Features:
Multi-functions----Integrate functions such as key information reading, data calculating, key writing, and is applicable to both old
and new.
Easy operation----Graphical workflow will make it easy for your operation. Whats more, our CKM 200 can be operated via OBD socket, CAN
or K line on many models without disassembly.
High security G3 platform----Besides USB communication and online update, our G3 (the third generation) platform is especially
featured by its high security: hardware anti-cracking and software anti-copying, adopting IDEA (International Data Encryption
Algorithm) for registration, upgrade and payment.
Bran-new keys----We will cooperate with German technology, and launch the bran-new keys for all the BMW and Mercedes Benz. At that
time, you can get rid of the key shortage and no need to use any renovated second-hand keys.
System production:
The brand-new third generation platform, Except for the USB communication and online upgrade, our third generation platform is
especially featured by its high security: Hardware anti-disassembling and software anti-copying, adopting IDEA (International Data
Encryption Algorithm) for registration, upgrade and payment. Besides, we have two pre-pay plans for your choice, as Permanent license
plan and token plan.
Benz series:
Benz S CLASS (W140.W220)
Benz CL CLASS (W215)
Benz SL CLASS (R230)
Benz E CLASS(W210.W211)
Benz CLK CLASS(W208.W209)
Benz CLS CLASS (W219)
Benz C CLASS (W202.W203)
Benz ML CLASS (W163)
BMW series:
Old style BMW (EWS2.EWS3.EWS4)
BMW 1/3/5/6 (E87.E90.E91.E92.E60.E61.E63.E64) series white CAS2
BMW 1/3/5/6/X (E87.E90.E91.E92.E60.E61.E63.E64.E70)Series black CAS2
Knowledges :
I. The introduction of automotive anti-theft technology
The progress of semiconductor technology has provided automotive manufacturers with more intelligent, secure and convenient anti-theft
technology. Judging from the mainstream auto models in the current market, the main anti-theft methods include IMMO (immobilizer), RKE
(Remote Keyless Entry), and PKE (Passive Keyless Entry / GO).IMMO and RKE are most widely used at present.
1.Immobilizer(IMMO)
The encrypted transponder chip is placed in the key. In the process of unlocking, the RF transceiver in the vehicle body will
authenticate whether the key is matched or not to control the engine.
2.Remote Keyless Entry(RKE)
RKE control the door by the Body Control Module (BCM); just pressing the button on the key to send the unlocking code, the door will
be open after the code passed the verification of the base station chip.
3.Passive Keyless Entry(PKE)
PEK is not a traditional key but an intelligent one which is similar to intelligent cards. When the driver is in the designated area,
the PKE system will identify whether the driver is legally authorized, and then the door will be open automatically if he is. When the
driver is in the car, he can simply press a button to start the ignition switch.
II. General introduction
1.Immobilizer is developed from the VATS device of GM. It inherits the idea of the VATS anti-theft system, which prevents the engine
from starting unless the code in key matched with the code of start switch. Vehicles equipped with IMMO can prevent starting the
engine even the thieves can open the doors. The basic configuration see figure 1. Through several generations improvement, IMMO has
become a widely used anti-theft technology.
G1 (First- generation) IMMO uses fixed code. When the key inserted into the keyhole, a fixed code will be transmitted. After
authorization the ignition starts. The typical transponder is PCF7930.
G2 IMMO uses read-write transponder PCF7931. Different codes will be transmitted each time, and meanwhile the basestation transmits
the password-protected information.
G3 IMMO program uses transponder PCF7935. The basestation sends a challenge first, then the transponder responds an encrypted code,
and verified before they can start the engine.
G4 IMMO uses PCF7936. The basestation not only transmits challenge, but also encrypted data. The transponder transmits the encrypted
reply signal after verifying the information. This is the main application mode of IMMO now.
G5 IMMO uses transponder PCF7939 and AES128 encrypted data transmission.
2.How the Immobilizer Works A typical immobilizer works as follow: the ignition key contains an electronic chip with a fixed ID
(equivalent to identification number), only when the fixed ID in accordance with the ID in the engine, the car starts. Otherwise the
engine's starting circuit will be disabled and the engine can not be started.
Basestation transmits LF signal to start the authentication process when driver inserts the key into the ignition switch. And the LF
signal provides power for the transponder in the key. In the process of authentication, the transponder and the basestation will
transmit signal to each other. The transponder sends its ID to the basestation for authentication and the basestation transmits a
challenge and MAC address back to the transponder. In order to achieve higher security level, every signal is an encrypted data. See
figure 2.
3. History An immobilizer is an electronic device fitted to an automobile which prevents the engine from running unless the correct
key (or other token) is present. This prevents the car from being "hot wired" after entry has been achieved.
