $99 Australian dollars, so around $71 USD.
  • That's an interesting one I saw something similar for a keyless ignition. It had to have a whole set up with coils everywhere. That looks much simpler and of a better design that could simply plug into the old keyhole.
  • Exactly my thoughts.  Remove lock cylinder, insert RFID device.  Clean look and they come in a variety of colors and with different designs on the front.  They're just a little tough to get a hold of.  They don't appear to have a distributor in North America. 
  • I wonder if Amazon would carry them. If they do then free shipping could be possible. I will look for them tonight during my overnight.
  • @posthuman i checked out their website and sparkfun carries them.
  • @meanderpaul Ah nice. I'll need to get to instruction sheet for one and maybe order it this week. Do you have the link?
  • ChrisBotChrisBot June 2016
    I only briefly skimmed the thread, but I was thinking that maybe coming at this from a software side instead of a hardware side might be better.

    I know that there have been some efforts to make some open source hardware and software for you to interface with your car's OBD. I wouldn't doubt that you can unlock your doors through that interface.

    If could just hook an arduino to that then it might be a bit easier than splicing into your car's electronics



    EDIT: It seems as though OBD might only be used for diagnostics, can anybody clarify?
  • SparkFun has an OBD board, but I'm not sure if it's diagnostics only since I'm unfamiliar with electronics. I suspect it might be more than diagnostics simply because it makes little sense for SparkFun to put out a board that does the same thing as the much cheaper Amazon tools.

  • ightdenightden June 2016
  • @katzevonstich i think you are correct.

    @posthumanist I went on to try and locate that specific device on the website and couldn't find it. I think they just sell a diagnostic component like Kat said.
  • OBD is a diagnostic port, but given the right tools you can change the programming in the power train control module and or body module to a degree. By that, I mean you can only turn options on or off that are already programmed into the manufacturers software. You cannot add functionality that isn't already present.

    That is why I would go hardware instead of software. Easier for me to wire in components than rewrite code that most likely can't be rewritten anyhow.

    As for arduino, that's not something I've dealt with yet but I will do some studying. I've meant to get around to it. I'm not a very strong programmer though.
  • ChrisBotChrisBot June 2016
    @PostHumanist, don't worry they make arduino stuff pretty simple. It is just a step or two above blinking an led, and the code should be okay too.

  • scruffyscruffy June 2016
    I am working towards this with arduino, Ive still got a little coding to learn. Im having issues getting info of the implant but that may be the reader Im using. I'll be ordering something different soon
  • scruffyscruffy June 2016
    ocean controls is about 10 minutes from my place I might pop in and have a look. see if I can get a better price on that button
  • Let me know what you end up using as a reader @Scruffy?

    Between our concerted efforts we may yet standardize the installation process for RFID entry systems
  • It's probably a good thing adding to a vehicle's program isn't so easy. Bricked phones are annoying enough. 

    I'm thinking if adding one of those RFID cylinders to our POS van just to see how well it does. The only downside is I'd like to keep the key lock as well for a backup.
  • ChrisBotChrisBot June 2016
    I've got a few years of arduino behind me, I might be able to help to some degree. I've got a MRF something or other reader that uses SPI. Most of the comments for the code were written in chinese however so it only managed to decrypt it to some degree -___-
  • scruffyscruffy June 2016
    I have that issue too @chrisbot, I found a sketch that looks promising but all the instructions are in chinese
  • ChrisBotChrisBot June 2016
    I ran it through a translator and if my memory serves, the majority of the code was for writing data, not reading it. It made it seem like the code was much more complicated. We're probably referring to the same sketch, it seems to be rather infamous.

    Only took a few minutes of bread I boarding and holding to get the add jnki to spit out the UID serial console
  • scruffyscruffy June 2016
    Sounds like it may be, I was hunting something that would operate a servo for my house door. I have a lathe and a mill so making hardware to suit my application isn't a big deal. Biggest issue I have is the RC522 I have conflicts with the library for the servo motor. that and I don't have enough know how to work with the output from the chip. I'm very beginner and need to find some more time to learn some more.
  • BenbeezyBenbeezy June 2016
    that was a lot of reading for me to catch up on haha. Update on where we use it, we managed to hot wire the motorcycle to turn on with a switch when the data lines are crossed. We have a relay on order that will make the final reader install a success. He will soon be able to start and stop his bike with the scan of his hand, OR even a scan of his phone.