Posted on Leave a comment

Pancake Vibration Motor Teardown

For a while I’ve wondered how these pancake type (AKA “Shaftless”) vibration motors operate, so I figured I’d mutilate one to find out.

Pancake Vibration Motor
Pancake Vibration Motor

These vibrators are found in all kinds of mobile devices as a haptic feedback device, unlike older versions, which were just micro-sized DC motors with an offset weight attached to the shaft, these don’t have any visible moving parts.

Cover Removed
Cover Removed

These devices are crimped together, so some gentle attack with a pair of snips was required to get the top cover off.
It turns out these are still a standard rotary DC motor, in this case specifically designed for the purpose. The rotor itself is the offset weight, just visible under the steel half-moon shaped section are the armature coils.

Weighted Rotor
Weighted Rotor

The armature lifts off the centre shaft, the coils can clearly be seen peeking out from under the counterweight.

Commutator
Commutator

The underside of the armature reveals the commutator, which in this device is just etched onto the PCB substrate, the connections to the pair of coils can be seen either side of the commutator segments.

Brushes
Brushes

The base of the motor holds the brushes in the centre, the outer ring is the stationary permanent magnet. These brushes are absolutely tiny, the whole motor is no more than 6mm in diameter.

Posted on Leave a comment

Quickie Teardown – ShopGuard Anti-Theft Tag

ShopGuard Anti-Theft Tag
ShopGuard Anti-Theft Tag

Everyone at some stage must have seen these EAS security tags in shops, usually attached to clothing with a steel pin. As some of this year’s presents had been left with the tags attached, I had to forcibly remove them before wrapping could commence.

Reverse Side
Reverse Side

These are just a plastic disc about 50mm in diameter, with an internal locking mechanism & RF tag inside.

RF Coil
RF Coil

After some careful attack with a saw around the glue seam, the tag comes apart into it’s halves. The RF coil & it’s ceramic capacitor can be seen wrapped around the outside of the tag. The capacitor in this case isn’t even epoxy dipped to save that extra 0.0001p on the manufacturing price. In the top centre is the pin locking mechanism, enclosed in a small plastic pill.

Lock Pill
Lock Pill

Popping off the back cap of the lock shows it’s internals.

Ball Bearing Lock Assembly
Ball Bearing Lock Assembly

The lock itself is very simple. The centre section, held in place by a spring, carries 3 small ball bearings. The outer metal frame of the lock is conical in shape.

When the pin is pushed into the tag, the conical shape of the lock chamber causes the ball bearings to grab onto it, helped by the action of the spring that pushes the ball bearing carrier further into the cone.
This also means that any attempt to force the mechanism causes it to lock tighter onto the pin.
In normal operation, removal is achieved by a strong magnet that pulls the ball bearing carrier back slightly against it’s spring, allowing the pin to disengage & be pulled out.

This design is incredibly simple & cheap to make, and gains it’s locking strength from friction alone.

I would consider the RF coil being around the outer edge of the device a bit of a security risk – a quick chop with a sharp pair of wire cutters would disable the tag’s alarm functionality instantly. Making the coil slightly smaller & keeping it out of reach of the edge of the tag would help in this regard.

Posted on Leave a comment

ViewSonic VA2232W-LED Monitor 12v Conversion

ID Label
ID Label

On the quest to get things on board replaced that are heavy users of power, the monitor in the main cabin was next. The original CCFL-backlit monitor was very heavy on 12v power, at 5A. This meant falling asleep watching TV would result in severely flattened batteries.

Replacement with a suitable LED-backlit monitor was definitely required. The cheapest on eBay was a ViewSonic VA2232W-LED, so I took to work converting it from 240v to 12v operation.

Back Cover Removed
Back Cover Removed

There are no screws holding these monitors together, so a spudger & frequent swearing got the back off. The shield holding the circuitry is also not screwed down, only attached to the back of the LCD panel with aluminium shielding tape.

Power PCB Trackside
Power PCB Trackside

Once the tape has been cut, the main power board is accessible. The large IC on the left is the main backlight LED driver.

In this case the monitor requires a pair of rails from the supply, 18.5v for the backlight circuitry & 5v for the logic.

DC-DC Regulators
DC-DC Regulators

A pair of DC-DC converters has been fitted in the small space between the power & control boards.

PCB Connection Points
PCB Connection Points

To save me some work & keep maximum compatibility, I’ve not modified the existing supply, just attached the new DC-DC converter outputs onto the corresponding outputs of the factory PSU. The 12v input leads are routed out of the same gap as the mains IEC connector, with some hot glue over the mains input solder points to provide some more insulation.

Wiring Tidied
Wiring Tidied

The wiring is tidied up with hot glue so the back cover will go back on.

