PCB Reverse Engineering in Industrial Electronics: PLC, Drive, and Power Boards
When an ageing production line stops because a single control board has failed, the real problem is rarely the machine. It is the missing documentation behind it. The original Gerber files were never archived, the schematic survives only as a faded paper copy, and the processor at the centre of the design was discontinued years ago. PCB reverse engineering — the discipline of reconstructing usable design data from the physical board itself — exists to close exactly that gap.
– Eine rekonstruierte Netzliste (Netlist), die jedes Pad, jede Durchkontaktierung (Via) und jede Leiterbahn über sämtliche Kupferlagen hinweg abbildet.
– Einen bearbeitbaren Schaltplan, der aus dieser Netzliste rekonstruiert und für die praktische Nutzung durch einen Elektronikentwickler aufbereitet wurde.
– Neu erzeugte Gerber-Dateien und Bohrdaten, die zu einem fertigungstauglichen Leiterplatten-Herstellungspaket zusammengeführt werden.
– Eine vollständige Stückliste (BOM – Bill of Materials) mit Querverweisen für abgekündigte Bauteile sowie pin-kompatible Ersatzkomponenten.
Alle nachfolgenden Prozesse — einschließlich Reparatur, Nachbau und Redesign — hängen davon ab, dass diese vier technischen Daten korrekt erstellt wurden.
Hinter diesen Ergebnissen steht eine Kombination aus physikalischen Untersuchungen und analytischen Arbeitsschritten. Die Leiterplatte wird zunächst mit hoher Auflösung fotografiert, ihre einzelnen Lagen werden durch Bildgebung oder gezieltes Entschichten analysiert, und die Kupferstrukturen werden anschließend vor der Netzlistenextraktion in Vektordaten umgewandelt.
Die Genauigkeit dieser frühen Bildanalyse bestimmt die maximale Qualität aller folgenden Schritte: Eine einzige falsch erkannte Leiterbahn auf einer Innenlage kann sich direkt auf den rekonstruierten Schaltplan und die endgültigen Fertigungsdaten auswirken.
This is the first article in a series on the industrial circuit boards most often recovered this way. It starts with the board families themselves, because the type of board determines the technical difficulty far more than its size does.
What reverse engineering actually delivers
The terms PCB cloning and PCB copying are used loosely, so it is worth being precise about the output. A proper reverse engineering job does not return a photograph or a scan; it returns editable engineering data:
- A reconstructed netlist, mapping every pad, via and trace across all copper layers.
- An editable schematic, rebuilt from that netlist and made readable for a working engineer.
- Gerber and drill files regenerated into a manufacturable fabrication package.
- A bill of materials with cross-references for discontinued parts and pin-compatible substitutes.
Behind them sits a sequence of physical and analytical steps. The board is photographed at high resolution, its layers are imaged or selectively de-layered, and the copper geometry is vectorised before netlist extraction begins. The accuracy of that early imaging stage sets a ceiling on everything that follows: a single mis-read trace on an inner layer propagates straight into the recovered schematic and the final fabrication data.
– Une netlist reconstruite, qui décrit la connexion de chaque pastille (pad), chaque via et chaque piste sur l’ensemble des couches cuivre du circuit imprimé.
– Un schéma électronique éditable, reconstruit à partir de cette netlist et structuré pour être facilement exploitable par un ingénieur électronique.
– Des fichiers Gerber et fichiers de perçage (drill files) régénérés afin de constituer un ensemble complet de fabrication compatible avec la production industrielle.
– Une liste de nomenclature (BOM – Bill of Materials) comprenant des références croisées pour les composants obsolètes ainsi que des alternatives compatibles au niveau des broches (pin-compatible).
Toutes les étapes suivantes — réparation, reproduction ou modification de conception — dépendent directement de la précision de ces quatre éléments techniques.
Derrière ces résultats se trouve une série d’étapes physiques et analytiques. Le circuit imprimé est photographié en haute résolution, ses différentes couches sont analysées par imagerie ou par décapage sélectif, puis la géométrie cuivre est convertie en données vectorielles avant le début de l’extraction de la netlist.
La précision de cette première phase d’imagerie définit la limite de qualité de tout le processus suivant : une seule piste mal interprétée sur une couche interne peut se propager directement dans le schéma récupéré et dans les données finales destinées à la fabrication.
Why industrial boards dominate the field
Industrial electronics combines several traits that make design recovery unusually valuable:
- Long service life. Industrial equipment is often expected to run for 15 to 25 years, far beyond the semiconductor lifecycle of the components inside it.
- Obsolescence. Motor drives, sensors and custom ASICs are discontinued long before the machines that contain them.
- Regulatory constraints. Changing a board in a medical, automotive or aerospace system can trigger re-certification, so reproducing the original design is often preferable to redesigning it.
- Missing archives. Smaller manufacturers frequently never held a complete design archive at all.
Together, these factors make reverse engineering a maintenance and sustainment function in industry rather than a one-off curiosity. The same properties that make recovery necessary also make it harder: densely populated boards, conformal coatings and potted assemblies all raise the cost of reading a design accurately.
– Una netlist reconstruida, que asigna la conexión de cada pad, vía y pista en todas las capas de cobre de la placa.
– Un esquema electrónico editable, reconstruido a partir de dicha netlist y preparado para que pueda ser utilizado por un ingeniero electrónico.
