2008

Hashemite University
Electrical Engineering Department

MOBILE PHONE INTELLIGENT

JAMMING SYSTEMPROJECT NO.8

Supervised by:
Dr. Jalal Chebil

Done by:
Abdul Karim Al sbeeh
Asad Naim
Ahmad Hussan
Ayman Samier

Final Report

Acknowledgment

The project of Mobile Phone Intelligent Jamming System would not have been completed
without the funds and support from KADDB/KAFD that provides the total budget required to
completethisproject.ThankstoourUniversityandoursupervisorDr.JalelChebil;whoprovided
scientificbaseandsupervision.

Thereareotherpersonswewanttothankthem,hadabigroleinthisproject:

Eng.Dwi was graduated from Gadjah Mada University of Jogjakarta majoring in Electronics
Engineering,wewanttothankMr.Dwiforprovideourprojectthemainfeatureofdetectionthe
controllerchannel.Eng.Yazanqutishat,RFengineerinUMNIAHcompanyI(AbdulKaremSbeeh)
want to thank my supervisor Eng.Yazan for give my an Excellent training in GSM network
planning and optimization for two months in UMNIAH company. Also thanks for Dr.Abdul
karem Bayati, for his instructive and useful suggestion. Special thanks' to our teachers
Dr.Ahmad Manasreiah, Dr.Omar Sarairah and Eng.Emad/KADDB, who provided us with high
morals,everyencouragementandusefulsuggestions.Alsoweneedtothankspersonsthatwe
benefited from extensive experience in the field of RF design and Microstrip Dr.Nihad Dib at
JUSTUniversity.

Abstract

The dependence on Mobile Networks is worldwide. The success and growing in mobile
networksbecomestroublesomeandannoyingbytheringingofmobile,especiallyinplaces
wheresilenceisrequiredsuchasMosques,Universitylecturerooms,libraries,concerthalls,
meeting rooms etc. This project will solve this problem by using an intelligent jamming
device capable of preventing cell phones which operates within a restricted area. This
projectgivesanexplanationtotheconceptofmobileJammingandexploresjamminginthe
twopopularmobilenetworks:Globalsystemformobilecommunication(GSM)anddigital
cellular network (DCS). The intelligent jamming system is designed to block only the
controllerchannel,alsotooperateonlyifthereisactivemobileintherestrictedarea.The
system of mobile jamming is analyzed and simulated using the Advance Design System
(ADS)forAgilentsoftwarepackage.

TableofContents
1.

CHAPTER1INTRODUCTION...............................................................................................1
1.1 Objectives.......................................................................................................................2
1.2 Importance.....................................................................................................................2
1.3 ReportOutline................................................................................................................3

2.

CHAPTER2:GSM/DCSMOBILECOMMUNICATIONSYSTEM.........................................4
2.1 IntroductionToMobileTelephoneSystems...............................................................................4
2.2 GSMArchitecture............................................................................................................................5
2.2.1 MobileSwitchingCenter...................................................................................................5
2.2.2 BaseStationCenter...........................................................................................................5
2.2.3 BTSArchitecture................................................................................................................6
2.3 TypesofChannels............................................................................................................................7
2.4 PowerLevelTransmittedandSensitivity.....................................................................................7
2.5 FrequencyBands.............................................................................................................................7
2.6 FrequencyHoppingSystem...........................................................................................................8

3.

CHAPTER3:JAMMINGTECHNIQUES.....................................................................................10
3.1 JammingStrategies.......................................................................................................................10
3.1.1 NoiseStrategies...............................................................................................................10
3.1.2 PhaseStrategies...............................................................................................................10
3.2 JammingTechniques.....................................................................................................................10
3.2.1 NoiseJamming.................................................................................................................11
3.2.2 ToneJamming..................................................................................................................11
3.2.3 SweptJamming................................................................................................................12
3.2.4 PulseJamming..................................................................................................................12
3.2.5 FollowerJamming............................................................................................................13
3.2.6 SmartJamming.................................................................................................................15

4 .

CHAPTER4:ELECTRONICCIRCUITSIMPLEMENTATION..............................................16
4.1 Methodology.....................................................................................................................16

II

4.2 MobileDetector...............................................................................................................18
4.3 IFStage..............................................................................................................................20
4.3.1 TriangularWaveGenerator .......................................................................................20
4.3.2 NoiseGenerator ............................................................................................................22
4.3.3 Mixer .................................................................................................................................24
4.3.4 VoltageControlOscillator ..........................................................................................26
4.4 RFStage.............................................................................................................................29
4.4.1 Synthesizer............................................................................................................29
4.4.2 IQModulator..........................................................................................................31
4.4.3 PowerSplitter.........................................................................................................32
4.4.4 PowerAmplifier...................................................................................................35
4.4.5 Antennas.................................................................................................................36
4.5 PCBoardsLayouts............................................................................................................37
4.6 PowerSupply....................................................................................................................40
5.

CHAPTER5:TEMSPOCKETANDPCSOFTWARE.........................................................42
5.1 TEMSPocket.......................................................................................................................42
5.2 SynthesizerSoftware..........................................................................................................43

6.

CHAPTER6:PICMICROCONTROLLERANDCOMPUTERPORTS.............................45
6.1 ThePICMicrocontroller......................................................................................................45
6.1.1 PICFamilies.............................................................................................................45
6.1.2 PICPinMapping.....................................................................................................46
6.1.3 SynthesizerMobileDetectorControllingSystem..................................................46
6.2 ComputerPortsInterfacing................................................................................................49
6.2.1 ParallelPorts...........................................................................................................49

7.

CHAPTER7:CONCLUSIONSANDFUTURERECOMMENDATIONS........................51
REFERENCES................................................................................................................................
APPENDIXA...........................................................................................................................................
APPENDIXB............................................................................................................................................

III

APPENDIXC............................................................................................................................................
APPENDIXD...........................................................................................................................................

IV

ListofFigures
Figure2.1:GSMArchitecture.........................................................................................................5
Figure2.2:TDMATechnology.........................................................................................................6
Figure2.3:GeneralBTSContain3TRXs.........................................................................................7
Figure3.1:JammingTechniques................................................................................................14
Figure3.2:GeneralBlockDiagramforIntelligentJammingSystem............................................15
Figure4.1:MobilePhoneIntelligentJammingSystemBlockDiagram........................................17
Figure4.2:MobileDetector..........................................................................................................19
Figure4.3:TriangularWaveGenerator........................................................................................20
Figure4.4:SquareWavefromPointA.........................................................................................21
Figure4.5:TriangularWavefromPointB....................................................................................21
Figure4.6:PracticalTriangleSignal..............................................................................................21
Figure4.7:NoiseOscillator...........................................................................................................22
Figure4.8:AmplifierStagestoAmplifytheNoise........................................................................23
Figure4.9:OutputNoiseWaveform.............................................................................................23
Figure4.10:PracticalOutputNoise..............................................................................................24
Figure4.11:TL082JFETOPAMP..................................................................................................25
Figure4.12:OPAMPMixer............................................................................................................25
Figure4.13:PracticalMixedWaveform.......................................................................................25
Figure4.14:BasicOscillator..........................................................................................................26
Figure4.15:MAX038FunctionGenerator....................................................................................27
Figure4.16:MAX038VoltageControlledOscillator.....................................................................28
Figure4.17:TransientSimulationforVoltageControlledOscillatorOutput...............................28
Figure4.18:PracticalVCOOutputWaveform..............................................................................29
Figure4.19:(AD4156)SigmaDelta FractionalNSynthesizer......................................................29
Figure4.20:ADF4157FrequencySynthesizer..............................................................................30
Figure4.21:EVALKITforSynthesizer...........................................................................................31
Figure4.22:RFMixer....................................................................................................................31
Figure4.23:WilkinsonPowerSplitter..........................................................................................32