Total current draw at 12v is 1.4A.

Posted on Leave a comment

Electronic Lighter – eBay Freebie

With a recent order from a Chinese seller on eBay, this little gadget was included in the package as a freebie:

Electronic Lighter
Electronic Lighter

I’ve not smoked for a long time, so I’m not too sure what use I’m going to find for this device, but it’s an electronic lighter!

Pyromaniac Mode
Pyromaniac Mode

Pushing the slider forward reveals a red-hot heater, mounted in the plastic (!) frame.

Charging Mode
Charging Mode

Pushing the other way reveals a USB port to charge the internal battery.

Core Removed
Core Removed

A couple of screws releases the end cap from the cover & the entire core unit slides out. Like all Chinese toys it’s made of the cheapest plastic imaginable, not such a good thing when heat is involved.

Heating Element
Heating Element

The element itself is a simple coil of Nichrome wire, crimped to a pair of brass terminals. The base the heater & it’s terminals are mounted to is actually ceramic – the surround though that this ceramic pill clips into is just the same cheap plastic. Luckily, the element only remains on for a few seconds on each button push, there’s no way to keep it on & start an in-pocket fire, as far as I can see.

Main PCB
Main PCB

The main PCB clips out of the back of the core frame, the large pair of tinned pads on the left connect to the heater, the control IC has no numbering of any kind, but considering the behaviour of the device it’s most likely a standard eCig control IC.

LiPo Cell
LiPo Cell

The other side of the board has the USB port on the right, the Lithium Polymer cell in the centre, and the power button on the left. The cell itself also has no marking, but I’m guessing a couple hundred mAh from the physical size.

 

Posted on Leave a comment

Cheap Lithium Polymer Battery Packs

In the past, I’ve used RC type LiPo packs for my mobile power requirements, but these tend to be a bit bulky, since they’re designed for very high discharge current capability – powering large motors in models is a heavy job.

I recently came across some Samsung Galaxy Tab 10.1 battery packs on eBay very cheaply, at £2.95 a piece. For this price I get 6800mAh of capacity at 4.2v, for my 12v requirements, 3 packs must be connected in series, for a total output of 12.6v fully charged.

For an initial pack, I got 9 of these units, to be connected in 3 sets of 3 to make 20Ah total capacity.There are no control electronics built into these batteries – it’s simply a pair of 3400mAh cells connected in parallel through internal polyfuses, and an ID EEPROM for the Tab to identify the battery.
This means I can just bring the cell connections together with the original PCB, without having to mess with the welded cell tabs.

Battery Pack
Battery Pack

Here’s the pack with it’s cell connections finished & a lithium BCM connected. This chemistry requires close control of voltages to remain stable, and with a pack this large, a thermal runaway would be catastrophic.

Cell Links
Cell Links

The OEM battery connector has been removed, and my series-parallel cell connections are soldered on, with extra lead-outs for balancing the pack. This was the most time-consuming part of the build.

If all goes well with the life of this pack for utility use, I’ll be building another 5 of these, for a total capacity of 120Ah. This will be extremely useful for portable use, as the weight is about half that of an equivalent lead-acid.

Posted on Leave a comment

LB-Link USB Wireless-N Adaptor Teardown

I needed a decent WiFi adaptor for my latest Pi LCD project, so after trawling eBay for cheapy USB adaptors, I found this one.

USB WiFi Dongle
USB WiFi Dongle

Unlike most USB WiFi radios these days, it actually has a proper RP-SMA antenna connector, not the low-gain built in jobbies that never seem to work too well.
There are a few versions of this adaptor, all of which seem to use the same casing, there’s a button push cut into the plastic for a WPS button that doesn’t exist on this model. This is fine, as I don’t enable WPS on any of my network equipment anyway. (It’s insecure, and can be cracked in minutes).

MAC Address
MAC Address

Here’s the rest of the essential details, the model is BL-LW08-AR, rated at 300Mbit/s.

PCB Reverse
PCB Reverse

Here’s the PCB removed from the casing, there are a pair of PCB antennas on here, but they’re not connected to the RF circuitry in this model, the links are missing.

Chipset
Chipset

The chipset used is a Realtek RTL8191SU, there isn’t much more in this device, as it’s all built into the silicon.

 

Posted on 3 Comments

Fire Angel CO-9D Carbon Monoxide Detector Teardown

Fire Angel CO-9D CO Detector
Fire Angel CO-9D CO Detector

This detector has now been retired from service since it’s a fair bit out of date. So here’s the teardown!

Information
Information

Unlike older detectors, this unit has a built in battery that never needs replacing during the life of the sensor, so once the unit reaches it’s expiry date it’s just trashed as a whole.

