[help needed] Plan B: hack OEM ecu

Hardware inside and outside of the ECU
Post Reply
User avatar
AndreyB
Site Admin
Posts: 14292
Joined: Wed Aug 28, 2013 1:28 am
Location: Jersey City
Github Username: rusefillc
Slack: Andrey B

Plan B: hack OEM ecu

Post by AndreyB »

We do have some cool hardware, but hacking a stock ECU would always be the cheapest options. My way of hacking an ECU would be to remove the old, closed & slow chip and hack my fast ARM or something in place with a small daughterboard.

So, OBD-I OEM Honda. Looks like the chips I want to take away use 1.778mm/0.07" pitch. For a prototype I would probably simply solder some wires in, but what would do for a more permanent solution? A "solder tail"? Something along the way of PRECI-DIP 350-90-1xx-00-012?

The only problem this one is not in stock. Looking for a 32+ pin 0.07" solder tail.

Image
Very limited telepathic abilities - please post logs & tunes where appropriate - http://rusefi.com/s/questions

Always looking for C/C++/Java/PHP developers! Please help us see https://rusefi.com/s/howtocontribute
User avatar
abecedarian
Posts: 386
Joined: Fri Nov 15, 2013 10:49 am

Re: Plan B: hack OEM ecu

Post by abecedarian »

Old Honda?

Image

Pre-OBD for you. ;)

Actually, good OBD- told you if an injector was shorted or open, any one of the 3 MAP sensors or other sensors were faulty....
Didn't need a special tool to do it either- a few LED's on the side of the board gave fault codes.
You can lead the horticulture but you can't make them think.
User avatar
acab
provoker
provoker
Posts: 263
Joined: Wed Dec 18, 2013 7:27 pm
Location: Minsk, BY

Re: Plan B: hack OEM ecu

Post by acab »

OEM ECU from Honda was hacked i think many times... Search about HonData
User avatar
AndreyB
Site Admin
Posts: 14292
Joined: Wed Aug 28, 2013 1:28 am
Location: Jersey City
Github Username: rusefillc
Slack: Andrey B

Re: Plan B: hack OEM ecu

Post by AndreyB »

acab wrote:OEM ECU from Honda was hacked i think many times
Thank you Captain Obvious. This does not really help me with my 0.07" connector?
Very limited telepathic abilities - please post logs & tunes where appropriate - http://rusefi.com/s/questions

Always looking for C/C++/Java/PHP developers! Please help us see https://rusefi.com/s/howtocontribute
sturovo
donator
donator
Posts: 32
Joined: Mon Feb 10, 2014 7:44 pm

Re: Plan B: hack OEM ecu

Post by sturovo »

This sounds really interesting.
However I imagine even if a Honda solution were to be worked out it would still be pretty tough to port it to a different ecu type. Way above my skill level :D
An alternative (less $) approach would be to use a parallel processor and modify the crank and injector signals externally to the stock ecu. By delaying the crank signal, timing can be retarded (and advanced) relative to the stock settings. For injection, the start pulse timing is fine just the end of the pulse needs to be adjusted. (According to the injector size/ manifold pressure and fine tuned by lambda.)

Is there room on rusEFI for a parallel processor ECU? AKA the dreaded piggyback :o
User avatar
abecedarian
Posts: 386
Joined: Fri Nov 15, 2013 10:49 am

Re: Plan B: hack OEM ecu

Post by abecedarian »

acab wrote:OEM ECU from Honda was hacked i think many times... Search about HonData
The ECU I posted hasn't been hacked, until recently, and even now the 'hacks' are experimental; it didn't come on any Civic, Accord, Prelude or Integra- couldn't get one of those EFI in 1982, could you?
There are only a few thousand of those ECU's out in the wild. ;)

If you're capable, I'll send you a complete EEPROM dump.
Last edited by abecedarian on Sun Aug 10, 2014 4:04 am, edited 2 times in total.
You can lead the horticulture but you can't make them think.
User avatar
abecedarian
Posts: 386
Joined: Fri Nov 15, 2013 10:49 am

Re: Plan B: hack OEM ecu

Post by abecedarian »

sturovo wrote:This sounds really interesting.
However I imagine even if a Honda solution were to be worked out it would still be pretty tough to port it to a different ecu type. Way above my skill level :D
An alternative (less $) approach would be to use a parallel processor and modify the crank and injector signals externally to the stock ecu. By delaying the crank signal, timing can be retarded (and advanced) relative to the stock settings. For injection, the start pulse timing is fine just the end of the pulse needs to be adjusted. (According to the injector size/ manifold pressure and fine tuned by lambda.)

