Prodigy smartlock

Now that I’m off work, I can give some more details.

It comes with a keychain card and a couple sticker tags.

It does not read ISO15693 tags.

Tested Reads with MiFare classic 1K, 2K, EV1 , NTAG216, JCOP

As you can see from the video, the reading is just “ok”. It definitely seems like the strongest read pulse is right when the screen turns on so if you can nail the placement right off the bat, it works best.

Controller is based off an “NXP” CV520. Think its a knockoff but it’s a ISO 14444 front end.

The touch side of the keypad is very sensitive and responsive which is not the feeling I got with the samsung. The RFID antenna is somehow embedded in the black keypad part. I didn’t want to take it too far apart.

Unfortunately they committed the cardinal sin… they put the reader guts on the outside of the door.

At least it’s not a lock/unlock signal going to the back side of the lock. It’s serial data I could not decode in the 30 minutes I worked on it.

I was able to pick the cylinder that it comes with without too much trouble. Though the keyway is pretty tight. What is nice is you can swap it out with anything you want as it has a standard core. I do wish the core had a better fit… It’s pretty loose in there.

The keyway is actually a standard Schlage. The keys are marked “do not duplicate” Which is kinda dumb. Even dumber, it appears they have the bitting stamped on them.

Some pics…


Scan of the tag it comes with.

** TagInfo scan (version 4.24.4) 2020-04-21 20:25:17 **
Report Type: External

-- IC INFO ------------------------------

# IC manufacturer:
Unknown Manufacturer

# IC type:
Unknown Mifare class IC, possibly cloned

-- NDEF ------------------------------

# No NDEF data storage populated:

-- EXTRA ------------------------------

# Memory size:
1 kB
* 16 sectors, with 4 blocks per sector
* 64 blocks, with 16 bytes per block

-- FULL SCAN ------------------------------

# Technologies supported:
ISO/IEC 14443-3 (Type A) compatible

# Android technology information:
Tag description:
* TAG: Tech [android.nfc.tech.NfcA, android.nfc.tech.MifareClassic, android.nfc.tech.NdefFormatable]
* Maximum transceive length: 253 bytes
* Default maximum transceive time-out: 618 ms

# Detailed protocol information:
ID: C4:86:C5:B5
ATQA: 0x0400
SAK: 0x08

# Memory content:
Sector 0 (0x00)
[00] r--  C4 86 C5 B5 32 08 04 00 01 9E 0B EC EE F9 73 1D |....2.........s.|
[01] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[02] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[03] wxx  FF:FF:FF:FF:FF:FF FF:07:80 69 FF:FF:FF:FF:FF:FF
          Factory default key           Factory default key (readable)

Sector 1 (0x01)
[04] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[05] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[06] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[07] wxx  FF:FF:FF:FF:FF:FF FF:07:80 69 FF:FF:FF:FF:FF:FF
          Factory default key           Factory default key (readable)

Sector 2 (0x02)
[08] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[09] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[0A] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[0B] wxx  FF:FF:FF:FF:FF:FF FF:07:80 69 FF:FF:FF:FF:FF:FF
          Factory default key           Factory default key (readable)

Sector 3 (0x03)
[0C] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[0D] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[0E] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[0F] wxx  FF:FF:FF:FF:FF:FF FF:07:80 69 FF:FF:FF:FF:FF:FF
          Factory default key           Factory default key (readable)

Sector 4 (0x04)
[10] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[11] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[12] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[13] wxx  FF:FF:FF:FF:FF:FF FF:07:80 69 FF:FF:FF:FF:FF:FF
          Factory default key           Factory default key (readable)

Sector 5 (0x05)
[14] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[15] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[16] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[17] wxx  FF:FF:FF:FF:FF:FF FF:07:80 69 FF:FF:FF:FF:FF:FF
          Factory default key           Factory default key (readable)

Sector 6 (0x06)
[18] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[19] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[1A] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[1B] wxx  FF:FF:FF:FF:FF:FF FF:07:80 69 FF:FF:FF:FF:FF:FF
          Factory default key           Factory default key (readable)

Sector 7 (0x07)
[1C] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[1D] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[1E] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[1F] wxx  FF:FF:FF:FF:FF:FF FF:07:80 69 FF:FF:FF:FF:FF:FF
          Factory default key           Factory default key (readable)

Sector 8 (0x08)
[20] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[21] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[22] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[23] wxx  FF:FF:FF:FF:FF:FF FF:07:80 69 FF:FF:FF:FF:FF:FF
          Factory default key           Factory default key (readable)

Sector 9 (0x09)
[24] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[25] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[26] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[27] wxx  FF:FF:FF:FF:FF:FF FF:07:80 69 FF:FF:FF:FF:FF:FF
          Factory default key           Factory default key (readable)

Sector 10 (0x0A)
[28] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[29] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[2A] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[2B] wxx  FF:FF:FF:FF:FF:FF FF:07:80 69 FF:FF:FF:FF:FF:FF
          Factory default key           Factory default key (readable)

Sector 11 (0x0B)
[2C] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[2D] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[2E] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[2F] wxx  FF:FF:FF:FF:FF:FF FF:07:80 69 FF:FF:FF:FF:FF:FF
          Factory default key           Factory default key (readable)

