An Electric Scooter Community on a Mission to Stamp out Transportation Mediocrity.

Covers electric scooter models whether shared or for consumers.
By Motoviggo
#12490
I got my hands on a decomissioned Tier scooter. Its an Electisan/Okai ES200-B, essentially the same as a Bird Zero to my understanding. Theres a spec sheet here: https://www.tier.app/wp-content/uploads ... y_Decl.pdf

I have taken it apart to figure out the inner workings, and this is what I know so far:

It activates via a GSM-module in the front of the stem. The GSM module also provides tracking, and can be disabled in less than 5 minutes by removing it and disconnecting the small battery found inside. You scan the qr-code with the app, which sends a signal to the scooter that then activates for use.

So to convert this scooter, its should be as simple as bypassing the GSM-board, no? Connecting the right wires and then installing a switch so that I can manually turn it on/off seems like the logical approach. Does anyone have any experience with these scooters?

I will document my findings in this thread as I go.
By Motoviggo
#12491
The GSM-board seems to have what looks like a ST-link interface. Im still waiting for my adapter in the mail, so I cant do anything with it yet. But since I want to bypass the entire GSM-board I hooefully wont have to anyways.
Image

Its accessible as soon as you remove the GSM-box, so I imagine that it is used to activate the scooter from the factory or similar.

I will post pictures of the GSM-board tomorrow, I forgot to take them today.
By trane8
#12901
Any news on your project?

Is it possible to spoof the activation signal from the GPS box to the controller somehow?
Would make an easy solution.
By Motoviggo
#13082
No news yet, I'm afraid. I have been in an unrelated traffic accident and have been busy dealing with that. I'm also waiting for my ST-Link interface to show up in the mail.
Is it possible to spoof the activation signal from the GPS box to the controller somehow?
Would make an easy solution.
This will be my approach. I'm hoping that I can read the firmware off of the IOT board using the ST-Link, and then modify it. I have no idea how the firmware works, but I'm gonna explore it as an option.
By Motoviggo
#13083
ruediger_one wrote:
Tue Jul 09, 2019 8:25 am
Any news?

I found this one:
https://www.tier.app/wp-content/uploads ... CC%88t.pdf
And this one:
https://cdn.shopify.com/s/files/1/1009/ ... _Sheet.pdf
"Electisan F350 (Internal Name: ES200)"

So probably you are right and the model is based on Electisan F350.
Great find! I haven't seen the German manual for the ES200D yet. My German isn't the best but I should be able to decipher it
By Kiki626
#13115
Motoviggo wrote:
Mon Jul 22, 2019 6:02 am
No news yet, I'm afraid. I have been in an unrelated traffic accident and have been busy dealing with that. I'm also waiting for my ST-Link interface to show up in the mail.
Is it possible to spoof the activation signal from the GPS box to the controller somehow?
Would make an easy solution.
This will be my approach. I'm hoping that I can read the firmware off of the IOT board using the ST-Link, and then modify it. I have no idea how the firmware works, but I'm gonna explore it as an option.
Good luck, let us know what you find out. The firmware file won’t be easy to read I don’t think because those chips have read out protection on them... when you try to disable it it erases the memory.
User avatar
By Concerned
#14800
Motoviggo wrote:
Sun Jul 07, 2019 4:14 pm
The GSM-board seems to have what looks like a ST-link interface. Im still waiting for my adapter in the mail, so I cant do anything with it yet. But since I want to bypass the entire GSM-board I hooefully wont have to anyways.
Image

Its accessible as soon as you remove the GSM-box, so I imagine that it is used to activate the scooter from the factory or similar.

I will post pictures of the GSM-board tomorrow, I forgot to take them today.
Any updates on this?
  • 1
  • 2
  • 3
  • 4
  • 5
  • 9

As this was a rental version whos overstock was […]

Any one got any info on beryl bikes I seen a few[…]

LH/ TF-100 Style Display.

Hi I recently converted a Bird Zero to a personal […]

How do you operate dash without button? I have[…]