Skip to main content
Links assigned directly to the appropriate text, some fixes.
Source Link

Identifying a toner chip and it'sits communication protocol to re-program it

I need help identifying a chip and how to reset it from a new brotherBrother's toner cartridge TN227 and TN223. This comes from the new Brother HL-L3230CDW laser printer.

Here'sHere are some pictures of the starter TN223 chip that my printer came with:

I then opened the printer to determine which pins go to what. I first used a multi-meter to determine that pads 2,3,4 are shorted to each other on each chip for each color C,Y Y,M M,BK BK. I then found pad 2 was shorted to the printer frame, so I assumed that was ground. Then I looked at the wiring color. It's matched as the following:

  • 1: purple, 2: white, 3: black, 4: red

sample data assuming pad 2 is ground   

zoomed in on start of data

I ran the test twice and attached the sigrokSigrok file results here: https://drive.google.com/file/d/1LRBKmhKruzNNKLFl359ab0C8VVCKJCxc/view?usp=sharinghere   and https://drive.google.com/file/d/1aRRibu_b7KzSSxnMR3Ef6y35k-U_M7-N/view?usp=sharinghere.

I still don't know if the pad 2 is GND since pad 3 is black which usually indicated ground, however as previously stated pad 2 is shorted to the frame of the printer. I then attempted to connect pad 3 as GND to my logic analyzer and connect pad 2 as not ground, however something strange occurred, and the printer no longer accepted the cartridge I was messing around with. Going back to pad 2 as ground, and it started working again. I'm now assuming pad 2 is ground.

When investigating the data further, there seems to be a little difference between two runs. I simply turned the printer on and recorded data then immediately turned it off then back on to get my second run, however the data seemed to change slightly. To ensure it wasn't due to sampling error, I increased the sampling to 20MHz20 MHz, which includes about 20 samples per clock cycle which should be sufficient to measure the wave forms consistently. When measuring the clock rate, I found it to be between 432-457Khz.

One idea I currently have is to analyze the data and find the ASCII text "brother" since each chip is required to have a manufacturing name and because the cartridges I have are from brother. More info can be found in brothers white paper found here: http://update.brother.co.jp/pbj/pdf/en/Brother_White_Paper_Genuine_Authentication_Inkjet_EN.pdfBrothers white paper.

Identifying a toner chip and it's communication protocol to re-program it

I need help identifying a chip and how to reset it from a new brother toner cartridge TN227 and TN223. This comes from the new Brother HL-L3230CDW laser printer.

Here's some pictures of the starter TN223 chip that my printer came with

I then opened the printer to determine which pins go to what. I first used a multi-meter to determine that pads 2,3,4 are shorted to each other on each chip for each color C,Y,M,BK. I then found pad 2 was shorted to the printer frame, so I assumed that was ground. Then I looked at the wiring color. It's matched as following:

  • 1: purple 2: white 3: black 4: red

sample data assuming pad 2 is ground  zoomed in on start of data

I ran the test twice and attached the sigrok file results here: https://drive.google.com/file/d/1LRBKmhKruzNNKLFl359ab0C8VVCKJCxc/view?usp=sharing  https://drive.google.com/file/d/1aRRibu_b7KzSSxnMR3Ef6y35k-U_M7-N/view?usp=sharing

I still don't know if the pad 2 is GND since pad 3 is black which usually indicated ground, however as previously stated pad 2 is shorted to the frame of the printer. I then attempted to connect pad 3 as GND to my logic analyzer and connect pad 2 as not ground, however something strange occurred, and the printer no longer accepted the cartridge I was messing around with. Going back to pad 2 as ground and it started working again. I'm now assuming pad 2 is ground.

When investigating the data further, there seems to be a little difference between two runs. I simply turned the printer on and recorded data then immediately turned it off then back on to get my second run, however the data seemed to change slightly. To ensure it wasn't due to sampling error, I increased the sampling to 20MHz which includes about 20 samples per clock cycle which should be sufficient to measure the wave forms consistently. When measuring the clock rate, I found it to be between 432-457Khz.