Is there room on rusEFI for a parallel processor ECU? AKA the dreaded piggyback :o
Most easy would be intercept table reads (Honda did 'invent' the PGM thing- where values were programmed in and read out and interpolated... starting with that ECU I posted earlier- Honda's first EFI system) and substitute data out to the ECU. Hard part is knowing what data the MCU wants, then calculating what it needs and handing it back before the MCU faults.
You can lead the horticulture but you can't make them think.
User avatar
AndreyB
Site Admin
Posts: 14292
Joined: Wed Aug 28, 2013 1:28 am
Location: Jersey City
Github Username: rusefillc
Slack: Andrey B

Re: Plan B: hack OEM ecu

Post by AndreyB »

Let's get back on-topic: this thread is about soldering rusEfi body into some OEM ECU, Honda in this case :)
Very limited telepathic abilities - please post logs & tunes where appropriate - http://rusefi.com/s/questions

Always looking for C/C++/Java/PHP developers! Please help us see https://rusefi.com/s/howtocontribute
User avatar
AndreyB
Site Admin
Posts: 14292
Joined: Wed Aug 28, 2013 1:28 am
Location: Jersey City
Github Username: rusefillc
Slack: Andrey B

Re: Plan B: hack OEM ecu

Post by AndreyB »

Just to save the link - QuarterHorse is another example of HW hacking an OEM ecu http://www.moates.net/quarterhorse-for-fords-p-199.html
Very limited telepathic abilities - please post logs & tunes where appropriate - http://rusefi.com/s/questions

Always looking for C/C++/Java/PHP developers! Please help us see https://rusefi.com/s/howtocontribute
Rhinoman
contributor
contributor
Posts: 256
Joined: Thu Sep 24, 2015 2:14 pm
Location: Wiltshire, UK

Re: Plan B: hack OEM ecu

Post by Rhinoman »

I am working on this with my Vitara ECU, my idea was to get the software running on a proven platform before building a new circuit board.
From what I recall the Hondas use a non-Motorola chip which would add complexity. On a Denso with a Motorola type processor the tables aren't too difficult to locate, most Densos that I've looked at use similar code on ECUs of the same age. I hacked the early Miata ECU using a lot of knowledge gained from hacking the early Vitara 16V ECU.
User avatar
Aquinax
Posts: 22
Joined: Sun Dec 06, 2015 3:17 am
Location: Russia Perm Berezniki

Re: Plan B: hack OEM ecu

Post by Aquinax »

I tried to find a way to hack OEM ECU BOSCH MOTRONIC by MOTRONIC ONLINE
Image
But this one is not far so cheapest to be so useless. Besides it not open source, then needs to pay for firmware and other software
User avatar
kb1gtt
contributor
contributor
Posts: 3758
Joined: Tue Sep 10, 2013 1:42 am
Location: ME of USA

Re: Plan B: hack OEM ecu

Post by kb1gtt »

If we know enough about each pin, it should be easy enough to spin a small board with the STM32 on it. The primary questions are, what voltages will be at the pins, how much current does each pin need to drive or sink, are they analog or digital signals, and what bandwidth do they need to be. With those hand full of questions, I could see a carrier board being made that would allow rusEFI to happen as a possible modification to an OEM ECU.
Welcome to the friendlier side of internet crazy :)
User avatar
Aquinax
Posts: 22
Joined: Sun Dec 06, 2015 3:17 am
Location: Russia Perm Berezniki

Re: Plan B: hack OEM ecu

Post by Aquinax »

I think the idea is not entirely capable of carefree life.
Because for each unit will needs in a specific processor PCB. You can make a module that can be connected with the free pigtails, but the end user in this case would not be free from errors.
e28 ever
Image
User avatar
Aquinax
Posts: 22
Joined: Sun Dec 06, 2015 3:17 am
Location: Russia Perm Berezniki

Re: Plan B: hack OEM ecu

Post by Aquinax »

By the way, I dug up ECU from SUBARU EA82T, that worked in a normal mode with VAF flow-plate, and a mechanical ignition distributor on the camshaft gear.
But opening it I found the MAP sensor.
Image Image
Information on the network is not found on any pinout or even datasheet.
Image Image Image
But I really need to launch this motor .
Inside LED blinks error code like a Morse, breakage/short circuit some nozzles, when was the last time the ECU patched to engine harness plugs.
I couldnt start it during normal produced spark, fuel delivery and proper compression in the cylinders.
Any idea how to resolve it?
Post Reply