[Jay Levitt]

(I don't have diabetes, but my dad does, I probably will someday, and my cat does too - even though he's adopted!)

I'm not a lawyer, but I am good with intellectual property and contract law, and I can easily find expert representation in that field.

I don't want to give much away here, but I can see a good half dozen ways around the LifeScan "agreement" for their protocol. (That said, if you're planning to reverse engineer it yourself, and you can do so without ever agreeing to that agreement, and especially without looking at the PDF or text versions of the "official" protocols, don't look!)

I don't have time to do the reverse engineering or write code. But if anyone's interested in setting up a legal clearinghouse for the Lifescan protocols as reverse-engineered, let's chat privately. I have some ideas.

[JasonJayhawk]

I love the d-community. Instant friends with just about everyone!

I think the UltraSmart protocol would be a lovely open-source tool.

I hope someone manages to break the encryption in the OmniPod, too...

[Jay Levitt]

PS - For those who haven't made any agreements, and haven't yet read the protocols, read up on Clean Room design before you do anything.

Again, I think there are probably ways around the existing agreement, but hey, belt and suspenders never hurt.

[bpietsch]

Originally Posted by condensr

The evil last byte is a CRC7. Yes, I have code that is downloading all the records from the meter unassisted, and for all BG records, parsing the timestamp and BG value.

Condensr, would you mind sharing your CRC calculation? The CRC is one of the few pieces of this puzzle I have not been able to crack. Thanks much!

[mauorrizze]

Originally Posted by bpietsch

Condensr, would you mind sharing your CRC calculation? The CRC is one of the few pieces of this puzzle I have not been able to crack. Thanks much!

I know it's been a long time since you wrote the post, Condensr, but you'd make me really happy, too, if you posted the CRC7 data or algorithm you use, or someone else who succeeded. I wrote a program to check several polynoms, but I must do something wrong. Thanks,
mauorrizze

[sonnynet]

hallo

Could somebody of you decoder or "hack" the encryption of the data block of the OneTouch Ultra Smart meter?

The request of settings, date, time, insulin type and medical type is very simple, its clear plain text. (DMI01, DMO01, ...)

The main data block contains meter values, insulin, meal, ... Does somebody decode this part? (HT, HS, HR) It seems to be simple encrypted block by block.

Sorry for my english, its not so good.

Thank you for reply

[Mica]

Originally Posted by mauorrizze

I know it's been a long time since you wrote the post, Condensr, but you'd make me really happy, too, if you posted the CRC7 data or algorithm you use, or someone else who succeeded. I wrote a program to check several polynoms, but I must do something wrong. Thanks,
mauorrizze

What condensr wrote doesn't necessarily mean he uncovered the CRC variables. He may just as well have recorded all BG requests done by the DMS and simply replay them. I also looped through lots of parameters without any result and finally gave it up. That's why we returned to the OTU2.

Regards

[mauorrizze]

Originally Posted by Mica

What condensr wrote doesn't necessarily mean he uncovered the CRC variables. He may just as well have recorded all BG requests done by the DMS and simply replay them. I also looped through lots of parameters without any result and finally gave it up. That's why we returned to the OTU2.

Regards

Finally that's nearly what I did, too. Accidently I deleted all my data recently , so I couldn't record the 3000 or what crc codes. But I wrote a program that tries all codes and where it gets an answer, it stores the cheksum value in a file as an array. Took a while (5-6h), but it does almost work. I only still got some trouble with specific values, although I obtained a larger recorded file.
But knowing the used cheksum algorithm would be much more elegant, and as it was stated somewhere in this thread that it IS a crc7, i hoped it is also known which exact algorithm. Could also be that someone knows ist, but can't tell it because he got that info from Lifescan!?

[mauorrizze]

Annotation:
(Sorry for double posting, but is here really no edit-button or am I just blind?^^)

The "still got some trouble with specific values" is a bit more trouble than I thought. When waiting for data from the glucometer I used a timeout of about 0.1-0.2 seconds. This is (on my hardware) enough for waiting to see if it answers, as long as there is data saved on the meter. When there is no data, the reply takes about 0.75 seconds. So I found out only a litte more than 100 correct crcs, all the other values are worthless. But I inserted fresh batteries and started the 'tryallcrcs'-programm on my server, let's see when it will be finished ^^.
But assuming it will finish one day then I have a legal question:
may i publish these crc codes together with my source code under any licence (e.g. GPL)? I didn't obtain any information from Lifescan, thus didn't subscribe any contract. I just sniffed a bit data and found the checksums by trying out all the posibilities (well... I'm on it). If there is no concern about legal issues, i'd love to write and publish a program, cause I just can't find software, that I can use with my glucometer AND pump that satisfies me. But writing it just for me is boring...

