|ADM2000-M Door access controller|
The use of the Access Door Controller as a RFID sniffer was based on the work done by Kevin Bong, owner of the MiniPwner website and his minipwnerrfid article. Kevin's article describes an early version of the AD2000-M door controller than is currently available.
I used a AD2000-M access controller with an "Access Control V3."0 circuit board, which used a Nuvoton w78e052ddg 8-bit microcontroller, there is also an unidentified "ID module" attached to the circuit board. The ID module had a number of inputs and outputs which are labelled as follows.
Pins from the module were traced back to the Micro-controller pins 15 and 16, pin 16 was identified by Kevin in his article as being transmitting the captured TAG details to the Micro-controller. By sniffing this signal it is possible to read the submitted Tags serial numbers.
|Part of AD2000-M Circuit - showing test pins|
|Location of unpopulated test pins|
|Underside of the circuit board with header soldered in place|
|Header soldered to the circuit board|
|Header pins connected to a breadboard|
|Arduino connected to the Access Control unit|
|Serial Monitor display showing captured TAG numbers.|