Cover Removed
Cover Removed

4 screws hold the cover on, here’s the internals of the detector. There’s a 3v CR123A LiMnO² cell at the right for power, rated at 1500mAh. A 7 year life is quite remarkable on a single cell!
The sensor is just to the left of the lithium cell, and is of quite unusual construction. Previous CO sensor cells I’ve seen have been small cylinders with a pair of brass pins. This one appears to use a conductive plastic as the connections. These sensors contain H²SO⁴ so they’re a bit hazardous to open.
There are no manufacturer markings on the sensor & I’ve not been able to find any similarly shaped devices, so I’m unsure of it’s specifications.
The alarm sounder is on the left, the usual Piezo disc with a resonator to increase the loudness.

Microcontroller
Microcontroller

The brains of the device are provided by a Microchip PIC16F914 microcontroller. This is a fairly advanced device, with many onboard features, and NanoWatt™ technology, standby power consumption is <100nA according to Microchip’s Datasheet. This would explain the incredible battery life.
The choke just at the right edge of the photo is actually a transformer to drive the Piezo sounder at high voltage.

PCB Reverse
PCB Reverse

Here’s the PCB with the LCD frame removed. Not much to see on the this side, the silence/test button top right & the front end for the sensor.

Sensor Front End Amplifier
Sensor Front End Amplifier

Here’s a closer look at the front end for the CO sensor cell itself. I haven’t been able to decode the SMT markings on the SOT packages, but I’m guessing that there’s a pair of OpAmps & a voltage reference.

Posted on Leave a comment

nb Tanya Louise – Compressor Install

Compressed air is a rather useful power source, especially when all maintenance is done by the on board crew instead of by boatyards.

Screwfix had a good deal on a 50L 3.5CFM air compressor, to save space this has been permanently mounted in a free space & air will be piped to where it is needed from a central point.

Because of the total height of the machine, the compressor itself has been unbolted from the tank, a copper line connecting the two back together at a larger distance.

Bearers
Bearers

In one of the very few free spaces available, under a bunk. A pair of timbers has been screwed to the floor to support the tank.

Tank Installed
Tank Installed

The tank is strapped to the wooden supports with a pair of ratchet straps, the compressor itself can be seen just behind the tank. The copper line on the top of the tank is going back to be connected to the compressor outlet.

Air Fittings
Air Fittings

Compressor control remains on top of the tank, the pressure switch & relief valve centre. After an isolation valve, the feed splits, the regulator installed will be feeding the air horn with 20PSI, replacing the existing automotive-style 12v air pump. The currently open fitting will be routed to a quick connect on the bulkhead. This will be accessible from the front deck, an air hose can be fitted to get a supply anywhere on board.

More to come when the rest of the system gets installed!

73s for now.

Posted on Leave a comment

Official Raspberry Pi 7″ Touch LCD

Raspberry Pi LCD
Raspberry Pi LCD

Finally the Raspberry Pi Foundation have released an official LCD for the DSI connector on the Pi. When these were announced, I placed an order straight away, but due to demand it’s taken quite a while for it to arrive in the post.

Interface PCB
Interface PCB

The LCD itself is an RGB panel, to interface the Pi via the MIPI DSI port, some signal conversion is required. A small PCB is mounted on the back of the LCD to do this conversion. It also handles the power supply rails required by the LCD itself & interfacing the touch screen.

LCD Power Supply
LCD Power Supply

Taking care of the power supply is a Texas Instruments TPS65101 triple output LCD power supply IC. This also has a built in linear regulator to supply 3.3v for the rest of the circuitry on board. The large transistor to the left of the IC is the pass transistor for this regulator.

Main Controller
Main Controller

The video signal comes in on the FFC connector on the left, into the BGA IC. I’ve not managed to identify this component, but it’s doing the conversion from serial video from the Pi to parallel RGB for the LCD.
There’s also an Atmel ATtiny88 on the board below the main video conversion IC, not sure what this is doing.
The touch controller itself is mounted on the flex of the LCD, in this case it’s a FT5406.

Raspberry Pi LCD
Raspberry Pi LCD

Here’s the LCD in operation. It’s not the highest resolution out there, but it leaves the GPIO & HDMI ports free for other uses.

Pi Mounted
Pi Mounted

The Pi screws to the back of the LCD & is connected with a flat flex cable & a pair of power jumpers. I’ve added a couple of small speakers to the top edge of the LCD to provide sound. (More to come on this bit).

 

Posted on 7 Comments

GB3WP & G6YRK – Rant Time

It’s been a while since I’ve done a proper radio based post, so it’s a bit of a shame that I have to start off with a rant, but it’s required in this case.

