Bypassing The Immobilizer Without A Key. How To Disable The ...

The immobilizer is a standard vehicle security system or part of an installed alternative anti-theft complex. Despite its positive qualities, it is often necessary to bypass this security block. This can be done by installing the factory model, or by making an immobilizer crawler with your own hands.

Description of RFID and VATS systems

The principle of operation of the anti-theft system is to block the possibility of starting the engine if certain conditions are not met. This may be necessary in the event of a key loss, incompatibility of the standard alarm and the optionally installed alarm for remote or automatic engine start. Factory immobilizer bypass devices not only serve their intended purpose, but also have a CAN bus to increase functionality. But is it possible and how to cheat the immobilizer without buying a factory crawler? This task is accomplished in several ways. The main condition is to preserve the original functions car alarms... Installing additional components or upgrading the system should not affect its functionality and reliability.

To choose the optimal scheme for a homemade crawler, you need to know the types of immobilizers. They differ in the principle of operation, on the basis of which methods of temporary or permanent shutdown are developed:

• RFID. Most often they are installed on cars of European and Asian production. Inside the ignition key is a transponder (transmitter) that, when activated, sends a signal to the system and activates it. The receiving part is located in the construction of the ignition lock;
• VAT. Typical for American-made models. There is a resistor inside the ignition key that has a certain resistance value. To turn on the engine, you must insert the key into the lock. If the resistance value differs from the normalized value, the engine will not start.

For each of the systems, it is necessary to develop a universal model of the immobilizer crawler, which is not difficult to do with your own hands. It is important to know the principles of design and selection of components.

RFID Immobilizer Bypass Methods

The presence of a standard immobilizer is the main reason for using additional means to bypass it. It cannot be deleted and therefore it is necessary to correctly think over the scheme of the future crawler.

During the drawing up of the scheme, the following conditions must be met:

• Flexible connectivity and no negative impact on performance car alarms;
• Adaptation for a specific immobilizer model. Its device is necessarily preliminarily studied;
• Saving the action of the standard keys for starting the ignition.

Standard immobilizer models can be installed in the ignition switch or on the engine start keys. It is there that the modernization of the system is carried out.

RFID Immobilizer Crawler Manufacturing

The most common way to bypass an immobilizer with a DIY device is to install an additional circuit on the ignition switch. In this case, the remote functions of the immobilizer will be preserved. Its action will be disabled when the key is inserted into the ignition lock.

To make a loop on a coil, it is necessary to prepare a thin case, which will subsequently be mounted on a lock. Most often it is made from cardboard. Then you should follow these steps.

1. Check the inside diameter of the crawler. It should be slightly larger than the core of the lock.
2. Scotch tape or electrical tape is installed on the outer part of the mandrel. Its sticky part is outside.
3. Then one coil of the automotive relay should be disassembled. The wire from there is wound onto the winding. The number of turns is usually 20-30 pcs.
4. The resulting structure is installed on top of the ignition lock.

A similar design must be made for the spare key. He subsequently hides in the car. The components are connected in the system as follows:

In some cases, this method is not applicable due to the small space for mounting the immobilizer crawler. Then you need to use alternative methods.

Upgrading RFID Immobilizer Bypass Scheme

To begin with, a relay is made, consisting of five contacts. It is necessary for the structure to work properly.

In the state shown, contact "30" is closed with "87A". When a voltage of 12 V is applied to the relay (contacts "86" and "85"), "30" will switch from "87A" to "87". Thus, the crawler will work according to the above technology.

But if it is impossible to install a loop on the ignition switch, the circuit should be upgraded.

In this case, there is no need to install the hinge on the lock body. The connection is made to the installed immobilizer. The assembly of such a structure is carried out according to the following scheme.

1. We cut one of the contacts of the standard antenna.
2. The voltage is supplied from the ignition switch "+", it is connected to the contact "86". Connection "-" is done from car alarms to contact "85".
3. Between the received connections we install a diode: the anode to "86" and the cathode to "85" contacts. This minimizes the likelihood of failure of the transistor in the signaling due to the effect of reverse voltage.
4. A wire from the antenna is soldered to the contact "87A". One of the ends of the crawler with a key is connected to the same place.
5. The second end of the crawler antenna is soldered to the "87" contact.
6. A wire from a standard antenna is attached to "30".

Thus, the feed "-" to car alarms occurs only during autorun.

