logo elektroda
logo elektroda
X
logo elektroda

[Solved] Title: How to Read EEPROM BSI DELPHI EL5 in Picasso II, C3 III, Aircross & Similar Models

glapsson 58173 74
ADVERTISEMENT
Treść została przetłumaczona polish » english Zobacz oryginalną wersję tematu
  • Helpful post
    #1 18338259
    glapsson
    Electronics specialist
    Hello
    I was looking for a similar topic and unfortunately I did not find it on the forum.
    I would like to present how much I was able to determine.
    And also ask for entries if anyone in this topic has something interesting.
    Or information about similar BSIs, e.g. FL5

    Below I present the readout of the eeprom BSI EL5
    used in the new CItroen models
    For example Picasso II, C3 III, Aircross and probably others.

    I made the reading with UPA-s
    but it was not without its problems.
    BSI was purchased on a popular auction site and, unfortunately, in the first phase, despite the correct connection, there was no data in the reading - only FF

    After separating the boards and desoldering the 95128 chip, I got the data

    It is also interesting that in the diagnostics on the table, the processor clearly did not load eeprom data (i.e. VIN and coding), there were question marks in the place of VIN number.
    It was possible to enter the VIN and it was active but only until the power supply was disconnected - i.e. the processor did not program the eeprom either.

    After many different attempts, the decision was made to replace the eeprom memory with the new 95128

    At this point, the BSI recovered.

    The UPA read all the data previously read outside the system very nicely after the pads.

    You can perform eruptive reading operations, erase clones after BSI pads without dismantling the discs.

    I do not know why this was the eeprom state ..... maybe it is a protection against reuse .... I will still test it.
    It is a pity that the first reading could not be made in the system, but some came from the car after a specific crash (checked after the VIN read, the car is described as dead and in the photo you can see that on a specific roll)

    There is an inscription on the BSI housing: Do not use if dropped

    Maybe it has to do with eeprom blocking ... or maybe it's an accident or someone on purpose.

    I throw in the connection for UPA and PINOUT BSI for diagnostics on the table.

    I will only add that I have read and programmed in the system using the UPA as 25C128
    for a simple reason - up 95128 is not included in the set


    Moderated By T5:

    Good job - keep it up.

  • ADVERTISEMENT
  • #2 18338368
    szymitsu21
    VIP Meritorious for electroda.pl
    Generally, at this time, all BSIs, except for old units, can be read on the connector.

    I wonder what the situation would look like if you tried to read by the connector, or if you were to throw a VIRGIN file by the connector.

    Edit:
    As I wrote later, this delphi will not actually read it.
  • ADVERTISEMENT
  • Helpful post
    #3 18338453
    glapsson
    Electronics specialist
    I wonder what interface do you read the new DELPHI with?
    IO terminal does not have it yet also SMOK - unless they updated yesterday

    IO LIST of the terminal:
    Siemens D76F0018 + 95160 (BSI-E0X-00 / BSI-F0X-00) - KLINE R / W EEPROM 95160 | SHOW PIN
    Siemens 1L00M + 95128/95256 (BSI-S0X-00) - CAN R / W EEPROM 95128/95256 | R / W FLASH 9S12DP512 | SHOW PIN
    Continental SC667050 + 95256 (BSI-Q0X-00) - CAN R / W EEPROM 95256 | R / W FLASH SC667050 | SHOW PIN
    Valeo 4L00M + 95128/25128 (BSI2004-P0X-00) - CAN R / W EEPROM 95128/25128 | R / W FLASH 9S12DP512 | SHOW PIN
    Valeo 2M48H + 24C128 (BSIEV-X0X-00) - CAN R / W EEPROM 24C128 | R / W FLASH 9S12XEP768 | SHOW PIN
    Valeo SC667152 + 95256 (BSI-N0X-00) - CAN R / W EEPROM 95256 | R / W FLASH SC667152 | SHOW PIN
    Johnson Controls easyCAN4 + 29LV400 + 95128 (BSI2004-H0X) - CAN R / W EEPROM 95128 | R / W FLASH 29LV400BB | SHOW PIN
    Johnson Controls easyCAN4F1M-32 + 95128 (BSI04EV-K0X) - CAN R / W EEPROM 95128 | R / W FLASH easyCAN4F1M-32 | SHOW PIN
    Johnson Controls SPC560B60 + 95128 (BSI04EV2-KEX) - CAN R / W EEPROM 95128 | R / W FLASH SPC560B60 | SHOW PIN

    NO DELPHI EL4 EL5 FL5

    I have tested it and it does not connect with any protocol.

