Intercom key duplicator: what is it and how to make it? How to make a copy of the intercom key at home Do-it-yourself universal intercom key copier.
A simple effective intercom duplicator is considered electronic keys with working plan. The video shows the finished assembly and verification in operation.
There are many good schemes for this function on the Internet, but, firstly, they are complex, and secondly, not all of them are working. The author of this video tutorial first tried to assemble a key duplicator on the Arduino constructor, but for some reason he did not succeed, so he made a simpler, but fully working device for those who deal with issues related to installing intercoms.
There are factory duplicators for sale, for example, RFID. But they are quite expensive, and for those who are not going to constantly work on this device, it makes no sense to purchase them. After all, not every day lovers need to duplicate the keys for the intercom. The master himself decided to make a simple copier to expand his horizons.
Features of a simple copier for intercom keys
A lot of blanks were bought on Aliexpress, they are inexpensive. Was found simple circuit such a duplicator, which can be assembled in just 5 minutes. The blanks were purchased in this Chinese store, there is also a programmer necessary for the operation of the device.
The basis or heart of this copier is a microcontroller.
Suitable 628, 648 or 88. Naturally, if you simply assemble the device, it will not work. It is necessary to write a program to this microcontroller. This will require a programmer that connects to a computer for firmware. On the Internet, you can find instructions for using the programmer. It costs 10-15 dollars. Any novice radio amateur will be able to live this microcontroller and also repeat this duplicator circuit.
As you can see in the diagram and photo, there are 3 LEDs in the circuit - red, yellow and green. 
The red LED lights up when there is power in the system itself; yellow glows when it is in key reading mode. And green glows when the recording or duplication of the key was successful. The flashing of the LEDs occurs when the workpiece is one-time non-rewritable. All blanks purchased from AliExpress are rewritable.
The whole circuit is powered by 5 volts. A 5 volt stabilizer was installed in this design, so that when a voltage was applied from 5 to 9 volts, it always had only 5 volts at the output. The key duplicator itself is powered by 5 volts.
Let's turn it on and see how this device works. Turn on the power supply. All LEDs are lit, indicating that the device has booted up.
We apply the key to be copied, the indicator showed a reading. There is a button for duplicating this key. We apply a clean workpiece, the LED showed that duplication has occurred. For the experiment, the key to the elevator was copied and tested. The result is positive, the do-it-yourself duplicator works great.
Second part (video starts).
Schematic and forum discussion of this duplicate.
Intercom equipment in new buildings is now a prerequisite, and in old houses it is. This significantly increases the safety of residents and helps maintain order in the entrance. But what if the key to the intercom is lost or broken? Previously, installer companies were monopolists and raised the price of backup devices, now there are many companies and workshops that can rewrite the intercom key for a relatively small amount. However, the same steps can be performed independently.
There are two main ways to obtain a new key, depending on the type of devices used - this is the introduction of a code into the intercom system.
touch memory
Touch memory is a non-volatile identifier that includes a memory device, a real-time clock and accumulator battery. Reading or writing information is done by simply touching the body of the device. There are many varieties of Touch memory. They differ not only, but also models in terms of memory size. Compatibility with the installed equipment must be considered when purchasing blanks for writing codes.
Touch memory models
The Dallas model is the most common model. The plastic holder can bear the emblem or inscription of the intercom equipment manufacturer: Sean, Eltis, Vizit or the Dallas logo. To copy the code, TM2004 blanks are used.
Some Vizit intercom systems do not support work with TM2004 blanks, in this case you can use the more expensive universal model TM08.
- Metacom model. Domestic production, are a complete analogue of the Dallas model. Completely match in electrical characteristics. Should be marked both on the plastic holder and on the metal case devices - the inscription Metacom or MT. Workpieces TM2004 and TM08 are suitable.
- Model "Cyfral". They have a similar inscription on the holder. TM2004 blanks are suitable for older models, TM7 for new ones. Resistor model "Digital". Legacy equipment, which is quite rare. Such devices do not have a chip with a recorded code. They use a resistor with a rating corresponding to a particular intercom. You can distinguish such a device by the recess located in the central part of the case. Copying is done by soldering the appropriate resistor to any of the Touch memory blanks. Its capacity is determined by an ohmmeter using a working key.
