Posted on Leave a comment

Test Equipment Upcycling – Variable Attenuator Module

A while back I found myself in the need of an adjustable RF attenuator capable of high-GHz operation. As luck would have it I had an old Spectrum analyser on the shelf at work, which we had retired quite some time ago.

Spectrum analysers being quite capable test instruments, I knew that the input attenuation would be done with a standalone module that we could recover for reuse without too much trouble.

The attenuator module

Here’s the module itself, with the factory drive PCB removed from the bottom, showing the solenoids that operate the RF switches. There are test wires attached to them here to work out which solenoid switches which attenuation stage. In the case of this module, there are switches for the following:

  • Input select switch
  • AC/DC coupling
  • -5dB
  • -10dB
  • -20dB
  • -40dB

For me this means I have up to -75dB attenuation in 5dB steps, with optional switchable A-B input & either AC or DC coupling.

Drive is easy, requiring a pulse on the solenoid coil to switch over, the polarity depending on which way the switch is going.

Building a Control Board

Now I’ve identified that the module was reusable, it was time to spin up a board to integrate all the features we needed:

  • Onboard battery power
  • Pushbutton operation
  • Indication of current attenuation level

The partially populated board is shown at right, with an Arduino microcontroller for main control, 18650 battery socket on the right, and control buttons in the centre. The OLED display module for showing the current attenuation level & battery voltage level is missing at the moment, but it’s clear where this goes.

As there weren’t enough GPIO pins for everything on the Arduino, a Microchip MC23017 16-Bit I/O expander, which is controlled via an I²C bus. This is convenient since I’m already using I²C for the onboard display.

Driving the Solenoids

A closer view of the board shows the trip of dual H-Bridge drivers on the board, which will soon be hidden underneath the attenuator block. These are LB1836M parts from ON Semiconductor. Each chip drives a pair of solenoids.

Power Supplies

The bottom of the board has all the power control circuitry, which are modularised for ease of production. There’s a Lithium charge & protection module for the 18650 onboard cell, along with a boost converter to give the ~9v rail required to operate the attenuator solenoids. While they would switch at 5v, the results were not reliable.

Finishing off

A bit more time later, some suitable firmware has been written for the Arduino, and the attenuator block is fitted onto the PCB. The onboard OLED nicely shows the current attenuation level, battery level & which input is selected.

Posted on 2 Comments

Sony HVF-2000P Viewfinder Teardown & Composite Video Hack

Rating Plate
Rating Plate

Well, it’s time for another viewfinder hack! I’ve been after one of these for a while, this is from an early 1980’s era Sony Trinicon camera, and instead of the tiny ½” round CRT display, these have a 1.5″ square CRT – a Matsushita 40CB4. Luckily I managed to score a pair of these from eBay for very little money. Update: The second camera’s viewfinder module turned out to have a dead flyback transformer, but at least I have a good spare CRT & the rest of the support components. More to come later on the teardown of the camera itself.

Mirror & Eyecup Assembly
Mirror & Eyecup Assembly

The eyecup assembly with the magnifying lens & turning mirror is easy to remove, with clips & a single screw holding it onto the CRT holder sticking out of the side of the main casing.

Top Cover Removed
Top Cover Removed

Removing some screws around the case allows the top cover to be removed, revealing the electronics. There’s certainly more in here than the later camera viewfinders, in this unit there are two boards slotted together with a board-to-board interconnect at the bottom. The CRT is at the top of the photo, hiding inside the plastic housing & deflection yoke assembly.

Bare PCBs & CRT
Bare PCBs & CRT

Here’s the CRT & one of the control boards removed from the case, having been stripped of the heatshrink tube that held the final anode lead in place. Just like on larger CRTs, this viewfinder has the final anode on a cavity connector fused into the bell, instead of being led out to a pin on the base. This is probably due to the much higher anode voltage of 5kV, a big jump from the 2kV on the ½” round tubes.

40CB4 CRT Label
40CB4 CRT Label

Yup, it’s definitely the elusive 40CB4. Apparently these CRTs are still manufactured to this day for professional camera viewfinders, as the resolution of this small vacuum tube is still better than similarly sized modern tech such as LCDs or OLEDs. The phosphor used is type P4 – ZnS:Ag+(Zn,Cd)S:Ag, with an aluminized overcoat.

Bare 40CB4 CRT
Bare 40CB4 CRT

After the base connector & deflection yoke are removed from the tube, the very long neck can be seen, this long glass neck apparently giving better focus & resolution than the stubbier tubes.

Electron Gun
Electron Gun

The electron gun is the usual single unit as usually found in monochrome tubes.

Deflection Board
Deflection Board

The bottom board in the assembly has all the control circuitry for the CRT, including the HA11244 deflection IC, composite sync separator & vertical deflection drive circuit. There are also circuits here to display a video waveform on the CRT, along with iris & white balance markers.

Horizontal Board
Horizontal Board

The other board has the horizontal drive circuitry, along with the video input amplifier. Despite the attempt to miniaturize the entire assembly, these are still well packed boards. Some of the resistors & diodes are bussed together in custom SIL hybrid modules to save PCB space. Like all the other CRT viewfinders, these units are meant for viewing via a mirror – the horizontal deflection coil connections need to be reversed to show a correct image without the mirror. The Red & Blue wires to the yoke need to be swapped here.

Flyback Transformer
Flyback Transformer

The horizontal board on this unit also supports the flyback transformer, which is massive compared to the other viewfinder circuits. Biasing, focus & filament supplies for the CRT are also derived from this transformer, via auxiliary windings.

Boards Connected
Boards Connected

The boards slot together in the centre to form the fully operational circuit.

Video Input
Video Input

Out of the 3 plugs emerging from the cable feeding the viiewfinder, only this one is important, on the horizontal drive board. Black is ground, Brown +8.5v & red is composite video input. There’s also a resistor tied into the positive rail to the video input pin, which pulls it high to 8.5v – this is R1 right next to this connector. Desolder this 22K resistor to help protect anything feeding a signal into the unit, like a RPi, it’s not needed for normal operation.

Fallout!
Fallout!

As usual for a CRT post, the Fallout loading screen on the display. The picture quality isn’t as good as it should be, probably due to the noisy buck-converter I have rigged up for testing. If it doesn’t get better with a linear regulator, I’ll start replacing the 39 year old electrolytic capacitors. Current draw is 130mA at 7.5v. Schematics for this unit & the CRT datasheet are available below:



Posted on 2 Comments

Goodmans Quadro 902 Composite Video Mod

CRT Module
CRT Module

Here’s the CRT & it’s drive board removed from the main chassis. Nicely modular this unit, all the individual modules (radio, tape, TV), are separate. This is effectively a TV itself, all the tuner & IF section are onboard, unlike in other vintage units I’ve modified, where the tuner & IF has been on a separate board. There’s a 3-pin header bottom centre for the tuning potentiometer, and external antenna input jack. The internal coax for the built in antenna has been desoldered from the board here. here a the usual controls on the back for adjusting brightness, contrast & V Hold, all the other adjustments are trimmers on the PCB.
Unfortunately after 30+ years of storage, this didn’t work on first power up, neither of the oscillators for vertical or horizontal deflection would lock onto the incoming signal, but a couple of hours running seemed to improve things greatly. The numerous electrolytic capacitors in this unit were probably in need of some reforming after all this time, although out of all of them, only 21 are anything to do with the CRT itself.

Anode Cap
Anode Cap

Here’s the anode side of the unit, with the small flyback transformer. The rubber anode cap has become very hard with age, so I’ll replace this with a decent silicone one from another dead TV. The Horizontal Output Transistor (a 2SC2233 NPN type) & linearity coil are visible at the bottom right corner of the board. Unfortunately, the disgusting yellow glue has been used to secure some of the wiring & large electrolytics, this stuff tends to turn brown with age & become conductive, so it has to be removed. Doing this is a bit of a pain though. It’s still a little bit flexible in places, and rock hard in others. Soaking in acetone softens it up a little & makes it easier to detach from the components.

Neck PCB
Neck PCB

There’s little on the neck board apart from a few resistors, forming the limiting components for the video signal, and the focus divider of 1MΩ & 470KΩ feeding G3. No adjustable focus on this unit. There’s also a spark gap between the cathode line & ground, to limit the filament to cathode voltage. The flyback transformer is nestled into the heatsink used by the horizontal output transistor & a voltage regulator transistor.

Tube Details
Tube Details

The CRT is a Samsung Electron Devices 4ADC4, with a really wide deflection angle. It’s a fair bit shorter than the Chinese CRT I have which is just a little larger, with a neck tube very thin indeed for the overall tube size.
Unusually, while the filament voltage is derived from the flyback transformer as usual, it’s rectified into DC in this unit, passing through a 1Ω resistor before the filament connection. I measured 5.3v here. The glow from the filament is barely visible even in the dark.

Electron Gun 1
Electron Gun 1

The electron gun is the usual for a monochrome tube, with 7 pins on the seal end.

Electron Gun 2
Electron Gun 2

The electrodes here from left are Final Anode, G3 (Focus Grid), Accelerating Anode, G2 (Screen Grid), G1 (Control Grid). The cathode & filament are hidden inside G1. In operation there’s about 250v on G2, and about 80v on G3.