    As for Virgin, as I uploaded the entire eeprom to FF, everything can be modified with one but.
    You can type VIN and calculators present - and that's it for the rest of the configuration with the online option

    How do you have a DIAGBOX token or subscription - because everything goes online
    I assume that it is enough to manually configure VIN and then suck everything from automatic online coding to the car.
    The mileage should be read from the clocks .... I haven't tested it yet.

    As for the PIN - algorithm .... unknown entry - coded
    Explicit LOCK in the file
    As after 2015, VALEO BSI-N0X-00 and CONTINENTAL BSI-Q0X-00
    In the above notations LOCK or "FUCK" - yes - such a record ... probably a programmer's joke.
    In the above two, the IO-terminal reads the PIN error-free.
  • #4 18338588
    melas
    Level 31  
    Did you develop it yourself ?. It's a bit of a fear to read in the layout if you haven't damaged the first souvenir. I have such bsi in stock now processed and I will try this method on the pins or read the same. Just not to beat the BSI because it's the DS5, I don't want to buy another one, and even more to put it on my feet. Tell me what you tested was put in the car, or you just have one for testing. Greetings
  • Helpful post
    #5 18338655
    glapsson
    Electronics specialist
    I developed the pads myself
    I disconnected the plates and measured the legs of the memory .... it is a simple operation and requires no secret knowledge.

    Now I anticipate all the questions that will probably arise ... because they already were, but the moderator has already thrown it into the bin.
    I use
    Original UPA-s from TOMSAD (no virtuale clones etc ...)
    Original SEEProg from ELNECA (no virtuale clones etc ....)
    IO-Terminal (Atomis) and I don't think there is any clone

    So I am not able to answer the question about the possible consequences of using clones ........

    As for the memory itself ... the original one - apart from the BSI, it does not show any damage
    reads without a problem - interesting in the system, both the programmer and the BSI itself do not read from this memory .... and this is interesting- Why?

    WHAT TO BSI
    After uploading the batch ripped outside to the new memory:
    LIVES - all procedures work OK - I haven't checked the car yet, but it's soon because the BSI is to land in the PICASSO II for the replacement because the original is not working with the piloting of the lights and sometimes the doors are broken and everything has been checked and replaced except the BSI.

    As for tokens (Tokens) it works
    I recently added the gearbox computer to the 3008 II
    all you need to do is buy online access (1 VIN per week $ 42 .... abo EURO .. I don't remember) - this is a legal procedure, available by the PSA group
    condition you must have an account on servicebox citroen
    I also tested the reloading of bsi and other modules and it works.
    On the diagbox cable bought 10 years ago on a well-known auction site.
    After buying the token and downloading the software - the interface updates and does whatever we want.
    Title: How to Read EEPROM BSI DELPHI EL5 in Picasso II, C3 III, Aircross & Similar Models Title: How to Read EEPROM BSI DELPHI EL5 in Picasso II, C3 III, Aircross & Similar Models
    After losing activation, we can easily return to the old settings - nothing is blocked.

    today I will solder the original memory and I will see exactly what it is about because in seeprog programming there are several programming settings options
    Screenshots below and I noticed that there were differences in the new and desoldered memory and I assume that it is a blockage in some byte - yesterday was already late and I did not want to check
    but today I will tire.
    Title: How to Read EEPROM BSI DELPHI EL5 in Picasso II, C3 III, Aircross & Similar Models Title: How to Read EEPROM BSI DELPHI EL5 in Picasso II, C3 III, Aircross & Similar Models

    The UPA also has status options

    Title: How to Read EEPROM BSI DELPHI EL5 in Picasso II, C3 III, Aircross & Similar Models

    Maybe it is blocking work in the system .....
    https://community.cypress.com/docs/DOC-17862

    I have a request for someone who is knowledgeable in this topic
    SPI memories
    just not links on the datasheet - and because I can do it!

    just in a simple, non-engineering way to describe the function:
    SRWD

    and how it works
    S - chip select
    HOLD - it's rather clear, but how does this relate to S.
    W-write protect is also rather clear

    Added after 2 [hours]:

    szymitsu21 wrote:
    Generally, at this time, all BSIs, except for old units, can be read on the connector.


