Cloning the Previously Unclonable with the Bianchi Decryptor

Dec. 3, 2009
The Philips Crypto 46 transponder chip is second generation transponder used by many of the world’s vehicle manufacturers

Transponder-based vehicle engine immobilizer systems were introduced for the 1996 model year to the North American market. Within a few years, both domestic and “world” manufacturers had introduced a number of vehicles equipped with transponder-based engine immobilizer systems.

Transponder-based engine immobilizer systems were developed to prevent vehicle theft, a worldwide problem. For an engine immobilizer equipped vehicle to start and be driven, not only must the ignition key be cut to the proper bittings, but also the key must be equipped with the proper transponder programmed to the vehicle itself. If someone attempted to start the engine with a properly cut key, but not a programmed transponder, the engine would not receive either fuel or electrical or both. In most instances, transponders have their own unique value. There are billions of different transponder values.

In addition, a transponder has to be in range of the antenna coil surrounding the ignition lock in order for the on-board computer to read the transponder’s value. The average read range of an antenna coil varies. However, the normal distance is approximately 1 to 1 ½ inches.

The first transponders were a fixed value type with no encryption or additional security features. Manufacturers include Megamos, Philips, Temic and Texas Instruments.

To program fixed value transponder equipped keys, each vehicle manufacturer has its own specific methods and programming device. It would be a few years until a multifunction programmer was introduced into the North American market.

Some manufacturers enabled on-board programming as an alternative to using a programming device. On-board programming can be for “lost (no) keys” and “adding keys”. Some manufacturers require two programmed transponder-equipped keys in order to add additional keys using on-board programming. Chrysler, Dodge, Eagle, Jeep and others require a P.I.N. in order to program transponder-equipped keys to their vehicles. Some vehicle manufacturers incorporate a time delay before transponder-equipped keys could be programmed. Each vehicle manufacturer has a limit for the number of programmed transponder- equipped key values, often 6 – 8 keys for the number of programmed transponder equipped key values. However, there is no limit to the number of keys that can operate the vehicle as long as they have the same value. This is when cloning becomes a good option.

The first clonable transponder-equipped key blanks were introduced in 1998. They were developed to clone some of the fixed value transponders including Honda and Mazda. Aftermarket key blank manufacturers introduced the original cloning machines.

To make additional keys, only one operating transponder-equipped key was necessary. To clone a fixed value transponder key, a cloning machine and compatible clonable transponder key blanks were all that were required. The vehicle did not have to be available. Over the next few years, just about every fixed value transponder equipped key could be cloned.

As these clonable fixed value transponder equipped key blanks were being introduced, vehicle manufacturers were developing encrypted transponders for not yet introduced vehicle models. These transponders would provide a higher level of technology and security. The first vehicles equipped with the engine immobilizer systems using the encrypted transponder were introduced for the 1999 (Chrysler) and 2000 (Ford) model years.

Important: Transponders and electronic keys are not backwards compatible. This means a first generation encrypted transponder cannot be used to operate a vehicle whose engine immobilizer system is designed for a fixed value transponder or vise versa. A second generation (Philips Crypto) transponder and electronic key cannot be used to operate a vehicle whose engine immobilizer system is designed for a first generation transponder or a fixed value transponder. In addition, transponders are application (manufacturer model and year) specific and are not interchangeable. A Texas Instrument fixed value transponder is not interchangeable with another manufacturer’s fixed value transponder.

Starting in 2006, the first generation encrypted (4C) transponder equipped keys could be cloned using “electronic keys”. An electronic or circuit board equipped key blank is designed to mimic the operation of a transponder. These electronic keys are equipped with a battery. The battery provides the power to transmit the cloned transponder’s signal in order to be received and read by the vehicle. In 2008, the first generation encrypted (4C) clonable transponders were introduced.

The first generation encrypted transponders are cloned using more advanced equipment. Some of the early cloning machines could not be upgraded to clone encrypted transponders. Others such as the Bianchi Repli-Code 7 (TX) and others did not require hardware upgrades; their software or firmware could be upgraded. Some required both a software or firmware and hardware upgrade.

To clone the first generation encrypted transponders required either texting a code to a super computer or additional time to decode these encrypted values to clone comparable values into the electronic key or transponder equipped key.

To clone a first level encrypted transponder equipped key, a compatible cloning machine and a compatible clonable transponder or electronic key blank are required. The vehicle is not required in order to clone a first level encrypted transponder equipped key.