When starting with a key, power is not supplied to the homemade relay. Hence - the work of the standard immobilizer is not disturbed.

In addition to the above-described crawler design principle, more complex ones can be applied.

They almost completely eliminate the likelihood of spontaneous engine shutdown when switching from auto start of the car to the ignition key.

Methods for bypassing the VAT immobilizer

It is somewhat easier to make a do-it-yourself immobilizer crawler for VAT-type models. To do this, you need to accurately measure the resistance value of the resistor built into the key. If the key has been lost for some reason, it is imperative to restore it.

On average, the value of the resistance of the resistor can be from 400 to 11800 ohms. After determining the exact result, you should select a similar component with the same parameter.

The essence of the system modernization is that the key resistance function will be built into the immobilizer. Before installation, the scheme of the standard car alarm is studied. To determine the exact location of the resistance installation, you can use the general connection diagram.

After simple manipulations during autostart of the car or turning on with the key, the immobilizer functions will be inactive. However, it is worth remembering that this technique can negatively affect the operation of the burglar alarm.

As an alternative, experts propose the installation of an additional immobilizer, which will make it possible to start remotely. At the same time, the device will block this function while the car is moving.

The main requirement for the construction of the crawler is to maintain the security functions of the alarm system. Therefore, the duplicate ignition key required to implement the RFID scheme should be carefully hidden in the vehicle interior. Improving the usability cannot adversely affect safety.

Immobilizers are devices that are installed in most modern cars. Their main task is considered to be reading the code. Thus, the device protects the system from hacking. However, when installing an alarm, drivers face problems starting the car.

In order to solve this problem, there are crawlers. There are not so many companies on the market that produce them. Most of the models are universal and fit many car brands. To understand the crawlers in more detail, you need to consider their device.

Simple crawler scheme

The standard immobilizer crawler circuit includes a CA series bus. It is connected in the device to the module. Controllers in devices are often used of an analog type. Also, the crawler circuit includes an antenna. In some cases, there are two of them. A wire is used to connect the device. Many modifications have connectors of various extensions for software installed. There is a TV port directly at the module. In terms of the protection system, the crawler models are quite different. Power supplies are most often provided of a built-in type.

How to do it yourself?

DIY is pretty simple. In this case, the bus is more expedient to use the CA series. The model requires a dual channel type module. Lineman controllers are suitable analog. However, some configurations use on-line. Further, to make a do-it-yourself immobilizer crawler, you will need an antenna for signal transmission.

To connect the device to the block, a wire is soldered. In some cases, an indication system is installed. This requires three LEDs. They must connect to the module. Relays for linemen are used by the RT series. The TV port, in turn, is selected with the A25 marking.

Modification with CA bus

The CA Bus Linear is suitable for most modern vehicles. Modules for devices of this type use two-channel. Directly controllers are more common analog. The minimum allowable temperature for models fluctuates around -30 degrees. These devices are not afraid of frost. The immobilizer crawler is connected via cables. As a rule, they are 1.5 meters long. Thus, the devices can be installed under the hood or in the car interior.

Some modifications have the ability to chain. A system of protection against high humidity is provided in almost all linemen. Nowadays, you can buy a model with a CA bus in a store for 3500 rubles.

PAT bus linemen

The PAT bus bypass is manufactured only with operational type controllers. Display systems are available for some models. Modules are standardly used of two-channel type. There are versions with two antennas on the market. The output in the presented configurations is usually three-pin. Software connectors are rarely installed.

TV ports are used by the A25 series. Manufacturers have models with two relays. It is also important to note that these crawlers are incompatible with all security systems. In this regard, modifications with CA tires look more preferable. The car owner can buy a device of this type at a price of 2500 rubles.

Crawler "Starline VR-02"

The specified Starline keyless immobilizer crawler is installed with a CA bus. In this case, the module is used in a two-channel type device. The model does not have an indication system. Installation of the immobilizer crawler occurs only through the alarm system. There are two antennas in this case. The RT series is used directly by the relay in the crawler. The power supply unit for the model is provided of a built-in type of 3 V. The maximum permissible temperature is 40 degrees. The crawler protection system is provided by the manufacturer. You can buy the specified device in a car shop for 3200 rubles.

Model "Starline VR-03"

The specified Starline keyless immobilizer crawler differs from the previous model by the presence of two relays. Also in the presented modification there is a connector for connection. Thus, it is possible to update the module. The antenna in the device is loop-type. The model is controlled by the car alarm system.