Figure4.24:PowerSplitterDesign...............................................................................................33
Figure4.25:RFPowerSplitter......................................................................................................34
Figure4.26:MPA1920PowerAmplifier.....................................................................................35
Figure4.27:OutputPowerwithrespecttoInputPower.............................................................35
Figure4.28:MPA0925PowerAmplifier......................................................................................36
Figure4.29:Antenna.....................................................................................................................36
Figure4.30:IFStagePCB..............................................................................................................37
Figure4.31:MobileDetectorVer.2..............................................................................................39
Figure4.32:MobileDetectorVer.1..............................................................................................39
Figure4.33:BlockDiagramtoPowerSupply................................................................................40
Figure5.1:TEMSPocketInterface................................................................................................42
Figure5.2:MainScreenofSynthesizerProgram..........................................................................43
Figure5.3:RFOutputFrequencyScreen......................................................................................44
Figure6.1:PICMicroController...................................................................................................46
Figure6.2:StandbyControllingBlockDiagram............................................................................47
Figure6.3:PICFlowChartProgram..............................................................................................48
Figure6.4:ParallelPortPinNames..............................................................................................49

VI

ListofTables
Table2.1:GSMSystemsFrequencies.............................................................................................8
Table6.1:PICPinMapping..........................................................................................................46
Table6.2:PICLogicState..............................................................................................................47

Chapter

INTRODUCTION

The last few years have witnessed a dramatic boom in the wireless communications industry
which causes an increase in number of mobile users. This evolution of communication gives
numerousadvantagesandconvenienceformobileuser,however,theringingofmobilephones
becomes troublesome and annoying, especially in places where silence is required such as
Mosques,Universitylecturerooms,libraries,concerthalls,meetingroomsetc.Thisprojectwill
solvethisproblembyusinganintelligentjammingdevicecapableofpreventcellphonesfrom
operatewithinarestrictedareainJordan.

Communication jamming devices werefirst developed and used by military forces to prevent
successful transport of information between enemy forces. Nowadays, the mobile jammer
devicesarebecomingcivilianproductsratherthanmilitarydevices.Therearetwomajortypes
of jammers nonintelligent and intelligent jammers. The nonIntelligent Jammer is used in a
restricted area and it is designed to block all mobile phones operate in a certain frequency
bandssuchasdownlinkfrequencybandofglobalsystemformobilecommunication.Thistype
ofjammersisnotfitforcivilianuseandespeciallyformilitaryapplications;becauseitblocksall
mobile phones present in the restricted area. In addition, the system will transmit jamming
signals, whether there is mobile user in that restricted area or not. Moreover, the non
intelligent system jams the whole downlink frequency band even though the intruder mobile
phoneusesonlyasmallportionoftheband.
The intelligent jammer is developed to solve the problems appearing in nonintelligent
jammers; therefore this jammer is the most powerful jamming system that can be used by
civilians.TheintelligentJammernormallyworksasadetector.Whenitdetectssignalingfrom
1

the base station to the mobile station, it signals the base station not to establish a
communication.Thisprocessofdetectionandinterruptionofcallestablishmentisdoneduring
theintervalnormallyreservedforsignalingandhandshaking.

1.1 Objectives
Theobjectivesoftheprojectaretodesignandbuildanintelligentmobilephonejammerthat
canfulfillthefollowingrequirements.
A. Itiscapableofselectingandjammingthecontrollerchannelintherestrictedarea.
B. Ithasanintelligentcontrollerthatcontrolsalloperationsofthejammingsystem.
C. Itconsumeslesspowerthanthenonintelligentjammers.
D. Itisdesignedtocoverareaof20mradius.

1.2 Importance
Theintelligentmobilephonejammerhelpsustosilenceallmobilephonesinquiteareasand
thusenforcetherespectofpeoplesprivacy.

Somecountriespreventtheuseofjammingsystemsincivilianplaces;becauseitisradiates
thejammingsignalsatalltimethatmaybeeffectonhumanhealth.Theproposedintelligent
systemsolvesthisproblembydesigningamobiledetectorwhichcandecideifthereismobile
aroundornot;tomakethejammingsystemworkonlyatcalling.

Thesystemisdesignedtoblockonlythecontrollerchannelnotthewholeofspectrumasthe
nonintelligentjammers.

1.3 ReportOutline
This Report is divided into seven chapters; Chapter 2 will explain the main structure of
GSM/DCS system network related to air interface base transmission station (BTS) and Base
station center (BSC).The disabling of the mobile communication systems (GSM, DCS) done by
using Jamming techniques which explained in chapter 3. Electronic circuits and power supply
will be designed and simulated using advance design system (ADS) software package, these
details shown in chapter 4. The main feature of this project is to select only the controller
channelandblockitonly,thetechniqueofknowingthischannelwillexplaininchapter5.The
intelligentjammingsystemhasintelligentcontrollersystemconsistsofPICMicrocontrollerand
interfacing ports these details can be seen in chapter 6. Finally the conclusion and future
recommendationaregiveninchapter7.

Chapter

GSM/DCSMOBILE
COMMUNICATIONSYSTEMS

2.1 IntroductionToMobileTelephoneSystems
The key technologies used in cellular mobile radio include cellular frequency reuse1, analog
cellular(1stgeneration)include AdvancedMobilePhoneService(AMPS) wastheoriginalanalog
cellularsystemintheUnitedStates.ThefrequencybandsfortheAMPSsystemare824MHzto849MHz
(uplink) and 869 MHz to 894 MHz (downlink). After that in first Generation the total Access

Communication System (TACS) was deployed with difference than AMPS in radio channel
frequency bandwidth. Then the 2nd generation was implemented includes Global System for
MobileCommunication(GSM)thatwillexplainindetailslaterinthischapter,alsointhesame
generation the North American TDMA (IS136 TDMA) and Code Division Multiple Access
(CDMA) was deployed. The development in 2nd generation was appearing in Packet based
digitalradio(2.5generation) includeGeneralPacketRadioService(GPRS)andEnhancedData
RatesforGlobalEvolution(EDGE).FinallytheCDMA2000andWidebandCodeDivisionMultiple
Access(WCDMA)includesin3rdgeneration[1].

InJordan,therearetwotypesof(GSM),theGSM900andGSM1800,thefirstoneisusedby
Zain and Orange Companies, and the second one is used by UMNIAH Company. This system
also called digital cellular network system (DCS), so that this project is focusing only on GSM
andDCSsystemstodesignourintelligentjammingsystem.

To conserve the limited amount of radio spectrum (maximum number of available radio channels), the cellular system
concept was developed. Cellular systems allow reuse of the same channel frequencies many times within a geographic
coveragearea[1].


This chapter will talk about the GSM architecture; types of channels, power sensitivity,
frequencybandsoftheGSM/DCSsystemsalsowilltalkaboutthehoppingsystem.

2.2 GSMArchitecture
GSM provide for voice and data communication throughout a wide geographic area. GSM
systems divide large geographic areas such as Jordan into small radio areas (cells) that are
interconnected with each other (Microwave connection). Each cell coverage area has one or
severalTRXsthatcommunicatewithmobiletelephoneswithinitscoveragearea.

2.2.1 BaseStationCenter(BSC)
Figure2.1showsthearchitectureoftheGSMnetwork,theBSCisthecenterofdifferentBase
TransceiverStations(BTSs)themainfunctionsofBSCareto[2]:

controlthehandoverbetweenitsBTSs.

switchtrafficandsignalingto/fromtheBTSsandMSC.

managetheinterconnectionbetweenBTSsandMSC.

Figure 2.1:GSMArchitecture


2.2.2 BTSArchitecture:
EachBTScontainsfromTRXscalled(Radio),eachRadiohassinglefrequency.ByusingTDMA
technologywecandefine8TimeslotsineachfrequencyasshowninFigure2.2.