Immobilizers have been mandatory in all new cars sold in the United Kingdom since October 1998 and in Australia since 2001. Early
models used a static code in the ignition key (or key fob) which was recognized by an RFID loop around the lock barrel and checked
against the vehicle's ECU for a match. If the code is unrecognized, the ECU will not allow fuel to flow and ignition to take place.
Later models use rolling codes or advanced cryptography to defeat copying of the code from the key or ECU.
The microcircuit inside the key is activated by a small electromagnetic field which induces current to flow inside the key body, which
in turn broadcasts a unique binary code which is read by the automobile's ECU. When the ECU determines that the coded key is both
current and valid, the ECU activates the fuel-injection sequence.
III. BMW anti-theft system
The BMW(before 1994)are with EWS which activated by the DWA or BC that are installed by manufacturer. And between May, 1993 and
January, 1994, it can be activated by ZV.
The ordinary key and lock for anti-theft is not enough, since January, 1994, the EWS1 has been used in all BMW, but the E30, E32, E36
series have no ZV. And since January, 1995, all the BMW have used the EWS2 for anti-theft.
BMW anti-theft is divided into two structures:
Before 2000, it contains EWS and smart-key, they can immobilize or control the engine by RFID, which realize ID recognizing and
exchanging encrypted -key. The intelligent remote can achieve RKE via furthered hopping code.
After 2000, it contains CAS and smart-key, which use the safe encryption algorithm to achieve the challenge-response. And the chips
also are customized for security.
The key with transponder
The key has a transponder which can connect with the EWS control unit through the electronic transmitting and receiving device (S / E
module). The transponder chip composes a transmitting and receiving device, a small antenna loop and a read-write memory.
The transponder chip is energized by the S / E module through the loop antenna of the Steering locking device. So it did not need
battery to power any more. Energy supply and data transmission are achieved through the transformer, which is located between the loop
antenna of the ignition switch and the key. The maximum transmission distance of the read-write data is up to 2cm.The memory of
transponder includes key data and client data.
Note
Each key is unique, and it includes a transponder chip with its own key data with or without controller. The uniqueness is that the
chip can only be matched with one anti-theft system, if the key has been matched, it can't be matched with another car.
The antenna loop of the steering locking device is around the ignition cylinder . The S/E module plays a role of modulation and
control in the process of transmitting data to the transponder .It also exchanges information with the EWS control unit through a
single bi-directional serial data line.
EWS control unit
EWS control unit is the interface of the S/E module, ECU and starting engine.
The important roles of EWS control unit are as follows:
1. Inquire key data from the transponder.
2. Only via code allow the ECU to work if the key is authenticated.
3. Save each ISN (Internal Series Number) to exchange coded data.
4. Manage all data of the ten keys.
The ECU with effective code will be allowed to start the input terminal. The engine control unit (DME/DDE) will allow to start the
engine (bus terminal Kl.15) and supply fuel only if EWS control unit transmit a verified data signal. The working allowed signal is
based on the ISN of the ECU. The DME/DDE must first identify the working allowed signal before transmitting the ignition signal (bus
terminator Kl.15) and supplying fuel.
Therefore, the new ISN of the DME/DDE must be transferred to the DME/DDE through the transfer of data by the GT1 after the replacement
of the engine control module. The ISN can not be changed from the external. The basic principle of EWS3 is the same as CAS.EWS3
integrates EWS2 with the receiver box, and CAS integrates EWS3 with other body control systems. With respect to the anti-theft
technology, not only the authentication is more complex and secure, but also the smart key has more functions such as auto data,
driver's personal preference data and so on.
IV.Benz anti-theft system
The Anti-theft system of Benz is a unique but comprehensive system for anti-theft via the infrared transmission technology and hopping
code technology, which are different from the RFID (Radio Frequency Identification). The system can protect the main components of
vehicle, such as immobilizing the engine, steering wheel, transmission, electronic gear, and central locking system. And the system
also contains the Remote Keyless Entry (RKE) via infrared and Radio frequency, which are base on the International hopping code
technology. Most of the key chips of the Benz are customized for the security.
Following are the components of the anti-theft system of Benz:
Before 2000, S series (W140)
RCL PC + Infrared remote control (PIC SCM+93C46)
DAS PC+ Infrared remote control(7930135 PIC+93C46)
Carry out the immobilizing engine by RFID.
And carry out the RKE by infrared remote control.
E series (W210) /C series (W202)
Before 1997, DAS PC+ Infrared remote control(7930135 PIC+93C46)
After 1997, EIS PC+ smart-key
After 2000, most of Benz anti-theft system is composed by EIS PC and intelligent remote control, which realizes the immobilizing
engine by infrared technology and RKE by infrared technology and Radio Frequency technology.