Chipset
Chipset

The chipset used here is all NEC, starting with a µPC1366C Video IF Processor, which receives the IF signal from the tuner module to the left. This IC outputs the standard composite signal, and a modulated sound signal.
This then splits off to a µPC1382C Sound IF Processor & Attenuator IC, which feeds the resulting sound through the two pin header at the right bottom edge of the board to the audio amplifier in the chassis.
The composite video signal is fed through a discrete video amplifier with a single 2SC2229 transistor before going to the CRT cathode.
The remaining IC is a µPC1379C Sync Signal Processor, containing the sync separator, this is generating the required waveforms to drive the CRT deflection systems from another tap off the composite video line.
From this chip I can assume the unit was built around 1986, since this is the only date code on any of the semiconductors. Besides these 3 ICs, the rest of the circuit is all discrete components, which are well-crammed into the small board space.
There are 5 trimmer potentiometers on the board here, I’ve managed to work out the functions of nearly all of them:

  • SVR1: IF Gain Adjust
  • SVR2: H. Hold
  • SVR3: V. Size
  • SVR4: B+ Voltage Adjust
  • SVR5: Tuner Frequency Alignment? It’s in series with the tuning potentiometer in the chassis.
PCB Bottom
PCB Bottom

The PCB bottom shows the curved track layout typical of a hand taped out board. The soldermask is starting to flake off in places due to age, and there a couple of bodge wires completing a few ground traces. Respinning a board in those days was an expensive deal! Surprisingly, after all this time I’ve found no significant drift in the fixed resistors, but the carbon track potentiometers are drifiting significantly – 10KΩ pots are measuring as low as 8KΩ out of circuit. These will have to be replaced with modern versions, since there are a couple in timing-sensitive places, like the vertical & horizontal oscillator circuits.

Anode Cap Replaced
Anode Cap Replaced

Here the anode cap has been replaced with a better silicone one from another TV. This should help keep the 6kV on the CRT from making an escape. This was an easy fix – pulling the contact fork out of the cap with it’s HT lead, desoldering the fork & refitting with the new cap in place.

Here I’ve replaced the important trimmers with new ones. Should help stabilize things a little.

Composite Injection Mod
Composite Injection Mod

Injecting a video signal is as easy as the other units. Pin 3 of the µPC1366C Video IF Processor is it’s output, so the track to Pin 3 is cut and a coax is soldered into place to feed in an external signal.

CRT In Operation
CRT In Operation

After hooking up a Raspberry Pi, we have display! Not bad after having stood idle for 30+ years.

Datasheets for the important ICs are available below:
[download id=”5690″]
[download id=”5693″]
[download id=”5696″]

Posted on 5 Comments

Vodafone Mobile WiFi R207 Teardown

Vodafone Mobile WiFi R207
Vodafone Mobile WiFi R207

Here’s one of the old modems from my spares bin, a Vodafone Mobile WiFi R207. This is just a rebranded Huawei E5330. This unit includes a 3G modem, and a WiFi chipset, running firmware that makes this a mini-router, with NAT.

Specs
Specs

The back has the batter compartment & the SIM slot, with a large label showing all the important details.

Cover Removed
Cover Removed

A couple of small Torx screws later & the shell splits in half. All the electronics are covered by shields here, but luckily they are the clip-on type, and aren’t soldered direct to the PCB.

Chipset
Chipset

Once the shield has been removed, the main chipset is visible underneath. There’s a large Spansion MS01G200BHI00 1GBit flash, which is holding the firmware. Next to that is the Hi6758M baseband processor. This has all the hardware required to implement a 3G modem. Just to the right is a Hi6521 power management IC, which is dealing with all the power supplies needed by the CPU.
The RF section is above the baseband processor, some of which is hiding under the bits of the shield that aren’t removable.

SIM Socket
SIM Socket

There’s a socket onboard for a standard Mini-SIM, just to the left of that is a Hi6561 4-phase buck converter. I would imagine this is providing the power supplies for the RF section & amplifier.

Unpopulated Parts
Unpopulated Parts

Not sure what this section is for, all the parts are unpopulated. Maybe a bluetooth option?

PCB Reverse
PCB Reverse

The other side of the PCB is pretty sparse, holding just the indicator LEDS, button & the WiFi Chipset.

Realtek WiFi Chipset
Realtek WiFi Chipset

The chipset here is a Realtek part, but it’s number is hidden by some of the shield. The antenna connection is routed to the edge of the board, where a spring terminal on the plastic case mounted antenna makes contact.

Posted on Leave a comment

Raspberry Pi 3 Model B+ Initial Tests & Benchmarks

Raspberry Pi 3 Model B+
Raspberry Pi 3 Model B+

Yesterday, the Raspberry Pi community got a nice surprise – a new Pi! This one has some improved features over the previous RPi 3 Model B:

  • Improved CPU – 64-Bit 1.4GHz Quad-Core BCM2837B0
  • Improved WiFi – Dual Band 802.11b/g/n/ac. This is now under a shield on the top of the board.
  • Improved Ethernet – The USB/Ethernet IC has been replaced with a LAN7515, supporting gigabit ethernet. The backhaul is still over USB2 though, so this would max out at about 300Mbit/s
  • PoE Support – There’s a new 4-pin header, and a matching HAT for power over ethernet support.
Chipset
Chipset

The USB/LAN Controller is now a BGA package, supporting gigabit ethernet. The USB connections are still USB2 though, limiting total bandwidth. This shouldn’t be much of an issue though, since anything over the 100Mbit connection we’ve had previously is an improvement.

CPU & Radio
CPU & Radio

The CPU now has a metal heatspreader on top of the die, no doubt to help with cooling under heavy loads. As far as I know, it’s still the same silicon under the hood though. The WiFi radio is under the shielding can to the top left, with the PCB trace antenna down the left edge of the board.

Power Controller
Power Controller

The power supplies are handled on this new Pi by the MaxLinear MxL7704, from what I can tell from MaxLinear’s page, it seems to be somewhat of a collaborative effort to find something that would do the best job, since they apparently worked with the Foundation to get this one right. This IC apparently includes four synchronous step-down buck regulators that provide system, memory, I/O and core power from 1.5A to 4A. An on-board 100mA LDO provides clean 1.5V to 3.6V power for analog sub-systems. This PMIC utilizes a conditional sequencing state machine that is flexible enough to meet the requirements of virtually any processor.

PCB Bottom
PCB Bottom

The bottom of the PCB has the Elpida 1GB RAM package, which is LPDDR2, along with the MicroSD slot.

A quick benchmark running Raspbian Lite & a SanDisk Ultra 32GB Class 10 SD card gives some nice results:

Raspberry Pi Benchmark Test
Author: AikonCWD
Version: 3.0

temp=45.1'C
arm_freq=1400
core_freq=400
sdram_freq=500
gpu_freq=300
sd_clock=50.000 MHz

Running InternetSpeed test...
Ping: 45.278 ms
Download: 151.50 Mbit/s
Upload: 9.52 Mbit/s

Running CPU test...
 total time: 11.3003s
 min: 4.48ms
 avg: 4.51ms
 max: 44.50ms
temp=56.4'C

Running THREADS test...
 total time: 10.2161s
 min: 3.94ms
 avg: 4.08ms
 max: 21.49ms
temp=59.6'C

Running MEMORY test...
Operations performed: 3145728 (2418384.67 ops/sec)
3072.00 MB transferred (2361.70 MB/sec)
 total time: 1.3008s
 min: 0.00ms
 avg: 0.00ms
 max: 9.99ms
temp=60.7'C

Running HDPARM test...
 Timing buffered disk reads:  66 MB in  3.01 seconds =  21.91 MB/sec
temp=51.5'C

Running DD WRITE test...
536870912 bytes (537 MB, 512 MiB) copied, 34.6011 s, 15.5 MB/s
temp=46.7'C

Running DD READ test...
536870912 bytes (537 MB, 512 MiB) copied, 23.5404 s, 22.8 MB/s
temp=45.6'C

AikonCWD's rpi-benchmark completed!
Posted on Leave a comment

Etching PCBs With Dry Film Photoresist

Since I do my own PCBs on a somewhat regular basis, I decided it was time to move to a more professional method to etch my boards. I have been using the cheap toner transfer method, using special yellow coated paper from China. (I think it’s coated in wax, or some plastic film).

The toner transfer paper does usually work quite well, but I’ve had many issues with pinholes in the transfer, which cause the etched tracks to look horrid, (not to mention the potential for breaks & reduced current capacity), and the toner not transferring properly at all, to issues with the paper permanently fusing to the copper instead of just transferring the toner.

BigClive has done a couple of fairly comprehensive videos on the dry film photoresist available from AliExpress & eBay. This stuff is used similarly to the toner transfer method, in that the film is fused to the board with heat, but then things diverge. It’s supplied either in cut sheets, or by the roll. I ordered a full roll to avoid the issues I’ve heard of when the stuff is folded in the post – once it’s creased, it’s totally useless. The dry film itself is a gel sandwiched between two protective plastic film sheets, and bonds to the board with the application of heat from a laminator.

