Yeah, I figured the COP chip was the bit that did all the work in the FOB, and having a read through the data sheet is interesting, but don't think there is any easy way of retrieving the information from it.
I managed to get a hold of a programmer from eBay which apparently will program the Motorola CPU units... so I'm going to see if I can hook it up when I'm back from work and see if I can talk to it.
I have a couple of logic boards at home which have multiple faults on them, so messing about with one of the CPU chips on them isn't going to be an issue if I somehow destroy it!!!!
I have a spare 3rd gen receiver which was in a vehicle we stripped for parts awhile ago, so thinking of seeing if that data stream sent to the BECM can be captured and then analysed as it should hopefully be a more pure data stream.
Probably all a bit beyond me when I get into it, but will be fun to try and get anything out of it.
Pwood999, if you are interested in taking another look at some point, then it would be great to have another set of eyes on it!
Dave3d... you make good points too... there has to be some way of capturing the stream and analysing it, as otherwise the remote fob services that can clone the remotes and basically give you a second one of the same key number would be out of a job. I am guessing they identify the algorithm, decode the data in it and then program it back to a blank chip. What would be good is to see about capturing data from a key 1 and key 2 of the same lockset, and then being able to decode it and see what differences there are which may identify what the key ID is.
Probably a lot of work for little to no gain! But maybe a fun project. ..
Oh and I tested a theory you mentioned to me awhile ago with the BECM / instrument cluster connection and it does indeed work.