Diga My HOBBY
A different introduction
The first time when I saw this phone seemed the ugliest phone. However, after I opened it seemed a true gem technique. PCB, IC arrangement, hardware design. Far not you be thinking about it just from outside looks
A scheme accessible to amateurs. 2G GSM communication is laying the groundwork.
A protocol that as you will notice, no essential differences to new protocols 3G, 4G. The transition from nordic communication system, NMT, ie 1G, to 2G was really a big step. The 1G voice was carrier frequency modulation ( FM).
The first time when I saw this phone seemed the ugliest phone. However, after I opened it seemed a true gem technique. PCB, IC arrangement, hardware design. Far not you be thinking about it just from outside looks
A scheme accessible to amateurs. 2G GSM communication is laying the groundwork.
A protocol that as you will notice, no essential differences to new protocols 3G, 4G. The transition from nordic communication system, NMT, ie 1G, to 2G was really a big step. The 1G voice was carrier frequency modulation ( FM).
Will be written in such a manner as to be more manageable. The images are mostly personal or from datasheets.
I will not keep rigor to note figures notation to reference, otherwise it will be ignored other rigors of a written work for greater "fluidity" of the presentation.
You can 'Print to file' and you get a .pdf file easy manageable
Reluctance of enthusiasts in the my country to work with frequencies above 1GHz technique, I not understand it. And I do not support the idea
When I did I course "Technology of ultra-high frequencies" ,because I was far from a model student, flip through teacher's magazines during the course. What news are? Finally ask questions. But from course, from magazines ...
At electrodynamics, other questions ....
I will not keep rigor to note figures notation to reference, otherwise it will be ignored other rigors of a written work for greater "fluidity" of the presentation.
You can 'Print to file' and you get a .pdf file easy manageable
Reluctance of enthusiasts in the my country to work with frequencies above 1GHz technique, I not understand it. And I do not support the idea
When I did I course "Technology of ultra-high frequencies" ,because I was far from a model student, flip through teacher's magazines during the course. What news are? Finally ask questions. But from course, from magazines ...
At electrodynamics, other questions ....
What happens to me with this phone? "Hide it, we do laugh!"
We could start presentation from Marconi reception. Even more, the lightning, the mysterious bat 'that attracts lightning. How have reproduced this phenomenon by small sparks spark-gap transmitter.
Bandwidth, stopping bandwidth, direct-detection receiver, the superheterodyne receiver are notions considered cunscutre and will not be repeated.
Solving systems of equations intregro-diferentrale for circuit analysis will consider again a known thing.
Comutaţia tranzistorului, timpul cât electronii difuzează în bază pentru a crea condiţiile de potenţial necesare iarăşi se considera cunoscute.
Switching of transistor, the time that electrons diffuse into the base to create the potential conditions necessary again consider potential known.
Hobby? We observe that the daily 'routin' is very important hobby.
There are people who collect butterflies, stamps, or old coins. Why would not occur and our passion?
I tried to "dress" presentation in such a "coat" to not be boring and attract readers. Remember: in the end we have jokes. More and better!
We could start presentation from Marconi reception. Even more, the lightning, the mysterious bat 'that attracts lightning. How have reproduced this phenomenon by small sparks spark-gap transmitter.
Bandwidth, stopping bandwidth, direct-detection receiver, the superheterodyne receiver are notions considered cunscutre and will not be repeated.
Solving systems of equations intregro-diferentrale for circuit analysis will consider again a known thing.
Comutaţia tranzistorului, timpul cât electronii difuzează în bază pentru a crea condiţiile de potenţial necesare iarăşi se considera cunoscute.
Switching of transistor, the time that electrons diffuse into the base to create the potential conditions necessary again consider potential known.
Hobby? We observe that the daily 'routin' is very important hobby.
There are people who collect butterflies, stamps, or old coins. Why would not occur and our passion?
I tried to "dress" presentation in such a "coat" to not be boring and attract readers. Remember: in the end we have jokes. More and better!
================================================================================================
Short description
=================================================================================================
And a picture of the phone and connector pin numbering:
Short description
=================================================================================================
And a picture of the phone and connector pin numbering:
Emission and reception takes place on different frequencies. More Channels broadcasting and receiving multiple channels around 900MHz. We call this FDMA. Transmission and reception channels are pairs. That is assigned one channel (channel 1 = channel 1 and channel broadcast one reception).
Then, the time allocated to each telephone channel is divided. We call this TDMA. The start of a TDMA each waiting for his phone's own data packet, the type of computer networks.
And the emission each phone must put their exact dates of the TDMA slot assigned to.
Because the distance between the phone and telecommunications relay (base station or BTS) may vary significantly, electromagnetic waves in air spend time on these short distance, packet must be sent in advance to fit in the appropriate time slot TDMA.