Sector 12 (0x0C)
[30] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[31] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[32] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[33] wxx  FF:FF:FF:FF:FF:FF FF:07:80 69 FF:FF:FF:FF:FF:FF
          Factory default key           Factory default key (readable)

Sector 13 (0x0D)
[34] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[35] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[36] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[37] wxx  FF:FF:FF:FF:FF:FF FF:07:80 69 FF:FF:FF:FF:FF:FF
          Factory default key           Factory default key (readable)

Sector 14 (0x0E)
[38] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[39] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[3A] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[3B] wxx  FF:FF:FF:FF:FF:FF FF:07:80 69 FF:FF:FF:FF:FF:FF
          Factory default key           Factory default key (readable)

Sector 15 (0x0F)
[3C] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[3D] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[3E] rwi  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[3F] wxx  FF:FF:FF:FF:FF:FF FF:07:80 69 FF:FF:FF:FF:FF:FF
          Factory default key           Factory default key (readable)

r/R=read, w/W=write, i/I=increment,
d=decr/transfer/restore, x=r+w, X=R+W
data block: r/w/i/d:key A|B, R/W/I:key B only,
  I/i implies d, *=value block
trailer (order: key A, AC, key B): r/w:key A,
  W:key B, R:key A|B, (r)=readable key
AC: W implies R+r, R implies r

--------------------------------------
4 Likes

Great write up @turbo2ltr
That will be amazing help to @Steven1727
He has a few implant options to choose from

1 Like

lol I have decided when I get my Apex I am getting a flex but so far my NExT has been working for everything I need. Just wish it had more space. I had to take some stuff out of my vcard to get it down to size.

So this means that I can use the xM1 I have for that also right?

Something I have been wondering… With so many things not having an antenna big enough to get a good read on a glass implant… is there a way that you can extend the antenna or put a “remote” antenna? Like this… https://dangerousthings.com/product/proxlf/

My xM1+ is not implanted yet, but I enrolled a MiFare Classic 1K card and it works fine. Should work barring any coupling issues.

Funny, it doesn’t actually read “full size” cards very well either… I think it was designed for the smaller tags it came with…

Antennas are designed and tuned as a system, which includes components on the board… While it is possible, it’s not easy without a thorough understanding of electrical resonance and the design of the circuits of the controller.

So a lot like a CB radio antenna… :thinking:… would be really cool to make a remote antenna that would be a plug and play… :thinking:

Could you not use a LCR meter to get the inductance of the existing antenna and then simply wind one of the same size? I know that for the HF LED Power Bracelet I built 1 oscillator circuit and for the most part did not change it at all I just trialed multiple different coils with the same inductance and they all woked.

Hmm, I’d be curious how flex chips perform with this, its very tempting since it has a removable core I can put it on my existing master system.

It might work. You would have to ensure that there were no surface mount components (like caps or resistors) hidden on the antenna connector or body. Sometimes they’re so small you can barely see them (0201s and 01005s, I’m looking at you).

Inductance is all that matters for resonance, so you could replace it if you found the correct connection points. Another factor is power delivery though, and that’s affected by impedance. Two coils with the same Inductance don’t necessarily have the same resistance (different thickness/length wires) or capacitance (more or less insulated surfaces in close proximity), and that can seriously impact the impedance. More impedance at the target frequency means less power delivered.

You could create a type of patch antenna or antenna extension though.

2 Likes

I was wondering if it would be possible to make a semi-universal patch antenna that could be permanently stuck to a reader that works well with x series transponders assuming the reader provides enough power. But I assume it is not that simple. I barely understand what I am doing with standalone coil design, let alone an coil that acts as an adapter. Gives me a headache just thinking about it rn.

giphy (8)

3 Likes

See following comment…

See following comment…

@TomHarkness and I are tinkering on this idea.

4 Likes

@amal Great minds think alike lol

2 Likes

Hmm, yes, and no. CB antennas are designed to be interchangeable. There is a standard / expectation they have to meet. The CB expects that the antenna connected to that jack at the back will meet those requirements (50 ohm impedance, resonating at 27MHz). Making your own antenna that does not meet the expectations and electrical requirements can actually damage the CB.

So while it is possible to make interchangeable antennas for RFID (as seen with the DT LF antenna), you have to fully understand what the circuit is expecting. These expectations and requirements are not standardized at a point in the system like CBs are at their antenna connector. They depend on a plethora of variables.

2 Likes

Oh wow! Never knew it was that in-depth

In regard to the RDV4 and the interchangeable antenna, I am not sure but based on the 3 pins for the antenna I would guess that it is more than just a coil, I expect at least the capacitor for the coil to be on the antenna board as well. Aka the RDV4 system has been designed with modular antenna in mind with it’s own spec where as most RFID systems are designed as one tuned unit.

1 Like

You are correct

2 Likes

So an update on this lock, it seems to have stopped working. I cannot get it to read my implant anymore. Works fine with cards.
I’m guessing the warmer weather may have pushed the tuning of the antenna out just enough so it won’t read anymore. :expressionless:

check batteries also

Brand new Duracells that are a month old. 4AA total voltage is 6.29 so they are plenty good unfortunately.

:hammer: ???

3 Likes

I have no idea what this means, but pretty much any way you spin it I’m in.

2 Likes