Timedivision

fo

FrequencySpectrum

Figure2.2:TDMAtechnology

ThearrangementofRadiosinBTSisshowsinFigure2.3.TheTRXnumber0hasBroadcasting
controllerchannel(BCCH)andstandalonecontrollerchannel(SDCCH)controllerchannels.This
meansthat6userscanbeusingTRX0atthesametime.SDCCHiscalledSDCCH/8sinceithas8
Timeslotstoworkasimmediateassignment.


TRX2

TRX1

TRX0

BCCH
SDCCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH
TCH

I
I I I I I I I I
I
I
>>>Toantenna
I
I
I
I
I
I
I
I
>>>Toantenna
I
I
I
I
I
I
I
I
>>>Toantenna
I
I
I
I

Figure2.3:GeneralBTScontain3TRXs

2.3 TypesofChannels:
Therearetwotypesofchannels;logicalandcontrollerchannels:
I.

LogicallyChannels(TCH,andPDCH):

ThetrafficChannel(TCH)usesfortrafficcallsandPacketDataChannel(PDCH)usingtotransfer
Data.EachTCHworkincaseofFullRateorHalfrateusing(Fullratetranscending)[2].

II.

ControllerChannels(SDCCHandBCCH):
A. BCCH:TheBroadcastControlChannelsaredownlinkingonly(BSStoMS)[3]
B. SDCCH(standalonecontrolchannel):sendstheimmediateassignmenttomobile
stationtocompletecallsetupprocedure[3].

2.4 PowerLevelTransmittedandSensitivity:
Thepowertransmittedfromantennaintoweris47dBmasdownlinksignal.Minimumpower
required from mobile to connect with its BTS is 110dBm, and its different from mobile to
mobileduetothedifferentsensitivityofdifferentmobilesantennas.

2.5 FrequencyBands
Table 2.1 contains the frequency bands for GSM and DCS systems. To avoid the fractions in
frequency; the companies of mobile communication uses the abbreviation absolute radio
frequencychannelnumber(ARFCN)todefinetheuplinkanddownlinkfrequencyatthesame
time,(seeAppendixB).

Table2.1:GSMsystemsFrequencies

GSMsystem

Uplinkfrequencyband

downlinkfrequencyband

GSM900

890915MHz

935960MHz

GSM900ExtendedBand

880915MHz

925960MHz

17101785MHz

18051880MHz

DCS18002

2.6 FrequencyHoppingSystem:
Beforeexplainingthistechnologyyoumustknowthatthemobilechangesitstunedfrequency
forthefollowingreasons:
1. DuetoLevelofpowertransmitting,soitssearchaboutfrequencyhasmaximumpower.
2. Duetointerferences,soitssearchaboutfrequencyhasminimuminterference.

DCS1800digitalcellularnetworkat1800MHz


Thefrequencyhoppinginsimplewordisatechnologyofchangingtunedfrequencyoftraffic
channelduetomobilephoneperiodically(ineach0.5Sec).
Thefrequencymeans:thatonlyTRXshasonlyTCH,sotheTRXshaveBCCHisnotincludingin
FrequencyHoppingsystem[4].

Chapter

JAMMINGTECHNIQUES

After the background information of GSM/DCS systems, it does make sense to have
information about the methods which followed to jam the communication systems. In
general, the Jamming is successful when the jamming signal denies the communication
Process.Thischapterwilldescribethesemethods(jammingtechniques)indetailsthatbased
ontwobasicideas:noisemixingandphasechangingtoobstructandblocktheoriginalsignal.

3.1 JammingStrategies:
3.1.1

NoiseStrategies:

The main idea here is to insert additional noise in receivers which prevent these Rx from
getting the correct information from the receiving signal. Almost all the techniques which
willbediscussedlaterdependonthesestrategies[5].

3.1.2

PhaseStrategies:

Themainideaistochangethephaseofsignalstopreventthereceiverswhichusesthis
phasetoreceivesignalincorrectphase.

3.2 JammingTechniques
3.2.1

NoiseJamming:

Thecarriersignalismodulatedwithnoisetoinsertnoiseintothereceiver.Bythisthe
jammercanemitmultipletones,usually;theplacementofthesetonesisbasedonsome
knowledgeofthetargetortargetstobejammed.Noiseisusedtoraisethebackground
10

noiseinthespectruminwhichthetargetsystemisoperating.Thebandwidthofthesignal
canbeaswideastheentirespectrumwidthusedbythetargetsystemormuchnarrower,
occupyingonlyasinglechannel.Thesechoosemakesthesekindsofnoisejamming[5].

3.2.1.1

BroadbandNoise(BBN)Jamming:

Broadband noise (BBN) jamming places noise energy across the entire width of the
frequency spectrum used by the target system radios. It is also called full band or barrage
jamming.Thistypeofjammingisusefulagainstallformsoftargetsystemcommunications.It
isgenerallyusefulforcoverageanareaforscreeningpurposesaswell[5].
The limitation of this jamming that is result in low jo (jamming signal power) and this low
power is spread very wide. The BBN can effect on synchronization as Fast Frequency
Hopping(FHSS)whichtypicallyneedresynchronizeoneverytransmissionattempt[5].

Thesynchronizationconsistsofaligningthetimeepochofthetransmitteratthereceiverand
aligningthePNcodesequence.Thelatercausesthereceivertohoptothesamefrequencies
asthetransmitter,whiletheformerinsuresthatthesehopsoccuratthesametime.Ifthe
receiver is precluded from synchronization with the transmitter then communication is
denied.TheBBNjammingraisesthebackgroundnoiselevelsandcanbeusedtoattackthe
synchronizationprocess.PossibleBBNjammingspectrumisshowninFigure3.1(b)

3.2.1.2

PartialBandNoise(PBN)Jamming:

PBN jamming places noisejamming energy across multiple, but not all channels in the
spectrumusedbythetargets[5].Thesechannelsmayornotmaybecontiguous.Possible
PBNjammingspectrumisshowninFigure3.1(C,d)

11

3.2.1.3

NarrowbandNoise(NBN)Jamming:

NBN jamming places all the jamming energy in a single channel. The bandwidth of this
energyinjectioncouldbethewholewidthofthechanneloritcouldbeonlythedatasignal
widthorthecomplementarysignalwidth[5].
PossibleNBNjammingspectruminFigure3.1(e)

3.2.2

ToneJamming:

Intonejamming,oneormorejammertonesarestrategicallyplacedinthespectrum.Where
they are placed and their number affects the jamming performance. There is two type of
tonejamming[5]:
A. Singletonejammingwheresignaltunesareplacedwhereitsneeded.
B. Multitonejammingdistributesthejammerpoweramongseveraltones.
The phase of the jammer tone relative to the target signal can be important parameter,
whenthereisasingletonejammingsignalitswellbeeitheratthemarkorspacefrequency.
Ifit'satthemarkfrequency,thenthephasecanpresentaproblemwhenthejammertoneis
sufficientlyoutofphasewiththesymbolsignal.Ifit'satthespacefrequency,theniftheJSR
islargeenoughthesymbolisjammedindependentofthephaserelationship[5].
Itsstillneedtomentionthatthesingletoneissuitablefordirectsequencespreadspectrum
(DSS),butnotforthechangingfrequencysystemlikeFHSS,howeverthemultitonejamming
candealwiththeFHSS.PossiblesingletonejammingspectrumisshowninFigure3.1(f)and
gMTin(g).