The board is first cleaned with scotchbrite pad & soap to remove any tarnish & oil from the copper.

Dry Film
Dry Film

Once the board has been cleaned, one side of the backing film is removed from the gel with adhesive tape, and the dry film is placed on the board while still wet. This stops the film from sticking immediately to the clean copper, one edge is pressed down, and it’s then fed through a modified laminator:

Modified Laminator
Modified Laminator

I’ve cut away most of the plastic covering the hot rollers, as constant jamming was an issue with this cheapo unit. All the mains power is safely tucked away under some remaining plastic cover at the end. The board with it’s covering of dry film is fed into the laminator – the edge that was pressed down first. This allows the laminator to squeeze out any remaining water & air bubbles from between the two so no creases or blisters form.

After Lamination
After Lamination

Once the board has been run through the laminator about 6 times, (enough to get it very hot to the touch), the film is totally bonded to the copper. The top film is left in place to protect the UV sensitive layer during expsure.

Photomask
Photomask

The exposure mask is laser printed onto OHP transparencies, in this case I’ve found I need to use two copies overlaid to get enough opacity in the black toner sections to block the UV light. Some touching up with a Sharpie is also easy to do if there are any weak spots in the toner coverage. This film is negative type – All the black areas will be unexposed and washed off in the developer tank. I also found I had to be fairly generous with track spacing, using too small lines just causes issues with the UV curing bits of film it isn’t supposed to.

Exposing The PCB
Exposing The PCB

The PCB is placed on a firm surface, the exposure mask lined up on top, and the whole thing covered with a sheet of standard glass to apply even pressure. The UV exposure lamp in this case is a cheap eBay UV nail curing unit, with 15 high power LEDs. (I’ll do a teardown on this when I get some time, it’s got some very odd LEDs in it). Exposing the board for 60 seconds is all the time needed.

After Exposure
After Exposure

After the board is exposed, the areas that got hit with the UV light have turned purple – the resist has hardened in these areas. It’s bloody tough as well, I’ve scrubbed at it with some vigour and it doesn’t come off. Toner transfer was a bit naff in this respect, most of the time the toner came off so easily that the etchant lifted it off. After this step is done, the remaining protective film on the top can be removed.

After Developing
After Developing

The film is developed in a solution of Sodium Carbonate (washing Soda). This is mildly alkaline and it dissolves off the unexposed resist.

After Etching
After Etching

Now it’s into the etching tank for a couple of minutes, I’m still using Ferric Chloride to etch my boards, at about 60°C. Etching at room temperature is much too slow. Once this is done, the board is washed, and then dipped in the strip tank for a couple of minutes. This is a Sodium Hydroxide solution, and is very caustic, so gloves are required for this bit. Getting Ferric Chloride on skin is also a fairly bad idea, it stains everything orange, and it attacks pretty much every metal it comes into contact with, including Stainless Steel.

This method does require some more effort than the toner transfer method, but it’s much more reliable. If something goes wrong with the exposure, it’s very easy to strip the board completely & start again before etching. This saves PCB material and etchant. This is definitely more suited to small-scale production as well, since the photomask can be reused, there’s much less waste at the end. The etched lines are sharper, much better defined & even with some more chemicals involved, it’s a pretty clean process. All apart from the Ferric Chloride can be disposed of down the sink after use, since the developer & stripper are just alkaline solutions.

 

Posted on 8 Comments

Contec CMS-50F Pulse Oximeter Teardown

Rear Case
Rear Case

The rear has the specifications, laser-marked into the plastic. The serial numbers are just sticky labels though, and will come off easily with use.

Contec CMS-50F
Contec CMS-50F

This is the Contec CMS-50F wrist-mounted pulse oximeter unit, which has the capability to record data continuously to onboard memory, to be read out at a later time via a USB-Serial link. There is software supplied with the unit for this purpose, although it suffers from the usual Chinese quality problems. The hardware of this unit is rather well made, the firmware has some niggles but is otherwise fully functional, however the PC software looks completely rushed, is of low quality & just has enough functionality to kind-of pass as usable.

Top Cover Removed
Top Cover Removed

A total of 4 screws hold the casing together, once these are removed the top comes off. The large colour OLED display covers nearly all of the board here. The single button below is the user interface. The connection to the probe is made via the Lemo-style connector on the lower right.

Lithium Cell
Lithium Cell

Power is provided by a relatively large lithium-ion cell, rated at 1.78Wh.

Main Processor
Main Processor

All the heavy lifting work of the LCD, serial comms, etc are handled by this large Texas Instruments microcontroller, a MSP430F247. The clock crystal is just to the left, with the programming pins. I’m not sure of the purpose of the small IC in the top left corner, I couldn’t find any reference to the markings.

Aux Processor
Aux Processor

The actual pulse oximetry sensor readings seem to be dealth with by a secondary microcontroller, a Texas Instruments M430F1232 Mixed-Signal micro. This has it’s own clock crystal just underneath. The connections to the probe socket are to the right of this µC, while the programming bus is broken out to vias just above. The final devices on this side of the board are 3 linear regulators, supplying the rails to run all the logic in this device.

Main PCB Rear
Main PCB Rear

The rear of the PCB has the SiLabs CL2102 USB-Serial interface IC, the large Winbond 25X40CLNIG 512KByte SPI flash for recording oximetry data, and some of the power support components. The RTC crystal is also located here at the top of the board. Up in the top left corner is a Texas Instruments TPS61041 Boost converter, with it’s associated components. This is probably supplying the main voltage for the OLED display module.

Posted on 2 Comments

Maplin A24GU Wireless Audio Module Teardown

Transmitter
Transmitter

This is a pair of modules that Maplin was selling some time back, to send stereo audio over a 2.4GHz radio link. The transmitter identifies as a USB sound card, I’ve personally used these units to transmit audio about 60ft. The transmitter, above, has a single button for pairing with the receiver below.

Receiver
Receiver

The receiver unit has a large external antenna, a link status LED & volume buttons, these directly control the volume level on the host PC via the sound card drivers.

Receiver PCB Top
Receiver PCB Top

Popping the case open on the receiver reveals a large PCB, holding the chipset, along with the audio output jacks & Mini-USB power input. The antenna Coax is soldered to the PCB.

Receiver PCB Bottom
Receiver PCB Bottom

The top of the board has the control buttons, and the status LED.

Receiver Chipset
Receiver Chipset

The chipset used here is a Nordic Semiconductor nRF20Z01 2.4GHz Stereo Audio Streamer, there’s a small microcontroller which does all the register magic on the RF transceiver. The RF chain is at the top of the photo, audio outputs on the top left, and the micro USB power input & voltage regulators at bottom left.

Transmitter PCB Top
Transmitter PCB Top

The transmitter PCB has a Sonix USB Audio Codec, to interface with the host PC. This is then fed into another Nordic Semi part on the opposite side of the board:

Transmitter PCB Bottom
Transmitter PCB Bottom

The bottom of the transmitter has the RF section, and another small control microcontroller.

Posted on 3 Comments

103RS GPS Tracker Teardown

Rewire Security 103RS Tracker
Rewire Security 103RS Tracker

I thought it was time to add a bit of security to the gear I take camping, so this GPS tracker unit was sourced from eBay. This is a Rewire Security 103RS, a slightly customised version of the common Chinese TK103 GPS tracker.

Input Connections
Input Connections

The small module has all it’s power connections on one end of the unit, on a Molex multi-way block. The white connector is for a piezo-shock sensor – this interfaces with the alarm functionality of the unit. There’s an indicator LED for both the GPS & GSM status, and a switch for the backup battery.

Antenna Connections
Antenna Connections

The other end has the antenna connections, microphone connection for the monitor function, along with the SIM & SD card slots.

PCB Top
PCB Top

Once the end panel is removed, the PCB just slides out of the aluminium extruded casing. It’s pretty heavily packed with components in here. A switching regulator deals with the 12v input from the vehicle battery, and is protected by a polyfuse on the right. The GSM module is hiding under the Li-Po backup cell, unfortunately the sticky pad used to secure this wouldn’t come off without damaging something. The pigtails for both the GPS & GSM antennas are permanently soldered to the board here.

PCB Bottom
PCB Bottom

The bottom of the PCB has the GPS module, and mainly input protection & bypassing components. There is a FNK4421 Dual P-Channel MOSFET here as well, probably used for switching the external relay or alarm siren. The SIM socket for the GSM modem is located here in the corner.

Posted on 2 Comments

EpEver MT50 Control Panel Teardown

MT50 Control Panel
MT50 Control Panel

Here’s the MT50 controller from EpEver, that interfaces with it’s Tracer MPPT solar charge controllers, and gives access to more programming options on the charge controllers, without the need for a laptop. The display is a large dot-matrix unit, with built in backlight. Above is the display on the default page, showing power information for the entire system.

PCB Rear
PCB Rear

The rear plastic cover is held in place by 4 machine screws, which thread into brass inserts in the plastic frame – nice high quality touch on the design here, no cheap self tapping plastic screws. Both power & data arrive via an Ethernet cable, but the communication here is RS-485, and not compatible with Ethernet! The PCB is pretty sparse, with comms & power on the left, LCD connection in the centre, and the microcontroller on the right.

