Project

General

Profile

Reverse Engineering Lowes IRIS Hub 2.0 (Here's what I already know)

Added by sorphin over 1 year ago

I got mine today via UPS (Freebie from IRIS.. gotta love it)..

To open it.. there are no screws this time around, there are clip tabs around it, which i was able to pop very easily with a decent size chisel.

Here’s the BOM of all the ICs on the board (I’ll put a link to the pics I took of ‘unboxing’ it, as well as the picture i took up close of the board (Clearer than the FCC pics) soon.:

IC1 - “EM3587 - Zigbee” - https://www.silabs.com/Support%20Documents/TechnicalDocs/EM358x.pdf
IC2 - “SKY 2438T - Zigbee” - http://www.skyworksinc.com/uploads/documents/SE2438T\_202414H.pdf
IC3 - “ZM5304 - Z-Wave” - http://z-wave.sigmadesigns.com/docs/brochures/ZM5304\_br.pdf
IC4 - “TI CC2541 - BLE” - http://www.ti.com/lit/ds/symlink/cc2541.pdf
U5 - TI AM3352BZCZ10 - SoC - “TI Sitara ARM Cortex A8 Rev 2.1” - http://www.ti.com/lit/ds/sprs717h/sprs717h.pdf
U12 - D9PXV (Micron MT41K256M16HA-125:E) 4Gb (Width: x16, Depth: 256MB) “DDR3-1600 - DRAM” - http://www.micron.com/\~/media/documents/products/data-sheet/dram/ddr3/4gb_ddr3l.pdf
U13 - JW999 (Micron MTFC2GMDEA-0M WT) 2GB (Width: x8) - “E-MMC” - http://media.digikey.com/pdf/Data%20Sheets/Micron%20Technology%20Inc%20PDFs/EMMC_Series.pdf
U1, U8 - TI492051B - “USB Single, Current-Limited, Power-Distribution Switch” - http://www.ti.com/lit/ds/symlink/tps2051b.pdf
U14 - “SMSC 8710 B1438-A2 - ETHERNET” - http://ww1.microchip.com/downloads/en/DeviceDoc/8710a.pdf
U2 - TPS 65217C - “Power Management IC” (PMIC_ w/ 3 DC/DCs, 4 LDOs, Linear Battery Charger & White LED Driver) - http://www.ti.com/lit/ds/symlink/tps65217.pdf

EDIT: The more I look closely at this… They basically lifted the design of the BeagleBone Black to make this. The headers and dipswitches have been removed (The FCC pics show them in place). The 2 headers are for serial access (would make sense). One is near the AM3552 and the other is near the CC2541. There is also the TI JTAG header pads on the bottom of the FCC submitted board, but not on the production. My next step will be to console up to the AM3552 (Like I did on the Hub 1.0). More updates to follow.

  • sorphin

Replies (7)

RE: Reverse Engineering Lowes IRIS Hub 2.0 (Here's what I already know) - Added by JohnO over 1 year ago

IRIS is very generous, she ought to get wider publicity - what is her url.

RE: Reverse Engineering Lowes IRIS Hub 2.0 (Here's what I already know) - Added by sorphin over 1 year ago

JohnO wrote:
> IRIS is very generous, she ought to get wider publicity - what is her url.

I hope that’s a joke….

RE: Reverse Engineering Lowes IRIS Hub 2.0 (Here's what I already know) - Added by JohnO over 1 year ago

I wasn’t trying for a joke but a little googling has led me here.

RE: Reverse Engineering Lowes IRIS Hub 2.0 (Here's what I already know) - Added by sorphin over 1 year ago

JohnO wrote:
> I wasn’t trying for a joke but a little googling has led me here.

They sent me a new hub as an ‘upgrade’ to the ‘old’ hub they think I still have. (They sent out emails to people to opt to get sent the new hub). Anyways… back to topic.

RE: Reverse Engineering Lowes IRIS Hub 2.0 (Here's what I already know) - Added by sorphin over 1 year ago

Confirmed the one header is the console for the processor… boot log follows:

U-Boot SPL 2013.07 (Jul 01 2015 - 10:47:38)
OMAP SD/MMC: 0
reading args
spl: error reading image args, err - -1
reading u-boot.img
reading u-boot.img
INIT: version 2.88 booting
Starting udev
Starting Bootlog daemon: bootlogd.
sh: 197001010000: unknown operand
Setting up Hub Agent...
Setting up needed gpios...
Done with gpio setup
Setup buzzer pwm
Done with pwm setup
libphy: PHY 4a101000.mdio:01 not found
net eth0: phy 4a101000.mdio:01 not found on slave 1
Starting ifplugd:  eth0
INIT: Entering runlevel: 5
Configuring network interfaces... done.
Starting Dropbear SSH server: dropbear.
Starting syslogd/klogd: done
Starting crond: OK
Stopping Bootlog daemon: bootlogd.

Poky (Yocto Project Reference Distro) 1.6.2 LWD-9269 /dev/ttyO0

LWD-9269 login: irisinitd[579]: Disabling SSH access.
Stopping Dropbear SSH server: stopped /usr/sbin/dropbear (pid 605)
dropbear.
irisinitd[579]: Terminating open SSH connections.
Starting collectd.
irisagentd[537]: No agent debug configuration is present.
irisagentd[537]: Starting hub agent...

RE: Reverse Engineering Lowes IRIS Hub 2.0 (Here's what I already know) - Added by sorphin over 1 year ago

Looks like it’s going to require JTAG’ing.
Here is the picture of the top for reference.

    (1-7/7)