3.2.3

SweptJamming:

In swept jamming a relatively narrowband signal which could be asnarrow tone but more
oftenPBNsignal,issweptorscannedintimeacrossthefrequencybandofinterest.Atany
instantintime,thejammeriscenteredonanarrowregionaroundthisfrequency.However,
since the signal is swept, abroad range of frequencies can be jammed in a short period.
When implemented digitally, for example, the jammer may spend 100s at any one
frequencybeforemovingontothenextbandtobejammed.Normallythesebandswouldbe
12

consecutivebuthavenottobe,thebandscouldactuallybeselectedrandomallywithdigital
synthesizer generating the jamming waveform. In this way, this jammer could cover the
whole30to90MHZbandinabout240ms;herethefullpowerofthejammerisemployedat
each dwell bandwidth. It's possible to avoid certain bands that mightbe in use by friendly
forces.Thisistrueonlywhenthetimingistailoredtothetargetreceiversothatthejamming
signalispresentatthereceiverforanadequatedwelltime.Bysweepingthejammingwave
formoverawholerangeofspectrum,thenthejammerisensuretojamattheentiresetof
hop frequencies. Timing is important here, the sweeping must be fast enough to that the
wholebandiscoveredinasufficientlyshortperiodorhopswilloccurforwhichnojamming
signalispresent.Forexampletocoverthe60MHZinthelowVHFrange10timespersecond
requiresasweeprateof600MHZpersecond[5].

3.2.4

PulseJamming:

Thistechniqueissimilarinconcepttopartialbandnoisejamming.Pulsejammingcanhave
loweraveragepowerthansomeofotherjammingtechniquesdiscussedhere,andbejustas
moreeffective.Thedutycycledeterminestherelationshipbetweentheaveragepowerand
peak power. The jamming effects depend on the peak power and how often that signal
returnstothereceiver[5].

3.2.5

FollowerJamming:

ThisJammerattemptstolocatethefrequencytowhichthefrequencyhoppingtransmitteris
sent,toidentifythesignalastheoneofinterest(thetarget),andjamatthenewfrequency.
Thisjammingwaveformcouldbeintheformoftonesoritcouldmodulatethetoneswith,
say,noiseusingFMmodulation.Followerjammingisalsoreferredtoasresponsivejamming,
repeaterjamming,andrepeaterbackjamming[5].

13

Amplitude

(a)

Frequency

(b)

Frequency

Amplitude

Amplitude

(c)

Frequency

Amplitude

Amplitude

(d)

Frequency

(e)

Frequency

Amplitude

(f)

Frequency

Amplitude

(g)

Frequency

Figure3.1:achannelizedspectrum,bfullbandjamming,c contiguouspartialbandjamming
dNondcontiguouspartialbandjamming,enarrowbandnoisejamming,fsingletone
jamming,andgMTjamming

14

3.2.6

SmartJamming

This category of jamming techniques attempts to disrupt portions of digital signals only,
selectingonlythoseportionsnecessarytodenycommunications,ifpossible.

Figure3.2:Generalblockdiagramforintelligentjammingsystem

TodescribethesysteminablockdiagramshowninFigure3.2,let'sdiscusstwocases:First
case,theGSMScannerandPowerdetectorSystemsdetectsamobilephoneintherestricted
area and gives information to computer about the frequency used by mobile phone, and
thenthecomputergivesthecircuitinterfacesystemaninstructiontopreparethejamming
systemtoblockthemobilephone.Secondcase,whentheGSMscannerandpowerdetector
systems are not detecting mobile phone in the restricted area for a time specified in
computer,thecomputergivesthecircuitinterfaceaninstructiontoshiftthejammingsystem
intostandbymode.

15

Chapter

METHODOLOGYANDELECTRONIC
CIRCUITSIMPLEMENTATION

Thedeepviewinsidethesystemwillshoweachstageandthecircuitsindetails.Thischapter
will talk about the Methodology to build the jamming system from the electronic point of
view and it will explain clearly the main function of each single circuit and its theoretical
information also this chapter contains analysis and design for each circuit by using the
advancedesignsystemsoftwarepackagesuchasmixer,noisegenerator.etc.

4.1 Methodology
To build this project; the system must be divided into two phases; the first phase as the
jamming system and the second one is to control the jamming system to be an intelligent
jamming system. These subsystems and stages are coming from different functions of each
small component, so lets discuss the purpose of each stage by explaining the operation of
thesystem.

Themainpurposeoftheoverallsystemistodisableorblockmobilephonesintherestricted
area.AsshowninFigure4.1theintelligentjammingsystemisdesignedtoworkasdetector,
where the Mobile detector are detect the RF signals from mobile and supply the PIC
microcontrollerbytherequiredinformationtocheckifthereismobilephonearoundornot.
The synthesizer then will be enabled by PIC to block the desired frequency. The desired
frequency here means the controller channel that can be detected using TEMS pocket that
willbeexplainedlaterinchaptersix.

16

Thejammingsystemwillproducethejammingsignalbymixingthenoisewithintermediate
frequency and then modulate into UHF (Ultra High Frequency) range for mobile
communicationsystemassinglesideband(SSB).Theswitchingsystemwillchoosethemobile
communication system to jam (GSM or DCS). Finally the signal must be amplified to be
propagated.

Thedesignofanystageofthesystemisdependsonthecharacteristicsoftheproblem.Inthis
designoftheprojectissupportedbytheAgilenttechnologysoftwarepackagecalledADSand
othertoolsusingtoprogramtheintelligentcontrollersuchasPICmicrocontroller.

Figure4.1:Mobilephone intelligentjammingsystem blockdiagram

17


Thisprojectcanbeimplementedintwophases;thefirstoneistheDesignandSimulationby
UsingADS.AsshowninFigure4.1thejammingsystemischaracterizedbytheintermediate
frequency (IF) stage, radio frequency (RF) stage, and Transmission stage. Also signal
processinginordertoselectcontrolChannelsisdonebyTEMSpocketsoftware.
TheUHFmodulation,inordertomodulatethesignaltobetransmittedisshowninFigure4.1
as IQ modulator. Finally the transmission stage is required to propagate the signal through
antenna.

4.2 MobileDetector
Proceedingfromtheintelligentlyoftheprojectitisimportanttofindordesignacircuitthat
candetectcallingprocessandgiveawarningtothecontrolsystemtoshiftthejamminginto
power on mode. This section has a brief description about the calling detector circuit, its
componentsandthetestingresults.

Thiscircuit3isshowninFigure4.2cansensethepresenceofanactivatedmobilephonefrom
adistanceofoneandhalf(1.5)meter.Itcandetecttheincomingandoutgoingcalls,SMSand
videotransmissionevenifthemobilephoneiskeptinthesilentmode.Atthemomentthe
bugdetectsRFtransmissionsignalfromanactivatedmobilephone,itstartssoundingabeep
alarmandtheLEDblinks.Thealarmcontinuesuntilthesignaltransmissionceases.

ThecircuitasshowninFigure4.2consistsoffourmainstages
1. CapturingRFtransmissionstage.
2. Currenttovoltageconverter
3. Triggerstage
4. Timerstage

D.MOHANKUMAR,MobileBug,Electronicsforyoumagazine,2008

18

Figure4.2:Mobiledetector

CapturingRFtransmissionstage
Thisstagecancaptureallfrequenciesinthemobilecommunicationspectrumfrom0.9to3GHz
with a wavelength of 3.3 to 10 cm. To do the detection job this stage uses a 0.22F disk
capacitor (C3), this capacitor stores energy and transfers the stored energy in the form of
minutecurrenttotheinputsofthestageofcurrenttovoltageconverting.

CurrenttoVoltageconverterStage
The aim of this stage is to convert the minute current from the previous stage into the
correspondingoutputvoltagebyusingacurrenttovoltageconvertor(CA3130).

Triggerstage
ThisstageusedtotriggerthetimerstageandprovideanInvisiblealertaboutthetransmission
mobiledataoccurrencethistriggerusedamonostabletimer(NE555).