    However, I am still waiting for the answer - What interface can it be read on the connector

    I WILL ADD THAT THEME IS WORKED
    please look further in my posts.
  • #6 18339282
    szymitsu21
    VIP Meritorious for electroda.pl
    glapsson wrote:
    I wonder what interface do you read the new DELPHI with?



    You're right, I was convinced we were talking about an elder bsi.
    This bsi can not be read by the connector.
  • Helpful post
    #8 18339945
    glapsson
    Electronics specialist
    about this interface .... the description is vague ....
    the price is ridiculous ... something stinks here.
    just look at the same BSI on the EL5 dragon and the price of the program ... ... solutions that can be embraced by the programmer you already have
    http://smok.com.pl/index.php?id_product=175&controller=product&id_lang=1

    manual tab

    as for the course ... to be done.
    But that was not what I meant to bid for online searches ....
    Rather, it is about gathering practical knowledge ... already possessed.
    Connection diagrams bsi
    possibility of programming with universal programmers
    calculation algorithms
    the location of the relevant sections in the load.
    and without descriptions, I think ... but I would prefer the description, I did it and it is possible.
    I am most interested in new types - valeo N0x and conti Q0x are familiar
    I mean EL4 EL5 and FL5

    I will add that the most reliable BSI used so far (apart from delphi) in the PSA group is IOterminal
    Currently in the Christmas promotion at a very good price in atomis.
    the second good equipment is the autonomous OBDSTAR H108
    I used - I tested and it works - about a year ago it could not only handle LOCK PIN codes - currently I do not have it, I do not know if it has been corrected

    If anyone has - let him praise if there is already a patch with an algorithm.

    You have something to throw ...

    Added after 11 [hours] 34 [minutes]:

    All in all, I said A and I also have B and C
    maybe someone will need a written connection on the table of older BSI ... it is not a download from IOterminal
    There are, of course, written BSI PINOUTS there, but not with the possibility of diagnostics and adding keys already at the stage of the table ..... workshop without a car.
    My lists provide such an opportunity - of course, we must have a module for steering wheels and an immo loop
    Title: How to Read EEPROM BSI DELPHI EL5 in Picasso II, C3 III, Aircross & Similar Models
    Unfortunately, I always get points because it motivates others to share their knowledge in order to gain them.

    CONTINENTAL Q0x
    no possibility to read from the disc pads - the memory pin 5 has not been led to the outer side of the board - so only half-board or OBD.

    Title: How to Read EEPROM BSI DELPHI EL5 in Picasso II, C3 III, Aircross & Similar Models

    VALEO N0x
    VALEO can be read from the pads
    in the example, Xprog and carprog
  • #9 18340629
    glapsson
    Electronics specialist
    I must make a clear note:

    As for tokens - tokens from PSA
    In addition to full diagnostics - You can "set" the car automatically with factory settings.
    Unfortunately, there is no wicket for modifications to the BSI modules
    e.g. adding cameras, parktronics, hook, color display, etc.
    also the same in some multimedia, probably in some ECUs, I did not test everything - because I do not have so much material for research.

    But the BSI Continental Q0x and Valeo N0x can be done with online programming
    You have to upload flash to BSI from before blocking - but it involves a complete BSI rebuild
    you have to write off - literally - the coding from the old one
    and you have to prepare BSI as new - with entering the PIN of the keys, etc ... ... you know what's going on
    I say that these operations are best done outside the car so as not to tear other modules later because strange things appear on the display ...
    having a test disc, it can be checked outside the car
    Coding Keys Remotes Stories Mileage .....
    And if we are sure, we just load it.

    And we must remember that they do not make a teleport on the website or we do not code automatically ... because surely --- everything will return and probably not without
    problems.