RS-485 Transceiver
RS-485 Transceiver

On the left of the board is the RS0485 transceiver, and a small voltage regulator. There’s also a spot for a DC barrel jack, which isn’t included in this model for local power supply.

STM32 Microcontroller
STM32 Microcontroller

The other side of the board holds the main microcontroller which communicates with the charge controller. This is a STM32F051K8 from ST Microelectronics. With a 48MHz ARM Cortex M0 core, and up to 64K of flash, this is a pretty powerful MCU that has very little to do in this application.

PCB Front
PCB Front

The front of the PCB has the ENIG contacts of the front panel buttons, and the LCD backlight assembly. There’s nothing else under the plastic backlight spreader either.

LCD Rear
LCD Rear

The front case holds the LCD module in place with glue, and the rubber buttons are placed underneath, which is heat staked in place.

LCD Model
LCD Model

The LCD is a YC1420840CS6 from eCen in China. Couldn’t find much out about this specific LCD.

Posted on Leave a comment

nb Tanya Louise – Oil Cooling Improvements

Temperature Gauges
Temperature Gauges

Since the engine & hydrostatic transmission were installed in the boat a few years back, the hydraulic oil cooler has been in the same fresh water circuit as the engine’s water cooling system, however this has been causing some heat issues with the engine & hydraulic system under a heavy load, such as when I’m using the onboard generator to run the welding gear. The hydraulic oil temp would rise to over 80°C during the course of a long day’s cruising – such temperatures will degrade the oil very quickly, and in turn will cause premature wear of the very expensive hydraulic pumps. (Not to mention increasing the requirement for hydraulic oil changes, which are very expensive). The engine oil has been cooled by a standard automotive oil radiator, with air forced over the matrix by two large fans. This is also pretty inefficient, so another cooler will be added to replace the automotive one.
This cooling requirement is caused by the inefficiency of hydraulic systems – a simple variable displacement piston pump driving a bent-axis piston motor has an overall efficiency of roughly 80%. Given our engine’s max power of 76HP (56.7kW), this gives an energy loss of 15.2HP (11.33kW) at maximum power. This extra heat overloaded the skin tank, resulting in a cooling system that didn’t really work all too well once the engine was hot.

To solve this issue, we’ve decided to run a raw water circuit using the canal to remove the waste heat from the hydraulic system & engine oil, putting less of a heat load on the skin tank to bring the temperatures down to something reasonable. The image above show the system at running temperature after I installed the monitoring instruments. The top gauge is measuring engine oil temperature, at the point where it’s being fed to the bearings. The bottom one is measuring hydraulic oil temperature.

The engine oil temperature does have to be higher than any other cooling circuit on board, to boil off any condensate from the cylinders. Overcooling the oil in the sump will eventually cause sludging as the oil tries to absorb the resulting water. I’m aiming for a system temperature in the engine oil circuit of 95°C-120°C when the engine is under load & at operating temperature.

Raw Water Suction
Raw Water Suction

Water from the canal is drawn from a skin fitting installed at the last drydock visit, pulling water through a strainer to remove all the large bits of muck. The large slotted screen on the suction skin fitting keeps larger objects out of the intake.

Raw Water Pump
Raw Water Pump

A flexible impeller pump provides the power to move water through the system, in this case about 25L/Min. This pump is a cheap copy of a Jabsco pump from eBay. So far it’s been pretty reliable.

Temperature Senders
Temperature Senders

The temperature senders are standard automotive parts, and some adaptors were required to graft them into the oil lines of both systems. The senser’s 1/8″ NPT threads are here fitted into 1/2″ BSP hydraulic fittings.

Hydraulic Temperature Sender
Hydraulic Temperature Sender

Here’s the hydraulic oil sender installed in the drain line from the main propulsion pump, this should give me a pretty good idea of the temperature of the components in the system, the sender is earthed through the steel hydraulic oil tank.

Engine Oil Temperature Sender
Engine Oil Temperature Sender

The oil temperature sender is installed in the return line to the engine from the heat exchanger. This is measuring the oil temperature the bearings in the engine are being fed with.

Hydraulic Oil Heat Exchanger
Hydraulic Oil Heat Exchanger

The stack of heat exchangers is located on the starboard side of the engine bay, the large one here is cooling the hydraulic oil, the auxiliary pump is continually circulating the oil from the tank through this, then into the return filter on the top of the tank.

Engine Oil Heat Exchanger
Engine Oil Heat Exchanger

The engine oil is fed through this much smaller heat exchanger mounted on the back of the large hydraulic cooler, the last in the circuit before the water is discharged back overboard through a skin fitting.

Remote Oil Filter
Remote Oil Filter

As we’ve got the diverter block on the side of the engine where the oil filter should be, a remote oil filter is fitted above the fuel tank. The thermostat strapped on operates the main engine bay ventilation fans, switching them on once the engine oil reaches 60°C.

Posted on 1 Comment

32A Bench PSU Build

Load Test

Since I’ve discovered some nice high power PSUs in the form of Playstation 3 PSUs, it’s time to get a new Bench PSU Build underway!

Specifications
Specifications

I’ve gone for the APS-227 version as it’s got the 32A rail. This makes things slightly beefier overall, as the loading will never be anywhere close to 100% for long, more headroom on the specs is the result.

Desktop Instrument Case
Desktop Instrument Case

The case I’ve chosen for this is an ABS desktop instrument case from eBay, the TE554 200x175x70mm. The ABS is easy to cut the holes for all the through-panel gear, along with being sturdy enough. Aluminium front & back panels would be a nice addition for a better look.

PSU Mounted
PSU Mounted

The PSU board is removed from it’s factory casing & installed on the bottom shell half, unfortunately the moulded-in posts didn’t match the screw hole locations so I had to mount some brass standoffs separately. The AC input is also fitted here, I’ve used a common-mode filter to test things (this won’t be staying, as it fouls one of the case screw holes). The 40A rated DC output cable is soldered directly to the PCB traces, as there’s no room under the board to fit the factory DC power connector. (This is the biggest case I could find on eBay, and things are still a little tight). Some minor modifications were required to get the PCB to fit correctly.

Output Terminals & Adjuster
Output Terminals & Adjuster

I decided to add some limited voltage adjustment capability to the front panel, I had a 100Ω Vishay Spectrol Precision 10-turn potentiometer in my parts bin, from a project long since gone that just about fits between the panel & the output rectifier heatsink. The trimpot I added when I first posted about these PSUs is now used to set the upper voltage limit of 15 volts. (The output electrolytics are 16v rated, and are in an awkward place to get at to change for higher voltage parts). The binding posts are rated to 30A, and were also left over from a previous project.

Vishay Spectrol 10-Turn
Vishay Spectrol 10-Turn

 

Addon Regulator Components
Addon Regulator Components

This front panel potentiometer is electrically in series with the trimpot glued to the top of the auxiliary transformer, see above for a simple schematic of the added components. In this PSU, reducing the total resistance in the regulator circuit increases the voltage, so make sure the potentiometer is wired correctly for this!
After some experimentation, a 500Ω 10-turn potentiometer would be a better match, with a 750Ω resistor in parallel to give a total resistance range on the front panel pot of 300Ω. This will give a lower minimum voltage limit of about 12.00v to make lead-acid battery charging easier.
I’ve had to make a minor modification to the output rectifier heatsink to get this pot to fit in the available space, but nothing big enough to stop the heatsink working correctly.

Terminal Posts
Terminal Posts

Here I’ve got the binding posts mounted, however the studs are a little too long. Once the wiring is installed these will be trimmed back to clear both the case screw path & the heatsink. (The heatsink isn’t a part of the power path anyway, so it’s isolated).

Power Meter Control Board & Fan
Power Meter Control Board & Fan

To keep the output rectifier MOSFETs cool, there’s a fan mounted in the upper shell just above their location, this case has vents in the bottom already moulded in for the air to exit. The fan is operated with the DC output contactor, only running when the main DC is switched on. This keeps the noise to a minimum when the supply doesn’t require cooling. The panel meter control board is also mounted up here, in the only empty space available. The panel meter module itself is a VAC-1030A from MingHe.

Meter Power Board
Meter Power Board

The measurement shunt & main power contactor for the DC output is on another board, here mounted on the left side of the case. The measurement shunt is a low-cost one in this module, I doubt it’s made of the usual materials of Manganin or Constantan, this is confirmed by my meansurements as when the shunt heats up from high-power use, the readings drift by about 100mA. The original terminal blocks this module arrived with have been removed & the DC cables soldered directly to the PCB, to keep the number of high-current junctions to a minimum. This should ensure the lowest possible losses from resistive heating.

Meter Panel Module
Meter Panel Module

The panel meter module iself is powered from the 5v standby rail of the Sony PSU, instead of the 12v rail. This allows me to keep the meter on while the main 12v output is switched off.

PSU Internals
PSU Internals

here’s the supply with everything fitted to the lower shell – it’s a tight fit! A standard IEC connector has been fitted into the back panel for the mains input, giving much more clearance for the AC side of things.