19

4.3 IFStage
4.3.1

TriangularWaveGenerator:

Figure4.3showsthetriangularwavegeneratorcircuit[6],itiscontainingtwostagesthefirst
istheSchmitttriggerthatgeneratessquarewaveandtheotheristheintegratorcircuitthat
integratethesquarewavetothetrianglewave.Thetriangularwaveoscillatoriscomposedof
theSchmittcircuitandtheintegrationcircuit.
(ThevalueoffrequencygeneratedfromthiscircuitdependsontheratiooftheresistorsR2
andR3).
In this project the period of Triangle wave required to block GSM system is defined as
following:
T=.577msec2=1.154msec
Where:.577msecisthetimeofeachtimeslot.

Figure 4.3:TrianglewaveGenerator

20

Figure4.4:SquarewavefromPointA

Figure 4.5:TriangularwavefromPointB

Figure4.6:PracticalTriangleSignal

21

4.3.2

NoiseGenerator:

Inthisprojectthejammingsystemneedsacertaintypeofnoisetocoveraportionbandof
spectrum, so the most applicable type of noise in this case is the white noise. The noise in
generalcanbedefinedasaRandommovementofchargesorchargecarriersinanelectronic
devicegeneratescurrentandvoltagethatvaryrandomlywithtime[7].

4.3.2.1

WhiteNoise

Whitenoiseisarandomsignal(orprocess)withaflatpowerspectraldensity.Inotherwords,
the signal's power spectral density has equal power in any band, at any centre frequency,
havingagivenbandwidth.Whitenoiseisconsideredanalogoustowhitelightwhichcontains
all frequencies [7]. An infinitebandwidth, white noise signal is purely a theoretical
construction.Byhavingpoweratallfrequencies,thetotalpowerofsuchasignalisinfinite.In
practice,asignalcanbe"white"withaflatspectrumoveradefinedfrequencyband[7].

Therequirementsaretofindacircuitwhichgeneratesawhitenoise.Thecircuitasshownin
Figure4.7willgeneratethenoiserequiredforthejammingsystem.

Figure4.7:NoiseOscillator

22

4.3.2.2

AmplifierStage

Toamplifythenoisegeneratedbythepreviouscircuit;thetwostagesofamplificationin
Figure5.7isused.

Figure4.8:AmplifierStagestoAmplifytheNoise

ThecapacitorC4isjustforblockingDC.Thevalueoftheresistorformsthenoneinverting
Amplifieranditsgainisgivenby(1+R/R2).ThenoisewaveformisshowninFigure4.9and
4.10.

Figure4.9:OutputNoisewaveform

23

Figure4.10:PracticalOutputNoise

4.3.3

Mixer:

Mixerisanonlinearcircuitthatcombinestwosignalsinsuchawaytoproducethesumand
differenceofthetwoinputfrequenciesattheoutput[8].

4.3.3.1

TransistorMixer:

In this project the mixer uses FET transistor; scince its a low noise device and fast in
response, so its efficient device in this case. The FET Circuit illustrates the technique of
summingthetwoinputsignalatasingleinputterminal(bothIN1andIN2areappliedtothe
gate)[8].FETscanbeusedinmixersinbothactiveandpassivemodes.

Therearedifferenttypesofmixersanddifferenttechniques;inthisprojectthemixerusesthe
simplesummercircuitcontainsfromjustonedualOPAMP(TL082)asshownFigure4.12[6].
TL082OPAMPasshowninFigure4.11isahighspeedJFETinputdualoperationalamplifiers
incorporating well matched, high voltage JFET and bipolar transistors in a monolithic
integratedcircuit.Thedevicesfeaturehighslewrates,lowinputbiasandoffsetcurrent,and
lowoffsetvoltagetemperaturecoefficient.

24

Figure4.11:TL082JFETOPAMP

Figure4.12:OPAMP Mixer

Figure4.13:PracticalMixedwaveform

25

4.3.4 VoltageControlOscillator:
Inthisprojectthevoltagecontroloscillatorisusedtogenerateaportionofmodulatedsignal
from 2 kHz 310 kHz, bandwidth 200 kHz as the GSM mobile communication channel
bandwidth.

4.3.4.1

OscillatorPerformanceParameter:

Frequency tuning range is one of the most fundamental tradeoffs in an oscillator. The Q
factor of the resonator sets the noise performance of the oscillator. In general, the more
tunableanoscillatoristhelowertheQoftheresonator[9].

Any amplifiercanbemadetooscillate ifaportionoftheoutputisfedbackto theinputin

such away the (Barkhausen Criteria) Figure 4.14 shows the basic block diagram to any
oscillator[8].Thetwoconditionsmustbesatisfiedtobeoscillatortooscillate[8]:
A. AB=1
B.

Figure4.14:BasicOscillator

26

The MAX038 as shown in Figure 4.15 is a highfrequency, precision function generator

producing accurate, highfrequency triangle, sawtooth, sine, square, and pulse waveforms
with a minimum of external components. The output frequency can be controlled over a
frequencyrangeof0.1Hzto20MHz.
TheoutputofthemixerinenteredtoMAX038fromINpinwithinseriesResistortoconvert
thevoltageintocurrent.CFchangedto1nFalsotheoutputissinwavesoAo=logic1andA1
=logic1.

Figure4.15:MAX038function
generator

27

ThevoltagecontrolledoscillatorconfigurationisshowninFigure4.16[10].

Figure4.16:MAX038Voltagecontrolledoscillator

Figure4.17:TransientsimulationforVoltagecontrolledoscillator output

28

Figure4.18:PracticalVCOoutputwaveform

4.4 RFStage
4.4.1

Synthesizer

Itsadevicewhichisusedasatunableoscillator.TheADF4156isshowninFigure4.19and
4.20isa6GHzfractionalNfrequencysynthesizerthatimplementslocaloscillatorsintheup
anddownconversionssectionsofwirelessreceiversandtransmitters.

Figure4.19:(AD4156)SigmaDelta
FractionalNSynthesizer

29


Figure4.20:ADF4157FrequencySynthesizer

Thefollowingequationgovernshowthesynthesizershouldbeprogrammed[11]:
RFOUT

FRAC
225

FPFD

Where:
RFOUTistheRFfrequencyoutput.
Nistheintegerdivisionfactor.
FRACisthefractionality.

ThisIChasEvaluationkittoconfiguretheinterfacingwiththecomputerandtoprovidethe
synthesizertheReferencefrequencyasshowninFigure4.21[11].

30

Figure 4.21:EVALKITforSynthesizer

4.4.2

RFMixer

As mentioned before; the jamming signal must have the same frequency of the controller
channelwithbandwidthequalto(200KHz)providedfromVCOintheIFstage,soyouneedto
carrythisbasebandonasuitablecarrierwhichhavethefrequencyofcontrollerchannel;to
dothisitsusefultousetheRFMixerasshowninfigure4.22.

Figure 4.22:RFMixer

31

RFMixerisshowninFigure4.22[12]isusedtoproduceamodulatedsignalmixedwithnoise.
Thecarrierfrequencywillbefedtothemodulatorbythesynthesizer,andthebasebandfrom
theVCOinIFstage.TheintroducingofDoublesideband(DSB)signalcanbedonebyfeeding
theIFsignalfromIterminalandcarrierfromLOterminal [13].

4.4.3

PowerSplitter

AfterthesignalmixedwithcarrierfrequencyandbecomeinUHFrange,thesecondstepisto
amplify the signal to be transmitted. The transmission stage has two branches; 900 MHz
branch and 1800 MHz branch, so to divide the common signal between two branches; the
splittingprocesswillbeused.

4.4.3.1

PowerSplitter:

Splittersareusedextensivelyinwirelesssignaldistributionnetworks,tosplitthebasestation
transmittedsignal,Tx,intomanydifferentpathstoreachmultipleantennas,andatthesame
timetotransmit thesignals receivedby theantennas, Rx,backtothebasestation receiver
[14].