    Below is a batch of VALEO N0x and CONTINENTAL Q0x with the possibility of Manual configuration and an exposed PIN

    BSI ID VALEO
    Title: How to Read EEPROM BSI DELPHI EL5 in Picasso II, C3 III, Aircross & Similar Models

    BSI ID CONTINENTAL
    Title: How to Read EEPROM BSI DELPHI EL5 in Picasso II, C3 III, Aircross & Similar Models
  • #10 18341356
    melas
    Level 31  
    I change the configuration in Bsi manually without any problem. It is known that the factory configuration first flies from the machine, then I enter manual, and we change what you want

    Added after 7 [minutes]:

    The only thing I can't get through is the radar operation and the configuration. Neither adaptation is always one error in cars after damage or after a spacer. Radar error beyond repair. If there is anyone who has this secret knowledge I'd love to support him with $$.

    Added after 1 [minutes]:

    Erasing the error has penetrated
  • ADVERTISEMENT
  • #11 18342494
    glapsson
    Electronics specialist
    Well, it's from a different barrel.
    Question for mathematicians and programmers - but still on the topic of BSI (N0x)

    I blurred VIN because nobody needs it for anything

    I marked the area with the read PINs under the VIN number
    I will add that the exchange of these areas between BSI makes the PIN migrate in full

    Of course, I have a facebook what counts it from the machine, but the question arises from curiosity - HOW is it counted?

    Title: How to Read EEPROM BSI DELPHI EL5 in Picasso II, C3 III, Aircross & Similar Models
  • #12 18342613
    szymitsu21
    VIP Meritorious for electroda.pl
    You would have to know the algorithm.
    Set pin to 0000 Later for comparison 0001/0010

    And you would quickly understand how it is written.

    By forcing the PIN in this way, you can easily log into bsi?
  • #13 18342901
    glapsson
    Electronics specialist
    It's not so simple....
    The BSI does not work properly by itself with the DB on such a substitution.
    And that was not the point.

    The point is that the IO interface when replacing this string correctly calculates the pin for the BSI from which the string was retrieved.
    Thus, the PIN conversion algorithm is in this string and is not derived from VIN etc.

    Changing any cell to 00 or FF or taking only a fragment of this string - not indicated whole - destroys the system and gives the answer to the PIN "FUCK", i.e. the calculation algorithm gives an error or the string contains CS

    I am interested in how to calculate it mathematically ... and copying BSI is a piece of cake in this case and I am not asking about it.

    If I knew the algorithm ... it wouldn't be a question ... it's probably logical.

    Maybe this will sound funny - I don't really need it.
    Well, because I have something to copy all such BSI.

    it is about satisfying the curiosity - HOW IT IS CODED

    Added after 52 [minutes]:

    and you made me think
    below two pins 0000 and 0001 according to IO
    of course batch with BSI which is blocked "FUCK" made on VIRGIN and added VIN and PIN using DB first 0000 then 0001

    BSI talks normally

    Title: How to Read EEPROM BSI DELPHI EL5 in Picasso II, C3 III, Aircross & Similar Models
  • #14 18345511
    szymitsu21
    VIP Meritorious for electroda.pl
    glapsson wrote:
    below two pins 0000 and 0001 according to IO
    of course batch with BSI which is blocked "FUCK" made on VIRGIN and added VIN and PIN using DB first 0000 then 0001



    I do not see any dependence there. But in my case, when I do it professionally, it's a waste of time for such thoughts.

    I don't think this is some simple algorithm.
  • #15 18345680
    glapsson
    Electronics specialist
    That's why I gave these examples .....
    And it is probably the same with the EL5
  • #16 18346838
    looking
    Level 11  
    glapsson wrote:


    I will add that the most reliable BSI used so far (apart from delphi) in the PSA group is IOterminal
    Currently in the Christmas promotion at a very good price in atomis.
    the second good equipment is the autonomous OBDSTAR H108
    I used - I tested and it works - about a year ago it could not only handle LOCK PIN codes - currently I do not have it, I do not know if it has been corrected

    If anyone has - let him praise if there is already a patch with an algorithm.


