Friday, December 20, 2024

Reverse Engineering 101 – I’ve got the power: Finding Power Nodes

 In the previous article different techniques were discussed on how to find “signal return path” or ground nodes on an unfamiliar board without any schematics. In this article the goal is to show techniques for finding power planes, traces and nodes.
- Locate the main power input, any board shall be powered using one of the following sources:

  • AC/DC wall adapter.
  • Direct 110V/60Hz or 220V/50Hz AC mains.
  • Stepped-down AC input.
  • Battery-powered, with or without charging circuitry.

In the case of a wall adapter, then the output voltage is probably noted on it.
- Locate the power supply circuitry: power supplied from the adapter or AC mains will go into a power supply circuitry for rectification, filtering, stepping-up or -down, and distribution, identifying the main components of this circuit will depend on the type of input power:

- For DC input power via an AC/DC wall adapter, the power can be directly supplying function circuitry without a power supply/management circuitry. In this case it is easy to measure the voltage using a DMM.

In the case of a sophisticated system such as a computer motherboard, multiple DC voltages are required to power different circuits on the board such as 3.3V, 5V, 12V, -5V, now you must track the input power going to the power management section of the board, it is important to identify what type of power management is used, such as:

  • Linear Voltage Regulator.
  • Low Dropout Regulator.
  • DC-DC converter (Buck, Boost, Buck-Boost type).
  • Zener diode-based voltage regulation.

Identify the input and output(s) of the power management circuit from the datasheets of the components used, make sure to measure and document the voltage at the output pins.
After powering off the system, you can use the continuity tester to trace the power distribution to other parts of the board.  
o    For direct 110V/60Hz or 220V/50Hz AC mains or stepped-down AC input, the power must be rectified and filtered off ripples, so, look for a step-down transformer, a full-wave bridge rectifier, or a simple two-diode full-wave rectifier in case of center-tapped step-down transformer is used. Sometimes a single-diode half-wave rectifier is used instead in inexpensive products, though not very common.
Once you have identified the rectified output location on the board, use the DMM or continuity tester (in a similar fashion mentioned in the previous point) to trace the power distribution to different components.
o    For battery-powered systems, identify whether the batteries used are disposable or rechargeable type.

  • For disposable batteries, it is easy to identify the output voltage and track power input traces for disposable batteries as voltage is noted on commercially available batteries.
  • For rechargeable batteries, identify whether the battery charging circuitry is part of the power management system or not. Once identified, trace the battery wiring to the board, again, use the continuity tester or DMM to trace power distribution to different components.

-    Locate special function integrated circuits and check their datasheets for power input pins, usually it is called VDD, VCC, AVDD, Vs, Vin, or a similar acronym. Measure the voltage at these pins and compare it to measured voltage from the power supply circuitry.


No comments:

Post a Comment