Inside View
Inside View

With the top shell in place, a look through the panel cutout for the meter LCD shows the rather tight fit of all the meter components. There’s about 25mm of clearance above the top of the PSU board, giving plenty of room for the 40mm cooling fan to circulate air around.

Load Test
Load Test

Here’s the finished supply under a full load test – it’s charging a 200Ah deep cycle battery. The meter offers many protection modes, so I’ve set the current limit at 30A – preventing Sony’s built in over current protection on the PSU tripping with this function is a bonus, as the supply takes a good 90 seconds to recover afterwards. I’ll go into the many modes & features of this meter in another post.

Posted on 5 Comments

Jaguar S-Type Aux Heater / Webasto Thermo Top V Part 1 – Teardown & Cleaning

Jag Label
Jag Label

Here’s another Diesel-fired heater related project – these Webasto heaters are fitted to Jaguar S-Type cars as auxiliary heaters, since (according to the Jag manual), the modern fuel-efficient diesels produce so little waste heat that extra help is required to run the car’s climate control system. (Although this seems to nullify any fuel efficiency boost, as the fuel saved by not producing so much waste heat in the engine itself is burned in an aux heater to provide heat anyway). The unfortunate part is these units don’t respond to applying +12v to Pin 1 of the ECU to get them to start – they are programmed to respond to CAN Bus & K-Line Bus only, so they require a bit more effort to get going. They also don’t have a built-in water circulation pump unlike the Webasto Thermo Top C heaters – they expect the water flow to be taken care of by the engine’s coolant pump.

Webasto Label
Webasto Label
Water Side
Water Side

The water ports are on the side of this heater instead of the end, the heat exhanger is on the left. These hearers are fitted to the car under the left front wing, behind a splash guard. Pretty easy to get to but they get exposed to all the road dirt, water & salt so corrosion is a little problem. The fuel dosing pump is in a much more difficult spot to get at – it’s under the car next to the fuel tank on the right hand side. Access to the underside with stands is required to get at this.

ECU Side
ECU Side

The ECU side has all the other connections – Combustion air, exhaust, fuel, power & control.

External Connectors
External Connectors

Only two of the external connectors are used on these heaters, the large two pin one is for main power – heavy cable required here as the current draw can climb to ~30A on startup while the glow plug fires. The 8-pin connector on the left is the control connector, where the CAN / K-Line / W-Bus buses live. The fuel dosing pump is also supplied from a pin on this connector. The small 3-pin under that is a blank for a circulation pump where fitted. Pinouts are here:

PinSignal
1Battery Positive
2Battery Negative
Pin NumberSignalNotes
1Telestart / Heater EnableWould usually start the heater with a simple +12v ON signal, but is disabled in these heaters.
2W-Bus / K-LineDiagnostic Serial Bus Or Webasto Type 1533 Programmer / Clock
3External Temp Sensor
4CAN-CAN Bus Low
5Fuel Dosing PumpFuel Pump output. Connect pump to this pin & ground. Polarity unimportant.
6Solenoid ValveFuel cutoff solenoid optionally fitted here.
7CAN+CAN Bus High
8Cabin Heater Fan ControlThis output switches on when heater reaches +50°C to control car heater blower
PinSignalNotes
1??
2Circulation Pump +
3Circulation Pump -
ECU Cover Removed
ECU Cover Removed

Removing the clipped-on plastic cover reveals the other ECU connectors. The large white one feeds the glow plug, & the large multi-pin below brings in the temp & overheat sensor signals.

MC9S12DT128B Microcontroller
MC9S12DT128B Microcontroller

The heart of the ECU is a massive microcontroller, a Freescale MC9S12DT128B, attached to a daughterboard hooked into the ECU power board.

Power Section
Power Section

The high power section is on the board just under the connectors, here all the large semiconductors live for switching the fan motor, glow plug, external loads, etc.

LIN & CAN Bus Transceivers
LIN & CAN Bus Transceivers

The bus transceivers are separate ICs on the control board, a TJA1041 takes care of the CAN bus. There’s also a TJA1020 LIN bus transceiver here, which is confusing since none of the Webasto documentation mentions LIN bus control.

Combustion Fan Motor
Combustion Fan Motor

The combustion fan motor is in the ECU compartment, nicely sealed away from the elements. There is no speed sensor on these blowers, unlike the Eberspacher ones.

Motor Details
Motor Details

The motor is a Buhler, rated at 10.5v.

Water Ports & Combustion Fan Cover
Water Ports & Combustion Fan Cover

Unclipping the cover from the other end reveals the combustion fan, it’s under the black cover. (These are side-channel blowers, to provide the relatively high static pressure required to run the burner).

Sensor Clip
Sensor Clip

The overheat & temperature sensors are on the end of the heat exchanger, retained by a stainless clip.

Temp & Overheat Sensors
Temp & Overheat Sensors

With the clip removed, the sensors can be seen better. There’s some pretty bad corrosion of the aluminium alloy on the end sensor, it’s seized in place.

Burner
Burner

The heater splits in half to reveal the evaporative burner itself. I’ve already cleaned the black crud off with a wire brush here, doesn’t look like this heater has seen much use as it’s pretty clean inside.

Burner Chamber
Burner Chamber

Inside the burner the fuel evaporates & is ignited. There is a brass mesh behind the backplate of the burner to assist with vaporisation.

Glow Plug
Glow Plug

The glow plug is fitted into the side of the burner ceramic here. This is probably a Silicon Carbide device. It also acts as a flame sensor when the heater has fired up. The fuel inlet line is to the left under the clamp.

Heat Exhanger
Heat Exhanger

The hot gases from the burner flow into the heat exchanger here, with many fins to increase the surface area. There’s only a couple of mm coating of carbon here, after 10 years on the car I would have expected it to be much more clogged.

I’m currently waiting on some components to build an interface so I can get the Webasto Thermo Test software to talk to the heater. Once this is done I can see if there are any faults logged that need sorting before I can get this heater running, but from the current state it seems to be pretty good visually. More to come once parts arrive!

The full service manual for these heaters can be grabbed from here, along with the wiring details for the Jaguar implementation & the Thermo Test software for talking to them:

[download id=”5618″]

[download id=”5620″]

[download id=”5622″]

Posted on 3 Comments

Anker PowerPort Speed 5 USB Rapid Charger Teardown

Front
Front

Here’s a piece of tech that is growing all the more important in recent times, with devices with huge battery capacities, a quick charger. This unit supports Qualcomm’s Quick Charge 3 standard, where the device being charged can negotiate with the charger for a higher-power link, by increasing the bus voltage past the usual 5v.

Rear
Rear

The casing feels rather nice on this unit, sturdy & well designed. All the legends on the case are laser marked, apart from the front side logo which is part of the injection moulding.

Specifications
Specifications

The power capacity of this charger is pretty impressive, with outputs for QC3 from 3.6-6.5v at 3A, up to 12v 1.5A. Standard USB charging is limited at 4.8A for the other 3 ports.

Ports
Ports

The two of the 5 USB ports are colour coded blue on the QC3 ports. The other 3 are standard 5v ports, the only thing that doesn’t make sense in the ratings is the overall current rating of the 5v supply (4.8A), and the rated current of each of the ports (2.4A) – this is 7.2A total rather than 4.8A.

Top Removed
Top Removed

The casing is glued together at the seam, but it gave in to some percussive attack with a screwdriver handle. The inside of this supply is mostly hidden by the large heatspreader on the top.

Main PCB Bottom
Main PCB Bottom

This is a nicely designed board, the creepage distances are at least 8mm between the primary & secondary sides, the bottom also has a conformal coating, with extra silicone around the primary-side switching transistor pins, presumably to decrease the chances of the board flashing over between the close pins.
On the lower 3 USB ports can be seen the 3 SOT-23 USB charge control ICs. These are probably similar to the Texas Instruments TPS2514 controllers, which I’ve experimented with before, however I can’t read the numbers due to the conformal coating. The other semiconductors on this side of the board are part of the voltage feedback circuits for the SMPS. The 5v supply optocoupler is in the centre bottom of the board.

Heatsink Removed
Heatsink Removed

Desoldering the pair of primary side transistors allowed me to easily remove the heatspreader from the supply. There’s thermal pads & grease over everything to get rid of the heat. Here can be seen there are two transformers, forming completely separate supplies for the standard USB side of things & the QC3 side. Measuring the voltages on the main filter capacitors showed me the difference – the QC3 supply is held at 14.2v, and is managed through other circuits further on in the power chain. There’s plenty of mains filtering on the input, as well as common-mode chokes on the DC outputs before they reach the USB ports.

Quick Charge 3 DC-DC Converters
Quick Charge 3 DC-DC Converters

Here’s where the QC3 magic happens, a small DC-DC buck converter for each of the two ports. The data lines are also connected to these modules, so all the control logic is located on these too. The TO-220 device to the left is the main rectifier.

Posted on 2 Comments

Ferguson A10RWH Portable Colour TV Teardown

Back Removed
Back Removed

Here’s the other TV that was picked up from the local water point having been put of to be recycled. This one is much newer than the Thorn TV, a 10″ colour version from Ferguson.

