Parsing Watch 2 Pay or "time is money"
Probably, the phrase “time is money” more than ever briefly and accurately describes this device. Although this watch does not know how to view sms, but it can pay for your favorite cookies in the store. So, we will talk about the clock for contactless payment with the power of technology PayPass .
Under the cut analysis of hours, the pros and cons, "but what if you do ...", a little constructive criticism, and of course a lot of pictures.
Recently, I became the proud owner of a Watch 2 Pay watch made by a large Russian bank. Of course, the name of the bank, I will not tell you, otherwise it will be advertising. This watch differs from the original only in the presence of the bank's corporate emblem and engraving on the side metal surface. The rest is a completely original device. I will not argue about tastes and just briefly say that the design of watches is designed in a strict style and looks decent and high quality. The natural rubber strap is very pleasant to the touch, it has a standard watch strap, so it can be easily replaced with any other.
')
The Austrian company LAKS has developed this miracle device (well, of course, it is going to be in China). This idea is patented and therefore it is unlikely that you will see a watch from other manufacturers with this functionality in the near future. Soon we will return to this patent.
On the left side of the side panel there is a lid that covers the card insertion compartment.
The card is made in the form factor of a regular SIM card. This is MasterCard Standart which is not serviced at an ATM. But there is a PIN code, and in the kit is attached a second standard MasterCard card with a chip and a magnetic stripe, tied to a common account, for depositing and withdrawing money.
There are no difficulties with access to the internals of this device - four small screws holding the back cover of the watch open access to a completely standard card reader.
From 10 contacts (8 contacts for reading data from a card and 2 determining the presence / absence of a card) only 8 for reading data are decoupled. But the surprise was hiding on the back of the board.
On the printed circuit board along the two main round contacts for the antenna (red) there are two other contact pads (green and blue), although there are no other microcircuits in the case of the clock anymore. Obviously, we see a groundwork for the future. Also characteristic is the location of these sites - to the left and to the right of the watch adjustment head. In the main case inside, under the "green" contact pad, a recess of square shape is retracted, and under the "blue" - a hole in the plastic case up to the outer metal insert.
Following common sense, we can assume the connection of a microcontroller for additional functions. It's time to look at the patent. And indeed in paragraph 9 of the patent formula, we see the possibility of connecting external devices via USB. The second hole prepared apparently intended for the LED indicator. Correlating the patent and what was seen as a result of opening the device, we can assume a large reserve for the future, since the internal space is practically not used and it is even possible to install additional microcontrollers or even a battery inside.
The main thing in parsing is not to lose the two springs located on the contacts of the external antenna (marked in red).
Under the cut analysis of hours, the pros and cons, "but what if you do ...", a little constructive criticism, and of course a lot of pictures.
Briefly about the device
Recently, I became the proud owner of a Watch 2 Pay watch made by a large Russian bank. Of course, the name of the bank, I will not tell you, otherwise it will be advertising. This watch differs from the original only in the presence of the bank's corporate emblem and engraving on the side metal surface. The rest is a completely original device. I will not argue about tastes and just briefly say that the design of watches is designed in a strict style and looks decent and high quality. The natural rubber strap is very pleasant to the touch, it has a standard watch strap, so it can be easily replaced with any other.
')
The Austrian company LAKS has developed this miracle device (well, of course, it is going to be in China). This idea is patented and therefore it is unlikely that you will see a watch from other manufacturers with this functionality in the near future. Soon we will return to this patent.
On the left side of the side panel there is a lid that covers the card insertion compartment.
The card is made in the form factor of a regular SIM card. This is MasterCard Standart which is not serviced at an ATM. But there is a PIN code, and in the kit is attached a second standard MasterCard card with a chip and a magnetic stripe, tied to a common account, for depositing and withdrawing money.
Parsing
There are no difficulties with access to the internals of this device - four small screws holding the back cover of the watch open access to a completely standard card reader.
From 10 contacts (8 contacts for reading data from a card and 2 determining the presence / absence of a card) only 8 for reading data are decoupled. But the surprise was hiding on the back of the board.
On the printed circuit board along the two main round contacts for the antenna (red) there are two other contact pads (green and blue), although there are no other microcircuits in the case of the clock anymore. Obviously, we see a groundwork for the future. Also characteristic is the location of these sites - to the left and to the right of the watch adjustment head. In the main case inside, under the "green" contact pad, a recess of square shape is retracted, and under the "blue" - a hole in the plastic case up to the outer metal insert.
Following common sense, we can assume the connection of a microcontroller for additional functions. It's time to look at the patent. And indeed in paragraph 9 of the patent formula, we see the possibility of connecting external devices via USB. The second hole prepared apparently intended for the LED indicator. Correlating the patent and what was seen as a result of opening the device, we can assume a large reserve for the future, since the internal space is practically not used and it is even possible to install additional microcontrollers or even a battery inside.
The main thing in parsing is not to lose the two springs located on the contacts of the external antenna (marked in red).
Springs
Micro USB next to them seems just awesome.
Criticism
- The PayPass technology itself is theoretically vulnerable and it is possible to steal data from a card without contact, imperceptible to you, and as a result the card is cloned. From this, it would seem, a simple and obvious precaution is to make a small toggle switch / button to turn on the external antenna in the clock (when you need to touch and pay, turn on when there is no need to keep the clock passive). But the manufacturer left a lot of free space and did not do it.
- When conducting an operation up to 1000 rubles (in some terminals), there is no authorization in the payment system and a PIN code request. Those. the purchase is literally on parole (by analogy with Imprint for classic cards). And if such a watch is stolen from you, then the thief will be able to pay for purchases in stores (no more than 1000 rubles at a time) before the expiry of the card without the threat of being caught.
- Since the card is not serviced at an ATM, you cannot change the PIN code of such a card in a standard way.
"What if you do ..."
- Since the chip from the card is standard, you can insert it into the ATM in order to change the pin code. This will require a piece of plastic of a suitable shape and some glue (the card from which the flash drive was “broken out” is available). The truth is, in the event of an emergency situation at an ATM, then it will take a long time to explain to the bank employees why it was done.
- With the help of the NFC TagInfo program and an NFC-enabled phone, some information was read. It most likely does not represent useful information, but it gives an opportunity to think about what kind of information the map stores.
Also, the user kraleksandr suggested an interesting application for reading data from such cards (including data on the latest transactions). This card does not provide storage of recent transactions.Screenshots
- Of course, I myself want to pick up a drill with a drill, a soldering iron and drill a small hole under the button to open the antenna circuit. But this is probably the next time.
Source: https://habr.com/ru/post/375479/
All Articles