The maximum allowable temperature of the crawler is at around 40 degrees. In cold weather, the specified device can be used. The cable is included in the standard kit with a length of exactly 1.5 meters. Due to its compact size, this Starline keyless immobilizer crawler can be positioned discreetly in the vehicle interior. Today it costs no more than 3500 rubles in car dealerships.

Crawler "Starline VR-05"

The specified Starline keyless immobilizer crawler is suitable for most car brands. At the same time, compatibility with popular signaling systems is provided for. In this case, the bus is of the CA series, and the module is installed as a two-channel one. The model does not have an indication system. There is only one antenna. The controller is used in an analog type crawler. The chip code is read automatically. Separately, mention should be made of the high-quality protection system. You can buy a Starline immobilizer crawler for 3500 rubles.

Modification "Starline Pandora"

The specified keyless immobilizer crawler is made by the manufacturer with a PAT bus. In turn, the module is a two-channel type. A controller in the crawler's body is provided. There are also two antennas for signal reception. The wire is used quite long, so it is very convenient to connect the device to the alarm system. The specified lineman can be used to start the car remotely. Burglary protection is provided as standard. The relay in this case is of a built-in type.

There is no connector for the model on the case. It should also be noted that the presented lineman is devoid of an indication system. You can mount this model with zip ties or screws. In general, the case is compact and is not afraid of temperature changes. There is no possibility of updating the model in this case. The presented crawler has a three-pin output. The maximum allowable temperature of the device is 45 degrees. The equipment has a power supply unit for 3 V. In this case, there is an uninterrupted autorun mode. It is also important to note that this crawler has an impulse noise protection system installed. However, one should take into account the high cost of the product. The specified device on the market will cost about 4000 rubles.

Features of "Starline DI-3"

This crawler can be easily connected to any alarm system. First of all, it is important to note that it has a connector for updating the module. The tire in this case is of the PAT series. The controller is directly installed next to it, of a single-channel type. Problems with signal reception in the device are very rare. For this, the manufacturer has provided a loop antenna. The central crawler unit is installed next to the relay.

This model has a TV port of the A25 series. Burglary protection system installed. The device can be used to remotely start the vehicle. Separately, it should be noted that the power supply is provided for 3 V. The minimum permissible temperature of the device is at -35 degrees. The overload protection system works in automatic mode. You can buy this crawler in a car shop for 3500 rubles.

Parameters "Starline DI-4"

The specified keyless immobilizer lineman operates on a PAT series bus. The system supports many car brands and there is no need to update the module. The relay in this case is used as usual. The loop-type antenna is installed next to the bus as standard. The display system is not provided in the device. The specified lineman is mounted on screws. Some people install it in the car. However, it should be noted right away that the device is not afraid of temperature drops. It is ideal for remote starting a car. The TV port in the presented configuration is used for the A25 series.

The maximum allowable temperature is 40 degrees. Support for parallel connection of the device is provided. The model is directly controlled through the car's signaling system. The minimum allowable temperature of the lineman is -30 degrees. In this case, there is no protection system against impulse noise. It will not be possible to fix the presented device under the hood on the screeds. The specified model costs about 4 thousand rubles in car dealerships.

Crawler "Starline Sherkhan"

This keyless immobilizer lineman is based on the CA bus. The module is selected for it of a two-channel type. The relay is standard on the PT series and transmission problems are rare. The device has a temporary shutdown function.

The minimum allowable temperature of the lineman is -30 degrees. Also noteworthy is a good protection system. The impulse noise of the presented model is not terrible. Supports the specified crawler all known alarm systems. Antenna in a housing, loop type. The output is three-pin.

There is a TV port in the presented device. The crawler has an uninterrupted autorun mode. This model is usually attached under the hood to the car's alarm system. Most often, screeds are used for this. You can find this crawler in a car shop for a price of 3200 rubles.

Keyless immobilizer crawlers are designed to implement the engine autostart function on cars that have a standard immobilizer. Most modern cars on the Russian market are equipped with an immobilizer, which does not allow starting the engine remotely, because the lock is released only if there is an owner with a chip key in the cabin.

To solve this problem, if it is necessary to connect the autorun, the chip key is usually hidden inside the immobilizer crawler. At the moment of starting the engine, the crawler remotely, on command from the car alarm, reads the signal from the chip key and transmits it to the ignition switch (to the standard immobilizer), as a result of which the engine is allowed to start, because the immobilizer "thinks" that the owner is nearby. The main task of any lineman is to imitate the driver being inside the car when the remote start command is given.