Contactless RFID
Recently, contactless reading systems have become widespread, where RFID keys or proximity cards are used. Outwardly, they resemble an ordinary plastic keychain or bank card. The devices do not have their own power supply. The transmission of the code to the receiving device is carried out after receiving the radio signal, the energy of the wave radiation and acts as an energy supply. Therefore, activation occurs only at a distance of 10-15 cm from the lock. Otherwise, the device and the action of the tag do not differ from the similar Touch memory.
The keys themselves look like key fobs no larger than a five-ruble coin and 5 mm thick. Contactless cards have a format similar to bank cards and are somewhat thicker - up to 3 mm. The interchangeability of cards and key fobs, despite the same functioning technology, is not always feasible, since a violation of the intensity of the transmitted signal is possible. On the this moment almost any blank is suitable for copying RFID keys from different manufacturers: HID Prox II, EM-Marin, Indala, etc.
Recording on a workpiece
on media is carried out using special devices, programmers. For example, the Keymaster PRO 4 RF device is universal programmer, both for the Touch memory standard and for non-contact, radio frequency RFID devices. Allows you to copy keys to blanks:- RW/TM 2004;
- CS 1, 3;
- TM - 01, 07, 08;
- RW 1990, 2007, 125RF.
Supports the standards of the most common manufacturers:
For touch memory:
- Cyfral;
- Dallas;
- For RFID:
- HID ProxII;
- EM Marin;
- Indala and some others.
Recording of the workpiece is done with one touch. The algorithm for copying the key is as follows:
- A key is brought to the reader, which must be copied.
- The device independently determines the type, manufacturer and model of the recommended workpiece.
- The blank is brought to the reader. And the record button is pressed.
- The key is being written to.
In addition, the device can record without a source key if the code stored in memory is known. The duplicator is connected to the PC via USB port and has its own software that stores 500 recent entries, and manages the distribution of Touch memory and RFID records. This is beyond the reach of most ordinary users, but there are simpler models with limited functionality:
- Key Master 3;
- KeyMaster 3 RF - supports contactless tags;
- TMD-5 RFID;
- TM Pro.
Intercom programming
Entering information about new keys can also be carried out directly on the intercom equipment. Naturally, at different manufacturers developed various instructions intercom programming.
Entering information into the intercom memory is possible only if the installers have not changed the factory access code in the device. Usually, installers rarely change the access password, and most of the default passwords are 1234.
Manufacturer Raimann
- To enter the settings - the reader button is pressed;
- Login password from 9 to 4, after (wait 10-15 seconds) dial from 1 to 6;
- The symbol "P" appears on the monitor;
- Menu items from 2 to 8. The item responsible for the introduction of new keys No. 2.
Manufacturer VIZIT
- Entering the settings - # 99 is typed on the keyboard;
- After sound signal, password 1234 is entered, then the signal again;
- Programming and prescribing new keys - point number 3;
- The apartment number is entered, the key is applied and # is pressed;
- Then press * to switch to operating mode.
If there are no * and # buttons on the keyboard, then they are replaced by the C and K buttons, respectively.
Manufacturer Eltis
- To enter the menu, press button B, keep it pressed for 7 seconds;
- System password 1234;
- After the menu loads on the screen, select the “Key master” item;
- We dial the apartment number and press the button B;
- After the LF command appears on the screen, you need to lean the key against the reader;
- The recording is completed if the message ADD appears on the screen (if there were no keys for this apartment in memory before) or the apartment number.
Each intercom key has its own number - it is this number that serves as the key identifier. It is by the number of the key that the intercom decides - its own or someone else's. Therefore, the copying algorithm is as follows: first you need to find out the number of the allowed key, and then assign this number to another key - the clone. For the intercom, it makes no difference whether the original key or its copy was attached. After checking the number with his database of allowed numbers, he will open the door.
Intercom keys that we will connect to the Arduino (they are sometimes called iButton or touch memory) are read and written via 1-wire interface. Therefore, the connection scheme is very simple. All we need is a couple of wires and a 2.2 kΩ pull-up resistor. The connection diagram is shown in the figure.
