Question: The Q factor has been calculated as follows: Q=34.9=2*π*Fo*Lr/Rl where Fo=125Khz, Lr=410uH, Rl=9Ω (Given from the coil resistance). In the application note, coil with air core usually has Q=15; however, our design, which also has an air coil, the Q factor is calculated at 34.9. Is this ok, given that EM's recommendation is to take Q value as high as possible?
Answer: A quality factor of 35 should give you improved detection distance, while affecting the data transfer rate. The recovery time to switch from one state to another is higher due to the increased time to dampen the oscillation.
I can read the 125kHz em4305 tag, but not talk to it - send command/receive answer.
Blowing IC is part of the learning process
]]>The current drawn from the the driver IC is no longer limited by the resistors. This is what you wanted to achieve. And this may blow your driver IC sooner or later.
The Q factor of the RLC antenna circuit is higher. The lf tuning graph should show a higher but narrower peak. Meaning that you have to tune your antenna to either 128kHz or 134kHz. You may no longer be able to cover both.
I also have glass packaged tags that are 134kHz. Reading this kind is almost impossible with the stock antenna! I had to position the tag little bit off centre - still the reading would succeed only 1in 10 tries.
Digging through the internet of RFID readers I found this: http://cq.cx/vchdiy.pl
I dug up old radio antenna stick, with wire already attached. Unwound about half of it to get the resonance right for 134kHz. Antenna works. The reading distance is about... ZERO. Glass tag needs to be right next to the antenna. Slightly off and it would not read at all.
Em4x05 commands didn't work, as those are hardcoded to 125kHz.
One thing that comes to my mind is the driving circuit for antenna. Verichip cloner uses 2 transistors (3904 and 3906, max I=200mA) with no limiting resistors while proxmark is using 8 drivers from 74hct244 (max I = 8x35mA=280mA) and limiting resistors (R28, R22, R43)
Any more ideas ?
]]>i've snooped the transmission with another pm3 and the transmission power of the pm3 is significantly lower than snoops of valid readers, especially when it comes to maintaining long high peaks. (low peaks don't seem to be a problem...)
(this affects lf simulations, hitag, em4x05, and other lf tags that require two way comms.)
is there a way to add a component to help this issue or some software work-around someone has done?
Thanks!
(btw, i'm running standard (old) pm3 stock boards mainly from proxmark3.com)
[edit] additional info:
place a em4x05 card on the antenna (40v) and issue a new lf em 4x05info cmd and it works fine.
pull that card a cm away and it fails to receive the command to get into the command mode of the chip.
keyfobs never are able to go into command mode despite verifying the command sent matches that of another reader that is able to get the fob in command mode.
]]>