One idea I currently have is to analyze the data and find the ASCII text "brother" since each chip is required to have a manufacturing name and because the cartridges I have are from brother. More info can be found in brothers white paper found here: http://update.brother.co.jp/pbj/pdf/en/Brother_White_Paper_Genuine_Authentication_Inkjet_EN.pdf

Identifying a toner chip and its communication protocol to re-program it

I need help identifying a chip and how to reset it from a new Brother's toner cartridge TN227 and TN223. This comes from the new Brother HL-L3230CDW laser printer.

Here are some pictures of the starter TN223 chip that my printer came with:

I then opened the printer to determine which pins go to what. I first used a multi-meter to determine that pads 2,3,4 are shorted to each other on each chip for each color C, Y, M, BK. I then found pad 2 was shorted to the printer frame, so I assumed that was ground. Then I looked at the wiring color. It's matched as the following:

  • 1: purple, 2: white, 3: black, 4: red

sample data assuming pad 2 is ground 

zoomed in on start of data

I ran the test twice and attached the Sigrok file results here and here.

I still don't know if the pad 2 is GND since pad 3 is black which usually indicated ground, however as previously stated pad 2 is shorted to the frame of the printer. I then attempted to connect pad 3 as GND to my logic analyzer and connect pad 2 as not ground, however something strange occurred, and the printer no longer accepted the cartridge I was messing around with. Going back to pad 2 as ground, and it started working again. I'm now assuming pad 2 is ground.

When investigating the data further, there seems to be a little difference between two runs. I simply turned the printer on and recorded data then immediately turned it off then back on to get my second run, however the data seemed to change slightly. To ensure it wasn't due to sampling error, I increased the sampling to 20 MHz, which includes about 20 samples per clock cycle which should be sufficient to measure the wave forms consistently. When measuring the clock rate, I found it to be between 432-457Khz.

One idea I currently have is to analyze the data and find the ASCII text "brother" since each chip is required to have a manufacturing name and because the cartridges I have are from brother. More info can be found in Brothers white paper.

Question Protected by CommunityBot
Bumped by Community user
added 83 characters in body
Source Link
benjinne
  • 101
  • 1
  • 6

sample data assuming pad 2 is ground zoomed in on start of data

sample data assuming pad 2 is ground

sample data assuming pad 2 is ground zoomed in on start of data

Tweeted twitter.com/StackReverseEng/status/1103762327898386435
added 4 characters in body
Source Link
benjinne
  • 101
  • 1
  • 6

I then connected a logic analyzer to the printer with the chip attached to see if I could figure out what protocol it was using. Assuming white is GND, Here's a sample of the Sigrok Pulseview received:   

sample data assuming pad 2 is ground I

I ran the test twice and attached the sigrok file results here: https://drive.google.com/file/d/1LRBKmhKruzNNKLFl359ab0C8VVCKJCxc/view?usp=sharing https://drive.google.com/file/d/1aRRibu_b7KzSSxnMR3Ef6y35k-U_M7-N/view?usp=sharing

I then connected a logic analyzer to the printer with the chip attached to see if I could figure out what protocol it was using. Assuming white is GND, Here's a sample of the Sigrok Pulseview received:  sample data assuming pad 2 is ground I ran the test twice and attached the sigrok file results here: https://drive.google.com/file/d/1LRBKmhKruzNNKLFl359ab0C8VVCKJCxc/view?usp=sharing https://drive.google.com/file/d/1aRRibu_b7KzSSxnMR3Ef6y35k-U_M7-N/view?usp=sharing

I then connected a logic analyzer to the printer with the chip attached to see if I could figure out what protocol it was using. Assuming white is GND, Here's a sample of the Sigrok Pulseview received: 

sample data assuming pad 2 is ground

I ran the test twice and attached the sigrok file results here: https://drive.google.com/file/d/1LRBKmhKruzNNKLFl359ab0C8VVCKJCxc/view?usp=sharing https://drive.google.com/file/d/1aRRibu_b7KzSSxnMR3Ef6y35k-U_M7-N/view?usp=sharing

Source Link
benjinne
  • 101
  • 1
  • 6
Loading