– Archivos Gerber y archivos de perforación (drill files) regenerados para crear un paquete de fabricación compatible con la producción de PCB.
– Una lista de materiales (BOM – Bill of Materials) con referencias cruzadas para componentes descatalogados y sustitutos compatibles a nivel de pines.
Todo lo que viene después — reparación, reproducción o rediseño — depende de que estos cuatro elementos técnicos sean completamente correctos.
Detrás de estos resultados existe una serie de procesos físicos y analíticos. La placa PCB se fotografía con alta resolución, sus capas internas se analizan mediante técnicas de imagen o eliminación selectiva de capas, y la geometría del cobre se convierte en datos vectoriales antes de iniciar la extracción de la netlist.
La precisión de esta primera etapa de análisis visual establece el límite de calidad de todo el trabajo posterior: una sola pista mal interpretada en una capa interna puede afectar directamente al esquema recuperado y a los datos finales de fabricación.
The board families we see most often
Within industrial electronics, a handful of board families account for the majority of work.
- PLC input/output modules. Digital and analogue I/O cards combine opto-isolation, multiplexing and a backplane interface. Recovering them demands attention to isolation barriers and reference voltages, since a small error can corrupt an entire control loop.
- Motor drive and servo boards. Variable-frequency drives and servo amplifiers centre on a power stage of IGBTs or MOSFETs, driven by gate-driver circuitry and monitored by current-sense amplifiers. Here the gate timing and current-sense scaling must be reproduced exactly.
- Power supply and power-conversion boards. Switch-mode supplies, DC-DC converters and PFC stages are dense with magnetics, feedback networks and protection circuits. Schematic recovery has to capture the feedback topology, not merely the component values.
- HMI and operator panels. Human-machine interface boards combine display drivers, membrane keypads and matrix-scanning logic. The challenge is usually recovering the firmware-independent hardware behaviour.
- Sensor and instrumentation front-ends. Signal-conditioning stages built around instrumentation amplifiers, ADCs and isolation barriers must be recovered with enough tolerance to preserve measurement accuracy.
- Legacy bus and CNC control boards. Older controllers built on RS-485, CAN or Profibus interfaces are prime candidates, because replacement parts are scarce and expensive.
– Uma netlist reconstruída, que identifica a conexão de cada pad, via e trilha em todas as camadas de cobre da placa.
– Um esquema elétrico editável, reconstruído a partir dessa netlist e organizado para utilização por um engenheiro eletrônico.
– Arquivos Gerber e arquivos de furação (drill files) regenerados para formar um pacote de fabricação compatível com a produção industrial.
– Uma lista de materiais (BOM – Bill of Materials) com referências cruzadas para componentes descontinuados e substitutos compatíveis em relação aos pinos.
Todo o processo posterior — reparo, reprodução ou redesign — depende da precisão desses quatro elementos técnicos.
Por trás desses resultados existe uma sequência de etapas físicas e analíticas. A placa PCB é fotografada em alta resolução, suas camadas são analisadas por técnicas de imagem ou remoção seletiva de camadas, e a geometria das trilhas de cobre é convertida em dados vetoriais antes do início da extração da netlist.
A precisão dessa etapa inicial de análise determina o limite de qualidade de todo o processo seguinte: uma única trilha interpretada incorretamente em uma camada interna pode afetar diretamente o esquema recuperado e os dados finais de fabricação.
A note on how this work is approached
This is the focus of our own team at Circuit Engineering Company Limited: industrial circuit boards, recovered from the physical hardware, with the output delivered as documentation the client owns and can edit. Where original components are obsolete, the same exercise identifies viable substitutes, so that a repaired or reproduced board can actually be built. The deliverable is engineering data, not a contract that locks anyone in.
What makes a project start well
A successful recovery begins with good inputs: clear photographs of both sides of every board, an accurate count of boards and revisions, and a clear statement of what the output is for — repair, reproduction or redesign. Those three facts shape how much detail must be captured and how the netlist is structured.
PCB reverse engineering is fundamentally a documentation discipline. Its value is that it turns undocumented hardware back into something an engineer can read, modify and build — which, for industrial electronics, is often the only way forward.
– Uma netlist reconstruída, que identifica a conexão de cada pad, via e trilha em todas as camadas de cobre da placa.
– Um esquema elétrico editável, reconstruído a partir dessa netlist e organizado para utilização por um engenheiro eletrônico.
– Arquivos Gerber e arquivos de furação (drill files) regenerados para formar um pacote de fabricação compatível com a produção industrial.
– Uma lista de materiais (BOM – Bill of Materials) com referências cruzadas para componentes descontinuados e substitutos compatíveis em relação aos pinos.
Todo o processo posterior — reparo, reprodução ou redesign — depende da precisão desses quatro elementos técnicos.
Por trás desses resultados existe uma sequência de etapas físicas e analíticas. A placa PCB é fotografada em alta resolução, suas camadas são analisadas por técnicas de imagem ou remoção seletiva de camadas, e a geometria das trilhas de cobre é convertida em dados vetoriais antes do início da extração da netlist.
A precisão dessa etapa inicial de análise determina o limite de qualidade de todo o processo seguinte: uma única trilha interpretada incorretamente em uma camada interna pode afetar diretamente o esquema recuperado e os dados finais de fabricação.