The use of a chip key has several disadvantages:

• The need to make an additional chip key. For a number of modern cars (mainly VAG groups), it is not possible to make a chip key in a service center, so the only option is to contact an authorized dealer and order a new full-fledged key. The cost of such a service ranges from 8,000 to 25,000 rubles.
• To save on making a duplicate key, you can remove the chip from the existing second car key, but in this case you only have one key left, which is inconvenient if several people use the car; in addition, not every key can be disassembled.
• There is a theoretical possibility that the chip used will be found by the treat and used to steal the car.

Specifically to solve these problems, keyless immobilizer linemen Idatalink and Fortin. The implementation of autostart without a key allows car owners to save on installing additional. equipment and worry less about the safety of your car.

Another key advantage of keyless walkers, when installed in conjunction with Pandora or Pandect car alarms, is that when transmitting commands during operation, they use a digital bus, and signals are transmitted in encrypted form. Thus, a keyless immobilizer crawler cannot be used to steal a car by an intruder.

In addition, a number of Pandora and Pandect car alarms of the latest generations have built-in immobilizer crawler - in this case, the implementation of autostart becomes as simple as possible and does not cost you additional costs for crawlers! A list of compatible vehicles is available in the help section.

If you are at a loss in determining the required model of a keyless walker, then a list of compatible cars can be found on the website of the manufacturers iDataLink and Fortin; our managers will also be happy to help you choose a keyless lineman for a specific vehicle. Call us!

• central block
• loop antenna with connector and connection cable
• wire loop antenna
• installation instructions

Appointment

StarLine BP-03 module is designed to automatically turn off the standard RFID (Radio Frequency Identi? Cation) system when starting the engine remotely.

The RFID system is used in most modern vehicles. A transponder is built into the vehicle's standard ignition key, the code of which is interrogated when the engine is started with the key. When starting the engine remotely or automatically, this system will prevent the engine from starting. To solve this problem, the VR-03 module is intended, which automatically transmits the code of the standard transponder during remote engine start.

To operate the BP-03 module, a spare key with a transponder is required, which can be ordered from the supplier of this car brand.

Installation

The module is installed in the following order:

1. Open the housing of the central unit and insert the spare key with the transponder inside the flat antenna, securing it against moving.
2. Close the housing of the central unit.
3. Mount the unit in a protected, hard-to-reach location, such as behind the dashboard.
4. Connect the module wires according to the connection diagram.

Connection

Red wire - plus power supply, connect to a circuit in which there is a voltage of + 12V with the ignition on.

Black wire- negative control input (70mA). When a negative potential is applied to this input, the code of the standard transponder key is read. Connect the black wire to the output of the remote start system that provides frame potential while the engine is running.

Gray wires - depending on the configuration, connect to an external loop antenna installed around the ignition switch, or wind the antenna from several turns of wire over the standard RFID antenna.

Connection diagram 1

Attach the external loop antenna to the ignition lock cylinder and connect it to the connector at the end of the gray wires. It is important that the distance between the standard RFID antenna and the BP-03 module antenna is minimal.

Connection diagram 2

The circuit is recommended in cases where the installation of the loop antenna is difficult due to the design features of the car. Wrap the antenna with several turns of the gray wire over the original RFID antenna on the ignition cylinder.

It is important that the distance between the standard RFID antenna and the BP-03 module antenna is minimal.

Alternative wiring diagram for StarLine BP-03 immobilizer crawler. Recommended when installation of the loop antenna is difficult

Source www.ultrastar.ru

Today most of the cars are equipped with a standard immobilizer. This device allows you to prevent theft of a vehicle, even if the intruder managed to turn off the car alarm. In this case, the device works on a different principle than the "signaling". Immo remains invisible to the last and does not emit any signals to attract others or scare off the robber. The principle of operation of this device is that as soon as the hijacker inserts his key into the ignition lock, the engine will automatically turn off and nothing can be done with the car. There are also immobilizers that allow you to get under way at all, but as soon as the hijacker drives off a few hundred meters, all car systems are turned off and the robber will have no choice but to immediately leave the car and hide from the scene of the crime.

