I'm pretty well versed in this sort of thing. Yes, it is possible to use a capture tool and then do various things and try to find them in the log. Then you try to replay the CAN traffic back to the car and see if it accepts it. Quite often not as much is locked down with security codes as you might think. Things like door locks and gear shifting can probably be done with no validation at all. Other things just require that you play back traffic from when the car was working. Then there are things that will be locked down with security codes. Those things are harder to crack but, believe me, it is possible to do so. Make no mistake, it is a lot of work to do all of this reverse engineering. Quite often people don't want to bother doing it for a whole car but rather just a piece here, a piece there. Along those lines, I've got a few different motor controllers working. There are a few chargers that will work outside the donor car, a few BMS, a few heaters, etc. Various pieces of Leafs, Volts, and Tesla Model S cars are now available on the market. It's a less trodden (at least publicly) path to spoof out the electronics from a newer ICE vehicle. It's still basically the same thing but now you need to spoof out a lot of systems. However, the replay idea is still viable here. You can capture traffic for various things - sitting around idling the engine, shifting into drive, driving around, etc and then try replaying them at the appropriate times while driving without the ICE.
I don't think that generic sales pitches are acceptable on this list but since it is topically relevant I'd like to quickly mention that I am involved in the creation of many pieces of hardware and software to aid in these things. CANDue: http://store.evtv.me/proddetail.php?prod=EVTVDue2&cat=23 SavvyCAN: http://www.savvycan.com On Tue, Jan 3, 2017 at 7:13 AM, paul dove via EV <[email protected]> wrote: > I have never done it myself but I have heard of many people doing this. They > get a can bus logger and log the data as they do various things in the > vehicle, like brake, shift gears, etc. then they look at the data to what's > changing. It's a grueling process but effective. My friend hooked up a logic > analyzer that decodes can and figured out quite a fed codes on his iMiEV. > > Sent from my iPhone > >> On Jan 3, 2017, at 2:02 AM, Marco Gaxiola via EV <[email protected]> wrote: >> >> I'm in the middle of a 2013 EV conversion project (well is not a very >> recent), but as some of you may know; newer vehicles comes with more and >> more electronics that operation of some devices and features of the vehicle >> relies on the ICE data and information being generated by the ECM (OEM >> computer) thru the CAN Bus. >> >> When you convert a vehicle like this, you face some problems by the >> abscence of the running engine such: >> - non electric powered steering. >> - non operation of the AC unit (assuming the AC compressor and everything >> is there like original). >> - non working turn signals.(some models with digital turn signals) >> - missing gauges on the instrument cluster like RPMs, speedometer, etc. >> plus a bunch of red and amber known warning lights on. (and of course a lot >> of DTC codes when reading the OBD port) >> - etc... >> >> I tryed to find other threads about this subject but did not find any, at >> least not recently. So I decided to post this one, hope that someone has >> already face this problem and become able to fully convert newer models >> without affect most OEM features from the vehicle. >> >> If someone has done this, please share your experience. But if not, let me >> explain my thoughs and share your comments/feedback of what you think or >> suggest me to do: >> >> - My first idea is to design a small PCB with a micro on it, that would >> simulate most ot the analog and digital signals that the ECM needs from all >> the sensors on the gas engine to keep it running like the water temperature >> sensor, oil pressure, cranckshaft sensor, oxigen and manifold sensors (MAF >> and MAP), etc. My theory is that this could be a simple way (since most >> sensors are analog 0-12V, 0-5V of On/off outputs) that are not so complex >> to emulate, and doing this way; the ECM would believe the ICE is there >> running all fine and perfectly. >> >> Of course, the algorithm and maybe some of the simulated PCB outputs >> would have to be changed on every different model of vehicle. (every >> manufacturer uses many different sensors). But it would be a nice device if >> same vehicle is beeing converted, like in a fleet project. >> >> - The second thing, would be to go on a higher leve of >> microcomputer-microcontroller design that would allow to talk to many of >> other units on the vehicle thru the CAN bus, trying to replace those >> specific commands and data generated by the ICE, needed by those devices to >> correctly operate, Such RPM and speed for the electric power steering as >> example. >> >> The challenge here would be that, like the one before; every model and >> vehicle brand, has propietary CAN communication protocols that would be a >> monumental job to reverse engineer and interpret those codes, isn't it? >> >> >> I'm not so familiar with automotive CAN procols altough I undestand CAN bus >> at the communication/physical level. >> >> Any thougths or suggestions? >> >> >> Marco Gaxiola >> EnergyEV.com >> -------------- next part -------------- >> An HTML attachment was scrubbed... >> URL: >> <http://lists.evdl.org/private.cgi/ev-evdl.org/attachments/20170103/4914d072/attachment.htm> >> _______________________________________________ >> UNSUBSCRIBE: http://www.evdl.org/help/index.html#usub >> http://lists.evdl.org/listinfo.cgi/ev-evdl.org >> Read EVAngel's EV News at http://evdl.org/evln/ >> Please discuss EV drag racing at NEDRA (http://groups.yahoo.com/group/NEDRA) >> > > _______________________________________________ > UNSUBSCRIBE: http://www.evdl.org/help/index.html#usub > http://lists.evdl.org/listinfo.cgi/ev-evdl.org > Read EVAngel's EV News at http://evdl.org/evln/ > Please discuss EV drag racing at NEDRA (http://groups.yahoo.com/group/NEDRA) > _______________________________________________ UNSUBSCRIBE: http://www.evdl.org/help/index.html#usub http://lists.evdl.org/listinfo.cgi/ev-evdl.org Read EVAngel's EV News at http://evdl.org/evln/ Please discuss EV drag racing at NEDRA (http://groups.yahoo.com/group/NEDRA)