One of the local 70cm repeaters, GB3WP seems to have many problems. The largest one seems to be G6YRK, the repeater keeper.

I had heard rumours of the repeater suddenly going off air getting switched off when either an M3/M6 or 2E0/2E1 was using it. At the time I thought no fellow ham could be quite that petty.

What callsign I or anybody else has should not make a shred of difference whether we should be allowed on the air or not. I personally keep my operating standards as high as possible, way above and beyond what Ofcom stipulates in the licence terms, as it’s part of making the hobby enjoyable for everyone. Seems that not everyone feels the same (in my experience, the older generation of hams, some of whom believe that the tests these days are far too easy, etc, etc).

Then I got proved wrong.

I was doing some handheld radio testing with M3HHY over at Distant Signal Radio on GB3WP, as at the time GB3MR was having some issues with the local pirate (see my previous posts for more info on that prat).

Within a couple of minutes of us establishing a QSO, the repeater suddenly stopped responding. After trying to get back in for a good 15 minutes, it came back on air again.
The instant we gave our callsigns, off it went, into the ether. No response.
This behaviour continued for nearly an hour, and after trying to contact YRK directly, we gave it up as a bad job, with quite a bit of pissed off added into the mix.

If I’d not heard stories of the repeater being turned off when the “wrong people” are using it, I might have put it down to dodgy repeater equipment, but even that didn’t make sense, as it had a definite pattern.
We both fired off an email to the Repeater Keeper, only to get no response from that either (surprise, surprise).

That was the last time I personally attempted to make use of GB3WP.

Until I was given an audio clip of G6YRK in action this evening.

Seems that not even M0 calls are immune from being wiped off the air by GB3WP. Chris, M0OGG, has apparently also had this issue with the repeater. Lucky for him, he had the opportunity to speak to the keeper directly about what went on.

Here’s the audio, I’ll pick each part out & go into a few opinions/observations below.

So, Chris (M0OGG) has asked a simple question, and been met with hostility. Dick Move Number 1.

YRK is clearly reluctant to go into “detail” on the air. Probably because he’s talking complete shite. Only when Lewis (M3HHY) joins in with a slightly more defensive tone does Steve (G6YRK) actually say what Chris has been “reported” for.

After all that it seems that an accusation of keying over other repeater users is the bullshit line of the day. (For the record, I know Chris, he’s not the type of person to key over another radio user, that behaviour in of itself is idiotic).
Apparently he has witnesses to this action, and he’s insisting that others were also involved. Not to mention the fact that RDF has been done on (I’m assuming) all of these “offenders”. G6YRK must have quite the army of hams with lots of spare time.
I’m not sure who the other station is, as he doesn’t give a callsign.

As Lewis jumps in & comments, the Repeater Keeper should be saying something to users he suspects of this kind of thing, in my opinion.

The real reason, of course, that he keeps turning the repeater off when others are using it is that he’s a passive-aggressive vindictive moron.

Surprise, surprise, he can’t remember the “exact date”, (because it never actually happened), it’s just “the other day, somebody did it”. Yeah, great evidence there Steve, because apparently the only person around at the time was Chris. How can he know this? When a repeater has a coverage area as wide as GB3WP, this guy is claiming that he knows that only a single person is listening? No, I think it’s bullshit too.

GB3WP Coverage Map
GB3WP Coverage Map

For reference, here’s the coverage map of the repeater. Steve G6YRK must be bloody psychic to make such a comment.
He then mentions a “friend” of Chris, but again refuses to give any names. Again I’m calling bullshit.
Swifty following this he goes into full kick-my-toys-out-of-the-pram mode because he’s been openly challenged.
While he’s correct in his statement that he can do as he pleases with the repeater, it’s not very good form to just switch the thing off when licenced users are having a perfectly valid QSO. If he doesn’t like people using the repeater, he should turn it off permanently & remove the listing from the repeater group.

After this, Steve makes the comment that he knows nothing of the repeater going off, as he’s been out all night. He mentions his Repeater Stasi again, and then makes a partial retraction of his previous statement, now that it “might” not have been Chris previously. Well Steve, we’re finally getting towards something that resembles truth. You’ve got absolutely no idea who is “keying people out”, if it’s even happening at all. So much for “having people all over the place” listening to where transmissions are coming from.

After Chris confronts him again, he returns to the fallback of that as the NoV holder it’s his prerogative to be able to switch the repeater off whenever he pleases.

When confronted with the fact that people pay into the repeater group to help keep them running, he claims that Chris’ signal is breaking up. My arse. Every other station on the repeater can hear him fine.

There’s probably more to add to this, so if I get any more relevant information from other sources I’ll add on to the saga.

73s for now folks!

