Smart Metering PCB Copy | NDA on Every Project

Smart Metering PCB Copy — Full Board Recovery for Utility Meters

Smart metering PCB copy is the reverse-engineering process that recovers complete manufacturing files — Gerber data, bill of materials, schematic, and stackup — from an existing electricity, gas, water, or heat meter board. Our engineers handle the metrology-grade analog front-ends, communication modules (RF, PLC, NB-IoT), and tamper-detection circuits that make these boards more demanding than typical consumer electronics. Every project ships under a mutual NDA, and we require proof of IP ownership or authorized maintenance rights before work begins.

Why Smart Meter Boards Are Harder to Copy Than They Look

A typical smart meter PCB is only 4–6 layers, which sounds simple. The difficulty is hidden in three areas that generic PCB copy shops routinely mishandle.

Mixed-Signal Isolation

Metering ICs like the Analog Devices ADE7880 or HLW8032 demand clean analog-digital separation. Guard rings, split ground planes, and Kelvin-sense traces must be reproduced exactly, or the meter drifts outside IEC 62053 Class 0.5S accuracy. Our process photographs each copper layer at 2400 DPI minimum and reconstructs the ground-plane partitioning before any routing begins.

Communication Stacks

Modern meters carry an RF module (Sub-GHz, Zigbee, or LoRa), a PLC coupling transformer, or an NB-IoT/Cat-M1 modem — sometimes all three on one board. Each radio section requires impedance-controlled trace recovery (typically 50 Ω single-ended for RF, 100 Ω differential for LVDS data links). We measure characteristic impedance with a TDR after fabrication and tune the stackup if the first article is outside ±7 %.

Tamper and Security Circuits

Revenue-grade meters include magnetic tamper sensors, cover-open switches, and encrypted MCUs (commonly STM32L4, Renesas RL78, or NXP LPC). These security features mean the firmware readout path is non-trivial. We address MCU protection only for boards you own or are authorized to maintain — see our approach on the access control board cloning page for a parallel example of security-sensitive recovery.

What a Smart Metering PCB Copy Project Delivers

Our Process for Metering Board Recovery

Step 1 — Intake and NDA

You ship one or two sample boards. We execute a mutual NDA and verify ownership documentation. Turnaround for the NDA itself is typically under 24 hours.

Step 2 — Non-Destructive Imaging

High-resolution optical scanning of each layer, plus X-ray inspection for internal vias and BGA pad-to-via escape routing. For 4-layer meters we use controlled chemical delamination; for 6-layer boards with blind vias, we combine X-ray with micro-sectioning.

Step 3 — Netlist Extraction and Schematic Drafting

Every net is traced from pad to pad. Metering AFE circuits get special attention: current-sense shunt resistor connections (often 0.5 mΩ ±1 % Kelvin-connected) and voltage divider networks are verified against the metering IC datasheet. The schematic is drawn hierarchically so your engineers can navigate PSU, metering, comms, and MCU blocks independently.

Step 4 — Gerber Generation and DRC

Gerbers are generated in Altium or KiCad, then run through a full design-rule check against IPC-2221B Class 2 (or Class 3 if specified). Creepage and clearance on the mains input section follow IEC 61010-1 — typically ≥ 6.4 mm for 300 V working voltage at Pollution Degree 2.

Step 5 — Prototype Fabrication and Verification

We fabricate 3–5 prototype boards, assemble one, and perform a functional smoke test. For metering boards, this includes basic power-up, communication link check, and current-channel offset measurement. Full metrology calibration remains your responsibility — we deliver the hardware, not the calibration certificate.

Typical Board Specs We Handle

Common Smart Meter Board Variants

Metering hardware varies by utility type and communication standard. Here are the most frequent boards we see:

• Single-phase residential electricity meter — 2–4 layers, ADE7953 or HLW8032 AFE, Sub-GHz RF (868/915 MHz), STM32L0 MCU.
• Three-phase commercial electricity meter — 4–6 layers, ADE7880 or ATM90E36A, RS-485 + PLC, ARM Cortex-M4 MCU, often with an RTC battery holder.
• Gas / water pulse meter interface — 2-layer board with reed-switch input, NB-IoT modem, coin-cell power management, ultra-low-power MCU (MSP430 or RL78).
• Heat / thermal energy meter — 4-layer, PT1000 RTD front-end, ultrasonic flow sensor driver, Zigbee or M-Bus interface.
• Data concentrator / gateway — 6-layer, Linux SoM (i.MX6 or AM335x), Ethernet PHY, PLC + RF dual-mode, eMMC storage.

What Can Go Wrong — and How We Mitigate It

Transparency matters more than marketing. These are real failure modes we’ve encountered:

• Metering IC obsolescence. Some older Cirrus Logic CS5463 or Teridian 71M6533 parts are end-of-life. We flag these in the BOM and suggest pin-compatible or layout-compatible alternates, but a drop-in replacement isn’t always available — a partial redesign of the AFE section may be needed.
• Encrypted firmware. If the MCU is read-protected (e.g., STM32 RDP Level 2), non-invasive readout is impossible. We can recover the hardware files and schematic, but the firmware must come from you or be rewritten. We will not attempt to bypass protection without documented authorization.
• Conformal coating and potting. Revenue-grade meters are sometimes conformally coated or partially potted. Cleaning adds 1–3 working days and may damage silk markings, requiring extra cross-referencing time for BOM identification.

Turnaround and Pricing Signals

A standard 4-layer single-phase meter board — Gerber + BOM + schematic — typically takes 8–12 working days. Six-layer boards with RF sections run 12–18 working days. Pricing starts around $800–$1,200 for a straightforward 2–4 layer meter and scales with layer count, component density, and communication complexity. Data concentrator / gateway boards with BGA SoMs start closer to $2,000. All quotes are project-specific; send your board photos for an accurate estimate.

These timelines are comparable to our work on inverter board reverse engineering and EV charger PCB duplication, which share similar mixed-signal and power-stage complexity.

Frequently Asked Questions

Related Services

• Consumer electronics board cloning — similar mixed-signal challenges at higher volumes.
• Impedance-controlled copy and stackup recovery for RF-heavy meter designs.
• BGA escape-routing reconstruction for data concentrator SoM boards.
• High-layer-count reverse engineering for complex gateway PCBs.

Related reading

• Oct 2026Maxim IC Unlock | Families We Can Read & Recover
• Oct 2026Dialog IC Unlock | Families We Can Read & Recover
• Oct 2026Nordic IC Unlock | Families We Can Read & How