0
\$\begingroup\$

I have the Sonoff RF which is a mains relay switch which is activated by either WiFi or a 433MHz remote. The particular Sonoff RF's I have arrived from China on 21/9/2017. I flashed these Sonoff RF's last week with the lastest tasmota firmware. The firmware version I flashed was sonoff.bin (there are many other tasmota firmwares available).

I understand that Sonoff RF firmware for the WiFi card (which is I beleive ESP8266-01 based), and the firmware for the 433MHz card are different and seperate. This makes sense becasue a Sonoff vesion is sold without the 433MHz card. Sold without the 433MHz card it is called the Sonoff Basic.

So by flashing new firmware to the ESP8266-01 card the 433MHz card is unaffected.

This I have confirmed through use of the 433MHz card since flashing the tasmota firmware: the 433MHz card behaves in the same way as it did with the original OEM Itead firmware. In any case the author of the tasmota firmware states that his firmware has no impact on the 433 MHz card.

I am interested in the 433MHz card becasue I beleive it could have a better firmware.

Currently a 433MHz remote paired with the card can only toggle the relay switch. For more useful functionality the remote needs to be able to set the switch to OFF or ON as well as having TOGGLE functionallity.

As part of my initial investigations of this card, I am trying to identify the chips on the card. I've used Google quite extensively with no luck in regard to one of the chips, so am wandering if anyone on here has some working knowledge of such a chip arrangement.

Below is a picture of what I call the front of the card

Front of card showing The SYN470R 1631 chip

Close up of the SYN470R 1631 chip

The picture above shows the SYN470R 1631 chip. The data sheet is here http://img.ozdisan.com/ETicaret_Dosya/453934_1928180.pdf

Below is a picture of what I call the back of the card

Shows an unidentified 16 pin SMD chip

Unidentified 16 pin SMD chip

The above photo shows the can with 6.7458 stamped on.

I am unable to identify the 16 pin SMD chip, with 4 pins per side. As far as my eyes can see the chip text reads BB1 0 F 2 G A GOGA4 1620 A, but I may be wrong and your eyes may be better than mine. I've googled various possible permutations of this with no success. May be I missed something obvious. Eg I tried 8810 instead of what looks to me like BB10, etc.

Do you know what this chip is?

Perhaps you can shed some light on how this 433MHz board can be programmed for ON / OFF as well as Toggle switching functionallity. If so please post up.

PHOTOS ADDED BELOW IN ATTEMPT TO CLARIFY CHIP IDENTITY

Below photo shows side view. Seems to show 20-pin package

side view seems to show 20-pin package

Below photo shows 5 tracks coming in from left. 4 lower down and one appears to go to the top corner pad. QFN20 has corner pads. So this potentially accords well with the package being a QFN20.

Top view lookng at tracks going in to the chip

Below is from pg 48 on datasheet linked in the answer. Shows 4 pins at edge of chip & two corner pads.

From the datasheet linked in the answer

\$\endgroup\$
9
  • \$\begingroup\$ Most likely the actual remote functions are commanded from or to the main processor, not the radio. What you really need to do is investigate the communication channel in between, with a scope and/or logic analyzer. Also keep in mind that there's a lot of material out there on reversing simple remote commands, and you don't necessarily need anything like the original radio to work with most OOK systems. \$\endgroup\$ Commented Jun 13, 2019 at 15:34
  • \$\begingroup\$ You really don't want to use a bloody 8051 in the year 2019. Everyone but Silabs stopped using these well over 20 years ago. If you wondered what could possibly be crappier than Arduino/AVR, this is the answer. Never parts from Silabs like EFM32 have radio on-chip, use those instead. \$\endgroup\$ Commented Jun 17, 2019 at 14:18
  • \$\begingroup\$ @Lundin which is the 8051? What are you recommending; I'm no too sure from you're comment. thanks \$\endgroup\$ Commented Jun 18, 2019 at 19:51
  • \$\begingroup\$ If you don't know what an 8051 is, you should probably back away from this project right now. What I'm recommending instead was quite clear in my previous comment. \$\endgroup\$ Commented Jun 19, 2019 at 6:25
  • \$\begingroup\$ Hi @Lundin, I think this is the chip you mean en.wikipedia.org/wiki/Intel_MCS-51 ? But I can't be certian as I am not a mind reader & it's not obvious to me how "8051" is relevant. Can you please explain. I'd be grateful. I've many years experience - broadly - in micro electronics but haven't come across the 8051. Asking for your understanding : it's a vast field. \$\endgroup\$ Commented Jun 20, 2019 at 8:01

1 Answer 1

Reset to default
2
\$\begingroup\$

The QFN Package is the BB10-F2G microcontroller from silicon labs. The other chip, as you've identified, is just an ASK receiver. The microcontroller is decoding the output into commands. It doesn't really seem like there's anything else on the card. The crystal is there to allow accurate timing for decoding the radio signal.

You can probably reprogram this chip using the Simplicity Studio tool.

\$\endgroup\$
6
  • \$\begingroup\$ Something does not quite add up when looking at the data sheet that you linked. The BB10-F2G part would be a 20-pin QFN package as per the Product Selection Guide. However the part in the OPs photo really looks more like a 16-pin QFN package. SiLabs offering of this part with 16 pins is a SOIC16. Could it be a clone chip or a special order device in non-standard package? \$\endgroup\$ Commented Jun 13, 2019 at 10:05
  • \$\begingroup\$ I though the chip had pins sticking out of it. Looking more closely at the photo, now I'm not sure. Are they pins, are they not? Is it a solder bump chip with 20 pins & some of them are not used ... Here is a possible QFN20 uk.rs-online.com/web/cp/1690180,8656263/?sra=p \$\endgroup\$ Commented Jun 13, 2019 at 13:19
  • \$\begingroup\$ According to the datasheet link @BeB00 has posted BB1=Busy Bee 1 Family, 0=Family Feature Set, F=Memory type is Flash, 2=Flash memory size is 2KB, G=Temperature Grade is -40 to +85, A=Chip Revision. Dataseet document does not seem to explain GOGA4. 1620 A is a date of manufacture & revision code. 16 is year 2016. 20 is week 20. A is the device revision \$\endgroup\$ Commented Jun 13, 2019 at 16:59
  • \$\begingroup\$ The meaning of GOGA4 or is it QOGA4 (I can't quite see it) remains a mystery to me. \$\endgroup\$ Commented Jun 13, 2019 at 17:04
  • \$\begingroup\$ That's just some internal batch tracing stuff \$\endgroup\$ Commented Jun 13, 2019 at 19:25

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.