Assembled Circuit might look something like this:
2 Read iButton Key ID using Arduino
To work with the 1-wire interface, there are ready-made libraries for Arduino. You can use, for example, this one. Download the archive and unpack it into a folder /libraries/ located in the Arduino IDE directory. Now we can very simply work with this protocol.
Upload to Arduino in a standard way this sketch:
iButton Key Reading Sketch with Arduino(expands) #includeThis sketch shows the key number for the intercom that is connected to the circuit. This is what we need now: we need to find out the number of the key we want to make a copy of. Let's connect the Arduino to the computer. Let's start the serial port monitor: Tools Serial Port Monitor(or keyboard shortcut Ctrl+Shift+M).
Now let's connect the key to the circuit. The port monitor will show the key number. Let's remember this number.
And here is what exchange takes place on a single-wire line when reading the key identifier (for more details, see below):
The figure, of course, does not show all the implementation details. Therefore, at the end of the article, I attach a timing diagram in the *.logicdata format, taken with the help of a logic analyzer and the program Saleae Logic Analyzer and opened to her. The program is free and can be downloaded from the official Saleae website. To open the *.logicdata file, you need to run the program, press Ctrl + O or in the menu Options(located at the top right) select an item open capture / setup.
3 Dallas Key Identifier Record using Arduino
Now let's write a sketch for writing data to the memory of the iButton key.
iButton key writing sketch with Arduino(expands) #includeDon't forget to set the number of your original key in the array key_to_write which we learned earlier.
Upload this sketch to the Arduino. Open the serial port monitor (Ctrl+Shift+M). Let's connect a key to the scheme, which will be a clone of the original key. The serial port monitor will display a corresponding message about the result of programming.
If this sketch didn't work, try replacing the code after Serial.print("Start programming...") until the end of the function loop() to the next one:
Additional sketch for writing iButton key using Arduino(expand) delay(200); iButton.skip(); iButton.reset(); iButton.write(0x33); // read current key number Serial.print("ID before write:"); for (byte i=0; i<8; i++){ Serial.print(" "); Serial.print(iButton.read(), HEX); } Serial.print("\n"); iButton.skip(); iButton.reset(); iButton.write(0xD1); // команда разрешения записи digitalWrite(pin, LOW); pinMode(pin, OUTPUT); delayMicroseconds(60); pinMode(pin, INPUT); digitalWrite(pin, HIGH); delay(10); // выведем ключ, который собираемся записать: Serial.print("Writing iButton ID: "); for (byte i=0; i<8; i++) { Serial.print(key_to_write[i], HEX); Serial.print(" "); } Serial.print("\n"); iButton.skip(); iButton.reset(); iButton.write(0xD5); // команда записи for (byte i=0; i<8; i++) { writeByte(key_to_write[i]); Serial.print("*"); } Serial.print("\n"); iButton.reset(); iButton.write(0xD1); // команда выхода из режима записи digitalWrite(pin, LOW); pinMode(pin, OUTPUT); delayMicroseconds(10); pinMode(pin, INPUT); digitalWrite(pin, HIGH); delay(10); Serial.println("Success!"); delay(10000);Here the function writeByte() will be as follows:
int writeByte(byte data) ( int data_bit; for(data_bit=0; data_bit<8; data_bit++) { if (data & 1) { digitalWrite(pin, LOW); pinMode(pin, OUTPUT); delayMicroseconds(60); pinMode(pin, INPUT); digitalWrite(pin, HIGH); delay(10); } else { digitalWrite(pin, LOW); pinMode(pin, OUTPUT); pinMode(pin, INPUT); digitalWrite(pin, HIGH); delay(10); } data = data >> 1; ) return 0; )It is pointless to show the timing diagram of the operation of the key identifier recording sketch, because it is long and will not fit in the picture. However, the *.logicdata file for the logic analyzer program is attached at the end of the article.
Intercom keys come in different types. This code is not suitable for all keys, but only for RW1990 or RW1990.2. Programming keys of other types can lead to key failure!
If desired, you can rewrite the program for a key of a different type. To do this, use the technical description of your key type (datasheet) and change the sketch in accordance with the description. Download datasheet for iButton keys can be attached to the article.
