limaiem wrote: ↑
Wed Aug 03, 2022 8:02 am
I picked up an abandoned battery in the street.
It is a Gen4 battery. It is was not in a good state (the aluminum case is broken ...). As expected, it is locked as stated by other members.
I managed to open it took me 3 hours ...
it seems that the cells are in good stat (48v measured).
to summaries there are 3 options
1) bypass the BMS for the loading with its associated risks -> easy to implement solution
2) change the BMS, it is not that easy but feasible
3) crack the code to unlock it from the CAN BUS
now after analyzing the BMS and its components I am thinking about 2 other options
4) identifying the component that physically cuts current and bypass it physically (put the right logic on its ports) - need sometime to do it ...
5) reprogramming the STM controller. I am used to program the STM ships and I have identified the communication ports of the ship. The idea again is to send the right logic to unlock the component that physically cuts current and take the measurements information from the measurement ship and reuse the CAN BUS to send back the battery data ... to do this I will need to scan the I2C chips and find the libs to them (if they are open source ...).
have someone tested options 4 and 5 ? I saw a video if someone applying the option 4 on another BMS locked battery.
No I am starting by soldering the communication ports of the STM to start sniffing some data from it if there is some ...
Hi, I hope it works for you, I'm curious. Let us know the results if you want.