My folks just received a Progressive MyRate device. Apparently it’s supposed to lower your insurance rates if you drive safely… or something. Curious, I decided to take it apart to see what makes it tick. Let’s just say that I was very surprised about how hackable this device could be in the near future.
The MyRate device is based around an Atmel AT91SAM7S256 processor running at 16 MHz, which includes 256 KB of embedded flash and 64 KB of onboard RAM. However, that just scratches the surface of this device’s hackability.
Next to the Atmel CPU is another fine Atmel product, an Atmel AT26DF161A 16MB flash chip.
There is one more Atmel chip on this board hiding under the connected daughterboard. I could only make out the Atmel logo on it without desoldering (which I may do later to figure out what this chip is).
There’s a white CSS-J4B20 buzzer on the top as well. What this is supposed to alert you to is completely up in the air at the moment.
There is also a 64 KB Oberthur SIM card. What data this stores (other than standard stuff) is unknown at the moment, as I don’t have a SIM card reader.
Turn the device over and there’s a cell phone module: a Telit GE864-QUAD with an antenna stuck on top with some double sided tape.
Now for the really interesting stuff. There is a 4-pin header on the top side of the device. Since the processor supports JTAG, it’s safe to assume that this is a JTAG header with the VCC and GND pins missing. Maybe?
Most of the chips used in the MyRate device, except for a mystery Atmel chip hiding out under the daughterboard.
A view of the MyRate device's cell phone antenna and possible JTAG header.
The SIM Card and spacer from Progressive's MyRate device.
Are there really JTAG pins on the MyRate device?
A Telit GE864-QUAD cellular phone module on the MyRate device.
A side view of the MyRate device, showing the onboard fuse and Atmel chips as well as some power filtering components.
Another side view of the MyRate device, showing the cell phone module, antenna, buzzer, and power filtering components.
The MyRate device's board and plastic case.
Morgan, Do you know if this is a custom device built exclusively for Progressive or a commercially available solution that Progressive is using? Tim
It appears to be custom.
Hey.. thanks for the pics… I was about to dissect my device today and I thought, well.. maybe someone did it already…
can it be hacked, can we get to the data?