logo elektroda
logo elektroda
X
logo elektroda
Advanced Search
logo elektroda

ONENUO ZHQ01 Smart USB Switch Teardown & Boot Log Analysis [BK7231N]

divadiow 3357 8
ADVERTISEMENT
Report a violation of the law
Reply | New topic
  • Helpful post
    #1 20871539
    divadiow
    Level 36  
    I thought I'd present my own USB micro smart switch sold under the brand ONENUO with model ZHQ01. I see there's an identical device
    here but maybe this qualifies as a 'new' device that others may not find if searching for 'HC-S050-WIFI'.

    Opening was easy using a thin prying tool along the top edge of the unit. There isn't much glue so lifting one edge, once loose, will crack the rest out of place and allow you to open it.

    Silkscreen PCB numbers:
    DLX-USB-BK7231N 12V
    FR-4 L2MM

    ADVERTISEMENT


    I managed to guess TP6/7 were the TX1/RX1 so have attached the boot log.

    TP3 - CEN
    TP4 - TX0
    TP5 - RX0
    TP6 - TX1
    TP7 - RX1

    Code: JSON
    Log in, to see the code

    Code: text Expand Select all Copy to clipboard
    
Device configuration, as extracted from Tuya: 
- Button (channel 1) on P24
- Pair/Toggle All Button on P8
- WiFi LED on P6
- Relay (channel 1) on P7
Device seems to be using CB2S module, which is using BK7231N.
And the Tuya section starts, as usual, at 2023424


    ONENUO branded USB smart switch, model ZHQ01, featuring a USB port and button.
    Product page of ONENUO 5V micro smart USB switch on AliExpress. Close-up of a circuit board with USB port and markings. Circuit board of the ONENUO ZHQ01 micro smart USB switch on a green measuring mat. Micro smart USB switch ONENUO ZHQ01 with detailed technical label. Close-up of a blue packaging for the USB Smart Adapter with technical specifications. Box with label of Tuya Smart Micro USB Adapter/Switch product. Blue box with the white text Micro on top. Close-up of the internal structure of a micro smart USB switch showing electronic components. Close-up of a PCB with visible electronic components and a BK7231N microcontroller. PCB with DLX-USB-BK7231N 12V markings and test points. Close-up of a printed circuit board with labels and connectors. Close-up of an open USB device with printed circuit board markings on a green mat. Opened micro smart USB switch with visible circuit board and components. Circuit board of a micro smart USB switch in a plastic casing. Screenshot of an app showing software update information: no updates available. Main module version is V1.3.10.
    Attachments:
  • ADVERTISEMENT
  • #2 20871543
    divadiow
    Level 36  
    OBK Template

    Code: JSON
    Log in, to see the code
  • Helpful post
    #3 20876895
    p.kaczmarek2
    Moderator Smart Home  
    Thank you, device has been added in this commit:
    https://github.com/OpenBekenIOT/webapp/commit/d0d987431aa069adc9cf0f324a2e7192956ab377
    It should be soon live at:
    https://openbekeniot.github.io/webapp/devicesList.html
    Helpful post? Buy me a coffee.
  • ADVERTISEMENT
  • #4 21284444
    divadiow
    Level 36  
    The 3 channel version uses a CBU instead of the BK7231N on the main PCB, perhaps for reasons of space.

    White Wi-Fi USB module with three ports on a blue background, next to a user manual. Wi-Fi USB switch module with manual and packaging. USB Smart adapter with instruction manual. Electronic module with USB components on a wooden table. Circuit board with three USB ports and a wireless module, side view. CBU module with three USB ports on a blue background. Green circuit board with a USB module and electronic components. Close-up of a circuit board with a CBU module and USB ports.

    a solderless release from Tuya

    Close-up of an electronic module with a CBU chip, connected by red test leads with crocodile clips.

    boot from TX2

    Code: Text
    Log in, to see the code


    firmware 1.3.18 - not cloudcutter exploitable

    Code: JSON
    Log in, to see the code


    OBK template

    Code: JSON
    Log in, to see the code


    https://github.com/OpenBekenIOT/webapp/pull/1...mits/669f2bb6a0647a00648e1cbb9ff2b54decbc330d
    Attachments:
  • #5 21284920
    p.kaczmarek2
    Moderator Smart Home  
    Merged, thank you.

    We should have soon 650 devices.

    I am interested in the solderless method. Would you be able to write a short guide about that for our Tutorials section? Maybe we could help some more people to flash devices that way. Not everybody have soldering iron and can solder. When solderless UART flash is possible and reasonable?
    Helpful post? Buy me a coffee.
  • #6 21693609
    madmalkav
    Level 3  
    Thanks for sharing! I have two questions:

    - The web shows three independent buttons , but no the All On/Off button. Is there any way I can add it?
    - The device only works directly connected to a USB power supply, if tried several USB-A female to USB-A male cables with both original firmware and OpenBeken, and the device will reboot as soon as I toggle one of the relays when using any of the cables. Any idea why this happen and how it can be avoided?
  • ADVERTISEMENT
  • #7 21693807
    p.kaczmarek2
    Moderator Smart Home  
    1. I can add this option I think! Nice idea, wait....
    2. Run it with PowerSave 1 and try again, does it help? https://www.youtube.com/watch?v=eupL16eB7BA
    Helpful post? Buy me a coffee.
  • ADVERTISEMENT
  • #8 21693966
    madmalkav
    Level 3  
    >>21693807 thanks for the idea. Unfortunately, PowerSave 1 didn't help, in fact it doesn't seems to work with this device if I do like in the video and look at the current used with the USB meter.
  • #9 21694524
    madmalkav
    Level 3  
    >>21693966 Device output drops 0.2v-0.3v from source, so with many power supplies you get 4.90V or even less. 1 channel version with original firmware does the same. I don't recommend this product.
Reply | New topic
Report a violation of the law

Topic summary

The discussion centers around the ONENUO ZHQ01, a smart USB switch utilizing the BK7231N chip. The device's teardown revealed easy access with minimal adhesive, allowing for straightforward disassembly. Key PCB silkscreen numbers were identified, and the user successfully mapped the boot log, detailing various test points (TP3-TP7) for communication. A template for the device was provided, including specifications such as vendor information, pin configurations, and a link to an image. Additionally, a related three-channel version was mentioned, which uses a different chip (CBU) for space efficiency. The community expressed interest in a solderless flashing method for the device, highlighting the need for accessible tutorials for users without soldering tools.
Summary generated by the language model.
Popular Topics
ADVERTISEMENT