V. The Anti-Theft Capacity of the Mainstream Vehicles
As the saying goes, a key for a lock. In fact, until now the issue of mutual opening is still can not be avoided. As to the issue, our
national specific practice is that the auto manufactory should make sure that the key of the door locking system of each model
contains more than 1000 combinations, which means that mutual opening can not happen among the 1000 keys. Now the domestic
automobiles, especially mid and high-end cars are in accord with this standard, such as Volkswagen, Audi A6, Shanghai GM's Buick
Series, Guangzhou Honda's Accord series and so on.
Now the domestic cars on sale have their own computer anti-theft system, such as Audi A6, Passat B4, B5, Santana 2000 Age Superman,
Santana Century Rookie, Volkswagen Bora, The New Interior Series and Red Flag Series of Jetta; And the imported models include Skoda
Octavia, Import Honda, Volkswagen Beetle, Nissan Grace A32丄33, Mercedes-Benz, BMW, Cadillac, Volvo, Opel, Ford, Toyota, some models
of Jaguar.
Xiali The original model does not have any anti-theft system, so it is very easy to be stolen. The thieves just need screwdriver and
wire-like to provoking the button of the door, then hot-wire, the car is others'.
The anti-theft system of the Elysee and Picasso is the Electronic Electromagnetic Digital transceiver. Elysee and Picasso hold this
kind of anti-theft system which control the unlocking and locking of the anti-theft function automatically. Comparing with keyboard-
type anti-theft system, the owners need no additional operation.
Palio and Siena Series models adopt Fiatcode anti-theft system which consists of four parts-key, Key Sensor Unit, body computer and
Engine Computer. A copied key still can not pass the authorization of the body computer, and run the engine computer.
The Original Anti-Theft Devices of Bora use various sensors to transfer the pulse signal which is in line with the scheduled, thus to
reach the purpose of legal start. When the Automotive Internal Control Computer does not get the related information, it will default
to be illegal start. Then the control unit will order the Electronic Ignition System, Start System and Fuel Supply System stop
working, and cut off oil and power, so that cars could not be started.
PASSAT, POLO If the theft use illegal keys (including the keys matched the original keys), the system will lock the engine control
unit automatically, so that the engine cannot be started. Even the thieves connect the ignition switch, the result remains the same.
Zhonghua Every key contains a transponder. When the key is inserted into the ignition switch, the chip sends signal to the transceiver
loop, which is equivalent with encrypted password. If the anti-theft controller identifies that the code is incorrect, it would
immediately order the engine computer board to cut off fuel supply and ignition system, so that the engine can not be started.
Audi A6 Its Anti-Theft Security System stands for the world's most advanced intelligent anti-theft technology in the end of the 20th
century. This system includes engine electronic anti-theft starter, steering column tamper protection lock, electronic chip key with
anti-copying code, anti-theft alarm device, car door locks and baggage compartment tamper protection system, fuel tank cap, door and
luggage compartment, remote unlock device, etc.
Toyota Camry, Vios It is equipped with relatively advanced anti-theft system in the cars of new Camry 2.0/2.4 and VIOS GXL-I, GXL-s.
The anti-theft system of Camry 2.0/2.4 is not only meeting the general anti-theft functions, but also adopt advanced intelligent
encrypted keys on the anti-theft system. Even if the theft copy the keys or use the traditional split-line method, it will not be able
to start the vehicle. VIOS GXL-I/GXL-S models are equipped with the advanced TVSS Electronic Anti-Theft System (referred to as Toyota
Motor Safety Protection System).When using the keychain shaped remote controller to lock the car, the TVSS system is started up at the
same time. If you do not use the remote controller to open the door, the engine will not start and the alarm will ring at the same
time.
The 21-bit code self-adjustment of BMW. The entire vehicle system is equipped with smart anti-theft lock since 1995. This anti-theft
lock adopts the principle of radar transceiver, whose characteristics are equipped with helical antenna outside the ignition, and the
key hole is fitted with microchip. When the key rotates, the antenna turns into a kind of converter, and supplies power to the
microchip and show the password sequence. If they meet the priorities and in compliance with licensing status, could the door open.
recommend auto diagnostic tool: lexia 3, autoboss v30, mb star,benz star,vas 5054,renault clip,volvo dice,zed bull,digimaster 2
Tell us what you think about CKM 200 Car key master handset, share your opinion with other people. Please make sure that your review focus on CKM 200 Car key master handset. All the reviews are moderated and will be reviewed within two business days. Inappropriate reviews will not be posted.
Have any question or inquire for CKM 200 Car key master handset? Please contact Customer Service. (Our customer representative will get back shortly.)