Figure 4.23:WilkinsonPowerSplitter

32

Wilkinson Splitters is shown in Figure 4.23 for microwave frequencies generally use a
microstripdesign.Theyconsistofapairofquarterwave(/4)transmissionlinesectionswith
characteristic impedance of 70.7 which are series terminated at the output with a 100
resistor[14].
ThedesignofpowersplitterusingAutoCADisshowninFigure4.24.

Figure 4.24:PowerSplitterdesign

33

InthisprojectbecauseofproblemstobuildtheRFcircuitsPCBsweusetheRFPowerSplitter
moduleasshowninfigure4.25.

Figure 4.25:RFPowerSplitter

4.4.4

PowerAmplifier

FirstletscalculatetheminimumpowerrequiredtoblocktheGSM900andDCS(Jr):
ForGSM900theminimumsignaltonoiseratio(SNRmin=9dB)andmaximumsignalpower(S
MAX=15dBm)[16].

Now

,soJr(dB)=159=24dBm.Tocoverareaof20meterradius;thefree

spacepowerloss(FSPL)shouldbecalculatedasfollow:
FSPL=20log

[17].

Where:
Rand inmeter
For960MHz

0.3125 m,substitutinginFSPLequationgives:

FSPL=58dB,thenJr=24+58=34dBm.

ForDCS:
SNRmin=9dBandSMAX=23dBm[16].
Repeatingthecalculationwithf=1880gives:
Jr=32+63.9=31.9dBm.
Tomeetthispowerweneedapoweramplifier.
34


4.4.4.1

PowerAmplifierDCS1800

Its a power amplifier which can be used to give the sufficient power for jamming signal in
range of DCS downlink frequency (1805 1880 MHz). This power amplifier can give 33dBm
maximumpower.TheFigure4.26showsthepoweramplifiermodulefromRFbayinc[18].

Figure 4.26:MPA1920PowerAmplifier

Butthepowercomingfromsynthesizerisnotsufficienttobeamplifiedto33dBmasshownin
figure4.27toget33dBmoutput;theinputpowermustbefrom(1015)dBm;sotheRF
AmplifierMRA2000isusedtoamplifytheinputsignalfrom0to10dBm.

Figure4.27:OutputPowerwithrespecttoInputPower

35

4.4.4.2

PowerAmplifierGSM900

ThispoweramplifierissuitableforGSM900downlinkfrequency(925960MHz).Thispower
amplifier can give 34dBm maximum power. The Figure 4.28 shows the power amplifier
modulefromRFbayinc[19].Inthispoweramplifierthereisnoneedtoamplifythesignalfed
fromsynthesizerbecauseitissufficienttogetthedesiredoutputpower.

Figure 4.28:MPA0925PowerAmplifier

4.4.5

Antenna

The final stage in any Transmitter communication system is the Antenna, in this project of
intelligentjammingsystemforGSM,needstoantennaworksinfrequencyofGSMandDCS
systems as explained in chapter 2. The antenna has shown in Figure 4.30 support multiple
mobilesystemslike[AMPS,GSM,DCS,PCSandUMTS].Theradiationpatternofthisantenna
isomniwithverticalpolarizationalsohas2dBigain[20].

Figure 4.29:Antenna

36

4.4.6

PCBBoardsLayouts

ByusingPCB(Printedcircuitboard)programtodrawthelayoutofthecircuitinthisproject
like[IFstage,PowerAmplifiersfor900and1800,Powersplitter,Mobiledetectorver.1and
ver.2]asfollow:

Figure 4.30:IFStagePCB

37

Figure 4.31:MobiledetectorVer.1

Figure 4.32:MobiledetectorVer.2

38

4.4.7

PowerSupply

Themainoperatorofthejammingsystemfromtheelectricitypointofviewistheelectrical
power because it will bias and feed each stage in the system. This section will explain the
relationshipbetweenthepowersupplyandotherstagesinthesystem.

Ingeneralthepowersupplyconsistsoftransformation,rectification.Filtrationandregulation
asshownintheFigure4.36[6]:

Powersupply

Input
voltage

Transformer

ToVCO

Rectifier

Filter

Regulator

To
Oscillator

Tonoise
circuit

Figure4.33:Blockdiagramtopowersupply

TheFigure4.36showsthegeneralpowersupplycircuitthatcanbeexplainedeachofthem
asfollow:
1. Thetransformerisusedtostepdowntheinputvoltagefrom220tothedesiredvalues.
2. TherectifierstageisusedtoconvertthesignalfromACtoDC.
3. Filterisusedtoreducetherippleofvoltagethatresultsfromrectifierstage.
4. Theregulatorisusedforsafetyandtoensureafixedvoltageacrossacertainloadinthe
circuits in case the input values or the load are changed so it have the concept of the
zenerdiodeprinciple.AsexampleontheregulatorsL200ICwithhighvoltage.

39

4.4.7.1

TheOperationofPowerSupply

Therearetwowaystosupplythesystemwithrequiredvoltages:

1. Using AC to DC power supply, which gives directly the wanted values, for example the
power supply of the PC which has a complex arrangement of electrical components,
includingdiodes,capacitorsandtransformers,thisspecialpowersupplyiscalledswitched
mode power supply (SMPS), the switching process is to convert the current frequency
from 50 Hz to higher frequency; to reduce the ripple that inversely proportional to
frequency.Theiroutputsare:3.3,5,9,12and5,9,12.Thismethodisnotusedinthis
projectbecausethesystemneedsto28V.

2. Buildingapowersupplyfromtransformer,bridgerectifier,andregulators.Inthismethod
the center tap transformer step down from 220 to 30 is used, then connects a bridge
rectifierlikeKBPC3510withtwocapacitorstogetDCsignal.

4.4.7.2

PowerSupplyPCBlayout

40

Chapter

TEMSPOCKETANDPC
SOFTWARE

5.1 TEMSPocket
In this project as intelligent mobile jamming, the most important feature of this system is
simplifiedinsimpleworldsashowtoknowthecontrollerchannelfrequencyintheneighbor
base stations to block it only. The manually method to measure the frequency of the
controllerchannelwhichneedsmorethanoneheavyequipmentslikespectrumanalyzerand
antenna adapter also need someone has experience in mobile communication specially in
GSMsystem,sotheTEMSPocketisanoptimumsolutiontothiscase.

TEMS Pocket is a basic mobile network diagnostics tool built into an Ericsson T610 GPRS
mobile station. TEMS Pocket is suitable for daytoday verification, maintenance and
troubleshootingofmobilenetworksbutisalsohandyformanycellplanningtasks[21].

The interface of TEMS pocket have a number of parameters not all these parameters is
importantinthisprojectseeFigure5.1.

Figure 5.1:TEMSpocketinterface

41

5.2 SynthesizerSoftware
The synthesizer ADF4157 receive the fraction digital numbers from software based in PC
computerviaparallelport.ThissoftwareisprogrammedfromAnalogDevicesCompany.
Letsdiscussthissoftwarewithpicturesfromitsinterfaceasfollow:

Figure5.2:Main screenofsynthesizerprogram

Figure5.2showsthemainscreeninADF4157Software,thatcanbesendthefractionalin
registersviaparallelportwhenpressinUpdateAllRFRegister.

42

Figure5.3:RFoutputfrequencyscreen

As shown in Figure 5.3 the output frequency in VCO can be changed and then press the
UpdateR0andR1button,otherfeaturecanbechangedlikestepsizeandref.division.

43

Chapter

PICMICROCONTROLLERAND
COMPUTERPORTS

Theintelligentsystemneedstobeundercontrolandtohaveaspecificoutputaccordingtoa
specific input. One of the most important digital controllers is the PIC microcontroller that
standsforProgrammableInterfaceController.ThischapterwilltalkaboutthePICtypesand
therelatedassemblycodes.Alsoitwilldeterminewhichonetobeusedinthisproject.

