Contents

Quick look inside two Ali Express mmWave presence detection sensors

Millimeter Wave technology has recently hit “mass consumer product adoption” price points. A casual search for “human presence sensor” on Ali Express will turn up a seemingly endless number of sub $40 devices that can detect movement far more accurately than any old PIR sensor.

Each listing is fairly generic; there’s no explicit manufacturer details but they all use the same marketing images:

As the photos below will show, neither device is super well marked with a model number so I’ll just refer to each by either the color of the enclosure or by the radar sensor inside.

Before getting into the specific modules, a brief look at the packaging for both.

Packaging

The packaging isn’t anything special but I am including pictures here in the off chance that some of the Mandarin markings is useful for somebody.

Micro USB in 2022?!
Both devices featured here have micro USB leads. It’s 2022 and we’re still using MICRO USB for power? I know that USB-C connectors are slightly more expensive but it just seems lazy and dated to put a micro USB port on any new design in 2022!
uart?
I did probe both of the 4 pin connectors on the PCB but didn’t see any signs of life. If those headers are for a UART, the MCU isn’t responding to any inputs nor is it putting anything out over it :(.

ZY-M100-S

AKA “the white one”. Box content is bare-bones; the USB lead is comically short for almost any “mid height on the wall” or ceiling installs so i’m not really sure what the point was.

I’m not sure why they went with 3 screws here instead of 4. If you’re going to omit a screw for cost-cutting reasons, why not just use clips or a single screw in the middle?

No, it's not the camera or the lighting, the text really is that blurry in real life.

No, it's not the camera or the lighting, the text really is that blurry in real life.

The interior is more or less as expected; two highly integrated modules with a small MCU gluing them together.

There is some evidence that the Zigbee version of the white sensor supports ambient brightness. Based on the two small holes in the enclosure and the PCB markings, I suspect that d2 is being used as a light sensor:

Nothing of interest on the bottom of the PCB:

Close up of the sensor MCU

Close up of the sensor MCU

Unique Markings

  • PCB: ZY-M100 and V4.20
  • TuYa radio: WBR3
  • TuYa mcu: GD32E230
  • Radar sensor: JYSJ_5807_A01 with an IC marked SJ 501. No results on this one. Please do get in touch if you do know anything about it. I’d love to re-use the sensor in something else!
We have an ID!

The MicRadar RD24D

AKA “the black one”.

Like the M100, there’s not a ton in the box.

The rear enclosure has a simple key-hole slot for mounting to a wall or ceiling and the USB power lead is considerably longer than the M100. Somebody did consider that a celling-mounted device might need a long power lead…

Yes, that is a neo-pixel LEDin the center of the opaque plastic panel.

Yes, that is a neo-pixel LEDin the center of the opaque plastic panel.

Same story here: WiFi module and radar sensor both talk to a MCU over UART.

Nothing remarkable on the bottom of the PCB:

They only soldered in one half of the pins connecting the radar sensor to the main PCB. I wonder how much time/money that saved...

They only soldered in one half of the pins connecting the radar sensor to the main PCB. I wonder how much time/money that saved...

Here’s a close up of the business end of the sensor. This one is considerably more sophisticated and complex relative to the white one.

And a close up of the coordinating MCU

Unique Markings

  • PCB: V1.01
  • TuYa radio: CB3S
  • TuYa mcu: STC 8G1K17
  • Radar sensor: MicRadar R24D. I can’t find a datasheet for the specific module, but it does seem to be part of this product family.
    • IC1: MicRadar / T15BT / DAT2230
    • IC2: This above picture isn’t the best but the chip is marked with S3KM11L / N46Y80D1 / 2123H. The only google result does not really indicate who makes the chip.

Conclusion

Neither are going to be quick/easy to convert or otherwise get working with the likes of ESPHome or Tasmota:

  • Neither wifi module is an espressif module. At least some re-flow work would be required to replace the modules with an Espressif module.
  • There’s a MCU sitting between the WiFi module and the actual sensor. Reverse engineering how the TuYa radio talks to the MCU and how the MCU talks to the radar module just isn’t worth the time!

The sensors cost about as much as the bare radar modules themselves so - if you’re willing to spend the time to desolder the radar modules - you get an enclosure for “free”.