    A patch was released for Obdstar in May this year
    http://en.obdstar.com/news/ssgg/3659.html

    Peugeot / Citroen / DS
    1. Increased French and Turkish translation
    2. Solved BSI_H0X Pincode reading problem
    3. Solved the problem that display '****' and 'FUCK' when reading Pincode
  • Helpful post
    #17 18353670
    glapsson
    Electronics specialist
    I played with FL3
    Below are the effects
    UPA reading same as EL5
    The operation on the table also - in terms of the diagnosis of the ECU not tested .. I left with the EL5

    However, there are a lot of differences on the disc - no connection of one ladder - it breaks more easily.
    On the board, next to the processor, there is no whole section that probably supplies something because in the EL5 there are a lot of electrolytic capacitors and power regulating elements.
    FL3 is empty at this point.

    Descriptions below

    I will only add that reading and writing without the slightest problem of UPA
    After Virgin is done, you can add VIN and PIN using DB with LOCK principle
    DB recognizes the data correctly

    Now I am waiting for FL5 ... unfortunately I do not have BSI - I will be happy to test it
  • ADVERTISEMENT
  • #19 18356388
    glapsson
    Electronics specialist
    Description also foggy ....
    it seems to be exactly the same as this:
    http://smok.com.pl/index.php?id_product=381&controller=product&id_lang=1

    For me, it's about completely different cars ... basically - passenger PSA after 2016
    3008 II
    308 t9 after 2016
    C4 Picasso II after 2016
    c3 III
    508 after 2016
    and so on.......

    I made a PCB design so as not to solder in the system
    Eagle design
    Standard plate with BDM frame
    I changed the position of pin 6 (UPA - 2) in this project
    I have sent the order - not tested yet, I am waiting for the PCB
    Printing on the foil pins compatible
    Maybe I will force myself and test something myself ... but I don't feel like it

    I etched the test plate.
    Due to the use of a single-sided plate - printing on the reverse side
    so that it is easier to solder the socket and that the pressure of the needles does not tear the pads off.
    Everything works as it should

    Title: How to Read EEPROM BSI DELPHI EL5 in Picasso II, C3 III, Aircross & Similar Models Title: How to Read EEPROM BSI DELPHI EL5 in Picasso II, C3 III, Aircross & Similar Models
    Attachments:
  • #20 18370523
    glapsson
    Electronics specialist
    I need flash and eeprom for BSI Continental Q0x

    But those with PIN LOCK or FUCK

    I want to do a few tests on this BSI but I have not blocked and I need batch from the blocked version.
  • #21 18371587
    glapsson
    Electronics specialist
    Reading test in the system:

    BSI EL5 reading in the system:

    UPA 1.3 - does not read (voltage drop from 4.75 after connecting the system to 3.72V - power supply error
    Xprog M- does not read (reading only FF)
    Carprog- does not read (without 00 power supply, with FF power supply)
    SEEPROG - reads OK
    VELLON VP390 - reads OK
    UPA-S- reads OK

    BSI FL3 reading in the system:

    UPA 1.3 - reads OK
    Xprog M- reads OK
    Carprog- reads OK
    SEEPROG - reads OK
    VELLON VP390 - reads OK
    UPA-S- reads OK

    And as you can see, it's supposed to be the same, but not.
    Probably the differences result from the load that BSI gives in FL3 there are much less electronic circuits as I mentioned before.

    I would like to add that you do not have to buy expensive interfaces to deal with these BSIs.

    So far I have mastered:

    -VIRGIN and adding the VIN PIN
    - Mileage Correction - of course only and exclusively in accordance with applicable regulations
    -Reset history - as above

    After adding the BSI, it will most often be necessary to do online programming and this cannot be avoided too much.

    However, I will be testing BSI cloning in the near future.