Posted on Leave a comment

Evening Musing – Linux RAID Rebuilding

My main bulk storage for the home LAN is a bank of 4TB drives, set up in a large RAID6 array. Due to a brownout this evening on the +12v supply for one of the disk banks, I’ve had to start rebuilding two of the disks.

Core NAS
Core NAS

The total array size is 28TB after parity – 9 4TB disks in total. The disks are connected through USB3 to the file server.

mdadm Detail
mdadm Detail

Here’s the current status of the array. Two of the disks decided that they wouldn’t rejoin the array, so they got their superblocks cleared & readded manually. This forced the array into rebuilding.

Rebuild Progress
Rebuild Progress

Rebuilding an array of this size takes a while, as can be seen from the image above, it’s going to take about 7200 minutes, or 5.2 days.

Posted on Leave a comment

Cree XML-T6 x5 LED Torch

Here’s another torch from eBay, this time with 5 Cree XML-T6 LEDs.

Label
Label

Having 5 Cree LEDs rated at up to 3A a piece, this light has the capacity to draw about 50W from it’s power supply. In this case though, current draw is about 1.5A at 12v input on the full brightness setting.

Cree LED Torch
Cree LED Torch

Here’s the LEDs mounted into the reflector. Fitting this many high power LEDs into a small space requires some serious heatsinking. The casing is made of machined aluminium.

LED Module
LED Module

Unscrewing the front bezel allows the internals to come out. The core frame & reflector is all cast alloy as well, for heatsinking the LEDs. The controller PCB is mounted into a recess in the back of the LED mount.

Controller
Controller

Here’s the controller itself. The usual small microcontroller is present, for the multiple modes, and handling the momentary power switch.

Switching Inductor
Switching Inductor

As all the LEDs on this torch are connected in series, their forward voltage is ~12-15v. The battery is an 8.4v Li-Ion pack, so some boost conversion is required. This is handled by the circuitry on the other side of the board, with this large power inductor.

Reflector
Reflector

The reflector screws onto the front of the LED array, centered in place with some plastic grommets around the LEDs themselves.

LED Array
LED Array

Finally for the torch, the LED array itself. This is attached to the frame with some thermal adhesive, and the LEDs themselves are mounted on an aluminium-core PCB for better heat transfer.
This module unsurprisingly generates quite some heat, so I have improved the thermal transfer to the outer case with some thermal grease around the outer edge.

Charger
Charger

The supplied charger is the usual Chinese cheapy affair, claiming an output current of 1A at 8.4v. I never use these chargers, so they get butchered instead.

Charger PCB
Charger PCB

Here’s the main PCB. Overall the construction isn’t that bad, the input mains is full-wave rectified, but there is little in the way of RFI filtering. The supply is fused, but with an absolutely tiny glass affair that I seriously doubt has the ability to clear a large fault current.
Like many cheap supplies, the output wiring is very thin, it’s capacity to carry 1A is questionable.

PCB Reverse
PCB Reverse

On the reverse side, there’s a nice large gap between the mains side & the low voltage output. There’s even an anti-tracking slot under the optoisolator.

Posted on Leave a comment

Quickie Project: Ruggedising The RTL-SDR Dongle

As supplied, the RTL type tuner dongles are a little fragile, especially when they’ve got a rather heavy coax feeder attached for Ham Radio use.

The MCX antenna connectors on the tuner can’t stand up to much abuse, and even the USB plug rips itself from it’s mounts after a while with a heavy weight on the end. Since this dongle sits in my radio go bag, it definitely needed some protection & support.

PCB
PCB

The PCB itself is removed from it’s flimsy plastic casing, the USB plug is desoldered from the board.
To the exposed pads, a USB cable is soldered, giving much more flexibility in where the tuner is placed.
Instead of using the MCX antenna connector on the PCB, the coax is stripped & soldered direct to the PCB itself, as this connector has become unreliable.

N-Connector
N-Connector

To get the RF into the device, the case is fitted with an N connector, as is everything else in my shack.

Boxed
Boxed

The box used is a surplus one which previously housed an electronic lighting transformer. This would be very easy to waterproof as well, for more protection against outdoor use.

Posted on Leave a comment

Alpha Networks WMP-N06SA MiniPCI Wireless N Card

Here’s a quick look at one of the now surplus cards from my old networking system, a MiniPCI Wireless interface card.

Card Overview
Card Overview

This is an older generation card, one of the first with Wireless N support on 2.4GHz.

PCI Chipset
PCI Chipset

Network PHY & firmware EEPROM. Power supply stuff is over to the left.

RF Transceiver
RF Transceiver

Inside the shield is the RF Transceiver IC & it’s associated RF power amplifier ICs for each antenna. These power amplifiers are LX5511 types from Microsemi, with a maximum power output of +26dBm.

