Reverse engineering the Laotie Ti30 scooter LCD display - part 3 - Encryption Broken!

 

 

In the previous post I had the chance of discovering and documenting most of what there is to learn about the communication between the LCD unit and the master ESC (speed controller) that drives the e-Scooter rear motor.

Reverse engineering the Laotie Ti30 scooter LCD display - part 2

Most e-Scooters and other Electric Vehicles have some form of Electronic Speed Controller (ESC) which is responsible for delivering a power signal that will spin motors at the desired speed. The most common type of motors today are of the BLDC type (Brushless DC motors), which are typically driven by a 3-phase current.

Reverse engineering the Laotie Ti30 scooter LCD display

One thing about these types of electric vehicles is that there is very limited care for normalisation, when it comes to allow different components to interoperate. Especially in respect to the digital communication between the parts of the system, one cannot expect any baseline currently.

My experience with a grown man Electric Scooter - the Chinese 5600 Watt Laotie Ti30 - Part 3

The Laotie Ti30 (and other similar chinese scooters) comes with a basic alarm device that is capable of locking the scooter via a remote control. These alarm boxes are usually dirt cheap and can be bought separately for 5 € on Aliexpress or similar seller.

My experience with a grown man Electric Scooter - the Chinese 5600 Watt Laotie Ti30 - Part 2

Moving along with the range of improvements that this scooter requires - of which some are practically essential, the parts I needed for doing a few more improvements have conveniently arrived.

My experience with a grown man Electric Scooter - the Chinese 5600 Watt Laotie Ti30 - Part 1

For a couple of years I have been playing around with the popular Xiaomi M365 which I bought back then. In spite of a few nitpicks it is an okay scooter, and good value for money for those looking for a small vehicle that can cover moderate distances (about 20 km per charge) while still being carriable (it only weights about 12.5 Kg).