Duct tape RFID tag #1
This is just a messy first prototype, but I recently tried making an AVRFID tag on a substrate of duct tape. The first attempt involved:
- An upside-down strip of duct tape, as the base for everything else to stick atop
- 100 turns of AWG 40 magnet wire around a ~66mm diameter form, which I then haphazardly squished against the tape
- An ATtiny85 µC in the SOIC-8 package, programmed with the latest AVRFID firmware
- SMT 0.1 µF capacitor across the power pins
- SMT 1 nF capacitor in parallel with the coil, for tuning it to approximately 125 kHz
- Sealed with clear packing tape on the opposite side
It’s ugly, and I really want to try this experiment over again with a smaller IC package, like TSSOP-8. But the card works very well, and the read range is practically indistinguishable from a mass-produced RFID card. I tested this one using an official HID ProxPoint reader.
I’ve been busy, but once I have time to perfect this technique I’m hoping to write some instructions, as it’s a pretty quick and easy way to make a DIY RFID tag that’s actually in a convenient form-factor.
How can I use this on an ATTiny13v? The ATTiny85 and the ATTiny13 seem to be pin compatible.
Unfortunately the ATtiny13 doesn’t have enough program memory.. the current AVRFID implementation is pretty memory hungry.
I’ve been trying to compile your code for the ATMega168 target, it compiles fine for EM4102, but fails on HID with this error:
avr-gcc -Wl,-Map,avrrfid.map -mmcu=atmega168 -o”avrrfid.elf” ./avrfid.o
./avrfid.o: In function `loop’:
(.text+0x1d12): relocation truncated to fit: R_AVR_13_PCREL against `no symbol’
I discovered that if I comment out these two lines, it compiles ok. Im confused how it could be a memory issue, since the Mega168 should have plenty more than the Tiny85.
manchester HID_SITE_CODE, 8
manchester HID_UNIQUE_ID, 16
regards
David
Ok I think I figured it out. Changing “rjmp loop” to “jmp loop” makes the code compile for ATMega168.
I’ll report back once I can see if the code still actually works or not. Ill be making one for the ATTiny85 using the original code as well, just as a control.
-David
What about using an ATMEGA8515?
Or do you think, I’ll get problems with the required power?
What sort of reading range do you get from this?
I didn’t measure, but it was a few inches, and close enough to the range of an official HID-manufactured card that I didn’t notice a difference.
I was thinking of playing with RFID in the future, and this post and other like it are quite educational for me. Thanks for posting!
A truly elegant hack. Please find the time to document the build
hmm. could this be used to duplicate a rfid card? i wanted to build a tag database using as few entries as possible, but for it to work i would need multiple rfid cards with the same id code- something that the wholesale rfid card companies dont want to do.
Yes
Is it possible to bruteforce a simple RFID door lock system with a few changes at the code? My school here in germany is using the 125kHz-RFIDs for the door of our library and they want 5€ (~7US$) for the card.
C code wouldn’t be a problem, but I’m not into assembler so much, that I understand it.
I believe most of these systems lock out for a little while after many failed attempts to prevent exactly that. It’d probably be easier to clone a friend’s card.
If I used a larger AVR chip, would this still work assuming I provided external power?
Yes, it should work with external power, like say a lithium coin cell. I haven’t tried this myself- if you do, please write about it! Also, just because the chip is bigger, I wouldn’t necessarily assume it needs external power. Try it without, see if it still works
Since this whole concept uses the chip very much out-of-spec, my best advice is to experiment.
How is the uC powered? It seems like the Vcc & GND pins are just linked together with a capacitor, but how is power provided?
Thanks in advance.
This is explained by the original AVRFID page- it’s powered by the AC from the coil, which is rectified by the chip’s I/O clamping diodes.
I have peeled off an anti-theft 1.5inch x 1.5inch RFID tag from a book that was bought from a book store. Does anyone know whether there is a possibility that an HID ProxPoint reader will be able to read that anti-theft RFID tag? Or does the HID ProxPoint reader run on totally different systems? My tag from the book looks something like this: http://cdn3.explainthatstuff.com/rfid.jpg
Thanks,
Chris
Hello Beth,
First, thanks for the great article. This sounds awesome and I’m ordering supplies now.
I was wondering if there was a similar article about reading HID cards? I have an RFID reader on a PCB but it seems to be limited to only its RFID cards. I’ve examined the HID cards I have and they seem to be using some sort of translation table for the ID cards (like the 5 digit ID card and 10 digit sales order number in http://www.hidglobal.com/documents/125khz_htog_en.pdf ) instead of the actual site code or unique ID.
Thanks for the help,
Peter
Could this be ported to the PIC 10F200? Or even the 10F206 would be feasible as the main difference is more memory.