Posted on 1 Comment

Netgear FS108 Fast Ethernet Switch

During the replacement of the networking onboard nb Tanya Louise with gigabit, the main 8-port distribution switch was also changed. Here’s a quick teardown of the old one.

Netgear FS108
Netgear FS108

This has been quite a reliable switch for the internal networking on board, but the time has come to switch over to something a little faster. This switch will be getting repurposed for the slower devices on my network, such as the radiation monitor & the raspberry Pi systems.

Cover Removed
Cover Removed

Here’s the top removed from the switch. It’s a very simple construction, with a small power supply section & the main switch IC in the centre.

Main Switch IC
Main Switch IC

All the magic happens in this main IC, a Realtek RTL8309SB Fast Ethernet switch. This is a feature-packed IC, with support for VLAN tagging, but being in a small unmanaged switch the extra features aren’t used.

Power Supply
Power Supply

Main power supply is provided by a jelly bean MC34063 DC-DC converter, and an adjustable LM1117 linear regulator. Nothing much special here.

Ethernet Magnetics
Ethernet Magnetics

The only other parts are the magnetics for the ethernet interfaces, behind the ports themselves.

Posted on 2 Comments

Cisco EA6700 / Linksys AC1750 Router

Cisco EA6700
Cisco EA6700

Since the boat was still running it’s internal network on 10/100M speeds, an upgrade was decided on, the internal WiFi signal strength was also pretty poor further than a few feet from the NOC.

The new router is a Cisco/Linksys AC1750 model, with gigabit networking, and full 802.11ac 2.4/5GHz Wireless. This router also has a built in media server, print server, USB3 & USB2.

PCB Overview
PCB Overview

Teardown time! Here’s the router with the cover removed. Most of the fun stuff is hidden under the shields, but these aren’t fully soldered down & the covers are removable. The 6 antennas can be seen spaced around the edge of the housing, the main CPU is under the large heatsink upper centre. The radio power amplifier stages are underneath the shields, while the main RF transceivers are just outside the shields.

2.4GHz Transceiver
2.4GHz Transceiver

Wireless N is provided by a Broadcom BCM4331, this provides full dual-band 3×3 802.11n support. Being 3×3 it is actually 3 separate transceivers in a single package, to get much higher throughput rates of 600Mbit/s.

5GHz Transceiver
5GHz Transceiver

Wireless AC is provided by it’s sister IC, the BCM4360, with throughput speeds of 1.3Gbit/s. Both of these transceiver ICs connect back to the main CPU via PCI Express.

5GHz Power Amplifiers
5GHz Power Amplifiers

To get increased range, there are a trio of Skyworks SE5003L +23dBm 5GHz power amplifier ICs under the shield, along with the TX/RX switching & antenna matching networks. Heatsinking for these is provided by a sink screwed to the bottom side of the PCB. The outputs to the antennas can be seen at the top of the image.

2.4GHz Power Amplifiers
2.4GHz Power Amplifiers

The 2.4GHz section is fitted with a trio of Skyworks SE2605L +23dBm 2.4GHz power amplifiers, with a similar heatsink arrangement under the board. Unlike the 5GHz section, the 2.4GHz antenna feeds are soldered to the PCB here instead of using connectors.

Main CPU
Main CPU

The main CPU is a BCM4708 Communications Processor from Broadcom, as for the other Broadcom chips in this router, very little information is available unless under NDA, but I do know it’s a dual core ARM Cortex A9 running at 1GHz, with built in 5-port gigabit ethernet switch.

CPU RAM
CPU RAM

Working RAM for the processor is a Hynix H5TQ2G63DFA 256MB part.

More to come on the installation of the new networking, with it’s associated 4G mobile gateway connection system.

73s for now!

Posted on Leave a comment

Another Chinese Charger

I almost forgot about this bit of kit, that came with one of my LED torches as a Lithium Ion charger. As I never plug in anything that comes from China via eBay, here’s the teardown & analysis.

Another Lethal Charger?
Another Lethal Charger?

Here’s the unit itself. It’s very light, and is clearly intended for American NEMA power points.

Specs
Specs

Claimed specifications are 100-240v AC input, making it universal, and 4.2v DC out ±0.5v at 500mA.
Considering the size of the output wire, if this can actually output rated voltage at rated current I’ll be surprised.

Opened
Opened

Here’s the adaptor opened up. There’s no mains wiring to speak of, the mains pins simply push into tags on the PCB.

PCB Top
PCB Top

Top of the SMPS PCB. As usual with Chinese gear, it’s very simple, very cheap and likely very dangerous. There’s no real fusing on the mains input, only half-wave rectification & no EMI filtering.