    I would like to buy a BSI FL5 and then describe all the possibilities of operating on these three BSIs in one package
    EL5
    FL3
    FL5

    Describe in the form of instructions for already owned programmers.
  • #22 18387913
    GORO35
    Level 13  
    Hello! I read something like that from the eeprom25640 BSI Citroen C5. I need a PIN. Can anyone help me on this. I am not sure the reading is correct. Thank you in advance for any suggestions and suggestions.
  • #23 18387945
    glapsson
    Electronics specialist
    how did you rip it? .... because it looks like it was the story itself
    or not all batch

    because the known BSIs in PSA have such eeprom memory bones
    Siemens D76F0018 + 95160 (BSI-E0X-00 / BSI-F0X-00) EEPROM 95160
    Siemens 1L00M + 95128/95256 (BSI-S0X-00) EEPROM 95128/95256
    Continental SC667050 + 95256 (BSI-Q0X-00) EEPROM 95256
    Valeo 4L00M + 95128/25128 (BSI2004-P0X-00) EEPROM 95128/25128
    Valeo 2M48H + 24C128 (BSIEV-X0X-00) EEPROM 24C128
    Valeo SC667152 + 95256 (BSI-N0X-00) EEPROM 95256
    Johnson Controls easyCAN4 + 29LV400 + 95128 (BSI2004-H0X) EEPROM 95128
    Johnson Controls easyCAN4F1M-32 + 95128 (BSI04EV-K0X) EEPROM 95128
    Johnson Controls SPC560B60 + 95128 (BSI04EV2-KEX) EEPROM 95128
    DELPHI EL5 - EEPROM 95128
    DELPHI FL3 - EEPROM 95128
  • #24 18388018
    GORO35
    Level 13  
    I played it with the CH341a programmer. My bsi is some kind of Sagem x4hg. This is what he writes on the plate
  • #25 18388405
    glapsson
    Electronics specialist
    SAGEM X4HG

    Your batch should look like mine in the attachment
    VIN and PIN is encoded

    After decoding, it should look like this:
    But it is not possible to separate such strings in your batch

    Title: How to Read EEPROM BSI DELPHI EL5 in Picasso II, C3 III, Aircross & Similar Models

    I assume you read something badly.

    And there is no motorola?
    https://cardamp.ru/index.php?PageNr=1&langs_u...L&memory_s=ALL&damp_type_s=ALL&verified_s=ALL
  • #26 18388434
    GORO35
    Level 13  
    I tried the operation four times and all the files are the same. I did it for the first time and I have no idea where the error is. If I find some other eprom, I will try to load this batch of yours to check the programmer. Well! After all, I know where I stand. Thanks!

    Added after 8 [minutes]:

    Actually the processor is Motorola.
  • #27 18388474
    glapsson
    Electronics specialist
    Don't upload my batch !!!
    You will lose your data !!!

    The batch needed to read the PIN is in the MOTOROLA system
    MC68HC912DG128

    Carprog
    Xprog .... and others

    I invented something there ... two versions .....
    Title: How to Read EEPROM BSI DELPHI EL5 in Picasso II, C3 III, Aircross & Similar Models Title: How to Read EEPROM BSI DELPHI EL5 in Picasso II, C3 III, Aircross & Similar Models Title: How to Read EEPROM BSI DELPHI EL5 in Picasso II, C3 III, Aircross & Similar Models
  • #28 18388496
    GORO35
    Level 13  
    Now I don't understand anything anymore. I have been surfing the net for two weeks and I was convinced that the pin is in the eprom.
  • #29 18388508
    glapsson
    Electronics specialist
    Usually ..... unfortunately not always
    The plus is that it is quite simple to connect in the system
    no need to do chutes or raise legs, etc.
    All it takes is a programmer.

    Or maybe you will pull out this PIN otherwise

    What engine do you have?
    motor controller ?
  • #30 18389706
    szymitsu21
    VIP Meritorious for electroda.pl
    GORO35 wrote:
    Now I don't understand anything anymore. I have been surfing the net for two weeks and I was convinced that the pin is in the eprom.


    Send me a bsi, I will get you a pin and everything is free.

Topic summary

The discussion revolves around the challenges and methods for reading the EEPROM from the BSI (Body System Interface) Delphi EL5 used in various Citroën models, including Picasso II, C3 III, and Aircross. Users share their experiences with different programming tools such as UPA-s, Carprog, and SEEPROG, noting issues like reading failures and the need for desoldering the EEPROM chip to obtain data. The conversation also touches on the differences between various BSI models (e.g., EL5, FL5) and the importance of understanding the PIN coding and algorithms involved in these systems. Participants express interest in sharing knowledge about reading and programming these BSIs, including the use of specific interfaces and the implications of using clones versus original tools.
Summary generated by the language model.
ADVERTISEMENT