6.1 ThePICMicrocontroller
PIC is a family of microcontrollers made by Microchip Technology. The original one was the
PIC1650 developed by General Instruments. This device was called PIC for Programmable
IntelligentComputeralthoughitisnowassociatedwithProgrammableInterfaceController
InsteadtheypreferthebrandnamePICMicro.PopularwisdomrelatesthatPICisaregistered
brandinGermanyandMicrochipisunabletouseitinternationally[22].

6.1.1

PICFamilies:

TherearethreefamiliesofPICMicro:
1. BaselinePICFamily
2. MidrangePICFamily
3. HighPerformancePICFamily

44

6.1.2

PICPinMapping:

Figure6.1isatopviewofthePICICchip,alsothenameandfunctionofeachpinistabulatedin
Table6.1.
Table6.1:PICPinMapping

PinNumber

PinName

Function

1
2

PortA
PortA

PortA

4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

MCLR
VSS
PortB
PortB
PortB
PortB
PortB
PortB
PortB
PortB
VDD
OSC2
OSC1
PortA
PortA

BidirectionalpinI/O
BidirectionalpinI/O
BidirectionalpinI/O,TOCK1which
functionsasatimer
ResetSystem(0toactive)
0Volt(GND)
BidirectionalpinI/O,Interruptinput
BidirectionalpinI/O
BidirectionalpinI/O
BidirectionalpinI/O
BidirectionalpinI/O
BidirectionalpinI/O
BidirectionalpinI/O
BidirectionalpinI/O
+5Volt(biasing)
CrystalTerminal(Oscillator)
CrystalTerminal(Oscillator)
BidirectionalpinI/O
BidirectionalpinI/O

Figure6.1:PICMicroController

6.1.3

SynthesizerMobileDetectorControllingSystem

PIC microcontroller can be programmed using Assembly or C language. In this project the
programisusingClanguagebecauseitseasytounderstandandimplement,(seeAppendixC)
that contains the PIC program instruction set. In Figure 6.3 shows the flow chart of PIC
microcontrollertocontroltheMobiledetectorcyclicchecksensing.
Thisprogramperformedtocheckthelogiclevelcomingfrommobiledetector.Ifthelogiclevel
inputtoPICterminalsishighthePICwillgivealowlogicleveltoenablethesynthesizerandvice
versa.Thecallingdetectorprovidestriggerthatindicatesaboutthereisamobilephoneinthe
restrictedareaornotasshowninFigure6.2.

45

TheSchmitttriggerconvertsthelevelofplusesintosuitableleveltoPIC,andthenthePICwill
decidetheoutputlogicasfollowingstateinTable6.1:
Table6.2:PICLogicstate

INPUT
1
0

OUTPUTEN
0
1

The PIC microcontroller still provides EN logic (0) after he gets a logic (1) from the calling
detectorforashorttimespecifiedinthePICcode;inthiscasetheprogramadjustedtoprovide
theENlogicfor20msec.thenthePICautomaticallygivesalogic(1)todisablethejammingand
shiftthesystemintostandbymodeseeflowchartinFigure6.3.

Figure6.2:Standbycontrollingblockdiagram

46

Figure6.3:PICflowchartprogram

47

6.2 ComputerPortsInterfacing
Ports are used to make a connection between PC and the external devices this connection
(interface)iscalledinputoutputports.Therearetwotypesofportsthefirstoneisserialport
and the second is parallel ports, in this project the parallel port is used to interface the
synthesizer.

6.2.1

ParallelPorts

Theparallelinterfacingisthemostcommonlyusedforinterfacingwithmanydevicesincluding
microcontroller unit (MCU), microprocessor unit (MPU) and peripheral devices. The main
propertythatdifferstheparallelinterfacingfromanothertypeofinterfacingisthatanumber
ofbit(notequalone)canbetransmittedorreceivedatthesametime.ParallelportinthePCis
oneofdevicesthatuseparallelinterfacing;Figure6.4showsthatthisportiscomposedofeight
dataline,fourcontrollinesandfivestatuslines[23].

Figure 6.4:Parallelportpinnames

Theoutputofparallelportisnormallytransistorlogic(TTL)logicvoltagelevels.Thepinsinthe
parallelportcanbesinkorsourceofcurrentwhichvariesfromporttoport.Mostparallelports

48

implementedinASIC,cansinkandsourcearound12mA,Sink/Source6mA,Source12mA/Sink
20mA,Sink16mA/Source4mA,andSink/Source12mA.

49

Chapter

CONCLUSIONSANDFUTURE
RECOMMENDATIONS

7.1 Conclusions
This project is designed to be an intelligent jamming system for GSM900 and DCS1800
systemswithanabilitytobecontrolledbycomputerandtohaveastandbymode.

The main stages in thesystem arecompleted successfully; such as the IF stage, and the RF
stagecomponentsareimportedanditwillbeimplementedonprintedcircuitboard(PCB)in
theearlierfuture.

The main problems were in RF stage, because the dealing with the high frequency signal
needsspecialcomponentssuchassurfacemount(SMD)capacitorsandresisters,alsothePCB
needsmicrostriplines,sotheproblemsappearinmatchingthestageswitheachother;where
sometimesapowerattenuatorbetweentwostageswasneeded.

Thecoverageareaofthecallingdetectorwasnotsufficient;soaninimprovementmustbe
donetogivetheneededcoverage.

Thereisaproblemappearsindeterminingthecontrollerchannelthatmaybechangesdueto
power level, so the system must be configured to block the controller channel with its
neighbors.

50

This signal must have an essential level of power equal to 34dBm to satisfy the jamming
condition.

7.2 FutureRecommendations
UntilthispointthepresentworksufferedfromthecarriersystemSynthesizer,thereisnoa
readyevaluationKitprovidefrequencyfrom9001900MHz.infuturetoimproveanddevelop
thisprojectitisrecommendedtoexplorethefollowingideas:

1. StudyandlearnthefabricationproceduresoftheRFPCBcircuitorfindanalternative
method to build frequency synthesizer. In addition find the required equipments to
buildtheRFPCBs.
2. Design and implement a microprocessor system to control the frequency synthesizer
directlywithoutthePC.
3. Rebuildandarrangethesystempackageinsuchawaytominimizetheoverallsystem
size.
4. Improvethecallingdetectorrangetodetectthemobilesinwiderarea.
5. Research about the ability to jam specific calls and allows other important calls like
emergencynumberstopass.

51

References
[1]: LAWRENCEHARTEANDDAVIDBOWLER,IntroductionToMobileTelephoneSystems
WirelessTechnologiesAndServices,2004.
[2]: MOTOROLA,Introductiontodigitalcellular,fortrainingprofessionalonly.2001
[3]: HUAWEICo.,UMNIAHCompanyManuals.
[4]: ERICSSON,openinformationuserdescriptionsaboutfrequencyhopping.
[5]: RICHARDA.POISEL,ModernCommunicationsJammingPrinciplesandTechniques,
ARTECHHouse,2004.
[6]: DONALDA.NEAMEN,ElectronicCircuitAnalysisandDesign,johnWilley,2ndedition.
[7]: DevendraK.Misra,RadiofrequencyandMicrowavecommunicationCircuitAnalysisand
Design.
[8]: JosephJ.Carr,SecretsofRFCircuitDesign,2ndedition
[9]: JASONBREITBARTHB.S.ElectricalEngineering,OCTAVETUNING,HIGHFREQUENCY
VARACTOROSCILLATORDESIGN,OregonStateUniversity,1997.
[10]: MAXIM038,HighFrequencyWaveformGeneratordatasheet,2007
[11]: Analogdevices ADF4157,6GHzFractionalNFrequencySynthesizerdatasheet, 2006
[12]: RfbayincProducts,MXR20RFMixer
[13]: B.P.Lathi,ModerndigitalandanalogcommunicationSystems,3rdedition
[14]: MICROLAB/FXR,choosingsplitter,AWirelessTelecomGroupCompany
[15]: NECdevicesPG2214TB,GaAsINTEGRATEDCIRCUITSPDTSwitch
[16]: HorstFischer,FrankHenkel,MichaelEngels,PeterWaldow,UMTS/GSMMULTIMODE
RECEIVERDESIGN,IMSTGmbH,CarlFriedrichGaussStr.2,47475KampLintfort,
Germany
[17]: GloverandGrant,DigitalCommunications,2nd edition
[18]: RfbayincProducts,MPA1920PowerAmplifier
[19]: RfbayincProducts,MPA0925PowerAmplifier

