Electric Scooter Forum for Scooter Enthusiasts, Scooter Chargers, and Scooter Mechanics.

Covers electric scooter models whether shared or for consumers.
By Motoviggo
Posts
#12490
I got my hands on a decomissioned Tier scooter. Its an Electisan/Okai ES200-B, essentially the same as a Bird Zero to my understanding. Theres a spec sheet here: https://www.tier.app/wp-content/uploads ... y_Decl.pdf

I have taken it apart to figure out the inner workings, and this is what I know so far:

It activates via a GSM-module in the front of the stem. The GSM module also provides tracking, and can be disabled in less than 5 minutes by removing it and disconnecting the small battery found inside. You scan the qr-code with the app, which sends a signal to the scooter that then activates for use.

So to convert this scooter, its should be as simple as bypassing the GSM-board, no? Connecting the right wires and then installing a switch so that I can manually turn it on/off seems like the logical approach. Does anyone have any experience with these scooters?

I will document my findings in this thread as I go.

By Motoviggo
Posts
#12491
The GSM-board seems to have what looks like a ST-link interface. Im still waiting for my adapter in the mail, so I cant do anything with it yet. But since I want to bypass the entire GSM-board I hooefully wont have to anyways.
To view images REGISTER or LOGIN for full access.


Its accessible as soon as you remove the GSM-box, so I imagine that it is used to activate the scooter from the factory or similar.

I will post pictures of the GSM-board tomorrow, I forgot to take them today.


By trane8
Posts
#12901
Any news on your project?

Is it possible to spoof the activation signal from the GPS box to the controller somehow?
Would make an easy solution.

By Motoviggo
Posts
#13082
No news yet, I'm afraid. I have been in an unrelated traffic accident and have been busy dealing with that. I'm also waiting for my ST-Link interface to show up in the mail.
Is it possible to spoof the activation signal from the GPS box to the controller somehow?
Would make an easy solution.
This will be my approach. I'm hoping that I can read the firmware off of the IOT board using the ST-Link, and then modify it. I have no idea how the firmware works, but I'm gonna explore it as an option.

By Motoviggo
Posts
#13083
ruediger_one wrote:
Tue Jul 09, 2019 8:25 am
Any news?

I found this one:
https://www.tier.app/wp-content/uploads ... CC%88t.pdf
And this one:
https://cdn.shopify.com/s/files/1/1009/ ... _Sheet.pdf
"Electisan F350 (Internal Name: ES200)"

So probably you are right and the model is based on Electisan F350.
Great find! I haven't seen the German manual for the ES200D yet. My German isn't the best but I should be able to decipher it

By Kiki626
Posts
#13115
Motoviggo wrote:
Mon Jul 22, 2019 6:02 am
No news yet, I'm afraid. I have been in an unrelated traffic accident and have been busy dealing with that. I'm also waiting for my ST-Link interface to show up in the mail.
Is it possible to spoof the activation signal from the GPS box to the controller somehow?
Would make an easy solution.
This will be my approach. I'm hoping that I can read the firmware off of the IOT board using the ST-Link, and then modify it. I have no idea how the firmware works, but I'm gonna explore it as an option.
Good luck, let us know what you find out. The firmware file won’t be easy to read I don’t think because those chips have read out protection on them... when you try to disable it it erases the memory.



User avatar
By Concerned
Posts Avatar
#14800
Motoviggo wrote:
Sun Jul 07, 2019 4:14 pm
The GSM-board seems to have what looks like a ST-link interface. Im still waiting for my adapter in the mail, so I cant do anything with it yet. But since I want to bypass the entire GSM-board I hooefully wont have to anyways.
To view images REGISTER or LOGIN for full access.


Its accessible as soon as you remove the GSM-box, so I imagine that it is used to activate the scooter from the factory or similar.

I will post pictures of the GSM-board tomorrow, I forgot to take them today.
Any updates on this?
Juljulo liked this

Hello! I have a ninebot es1 and I want to change m[…]

Lyft Max

The Spin Model has the GPS box mounted to the ste[…]

Spin's new scooters

can you not just use the ES4 controller and […]

NineBot Max - Attempt

Buy a third-party speed controller, swap out the b[…]