RCA 27GDC85X CRT
RCA 27GDC85X CRT

The colour CRT used is an RCA branded one, 27GDC85X.

Power Inputs
Power Inputs

Like the other TV, this one is dual voltage input, mains 240v & 12v battery. This TV is a factory conversion of a standard 240v AC chassis though.

HV PSU
HV PSU

The 12v power first goes into this board, which looked suspiciously like an inverter. Measuring on the output pins confirmed I was right, this addon board generates a 330v DC supply under a load, but it’s not regulated at all, under no load the output voltage shoots up to nearly 600v!

Live Chassis
Live Chassis

I’ve not seen one of these labels on a TV for many years, when back in the very old TV sets the steel chassis would be used to supply power to parts of the circuitry, to save on copper. Although it doesn’t have a metal chassis to actually become live, so I’m not sure why it’s here.

Main PCB
Main PCB

The main PCB is much more integrated in this newer TV, from the mid 90’s, everything is pretty much taken care of by silicon by this point.

Main Microcontroller
Main Microcontroller

This Toshiba µC takes care of channel switching & displaying information on the CRT. The tuner in this TV is electronically controlled.

PAL Signal Processor
PAL Signal Processor

The video signal is handled by this Mitsubishi IC, which is a PAL Signal Processor, this does Video IF, Audio IF, Chroma, & generates the deflection oscillators & waveforms to drive the yoke.

CRT Adjustments
CRT Adjustments

There are some adjustments on the CRT neck board for RGB drive levels & cutoff levels. This board also had the final video amplifiers onboard, which drive the CRT cathodes.

Posted on Leave a comment

Tenma 72-10405 DMM Teardown

Tenma DMM
Tenma DMM

Well it’s time for a new DMM. After the last pair of eBay El-Cheapo Chinese meters just didn’t last very well, I decided a proper meter was required. This one is a Tenma 72-10405, stocked by Farnell for under £60. Not quite as many festures as the cheapo Chinese meters, but I expect this one to be a bit more reliable.

PCB Rear
PCB Rear

Since I can’t have anything without seeing how it’s put together, here’s the inside of the DMM. (Fuse access is only possible by taking the back cover off as well. The 9v PP3 battery has a seperate cover).

PCB Rear Bottom
PCB Rear Bottom

He’s the input section of the meter, with the 10A HRC fuse & current shunt for the high-amps range. The other fuse above is for the mA/µA ranges. The back cover has a wide lip around the edge, that slots into a recess in the front cover, presumably for blast protection if the meter should meet a sticky end. The HRC fuses are a definite improvement over the cheap DMMs, they only have 15mm glass fuses, and no blast protection built into the casing.
There are some MOVs for input protection on the volts/ohms jack, the jacks themselves are nothing more than stampings though.

PCB Rear Top
PCB Rear Top

Not much at the other side of the board, there’s the IR LED for the RS232 interface & the beeper.

PCB Front
PCB Front

Most of the other components are on the other side of the PCB under the LCD display. The range switch is in the centre, while the main chipset is on the left.

DMM Chipset
DMM Chipset

The chipset of this meter is a FS9922-DMM3 from Fortune Semiconductor, this is a dedicated DMM chipset with built in ADCs & microcontroller.

Posted on Leave a comment

OLED Pulse Oximeter Teardown

OLED Pulse Oximeter
OLED Pulse Oximeter

Here’s a piece of medical equipment that in recent years has become extremely cheap, – a Pulse Oximeter, used to determine the oxygen saturation in the blood. These can be had on eBay for less than £15.

Powered On
Powered On

This one has a dual colour OLED display, a single button for powering on & adjusting a few settings. These cheap Oximeters do have a bit of a cheap plastic feel to them, but they do seem to work pretty well.

Pulse Oximeter
Pulse Oximeter

After a few seconds of being applied to a finger, the unit gives readings that apparently confirm that I’m alive at least. 😉 The device takes a few seconds to get a baseline reading & calibrate the sensor levels.

Main PCB Top
Main PCB Top

The plastic casing is held together with a few very small screws, but comes apart easily. here is the top of the main board with the OLED display panel. There appears to be a programming header & a serial port on the board as well. I’ll have to poke at these pads with a scope to see if any useful data is on the pins.

Main PCB Bottom
Main PCB Bottom

The bottom of the board has all the main components of the system. The microcontroller is a STM32F03C8T6, these are very common in Chinese gear these days. There’s a small piezo beeper & the main photodiode detector is in the centre.
There is an unpopulated IC space on the board with room for support components. I suspect this would be for a Bluetooth radio, as there’s a space at the bottom left of the PCB with no copper planes – this looks like an antenna mounting point. (The serial port on the pads is probably routed here, for remote monitoring).
At the top left are a pair of SGM3005 Dual SPDT analogue switches. These will be used to alternate the red & IR LEDs on the other side of the shell.
A 4-core FFC goes off to the other side of the shell, bringing power from the battery & supplying the sensing LEDs.

Battery Compartment
Battery Compartment

Power is supplied by a pair of AAA cells in the other shell.

Dual LED
Dual LED

The sensor LEDs are tucked in between the cells, this dual-diode package has a 660nm red LED & a 940nm IR LED.

Posted on Leave a comment

eBay Chinese Chassis Power Supply S-400-12 400W 12v 33A

S-400-12 PSU
S-400-12 PSU

Here’s a cheap PSU from the treasure trove of junk that is eBay, rated at a rather beefy 400W of output at 12v – 33A! These industrial-type PSUs from name brands like TDK-Lambda or Puls are usually rather expensive, so I was interested to find out how much of a punishment these cheap Chinese versions will take before grenading. In my case this PSU is to be pushed into float charging a large lead acid battery bank, which when in a discharged state will try to pull as many amps from the charger as can be provided.

Rating Label
Rating Label

These PSUs are universal input, voltage adjustable by a switch on the other side of the PSU, below. The output voltage is also trimmable from the factory, an important thing for battery charging, as the output voltage needs to be sustained at 13.8v rather than the flat 12v from the factory.

Input Voltage Selector
Input Voltage Selector
Main Terminal Block
Main Terminal Block

Mains connections & the low voltage outputs are on beefy screw terminals. The output voltage adjustment potentiometer & output indicator LED are on the left side.

Cooling Fan
Cooling Fan

The cooling fan for the unit, which pulls air through the casing instead of blowing into the casing is a cheap sleeve bearing 60mm fan. No surprises here. I’ll probably replace this with a high-quality ball-bearing fan, to save the PSU from inevitable fan failure & overheating.

PCB Bottom
PCB Bottom

The PCB tracks are generously laid out on the high current output side, but there are some primary/secondary clearance issues in a couple of places. Lindsay Wilson over at Imajeenyus.com did a pretty thorough work-up on the fineries of these PSUs, so I’ll leave most of the in-depth stuff via a linky. There’s also a modification of this PSU for a wider voltage range, which I haven’t done in this case as the existing adjustment is plenty wide enough for battery charging duty.

Bare PCB
Bare PCB

The PCB is laid out in the usual fashion for these PSUs, with the power path taking a U-route across the board. Mains input is lower left, with some filtering. Main diode bridge in the centre, with the voltage selection switch & then the main filter caps. Power is then switched into the transformer by the pair of large transistors on the right before being rectified & smoothed on the top left.

Main Switching Transistors
Main Switching Transistors

The pair of main switching devices are mounted to the casing with thermal compound & an insulating pad. To bridge the gap there’s a chunk of aluminium which also provides some extra heatsinking.

SMPS Drive IC & Base Drive Transformer
SMPS Drive IC & Base Drive Transformer

The PSU is controlled by a jelly-bean TL494 PWM controller IC. No active PFC in this cheap supply so the power factor is going to be very poor indeed.

Input Protection
Input Protection

Input protection & filtering is rather simple with the usual fuse, MOV filter capacitor & common mode choke.

Main Output Rectifiers
Main Output Rectifiers

Beefy 30A dual diodes on the DC output side, mounted in the same fashion as the main switching transistors.

Output Current Shunt
Output Current Shunt

Current measurement is done by these large wire links in the current path, selectable for different models with different output ratings.

Hot Glue Support
Hot Glue Support

The output capacitors were just floating around in the breeze, with one of them already having broken the solder joints in shipping! After reflowing the pads on all the capacitors some hot glue as flowed around them to stop any further movement.

This supply has now been in service for a couple of weeks at a constant 50% load, with the occasional hammering to recharge the battery bank after a power failure. at 13A the supply barely even gets warm, while at a load high enough to make 40A rated cable get uncomfortably warm (I didn’t manage to get a current reading, as my instruments don’t currently go high enough), the PSU was hot in the power semiconductor areas, but seemed to cope at full load perfectly well.

Posted on 12 Comments

Panasonic NV-M5 VHS Camcorder Teardown

Overview

Panasonic NV-M5 Camera
Panasonic NV-M5 Camera

Time foe some more retro tech! This is a 1980’s vintage CCD-based VHS camcorder from Panasonic, the NV-M5. There are a lot of parts to one of these (unlike modern cameras), so I’ll split this post into several sections to make things easier to read (and easier to keep track of what I’m talking about :)).