II

[20]: NearsonAntennas,MultipleBandSwivelAntenna,2007
[21]: EricsonTEMS,TEMSPocketGSMT68iusermanual,2003
[22]: A.Salhot,Abdallah,PICMicroMCUmicrocontrollerProgramming,2006Amman
[23]: Dhananjay,ProgrammingtheParallelPort,1998

APPENDIXA

ListsofGSMabbreviations
A
ARFCNAbsoluteRadioFrequencyChannelNumber:AnintegerwhichdefinestheabsoluteRF
channelnumber
AUC AuthenticationCentre:AGSMnetworkentitywhichprovidesthefunctionalityforverifyingthe

identityofanMSwhenrequestedbythesystemoftenapartoftheHLR.

B
BCbroadcastcontrol
BCCHbroadcastcontrolchannel
BSbasestation
BSCbasestationcontroller
BSSbasestationsystem
BTSbasetransceiverstation

C
CACellAllocation:Theradiofrequencychannelsallocatedtoaparticularcell

D
DCS1800digitalcellularnetworkat1800MHz

E
EIRequipmentidentityregister
EGSM900ExtendedGSM900

F
FDMAfrequencydivisionmultipleaccess
FHfrequencyhopping

APPENDIXA
G
GPRSgeneralpacketradioservice
GSMglobalsystemformobilecommunications
GSMMSGSMmobilestation

H
HLRhomelocationregister
HRHalfrate:ReferstoatypeofdatachannelthatwilldoublethecurrentGSMairinterfacecapacity
to16simultaneouscallspercarrier(seealsoFRFullRate).

I
IMSIInternationalMobileSubscriberIdentityPublishedmobilenumber(priortoISDN)(seealso
MSISDN)thatuniquelyidentifiesthesubscription.Itcanserveasakeytoderivesubscriber
informationsuchasdirectorynumber(s)fromtheHLR.

L
LRlocationregistration
LAPDmLinkAccessProtocolontheDmchannel

M
MSmobilestation
MSCmobileswitchingcentre
MultiframeTwo types of multiframe are defined in the system: a 26-frame multiframe with a period of
120 ms and a 51-frame multiframe with a period of 3060/13 msec

O
OMCOperationsandMaintenanceCentretheOMCnodeoftheGSMTMNprovidesdynamicO&M
monitoringandcontrolofthePLMNnodesoperatinginthegeographicalareacontrolledbythe
specificOMC.

APPENDIXA
P
PINpersonalidentificationnumber
PSTNpublicswitchedtelephonenetwork
Peggingmodifyingastatisticalvalue

R
RACHrandomaccesschannel

S
SDCCHstandalonecontrolchannel

T
TDMAtimedivisionmultipleaccess
TATimeAdvance
TCHTrafficChannelGSMlogicalchannelswhichcarryeitherencodedspeechoruserdata
Timeslotthemultiplexsubdivisioninwhichvoiceandsignalingbitsaresentovertheair.EachRF
carrierisdividedinto8timeslots
TRXTransceiver

V
VLRvisitorlocationregister

APPENDIXB

ComparebetweenARFCNandfrequency
GSM900(PGSM):
Channel Number
ARFCN
0
1
2
3
4
.
.
.
.
.
.
.
.
75
76
77
78
79
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124

Uplink frequency
(MHz)
890
890.2
890.4
890.6
890.8
.
.
.
.
.
.
.
.
905
905.2
905.4
905.6
905.8
911.6
911.8
912
912.2
912.4
912.6
912.8
913
913.2
913.4
913.6
913.8
914
914.2
914.4
914.6
914.8

Downlink frequency
(MHz)
935
935.2
935.4
935.6
935.8
.
.
.
.
.
.
.
.
950
950.2
950.4
950.6
950.8
956.6
956.8
957
957.2
957.4
957.6
957.8
958
958.2
958.4
958.6
958.8
959
959.2
959.4
959.6
959.8

APPENDIXB

GSM900(EGSM)
Channel Number
ARFCN

Uplink frequency
(MHz)

Downlink frequency
(MHz)

974
975
976
977
978
.
.
.
.
.
.
.
1016
1017
1018
1019
1020
1021
1022
1023

880
880.2
880.4
880.6
880.8
.
.
.
.
.
.
.
888.4
888.6
888.8
889
889.2
889.4
889.6
889.8

925
925.2
925.4
925.6
925.8
.
.
.
.
.
.
.
933.4
933.6
933.8
934
934.2
934.4
934.6
934.8

Channel Number
ARFCN

Uplink frequency
(MHz)

Downlink frequency
(MHz)

511
512
513
514
515
516
517
518
519
861
862
863
864
.

1710
1710.2
1710.4
1710.6
1710.8
1711
1711.2
1711.4
1711.6
1780
1780.2
1780.4
1780.6
.

1805
1805.2
1805.4
1805.6
1805.8
1806
1806.2
1806.4
1806.6
1875
1875.2
1875.4
1875.6
.

DCS1800

APPENDIXB
.
.
.
.
.
.
.
873
874
875
876
877
878
879
880
881
882
883
884
885

.
.
.
.
.
.
.
1782.4
1782.6
1782.8
1783
1783.2
1783.4
1783.6
1783.8
1784
1784.2
1784.4
1784.6
1784.8

.
.
.
.
.
.
.
1877.4
1877.6
1877.8
1878
1878.2
1878.4
1878.6
1878.8
1879
1879.2
1879.4
1879.6
1879.8

APPENDIXC

PIC16F84ProgramwritteninClanguage:
//Definesformicrocontroller

//PICFunctions
#pragmaCLOCK_FREQ10000000
#defineP16F84A
#include<system.h>
#defineMX_EE
#defineMX_EE_TYPE1
constcharMX_EE_SIZE=64;

//Macrofunctiondeclarations

//Variabledeclarations
charFCV_TEST;
charFCV_INT;
charFCV_TEST2;

//Macroimplementations

voidmain()

APPENDIXC

{
//PICInitialisation

//Interruptinitialisationcode
option_reg=0xC0;

TRISB=TRISB|0x01;

FCV_INT=(PORTB&0x01==0x01);

while(FCV_INT==1)

TRISA=TRISA|0x03;

FCV_TEST2=PORTA&0x03;

TRISB=TRISB|0xfe;

FCV_TEST=PORTB&0xfe;

if(FCV_TEST|FCV_TEST2==0)

TRISA=TRISA&0xfb;

if(1)

else

PORTA=PORTA&0xfb|0x04;

PORTA=PORTA&0xfb;

APPENDIXC

else

TRISA=TRISA&0xfb;

if(0)

else

delay_ms(15);

TRISA=TRISA&0xfb;

if(1)

else

PORTA=PORTA&0xfb|0x04;

PORTA=PORTA&0xfb;

PORTA=PORTA&0xfb|0x04;

PORTA=PORTA&0xfb;

mainendloop:gotomainendloop;
}

APPENDIXD

APPENDIXD