By the way, some modern intercoms read not only the key identifier, but also other information recorded on the original key. Therefore, making a clone by copying only the number will not work. You need to completely copy the key data.
4 Description of single wire 1-Wire interface
Let's take a closer look at the One-wire interface. In organization, it is similar to the I2C interface: it must also contain a master device (master) that initiates the exchange, as well as one or more slave devices (slave). All devices are connected to one common bus. iButton devices are always slaves. The master is usually a microcontroller or PC. The data rate is 16.3 kbps. The idle bus is at logic "1" (HIGH). This protocol provides only 5 types of signals:
- reset pulse (master)
- presence pulse (slave)
- write bit "0" (master)
- write bit "1" (master)
- read bit (master)
1) Initialization
Initialization consists in the fact that the master sets the reset condition RESET (lowers the line to "0" for a period of 480 μs or more, and then releases it, and due to the pull-up resistor, the line rises to the state "1"), and the slave no later than 60 µs after that, it must confirm the presence by also lowering the line to "0" for 60 ... 240 µs and then freeing it:
2) Commands for working with ROM
If no acknowledgment signal is received after the initialization pulse, the master repeats the polling of the bus. If the confirmation signal is received, then the master understands that there is a device on the bus that is ready for the exchange, and sends it one of the four 8-bit ROM commands:
(*) By the way, there are quite a few families of iButton devices, some of them are listed in the table below.
iButton family codes(unfolds)| Family code | iButton devices | Description |
|---|---|---|
| 0x01 | DS1990A, DS1990R, DS2401, DS2411 | Unique serial number-key |
| 0x02 | DS1991 | Multikey, 1152-bit secure EEPROM |
| 0x04 | DS1994, DS2404 | 4 kb NV RAM + clock, timer and alarm |
| 0x05 | DS2405 | Single addressable key |
| 0x06 | DS1993 | 4 KB NV RAM |
| 0x08 | DS1992 | 1 KB NV RAM |
| 0x09 | DS1982, DS2502 | 1 kb PROM |
| 0x0A | DS1995 | 16 KB NV RAM |
| 0x0B | DS1985, DS2505 | 16 KB EEPROM |
| 0x0C | DS1996 | 64 KB NV RAM |
| 0x0F | DS1986, DS2506 | 64 KB EEPROM |
| 0x10 | DS1920, DS1820, DS18S20, DS18B20 | temperature sensor |
| 0x12 | DS2406, DS2407 | 1 kb EEPROM + dual channel addressable key |
| 0x14 | DS1971, DS2430A | 256 bit EEPROM and 64 bit PROM |
| 0x1A | DS1963L | 4 KB NV RAM + write cycle counter |
| 0x1C | DS28E04-100 | 4 KB EEPROM + dual channel addressable key |
| 0x1D | DS2423 | 4 KB NV RAM + external counter |
| 0x1F | DS2409 | Two-channel addressable key with the possibility of switching to the return bus |
| 0x20 | DS2450 | Four-channel ADC |
| 0x21 | DS1921G, DS1921H, DS1921Z | Thermochronic sensor with data acquisition function |
| 0x23 | DS1973, DS2433 | 4 kb EEPROM |
| 0x24 | DS1904, DS2415 | Real time clock |
| 0x26 | DS2438 | Temperature sensor, ADC |
| 0x27 | DS2417 | Real time clock with interrupt |
| 0x29 | DS2408 | Bidirectional 8-bit I/O port |
| 0x2C | DS2890 | Single channel digital potentiometer |
| 0x2D | DS1972, DS2431 | 1 kb EEPROM |
| 0x30 | DS2760 | Temperature sensor, current sensor, ADC |
| 0x37 | DS1977 | 32 KB password protected EEPROM |
| 0x3A | DS2413 | Dual Channel Addressable Switch |
| 0x41 | DS1922L, DS1922T, DS1923, DS2422 | High-resolution thermochronic and hygrochronous sensors with data acquisition |
| 0x42 | DS28EA00 | Digital thermometer with programmable resolution, serial link capability and programmable I/O ports |
| 0x43 | DS28EC20 | 20 kb EEPROM |
Data is transmitted sequentially, bit by bit. The transmission of each bit is initiated by the master. When recording, the leader lowers the line to zero and holds it. If the line holding time is 1…15 µs, then bit "1" is written. If the hold time is 60 µs or more, bit "0" is written.