Left Side
Left Side

The left side of the camera holds the autofocus, white balance, shutter speed & date controls.

Left Side Controls
Left Side Controls
Lens Adjustments
Lens Adjustments

The lens is fully adjustable, with either manual or motorized automatic control.

Rear Panel
Rear Panel

The back panel has the battery slot, a very strange looking DC input connector, remote control connector & the earphone jack.

Top Controls
Top Controls

The top panel of the camera holds the main power controls, manual tape tracking & the tape transport control panel.

Viewfinder
Viewfinder

The viewfinder is mounted on a swivel mount. There’s a CRT based composite monitor in here. Hack ahoy!

Camera Section

Process Board Assembly
Process Board Assembly

Here’s the camera section of the camcorder, and is totally packed with electronics! There’s at least half a dozen separate boards in here, all fitted together around the optics tube assembly.

AWB PCB
AWB PCB

On the top of the assembly is the Automatic White Balance PCB. Many adjustments here to get everything set right. Not much on the other side of this board other than a bunch of Op-Amps. The iris stepper motor is fitted in a milled opening in the PCB, this connects to one of the other PCBs in the camera module.

AWB Sensor
AWB Sensor

Here’s the AWB sensor, mounted next to the lens. I’m not all to certain how this works, but the service manual has the pinout, and there are outputs for all the colour channels, RGB. So it’s probably a trio of photodiodes with filters.

Focus & Zoom Motors
Focus & Zoom Motors

Focus & Zoom are controlled with a pair of DC gear motors. The manual operation is feasible through the use of slip clutches in the final drive pinion onto the lens barrel.

Process Board
Process Board

The main camera section process board is above. This board does all the signal processing for the CCD, has the bias voltage supplies and houses the control sections for the motorized parts of the optics assembly. There are quite a few dipped Tantalum capacitors on pigtails, instead of being directly board mounted. This was probably done due to space requirements on the PCB itself.2016-08-20_13-40-11_000357

Under the steel shield on this board is some of the main signal processing for the CCD.

Optics Assembly
Optics Assembly

The back of the optics tube is a heavy casting, to supress vibration. This will be more clear later on.

Position Sensor Flex
Position Sensor Flex

The position of the lens elements is determined by reflective strips on the barrel & sensors on this flex PCB.

Sub Process Board
Sub Process Board

There’s another small board tucked into the side of the tube, this hooks into the process PCB.

Process Delay Line
Process Delay Line

According to the schematic, there’s nothing much on this board, just a delay line & a few transistors.

Piezo Focus Disc
Piezo Focus Disc

Here’s the reason for the heavy alloy casing at the CCD mounting end of the optics: the fine focus adjustment is done with a piezoelectric disc, the entire CCD assembly is mounted to this board. Applying voltage to the electrodes moves the assembly slightly to alter the position of the CCD. The blue glass in the centre of the unit is the IR filter.

IR Relective Sensors
IR Relective Sensors

The barrel position sensors are these IR-reflective type.

Iris Assembly
Iris Assembly

The iris is mounted just before the CCD, this is controlled with a galvanometer-type device with position sensors incorporated.

Iris Opening
Iris Opening

Pushing on the operating lever with the end of my screwdriver opens the leaves of the iris against the return spring.

Tape Transport & Main Control

Main Control Board
Main Control Board

Tucked into the side of the main body of the unit is the main system control board. This PCB houses all the vital functions of the camera: Power Supply, Servo Control, Colour Control,Video Amplifiers, etc.

Tape Drum
Tape Drum

Here’s the main tape transport mechanism, this is made of steel & aluminium stampings for structural support. The drum used in this transport is noticeably smaller than a standard VHS drum, the tape is wrapped around more of the drum surface to compensate.

Tape Transport
Tape Transport

The VHS tape sits in this carriage & the spools drive the supply & take up reels in the cartridge.

Main Control PCB
Main Control PCB

Here’s the component side of the main control PCB. This one is very densely packed with parts, I wouldn’t like to try & troubleshoot something like this!

Main PCB Left
Main PCB Left

The left side has the video head amp at the top, a Panasonic AN3311K 4-head video amp. Below that is video processing, the blue components are the analogue delay lines. There are a couple of hybrid flat-flex PCBs tucked in between with a couple of ICs & many passives. These hybrids handle the luma & chroma signals.
Top left is the capstan motor driver a Rohm BA6430S. The transport motors are all 3-phase brushless, with exception of the loading motor, which is a brushed DC type.

Delay Line
Delay Line

Here’s what is inside the delay lines for the analogue video circuits. The plastic casing holds a felt liner, inside which is the delay line itself.

Internal Glass
Internal Glass

The delay is created by sending an acoustic signal through the quartz crystal inside the device by a piezoelectric transducer, bouncing it off the walls of the crystal before returning it to a similar transducer.

Main PCB Centre
Main PCB Centre

Here’s the centre of the board, the strange crystal at bottom centre is the clock crystal for the head drum servo. Why it has 3 pins I’m not sure, only the two pins to the crystal inside are shown connected on the schematic. Maybe grounding the case?
The main servo controls for the head drum & the capstan motor are top centre, these get a control signal from the tape to lock the speed of the relative components.

Main PCB Right
Main PCB Right

Here’s the right hand side. The main power supply circuitry is at top right, with a large can containing 4 switching inductors & a ferrite pot core transformer. All these converters are controlled by a single BA6149 6-channel DC-DC converter controller IC via a ULN2003 transistor array.
The ceramic hybrid board next to the PSU has 7 switch transistors for driving various indicator LEDs.
The large tabbed IC bottom centre is the loading motor drive, an IC from Mitsubishi, the M54543. This has bidirectional DC control of the motor & built in braking functions. The large quad flat pack IC on the right is the MN1237A on-screen character generator, with the two clock crystals for the main microcontroller.

Erase Head
Erase Head

The full erase head has it’s power supply & oscillator on board, applying 9v to this board results in an AC signal to the head, which erases the old recording from the tape before the new recording is laid down by the flying heads on the drum.

Audio Control PCB
Audio Control PCB

The Audio & Control head is connected to this PCB, which handles both reading back audio from the tape & recording new audio tracks. The audio bias oscillator is on this board, & the onboard microphone feeds it’s signal here. The control head is fed directly through to the servo section of the main board.

Drum Motor
Drum Motor

The motor that drives the head drum is another DC brushless 3-phase type.

Hall Sensors
Hall Sensors

These 3 Hall sensors are used by the motor drive to determine the rotor position & time commutation accordingly.

Stator
Stator

The stator on this motor is of interesting construction, with no laminated core, the coils are moulded into the plastic holder. The tach sensor is on the side of the stator core. This senses a small magnet on the outside of the rotor to determine rotational speed. For PAL recordings, the drum rotates at 1500 RPM.

Motor Removed
Motor Removed

Not much under the stator other than the bearing housing & the feedthrough to the rotary transformer.

Head Disc
Head Disc

The heads are mounted onto the top disc of the drum, 4 heads in this recorder. The signals are transmitted to the rotating section through the ferrite rotary transformer on the bottom section.

Head Chip
Head Chip

The tiny winding of the ferrite video head can just about be seen on the end of the brass mounting.

Capstan Motor Components
Capstan Motor Components

The capstan motor is similar to the drum motor, only this one is flat. The rotor has a ferrite magnet, in this case it wasn’t glued in place, just held by it’s magnetic field.

Capstan Motor Stator
Capstan Motor Stator

The PCB on this motor has a steel backing to complete the magnetic circuit, the coils for the 3 motor phases are simply glued in place. The Hall sensors on this motor are placed in the middle of the windings though.
Again there is a tach sensor on the edge of the board that communicates the speed back to the controller. This allows the servo to remain locked at constant speed.

Viewfinder

Viewfinder Assembly
Viewfinder Assembly

As usual with these cameras, this section is the CRT based viewfinder. These units take the composite signal from the camera to display the scene. This one has many more pins than the usual viewfinder. I’ll hack a manual input into this, but I’ll leave that for another post.

Viewfinder Circuits
Viewfinder Circuits

Being an older camera than the ones I’ve had before, this one is on a pair of PCBs, which are both single-sided.

Main Viewfinder Board
Main Viewfinder Board

The main board has all the power components for driving the CRT & some of the adjustments. The main HV flyback transformer is on the right. This part creates both the final anode voltage for the tube & the focus/grid voltages.

Viewfinder Control PCB Top
Viewfinder Control PCB Top

The viewfinder control IC is on a separate daughter board in this camera, with two more controls.

Control IC
Control IC

The control IC is a Matsushita AN2510S, this has all the logic required to separate the sync pulses from the composite signal & generate an image on the CRT.

Viewfinder CRT Frame
Viewfinder CRT Frame

The recording indicator LEDs are mounted in the frame of the CRT & appear above the image in the viewfinder.

Viewfinder CRT With Yoke
Viewfinder CRT With Yoke

Here the CRT has been separated from the rest of the circuitry with just the deflection yoke still attached.

