Page 1 of 9

TIER ES200-B

Posted: Sun Jul 07, 2019 4:08 pm
by Motoviggo
I got my hands on a decomissioned Tier scooter. Its an Electisan/Okai ES200-B, essentially the same as a Bird Zero to my understanding. Theres a spec sheet here: https://www.tier.app/wp-content/uploads ... y_Decl.pdf

I have taken it apart to figure out the inner workings, and this is what I know so far:

It activates via a GSM-module in the front of the stem. The GSM module also provides tracking, and can be disabled in less than 5 minutes by removing it and disconnecting the small battery found inside. You scan the qr-code with the app, which sends a signal to the scooter that then activates for use.

So to convert this scooter, its should be as simple as bypassing the GSM-board, no? Connecting the right wires and then installing a switch so that I can manually turn it on/off seems like the logical approach. Does anyone have any experience with these scooters?

I will document my findings in this thread as I go.

Re: TIER ES200-B

Posted: Sun Jul 07, 2019 4:14 pm
by Motoviggo
The GSM-board seems to have what looks like a ST-link interface. Im still waiting for my adapter in the mail, so I cant do anything with it yet. But since I want to bypass the entire GSM-board I hooefully wont have to anyways.
Image

Its accessible as soon as you remove the GSM-box, so I imagine that it is used to activate the scooter from the factory or similar.

I will post pictures of the GSM-board tomorrow, I forgot to take them today.

Re: TIER ES200-B

Posted: Tue Jul 09, 2019 8:25 am
by ruediger_one
Any news?

I found this one:
https://www.tier.app/wp-content/uploads ... CC%88t.pdf
And this one:
https://cdn.shopify.com/s/files/1/1009/ ... _Sheet.pdf
"Electisan F350 (Internal Name: ES200)"

So probably you are right and the model is based on Electisan F350.

Re: TIER ES200-B

Posted: Wed Jul 17, 2019 2:34 am
by trane8
Any news on your project?

Is it possible to spoof the activation signal from the GPS box to the controller somehow?
Would make an easy solution.

Re: TIER ES200-B

Posted: Mon Jul 22, 2019 6:02 am
by Motoviggo
No news yet, I'm afraid. I have been in an unrelated traffic accident and have been busy dealing with that. I'm also waiting for my ST-Link interface to show up in the mail.
Is it possible to spoof the activation signal from the GPS box to the controller somehow?
Would make an easy solution.
This will be my approach. I'm hoping that I can read the firmware off of the IOT board using the ST-Link, and then modify it. I have no idea how the firmware works, but I'm gonna explore it as an option.

Re: TIER ES200-B

Posted: Mon Jul 22, 2019 6:03 am
by Motoviggo
ruediger_one wrote:
Tue Jul 09, 2019 8:25 am
Any news?

I found this one:
https://www.tier.app/wp-content/uploads ... CC%88t.pdf
And this one:
https://cdn.shopify.com/s/files/1/1009/ ... _Sheet.pdf
"Electisan F350 (Internal Name: ES200)"

So probably you are right and the model is based on Electisan F350.
Great find! I haven't seen the German manual for the ES200D yet. My German isn't the best but I should be able to decipher it

Re: TIER ES200-B

Posted: Mon Jul 22, 2019 8:27 pm
by Kiki626
Motoviggo wrote:
Mon Jul 22, 2019 6:02 am
No news yet, I'm afraid. I have been in an unrelated traffic accident and have been busy dealing with that. I'm also waiting for my ST-Link interface to show up in the mail.
Is it possible to spoof the activation signal from the GPS box to the controller somehow?
Would make an easy solution.
This will be my approach. I'm hoping that I can read the firmware off of the IOT board using the ST-Link, and then modify it. I have no idea how the firmware works, but I'm gonna explore it as an option.
Good luck, let us know what you find out. The firmware file won’t be easy to read I don’t think because those chips have read out protection on them... when you try to disable it it erases the memory.

Re: TIER ES200-B

Posted: Sat Jul 27, 2019 7:22 pm
by Floryx
That’s the one they‘re using in Germany : https://www.tier.app/wp-content/uploads ... CC%88t.pdf

Re: TIER ES200-B

Posted: Tue Aug 06, 2019 5:39 am
by sakuraba
Where you can buy parts for this scooter ?

I miss Stem and hand bar :)

Re: TIER ES200-B

Posted: Thu Aug 29, 2019 2:19 pm
by Concerned
Motoviggo wrote:
Sun Jul 07, 2019 4:14 pm
The GSM-board seems to have what looks like a ST-link interface. Im still waiting for my adapter in the mail, so I cant do anything with it yet. But since I want to bypass the entire GSM-board I hooefully wont have to anyways.
Image

Its accessible as soon as you remove the GSM-box, so I imagine that it is used to activate the scooter from the factory or similar.

I will post pictures of the GSM-board tomorrow, I forgot to take them today.
Any updates on this?