Reading bits is also initiated by the master. At the start of reading each bit, the master pulls the bus low. If the slave wants to send a "0", it holds the bus in the LOW state for 60 to 120 µs, and if it wants to send a "1", it keeps the bus in the LOW state for about 15 µs. After that, the slave releases the line, and due to the pull-up resistor, it returns to the HIGH state.
This is how, for example, the timing diagram of the Search ROM (0xF0) search command looks. Bit writing commands are marked in red in the diagram. Pay attention to the order of the bits when transmitting over 1-Wire: the most significant bit is on the right, the least significant bit is on the left.
3) Commands for working with PROM
Before considering the commands for working with the iButton PROM, it is necessary to say a few words about the dongle memory structure. The memory is divided into 4 equal sections: three of them are designed to store three unique keys, and the fourth is for temporary data storage. This temporary buffer serves as a kind of draft where data is prepared for writing keys.
To work with the PROM, there are 6 commands:
| Name | Team | Purpose |
|---|---|---|
| Write to temporary buffer (Write Scratchpad) | 0x96 | Used to write data to a temporary buffer (scratchpad). |
| Read from temporary buffer (Read Scratchpad) | 0x69 | Used to read data from a temporary buffer. |
| Copy from temporary clipboard (Copy Scratchpad) | 0x3C | Used to transfer data prepared in a temporary buffer to the selected key. |
| Write key password (Write Password) | 0x5A | Used to record the password and unique identifier of the selected key (one of three). |
| Write a key (Write SubKey) | 0x99 | Used to directly write data to the selected key (bypassing the temporary buffer). |
| Read Key (Read SubKey) | 0x66 | Used to read the data of the selected key. |
4) Data transfer
To be continued...
5 Possible mistakes when compiling the sketch
1) If an error occurs while compiling the sketch WConstants.h: No such file or directory #include "WConstants.h", then, as an option, follows in the file OneWire.cpp replace the first block after the comments with the following:
#include
2) If an error occurs during compilation class OneWire has no member named read_bytes, then find and try to use another library to work with the OneWire interface.
Nose stylus is a gadget for those who constantly dreamed of having an extra finger on their face...
Titan Sphere is a product of the soon-to-be bankrupt company SGRL, a failed attempt to introduce a new word in the field of joysticks...
Bells for eye drops allow you to accurately aim at the eye, at the time when you need to order it with something ...
Are there really unnecessary organs? It is unlikely that someone will want to part with their appendix while it is ...
"Mother of all demons", 1968...
Future with aliens - why not? Some are sure that aliens are already among us ...
23.05.2012
A simple effective duplicator of intercom electronic keys with a working circuit is considered. The video shows the check and the finished assembly at work. There are many good schemes for this function on the net, but, firstly, they are complex, and secondly, not all of them work.
The creator of this video tutorial tried to assemble a key duplicator on the Arduino constructor, but it is not known why he did not succeed, despite the fact that there is a video on the network showing a working device on Arduino.
Factory duplicators are available for sale, but they are expensive, and for those who are not going to always work on this device, it is unnecessary to buy them. Since it is not every day that amateurs need to duplicate the keys for the intercom. It was decided to make a simple duplicator easy to expand your own horizons.
A lot of blanks were purchased on Aliexpress, they are inexpensive. I found a simple scheme for making a duplicator, which can be assembled in almost 5 minutes. The blanks were bought in this Chinese store, in the same place there is a programmer necessary for the operation of the device.
discussion and Schematic on the forum of this duplicate here. The base or heart of this copier is a microcontroller.
Suitable 628, 648 or 88. Of course, if you assemble the device easily, it will not work. You need to write a program to this microcontroller. This will require a programmer that connects to the computer for firmware.
On the net you can find instructions for using the programmer. It costs 10-15 dollars. Any novice radio amateur will be able to live this microcontroller and repeat this duplicator circuit.
As you can see in the diagram and photo, there are 3 LEDs in the circuit - red, yellow and green.