PCB Bottom
PCB Bottom

Here’s the bottom of the PCB. At least there’s a fairly sized gap between the mains & the output for isolation. The wiggly bit of track next to one of the mains input tags is supposed to be a fuse – I somehow doubt that it has the required breaking characteristics to actually pass any safety standards. Obviously a proper fuse or fusible resistor was far too expensive for these.

The output wiring on the left is thinner than hair, I’d say at least 28AWG, and probably can’t carry 500mA without suffering extreme volt drop.

Posted on Leave a comment

Netgear GS308 Gigabit Switch

Here’s a new addition to the network, mainly to replace the ancient Cisco Catalyst 3500 XL 100MB switch I’ve been using for many years, until I can find a decently priced second hand commercial gigabit switch.

Operational
Operational

Here’s the switch with some network connections on test. So far it’s very stable & draws minimum power. I’ve not yet attempted to run my core links (NAS) through yet, as I’ve not yet seen a consumer grade switch that can stand up to constant full load without crashing.

Internals
Internals

Here’s the switch with it’s lid popped. The magnetics can be seen at the back, next to the RJ-45 ports, the large IC in the centre is the main switching IC, with a heatsink bonded to the top. Very minimal design, with only a couple of switching regulators for power supply & not much else.

Power & EEPROM
Power & EEPROM

Here’s a closeup of some of the support components. There’s a 25MHz crystal providing a clock signal for the switch IC, just to the right of that is an EEPROM. I imagine this is storing the switch configuration & MAC address. Further right is one of the switching DC-DC converter ICs for power.

As a quick test, here’s 500GB of data being shifted through the switch, at quite an impressive rate. I’m clearly maxing out the bandwidth of the link here. Soon I will upgrade to a 10G Ethernet link between the NAS & main PC to get some more performance.

Test
Test
Posted on Leave a comment

5-Port HDMI Switch

HDMI Switch
HDMI Switch

Here’s another quick teardown, a cheap 5-port HDMI switch box. This is used to allow a single input on a monitor to be used by 5 different external HDMI devices, without having to mess about plugging things in.

Power & Remote
Power & Remote

Here’s the DC barrel jack & 3.5mm TRS jack for power & remote control. There’s a little IR decoder & remote that go with this for hands free switching.

PCB Top
PCB Top

Here’s the PCB out of it’s plastic housing. The main logic is a pair of PI3HDMI303 3:1 HDMI switches from Pericom Semiconductor. These are cascaded for the 5-ports, the first 3 input HDMI ports are switched through both ICs to reach the output.
These HDMI switch ICs are operated with TTL input pins, the combination of these pins held either high or low determines the input port that appears on the output.
There’s a button on the left for switching between inputs, with a row of 5 LED indicators.

PCB Bottom
PCB Bottom

Not much on the bottom side, a lot of passives & bypass capacitors. There’s a 3.3v LDO regulator on the left for supplying the main rail to the active switch ICs. The IC on the right doesn’t have any numbering at all, but I’m presuming it’s a microcontroller, dealing with the IR remote input & pushbutton inputs to switch the inputs.

Posted on Leave a comment

Maplin/Refrakta Torch Modification & Mode Removal

The multimode dimming/flashing modes on Chinese torches have irritated me for a while. If I buy a torch, it’s to illuminate something I’m doing, not to test if people around me have photosensitive epilepsy.

Looking at the PCB in the LED module of the torch, a couple of components are evident:

LED Driver PCB
LED Driver PCB

There’s not much to this driver, it’s simply resistive for LED protection (the 4 resistors in a row at the bottom of the board).
The components at the top are the multimode circuitry. The SOT-23 IC on the left is a CX2809 LED Driver, with several modes. The SOT-23 on the right is a MOSFET, for switching the actual LED itself. I couldn’t find a datasheet for the IC itself, but I did find a schematic that seems to match up with what’s on the board.

Schematic
Schematic

Here’s that schematic, the only thing that needs to be done to convert the torch to single mode ON/OFF at full brightness, is to bridge out that FET.

Components Desoldered
Components Desoldered

To help save the extra few mA the IC & associated circuitry will draw from the battery, I have removed all of the components involved in the multimode control. This leaves just the current limiting resistors for the LED itself.

Jumper Link
Jumper Link

The final part above, is to install a small link across the Drain & Source pads of the FET. Now the switch controls the LED directly with no silly electronics in between. A proper torch at last.

Posted on Leave a comment

DIY SMPS Fan Controller

Now the controllers have arrived, I can rejig the supplies to have proper thermal control on their cooling.

