• The Forums are now open to new registrations, adverts are also being de-tuned.

A thought experiment.

tron

Active Member
Joined
Oct 24, 2006
Messages
705
Location
Bournemouth or France
Car
S203 220CDI.
It is possible to buy a widget called an ESL emulator. I am guessing that the EIS sees this as a good unit and allows the engine to start, all other things being equal if the ESL fails. (It gets an ESL good signal which allows it to proceed.) That proves the key is awake and that the EIS is good should the ESL fail. Fine. Monitoring the output and input of a good key at the point where the serial data goes into the EIS would give a picture of a good signal. Monitoring that which comes OUT of the EIS would give a signal that , were it replicated, would be able to start the engine, lift the ELS and generally make it go.
If I were writing the security, there would possibly be a code hop that would modify the EEPROM memory in the EIS. and the key. I suppose that there would have to be a standard code for the emulator to report back and I would expect something similar from the engine ECU "Hi, I'm John and my VIN isxxx".
Now the ECU doesn't go wrong in the non start problem scenario but the EIS and the key both do.
Back in 1988, there were a limited number of times that you could reliably read and write a memory chip.
So, Would a car with 150 000 miles doing n average 200 mile motorway journey every day be less likely to fail than one used for local commuting but with a similar mileage? That would confirm my theory.
If I were to read the current working memory chip, dump that data into a new one and then physically replace the chip, (or replace it with something electrically compatible that replicates the function of the memory chip,) could I future proof an EIS?
 
Ok, the EIS, AFAIK has two chips in and they are soldered onto the PCB.
Reading the memory of these would allow me to clone a couple and fit them to another EIS. If this is possible I should now have the spare EIS that will save me from being stranded far from home, which is the reason for my enquiry. Spare keys I can get but leaving an inert car in a tiny village 60 miles from a dealer who will spoil my whole year - seriously, it is not a bill I could afford- is something I need to avoid.
 
The answer is yes...I have one. I had to cut off the steering lock and then plug the emulator in. I don't have a steering lock, but I do have a car that runs.

Do a Google search.
 
Last edited:
Would an alternative assurance measure be to acquire the ECU, ELS, EIS and keys from another C250?

These bundles appear on Ebay.
Sadly a whole 202 C250 is most viable these days for choice parts before scrapping.
 
No! A complete set from another 250 will have used as many write cycles as the one I have already. The EEPROM will be worn out. Finding a couple of HC605 chips is hard enough as it is but a pair of new ones would need to be procured in order to make it possible.
An alternative would be to create an EIS emulator which would involve reading the bus traffic (easy with the right kit,) and building another emulator that would fire up the ecu but I would prefer the former option.
 
Your talking about very old EEPROM single byte limitations of 10,000's thousand rewrites.

All later EEPROM's are multi-byte paging with around a million of re-writes available.

One real limitation is age, and most manufacturers guarantee no loss of data for around 10 years, but this falure is usually caused by high temperatures erasing the chips.

Remember these are not RAM chips, they are EEPROM's so they get written data to for storage of the configuration and analysis of the security system and not constantly re-written over.
 
Last edited:
The code hopping system reprograms the key to send a different code next time and two keys will have to be saved on the system in a non volatile memory. I had expected the EEPROMS to be updated for every operation of the key. Furthermore, these memories are contaned within a microprocessor which will operate at a significantly higher temperature than a discrete ic.
 
Last edited:
No! A complete set from another 250 will have used as many write cycles as the one I have already. The EEPROM will be worn out. Finding a couple of HC605 chips is hard enough as it is but a pair of new ones would need to be procured in order to make it possible.
An alternative would be to create an EIS emulator which would involve reading the bus traffic (easy with the right kit,) and building another emulator that would fire up the ecu but I would prefer the former option.

Did you see my post above? Just wondering since I thought I had answered your query...you know...the very first sentence of your first post?
 
Ihave a full set of ecu lock and keys from a 250td. Very occasionally it refuses to unlock but a reinsertion sorts it every time.

50 quid
 
Thank you! I shall be happy to take you up on that. Please pm me so I can pay you.
 

Users who are viewing this thread

Back
Top Bottom