Speed ahead to August 2009. Bianchi USA is the first key blank and cloning equipment producer to make product and equipment available in order to clone second generation encrypted (46) transponders. This transponder chip is also known as the 4D. The Philips Crypto 46 transponder chip is second generation transponder used by many of the world’s vehicle manufacturers. This transponder is commonly known as the General Motors Circle Plus (C+) chip, the Acura and Honda “V” chip and the Chrysler (STRATTEC) 692352 “beige” key blank chip.

The Philips Crypto (46) transponder value is partially contained in the chip itself and also partially contained in the vehicle’s on-board computer system. This means that no longer having just an operating transponder-equipped key is sufficient to produce a clone key. The vehicle and the operating transponder-equipped key are required for cloning the Philips Crypto transponder.

To clone the Philips 46 transponder chip, Bianchi developed the BTK60 battery-less electronic chip in conjunction with a firmware upgrade for the Repli-Code 7 (TX) and the patent pending Decryptor. The Bianchi Decryptor is designed to reconvert the encrypted data from the Philips 4D transponder chip and the vehicle on-board computer. The Decryptor then reads and interprets the information from the Philips chip and from the vehicle. The information is converted into usable data and written into the BTK60 electronic chip in order to create a clone. The display on the Repli-Code 7 indicates the electronic chip as the TK60. The Repli-Code 7 read-out can be set as English, French, German or Italian.

Cloning a 46 chip requires cutting the proper blade to the correct depths of cut, following the instructions by pressing the “WRITE” and “READ” button and operating the vehicle’s ignition lock.

The Philips 46 transponder, according to Bianchi, has more than 350 vehicle applications including Land Rover, Mitsubishi, and Nissan.

To accommodate these vehicle years, makes and models using the Philips Crypto transponder, Bianchi has 14 horseshoe blades that are compatible with the BTK60 electronic chip. The horseshoe portion of the blade attached to the head as well as protects it.

An advantage of the Bianchi BTK60 electronic cloning system is that the electronics are built into an installable/removable head. One BTK60 can be used with any of the above listed blades. There is no need to stock complete key blanks.

To clone a Philips Crypto transponder, a supplied serial cable and a power transfer cable connect the Decryptor to the Repli-Code 7. Once the firmware for the Repli-Code has been upgraded, there is no additional modification necessary to clone Philips Crypto transponder-equipped keys. A single 110 VAC outlet is necessary to power the cloning equipment.

The procedure begins with reading the customer’s transponder key making sure it is equipped with a Philips Crypto transponder. Then the BTK60 head is placed onto the Repli-Code 7 and data is written to the electronic chip.

The remaining portion of the data must be obtained from the vehicle. To do this the blade must be cut in order to operate the ignition lock of the vehicle.

The electronic head is placed onto the blade. DO NOT SNAP THEM TOGETHER AT THIS TIME.

Insert the horseshoe blade with the BTK60 electronic chip into the ignition lock. Turn the key to the “On” position for five seconds. I recommend using a watch or cell phone that indicates seconds or a stopwatch. Then remove the key from the ignition for two seconds. Repeat the procedure two more times.

Remove the BTK60 and blade from the vehicle and insert into the Repli-Code 7 and press “READ”. The Decryptor will read the data obtained from the vehicle’s on-board computer.

These steps are necessary to obtain all of the necessary data from the customer’s key and the BTK60 electronic chip in order to create a clone. When completed, the LCD display will indicate writing successful. Once the key has been tested, snap the head onto the blade completing the key.

To clone an additional key, insert another BTK60 head and press “WRITE.” The second head is cloned. Test the clone key by starting the engine.

Note: When using a Bianchi BTK60 Philips Crypto electronic key as the original key in order to create a clone, the vehicle is not needed. The BTK60 electronic chip contains all of the necessary information to make a BTK60 clone.

For compatibility and ease of use, all of the Bianchi electronic heads are of the same shape and size. This includes the TI fixed code chip (BTK24), TI encrypted code chip (BTK40) and the Philips Crypto (2nd generation) chips (BTK60). This means over time, as vehicle manufacturers increase the level of security, the newer heads will be able to be installed onto replacement blades that were previously used with earlier electronic heads.

All of the Bianchi electronic heads can be cloned more than once. They can be cloned again to the same vehicle or cloned to a different compatible vehicle.

For locksmiths who own the Jet Hardware Smart Clone or the STRATTEC Quick-Code, the Decryptor is compatible. A Philips Crypto 4D transponder chip can also be cloned using the Jet Hardware Smart Clone or the STRATTEC Quick-Code by purchasing a Decryptor and upgrading the cloner’s firmware.

For more information, contact your local locksmith distributor or Bianchi USA at 800-891-2118 or www. bianchi1770usa.com.

Related

Keys/Tools

Keyline USA

Nov. 27, 2007