The red LED lights up when there is power in the system itself; yellow glows when it is in key reading mode. A green glows, at a time when the recording or duplication of the key was successful. The flashing of the LEDs occurs at a time when the workpiece is one-time non-rewritable.
All blanks purchased on AliExpress are rewritable.
The whole circuit is powered by 5 volts. A 5 volt stabilizer was installed in this design, so that when a voltage was applied from 5 to 9 volts, it always had only 5 volts at the output. The key duplicator itself is powered by 5 volts.
Let's turn it on and see how this device works. Turn on the power supply. All LEDs lit up, in other words, the device booted up.
We apply the key to be copied, the indicator has shown reading. There is a button for duplicating this key. We apply a clean workpiece, the LED showed that duplication has occurred. For the experience, the key to the elevator was copied and tested.
The result is good, the do-it-yourself duplicator works excellently.
The second part
Random entries:
A simple duplicator of intercom keys on arduino nano.
Good day!
I would like to bring to your attention a duplicator (copier) of intercom keys.
The copier can read / write to a key fob or card.
I have long wanted to try out an inexpensive device for copying keys from an intercom. And now this moment has come, so let's get started.
The order came in 3 weeks.
Intercom keys. A small educational program.
The keys are:
- Contact. Official name Touch memory (abbr. TM) or iButton
(i.e. they must be applied to the reader) These include:
Dallas.
In most cases, TM means a Dallas family key (for example, DS1990A). Many devices work with these keys: Vizit, Eltis, Z-5R, С2000-2, etc.Cyfral.
These intercoms work only with DC2000A and Tsifral-KP1 keys.Metakom.
K1233KT2 keys have been developed for these intercoms. These keys are suitable for many other controllers.Resistive.
There are exotic intercoms that work with resistive keys. Instead of a code, resistance is read from them. Without a doubt, these are contact keys, but I would not call them Touch memory.- Contactless. The official name of RFID.
(they just need to be brought to the reader at a distance of 2-3 cm). They are issued in the form of cards, key rings, bracelets, etc. The common name is “cards” and “drops” (key rings). Keys operating up to 10-15 cm are called Proximity (short-range), and operating up to 1 m - Vicinity (long-range). Intercoms use exclusively Proximity keys, and this term has become almost synonymous with "contactless key".
In the world of Proximity, there is also no unity of formats:
EM Marin
the most popular format today.HID
elder among contactless keys.MIFARE
perspective format. This includes contactless smart cards.This device is designed EXCLUSIVELY to copy 125KHz proximity keys.
No other keys can be copied.
Parcel content:
Contents of delivery:
- RFID 125KHz EM4100 ID Card Copier;- rewritable key chains 6pcs;
- rewritable cards 6 pcs.;
- instructions (English-Chinese).
AAA batteries are not included.
Appearance of the device:
The insides of the device:
Device in the on position:
(the red light is on, it means the device is on)
Key internals:
Instruction:
- Copy process:
2. Turn on the toggle switch located on the right side (the red indicator with the inscription POWER lights up and two short beeps are emitted).
3. We bring the card or keychain to the left sidewall, at the level of the inscription POWER.
4. Press the "READ" button. In response, the duplicator will beep 2 times and the green LED with the inscription "PASS" will light up
5. We remove the card or keychain from which the label was counted.
6. Bring a rewritable card or key fob to the copier. Press the "WRITE" button. For a while, the yellow LED with the inscription BUSY will light up and again a double squeak will be heard. All new key fob or card can be used.
Video of the process of reading and writing:
Outcome.
Everything works great. If you need to make several copies of RFID 125KHz keys, you can safely buy, especially since there are 6 key fobs and 6 cards in the kit, and the average price for one copy is 100 rubles, the benefit is obvious. If key rings or cards run out on the Internet, you can buy within 20 rubles.Before buying this device, I recommend that you find out the frequency and type of your key, otherwise you will throw money away.
If you liked the review, or helped in choosing a device, put likes, this is your best reward for my work.
Thank you all for your attention!
The product was provided for writing a review by the store. The review is published in accordance with clause 18 of the Site Rules.
I plan to buy +88 Add to favorites Liked the review +44 +83