M01JPG5WB CRT
M01JPG5WB CRT

The electron gun in this viewfinder CRT is massive in comparison to the others that I have seen, and the neck of the tube is also much wider. These old tubes were very well manufactured.

Viewfinder Optics
Viewfinder Optics

A simple mirror & magnifying lens completes the viewfinder unit.

Posted on 1 Comment

Sony Watchman FD-20 Composite Video Hack

VIF IC Pads
VIF IC Pads

Hacking the Sony FD-20 to accept a composite input is easy – the tuner receives the RF transmission, produces an IF, this is then fed into IC201, a Mitsubishi M51364P Video IF Processor. The VIF IC then separates out the composite video signal, which is output on Pin 13 (in photo above, left side, 3rd pin from the top). The audio is separated out & sent via Pin 11 to the Audio IF processor.

In the above photo, the VIF IC has been removed from the board with hot air, as it was interfering with the signal if left in place. The RF tuner was also desoldered & removed. Unfortunately I managed to mangle a pad, which is the ground pin for the VIF IC. This isn’t much of an issue though, as an identical signal ground is available, just to the left of the IC.

Audio Input
Audio Input

The audio can be tapped into in a similar way, the circled pad in the centre of the photo marked SIF is the place, this is the output of the Audio IF processor to the audio amplifier. The Audio IF processor didn’t interfere with the injected signal, so it was left in place.

Posted on Leave a comment

ELuc BLU4 Intelligent Lithium Battery Charger W/Bluetooth

BLU4 Battery Charger
BLU4 Battery Charger

Here’s another battery charger designed for lithium chemistry cells, the BLU4. This charger doesn’t display much on it’s built in LCD, apart from basic cell voltage & charging current limits, as it has a built in Bluetooth module that will link into an Android or iOS app.

Above the charger is operating with 4 brand new cells, at a current of 500mA per cell. If only a pair of cells is being charged, the current can be increased to 1A per cell.

LCD
LCD

Not much in the way of user interface on the charger, a tiny LCD & single button for cycling through the display options.

Dataplate
Dataplate

The usual stuff on the data plate, the charger accepts an input of 12v DC at 1A.

Bottom Cover Removed
Bottom Cover Removed

Removing the 6 screws on the bottom of the casing allows the board to be seen. Not much on the bottom, the 4 cell negative connections can be seen, with their springs for adjusting for cell length.

MOSFETs
MOSFETs

There’s a couple of P-Channel FETs on the bottom side for the charging circuits, along with some diodes.

Main PCB
Main PCB

The main PCB is easily removed after the springs are unhooked from the terminals. Most of the power circuitry is located on the top side near the power input. There are 4 DC-DC converters on board for stepping the input 12v down to the 4.2v required to charge a lithium cell.

Second Controller
Second Controller

Not entirely sure what this IC is in the bottom corner, as it’s completely unmarked. I’m guessing it’s a microcontroller though.

DC Input Side
DC Input Side

The top left of the board is crammed with the DC-DC converters, all the FETs are in SO8 packages.

DC-DC Converters
DC-DC Converters

One pair of DC-DC inductors is larger than the other pair, for reasons I’m unsure of.

Bluetooth Module
Bluetooth Module

Bluetooth connectivity is provided by this module, which is based around a TTC2541 BLE IC.

Microcontroller
Microcontroller

Below the Bluetooth module is yet another completely unmarked IC, the direct link to the BLE interface probably means it’s another microcontroller. The Socket to the left of the IC is the connector for the front panel LCD & button.

LCD PCB
LCD PCB

There’s not much to the LCD itself, so I won’t remove this board. The LCD controller is a COB type device, from the number of connections it most likely communicates with the micro via serial.

Posted on Leave a comment

Motorola Cordless DECT Phone Teardown

Motorola DECT Phone
Motorola DECT Phone

Another random teardown from the junk box time!
Here’s an old Motorola DECT landline phone, no use to me as I’ve not used a landline for many years.

Battery Compartment
Battery Compartment

Not much on the back, other than the battery compartment for a pair of AAA rechargables. The base unit contains the charger.

Main PCB
Main PCB

Here’s the main PCB removed from it’s casing. There’s not really much going on, one of the main ICs, which is probably a microcontroller, is a COB device, so no part numbers from there. There’s a row of pads for programming the device at the factory. The RF section is on a dedicated IC, a DE19RF19ZCNC from DSP Group. I couldn’t find much on this part, but it’s one of a range of DECT/VoIP DSP devices.

 

Base Unit PCB
Base Unit PCB

Inside the base unit is a similar board, just without the keypad. Main microcontroller is again a COB device, the RF IC is under the shield.

Main Chipset
Main Chipset

Removing the shield reveals the same IC as in the handset, only this PCB has a pair of antennas.

Posted on Leave a comment

ETI Thermamite Catering Thermometer

Catering Thermometer
Catering Thermometer

Here’s another bit of commercial gear, a catering thermometer. These are used to check the internal temperature of foods such as meat, to ensure they’re cooked through.

This was given to me with some damage, the battery cover is missing & the plastic casing itself is cracked.

Battery Compartment
Battery Compartment

Power is provided by 3 AAA cells, for 4.5v

Main PCB
Main PCB

There’s not much to these units, the large LCD at the top is driven by the IC in the centre. A programming header is also present on the board near the edge.

Microcontroller
Microcontroller

The core logic is taken care of with a Texas Instruments M430F4250 MSP430 Mixed-Signal Microcontroller. This MCU has onboard 16-bit Sigma-Delta A/D converter, 16-bit D/A converter & LCD driver. Clock is provided by a 32.768kHz crystal.
The probe itself is just a simple thermistor bonded into a stainless steel rod.

Posted on 1 Comment

Sky+ HD Set Top Box

Sky Box
Sky Box

Time for another teardown! I managed to fish this Sky+ box out of a skip, but to protect the guilty, all serial numbers have been removed.
These are pretty smart devices, with DVR capability on board.

Ports 1
Ports 1

There’s a lot of ports on these units, from RS-232 serial, POTS modem, eSATA, HDMI, USB, Ethernet, SCART, Optical, digital outputs & even composite video.

Ports 2
Ports 2
Ports 3
Ports 3
Top Panel
Top Panel

Removing the top plastic cover reveals the operation buttons & the built in WiFi adaptor, which is USB connected to the main logic board.

Front Panel
Front Panel

The PCB on the front of the chassis has all the indicators, and the IR Receiver for the remote.

Cover Removed
Cover Removed

Removing the top shield of the chassis reveals the innards. The PSU is on the top right, 500GB SATA disk drive in the bottom centre. The main logic PCB is top centre.

Logic PCB
Logic PCB

Here’s the main logic PCB. The massive heatsink in the middle is cooling the main SoC, below.

SoC
SoC

The main SoC in this unit is a Broadcom BCM7335 HD PVR Satellite System-On-Chip. It’s surrounded by it’s boot flash, a Spansion GL512P10FFCR1 512Mbit NOR device. It’s also got some DRAM around the left edge.

Smart Card Reader
Smart Card Reader

The smart card reader is on the PSU PCB, the controller here is an NXP TDA8024

PSU PCB
PSU PCB

The PSU itself is a pretty standard SMPS, so I won’t go too far into that particular bit. The logic PCB attaches to the large pin header on the left of the PSU, some of the analogue video outputs are also on this board.
There’s also a Microchip PIC16F726 microcontroller on this PCB, next to the pin header. Judging by the PCB traces, this handles everything on the user control panel.

Power Supplies
Power Supplies

Some local supplies are provided on the logic board for the main SoC, the IC in the centre here is an Allegro A92 DC-DC converter. I didn’t manage to find a datasheet for this one.

LNB Front End
LNB Front End

The RF front end for the satellite input is a Broadcom BCM3445 Low Noise Amplifier & Splitter, again not much info on this one.

RS232 Section
RS232 Section

The standard MAX232 is used for the serial interface. I imagine this is for diagnostics.

Modem
Modem

The POTS modem section is handled by a Si2457 System-Side device & Si3018 Line-Side device pair.

Posted on 1 Comment

eBay High Voltage DC-DC Converter Module

High Voltage DC-DC
High Voltage DC-DC

Going through eBay recently looking for parts for a couple of CRT-based projects, I came across these DC-DC converters.
Apparently rated from 45-390v DC output at 200mA, these should be ideal for driving some of the electrodes (focus, screen, grid) in a CRT.
Above is the top of the board, input voltage header on the left, output voltage adjust in the centre & output voltage header on the right.
This module has a mini-automotive fuse, at 10A for input protection.
On the heatsink is mounted the main switching MOSFET, a RU7088R from Ruichips. This FET is fairly heavily rated at 70v 80A, with 6.5mΩ on-resistance.

PCB Bottom
PCB Bottom

The bottom of the board has the control components, with a pair of ICs. Unfortunately the numbers have been scrubbed off, so no identification here. The output from the transformer is rectified with a single large SMD diode on the left side of the board.
There’s also plenty of isolation gap between the HV output trace & the low voltage logic side of the circuit, the two being bridged only by a resistive divider for output voltage measurement.