Thanks (and by the way sorry for my "germish english" )

[CompotatoJ]

Originally Posted by mauorrizze

Annotation:
(Sorry for double posting, but is here really no edit-button or am I just blind?^^)

The "still got some trouble with specific values" is a bit more trouble than I thought. When waiting for data from the glucometer I used a timeout of about 0.1-0.2 seconds. This is (on my hardware) enough for waiting to see if it answers, as long as there is data saved on the meter. When there is no data, the reply takes about 0.75 seconds. So I found out only a litte more than 100 correct crcs, all the other values are worthless. But I inserted fresh batteries and started the 'tryallcrcs'-programm on my server, let's see when it will be finished ^^.
But assuming it will finish one day then I have a legal question:
may i publish these crc codes together with my source code under any licence (e.g. GPL)? I didn't obtain any information from Lifescan, thus didn't subscribe any contract. I just sniffed a bit data and found the checksums by trying out all the posibilities (well... I'm on it). If there is no concern about legal issues, i'd love to write and publish a program, cause I just can't find software, that I can use with my glucometer AND pump that satisfies me. But writing it just for me is boring...

Thanks (and by the way sorry for my "germish english" )

Yes, if you did not use any of the Lifescan specifications or copyrighted code, you are allowed to publish it. This is called clean room reverse-engineering, as Jay Levitt mentioned above.

By the way, I am writing a Linux Diabetes Management program in Mono/GTK#. I'm not finished, but when I have something that is at least semi-useful I will publish it.

[JasonJayhawk]

Originally Posted by CompotatoJ

Yes, if you did not use any of the Lifescan specifications or copyrighted code, you are allowed to publish it. This is called clean room reverse-engineering, as Jay Levitt mentioned above.

By the way, I am writing a Linux Diabetes Management program in Mono/GTK#. I'm not finished, but when I have something that is at least semi-useful I will publish it.

Thanks, Compotato (I like your name). Are you planning to use SourceForge? I'd love to check it out... as you know, side-projects are always a hard thing to keep on the front burner.

[mauorrizze]

Originally Posted by CompotatoJ

Yes, if you did not use any of the Lifescan specifications or copyrighted code, you are allowed to publish it. This is called clean room reverse-engineering, as Jay Levitt mentioned above.

Good to know, thanks.
My checksum-testings could have reached 3/4 by now, but as I accidentally unplugged the cable twice and my server's usb system freezed once again, I have only about 1,500 dates...

[CompotatoJ]

Originally Posted by JasonJayhawk

Thanks, Compotato (I like your name). Are you planning to use SourceForge? I'd love to check it out... as you know, side-projects are always a hard thing to keep on the front burner.

Yeah, I will probably use SourceForge, Google Code, or Trac to host my project. I have an UltraSmart and I am trying to figure out how to interact with it and grab data. I found the driver for the USB cable is already in the Linux kernel, so all I have to do is figure out the protocol. I think some of you guys have been doing that too.

[CompotatoJ]

If anyone can think of a good name for my Diabetes management software, I'd love to know.

Here are the features I'm planning on implementing:
- Meal inputting and nutrition fact fetching (for carb counting and stuff)
- Interaction with OneTouch glucose monitors
- Pretty graphs that you can scroll through and data to chart your insulin and glucose levels
- Maybe OmniPod interaction since I am planning on getting one...

[JasonJayhawk]

Good luck with the Omnipod -- I wouldn't put that on the top of the list because it might take a long time. Insulet uses RSA(?) encryption on the communication, and unless you work for the NSA, you probably won't break it -- unless you can some how get ahold of the private key and break it. I don't know why they're so cautious of people using the data -- I guess they don't want someone developing an application that is better than theirs?

One day, some day, we might have open protocols...

I had a PDF document with one of the earlier OneTouch meters (It might have been the Ultra) that Lifescan had published on their website many years ago....but they took it off. I've seen at least one open source project with the OneTouch Ultra on SourceForge, so you might check into that.