Of course, in theory, everything sounds great, in practice, immo often start to junk, delivering a lot of inconvenience to car owners. The most common problem is engine shutdown, even if the owner of the car is driving. This happens, as usual, at the most inconvenient moment and the driver has to use the emergency system of the engine plant or even call a tow truck.

The second common problem is the loss of the "native" key.

It is no wonder that along with modern anti-theft devices, special devices began to appear that allow you to bypass the immobilizer with your own hands. The most popular crawlers today are Starline devices, which can bypass various operating systems of standard devices.

What are the systems of work of a regular immo

All standard anti-theft devices work according to one of two systems, namely:

1. RFID (Radio Frequency Identification). Such systems consist in the fact that a special chip is located inside the key, which is associated with the immobilizer. If the device does not detect this key, the engine will not start. Systems of this type belong to European and Asian machines.

1. VATS (Vehicle Anti-Theft System). The system oriented to the "Americans" is distinguished by higher requirements (resistance resistance and other characteristics). Only when all the conditions are met, the control unit allows the engine to start.

The VATS system is considered the most difficult to circumvent, since technologies are constantly being improved in the production process of such devices. For example, encryption in such devices is no longer 40-bit, but 80-bit, as a result of which it will be extremely difficult to bypass such an immo.

Healthy! In order to turn off the standard immobilizer operating according to the VATS system, it is enough to determine the resistance value of the resistor. It usually fluctuates in the range of 400-11800 ohms. If you define it, then all that remains is to pick up a part with the same indicator.

Today, the most popular devices are equipped with just such units (VATS), for example, the Starline i95 immobilizer. But you should not despair, since the same company that produces the best immo, today, is also engaged in the manufacture of the highest quality crawlers.

It should be said right away that the younger brother of this crawler, Starline bp 02, is not universal and its equipment does not allow installing the device on any car. Later, the developers' shortcomings were taken into account and a more modern and "omnivorous" device was born - Starline bp 03.

This device is designed for standard RFID devices. Usually, such devices do not allow starting the engine remotely, which, in turn, is inconvenient for several reasons at once. First, you cannot start the car from home to warm it up in the winter cold. Secondly, remote engine start is considered more reliable, since a potential hijacker will not see you at that moment.

In order to solve these problems, it is enough to install the Starline immobilizer bypass module, which costs about 500-600 rubles.

This useful device consists of:

• central block;
• loop antenna with connector and cable for connection;
• antennas in the form of a wire loop;
• instructions.

Important! In order for the bp 03 standard immobilizer bypass module to work, a spare key with a transponder is required. You can order it at the dealership of your car brand.

To install bp 03, no special knowledge is required, it is enough to understand at least something in electronics and have arms growing from your shoulders.

How to connect the Starline crawler module

To connect the Starline immobilizer crawler, you need to open the case of the central control unit and insert a spare key with a chip (transponder) into it. In this case, the flat antenna is located inward. Be sure to secure the device so that it does not move. After that, close the central unit and install it in a hard-to-reach place (usually the device is installed behind the dashboard). After that, it is necessary to connect the Starline immobilizer bypass unit according to one of the schemes.

Wire marking:

• Red is a plus of power. It is connected to a + 12V circuit (the ignition, in this case, must be turned on).
• Black is a minus. Control input (70 mA). When a negative charge is applied to this input, the OEM key code is read. The black wire must be connected to the output of the remote start system.
• Gray (multiple wires). Depending on the features of the car, their connection diagram differs.

There are several connection schemes, again depending on the characteristics of the elements:

• According to the first scheme, an external loop antenna is attached to the ignition lock cylinder, after which it is connected to the connector at the end of the gray wiring. In this case, it is important to maintain a minimum distance between the standard RFID antenna and the antenna of the module itself.

• The second diagram is useful if you cannot install the loop antenna due to the design features of the vehicle. In this situation, the antenna is wound from several turns of the gray wire and placed over the standard antenna on the ignition cylinder. In this case, the distance should also be minimal.

If you want to connect the Starline keyless immobilizer lineman, then the circuit will be more complicated. In this case, a combined connection is made. The crawler connects to the data lines and simultaneously connects to the CAN bus (you can immediately connect to two, salon and motor). Such keyless methods are most often suitable for Nissan and Kia cars.

In custody

The Starline immobilizer bypass will allow you to solve the problems associated with the "imperfection" of the regular immo. The device costs a penny, but it brings a lot of joy to motorists. The main thing is to correctly adhere to the connection diagram, which you will find in the instructions for the device.