Changes Overview
Changes Overview

Here’s the top off the PSU. The board has been added to the back panel, getting it’s 12v supply from the cable that originally fed the fan directly. Luckily there was just enough length on the temperature probe to fit it to the output rectifier heatsink without modification.

To connect to the standard 4-pin headers on the controller, I’ve spliced on a PC fan extension cable, as these fans spent their previous lives in servers, with odd custom connectors.

Fan Controller
Fan Controller

Here’s the controller itself, the temperature probe is inserted between the main transformer & the rectifier heatsink.
I’ve set the controller to start accelerating the fan at 50°C, with full speed at 70°C.

Full Load Test
Full Load Test

Under a full load test for 1 hour, the fan didn’t even speed up past about 40% of full power. The very high airflow from these fans is doing an excellent job of keeping the supply cool. Previously the entire case was very hot to the touch, now everything is cool & just a hint of warm air exits the vents. As the fan never runs at full speed, the noise isn’t too deafening, and immediately spools back down to minimum power when the load is removed.

Posted on 10 Comments

Maplin/Refrakta XR-E LED Torch

Following on from the teardown & analysis of the charger, here’s the torch itself under the spotlight.

LED Torch
LED Torch

Here’s the torch itself, it’s a sturdy device, made of aluminium. Power is provided by a single 18650 Li-Ion cell.

Charging Port
Charging Port

Here’s the charging port on the torch, there’s no electronics in here for controlling the charge, the socket is simply connected directly to the Li-Ion cell, and requires a proper external charger.

LED Pill
LED Pill

Unscrewing the lens gives access to the LED core, this also unscrews from the torch body itself, leaving the power switch & the battery in the body.

LED Module
LED Module

Unscrewing the aluminised plastic reflector reveals the LED itself. Being a new device, I expected an XM-L or XM-L2 Cree LED in here, but it’s actually an XR-E model, a significantly older technology, rated at max 1A of drive current.

LED Back
LED Back

Popping the control PCB out from the pill reveals a lot of empty space, but the back of the LED is completely covered by a heatsinking plate, which is conducting heat to the main body of the torch.

Control PCB
Control PCB

Not much to see on the control PCB, just a bunch of limiting resistors, and a multi-mode LED driver IC in a SOT-23 package. There’s no proper constant-current LED driver, and as the battery discharges the torch will dim, until the low voltage cutout on the cell turns things off completely.

Posted on Leave a comment

DIY SMPS Fan Speed Control – The Controllers

Finally, after a couple of weeks wait time, the fan controllers for the power supplies have arrived. They’re small boards, which is good for the small space left inside the case of the supply.

Controller Boards
Controller Boards

Here they are. I’m not certain what the pair of potentiometers are for – there’s no mention of them in the documentation. Possibly for calibration.
Beepers are supplied so an alarm can be heard if the fan fails – very useful for this application.

Controller Closeup
Controller Closeup

Here’s a closeup of the PCB. Options are set with the DIP switch bank on the left, details for that below. The main IC is a STM8S103F3 flash microcontroller.

Temperature Probe
Temperature Probe

The only issue at the moment is that the temperature probe leads are much too short. I’ll have to make a small modification to get enough length here.

 

 

Here’s all the details on the boards, more for future reference when they undoubtedly vanish from eBay 😉

Specifications

Working voltage:DC12V

Circuit load capacity: maximum current per output 5A, the bus currents up 9A

Output Range: The first channel 20% -100%, or 40% -100% (TFL = ON)
The second channel and the third channel 10% -100%

(Note: Above range only for PWM range, the actual control effect will vary depending on the fan.)

Temperature probe parameters: 50K B = 3950

Thermostat temperature zone error: error depending on the temperature probe, generally 3-5%

Stall alarm minimum speed: 700-800 rpm

 

Function setting switch Description:

TFL (No. 1): The lowest temperature channel PWM setting, when ON state FAN1 PWM minimum is 40%, when OFF the minimum PWM of FAN1 is 20%.

TP1 TP2 (No. 2,3): Temperature channel control temperature zones are interpreted as follows (need to used with the temperature probe):

 

TP1  TP2 Accelerating temperature Full speed temperature
OFF OFF 35℃ 45℃
ON OFF 40℃ 55℃
OFF ON 50℃ 70℃
ON ON 60℃ 90℃

 

When the temperature lower than the accelerated temperature, then output at the minimum rotation speed; when it exceed over the full temperature, then always output at full speed.

BF1 BF2 (No. 4,5): corresponds FAN1 FAN2 stall alarm function switch, when the corresponding open channel fan break down, the controller will alarm with soundand light (works with buzzle), alarm will automatically eliminated when the fan is rotated recovery . If BF1 and BF2 both are open (ON), the FAN1, FAN2 have any one or both stops, the controller will alarm!