To compensate for this loss of time due to the distance telephone - BTS, phone must send the data in advance. We call this period of time, time advance or TA. The distance between the phone and BTS is limited by time-advance. Each unit of TA is approx. 500m distance.
In this case it is expected that the power output is controlled. This is because the reception automatic gain control circuit for the received radio signal can not follow rapid changes in the TDMA power. (eg a phone very close to BTS can "drown" the reception of a very distant)
All these processes are driven and controlled by a DSP BTS GSM after a standard protocol.
It is expected that when the phone is idle and assigned a communication channel is on a basic channel (frequency "base"), BCCH, send "it is now on" and wait to be assigned a channel. And if it is damaged and communication confuse others? broadcast shall be transmitted to stop. All these things will remain in this state at this point, but will be detailed below.
To clarify a little, I will present the image NET Monitor from Siemens. For this he needed a Siemens S45 phone service that has this option already installed. I tested with several SIM cards and SIM only works with Orange. To enter the NET Monitor Press "Menu" then "*" key:
=========================================================
Brief description of the digital part
=========================================================
Image of digital part, which will be commented:
Then, the time allocated to each telephone channel is divided. We call this TDMA. The start of a TDMA each waiting for his phone's own data packet, the type of computer networks.
And the emission each phone must put their exact dates of the TDMA slot assigned to.
Because the distance between the phone and telecommunications relay (base station or BTS) may vary significantly, electromagnetic waves in air spend time on these short distance, packet must be sent in advance to fit in the appropriate time slot TDMA.
To compensate for this loss of time due to the distance telephone - BTS, phone must send the data in advance. We call this period of time, time advance or TA. The distance between the phone and BTS is limited by time-advance. Each unit of TA is approx. 500m distance.
In this case it is expected that the power output is controlled. This is because the reception automatic gain control circuit for the received radio signal can not follow rapid changes in the TDMA power. (eg a phone very close to BTS can "drown" the reception of a very distant)
All these processes are driven and controlled by a DSP BTS GSM after a standard protocol.
It is expected that when the phone is idle and assigned a communication channel is on a basic channel (frequency "base"), BCCH, send "it is now on" and wait to be assigned a channel. And if it is damaged and communication confuse others? broadcast shall be transmitted to stop. All these things will remain in this state at this point, but will be detailed below.
To clarify a little, I will present the image NET Monitor from Siemens. For this he needed a Siemens S45 phone service that has this option already installed. I tested with several SIM cards and SIM only works with Orange. To enter the NET Monitor Press "Menu" then "*" key:
=========================================================
Brief description of the digital part
=========================================================
Image of digital part, which will be commented:
IV. Microcontroller, P90CL301 16-bit. It is compatible with the processor instructions 68000. 27MHz clock.
I. AM20LV400 produced by Atmel Flash memory. 4MB
Under it with 2x4 pin is 25C166 EEPROM. Many of the software to rewrite acceasta Diga memory.
II. RAM produced by NEC, uPD43256 noted on intagrat PD43256. 256KB or 32KB. Two such integrated use.
III. TDA8005H is SIM reader and controller keyboard.
V. DSP GSM PCF5083
VI. audio Codec
================================================== ==========
The radio
================================================== ==========
The radio emission, RF power, VCO, PLL
We have emission VCO, reception VCO, power RF emission (PF01411), which will be detailed.
Part of the transceiver and intermediate rado:
Part of the transceiver and intermediate rado:
============================================================
The interface
===========================================================
Increasingly often use mobile serial interface. We can write the firmware through that interface. More modern it is to use this. Automotive ECU it is programming options via CAN.
No matter how modern and elegant as though, in practice I noticed for such use it is not useful.
The micro controller on the board have an algorithm that reads "what is given" serial and write their own program memory. In other words, we have a bootloder - a basic program that can not be written only with a specific program.
Many speak of resof or flash. Still has great inconvenience. If during serial computer crashes, the phone can not be restarted. That is why it is uselees in development programs.
The 4x1.2V battery can be replaced by a source with stabilizer 7805. The phone can be, moreover, powered directly from the USB or PICKIT. Basically 3 pins from the battery to the phone are of interest: +, - and a third pin that has a resistor to ground. The value of this resistor is measured KOhm order and it "looks" type battery. Batteries of different types have different charging regime.
Codes entered from the keyboard
IMEI *#06#
Connect Time *#2558*#
(No) Blocking List *#3333*
Init, Flags, Sim Lock *#3377*#
Resets the (No) Blocking List *#3353*#
Displays the Security Code *#7489*#
Next will be posted photos with phone, charger and some that do not need to comment. Charger, as shown has rectifer (four diodes), but no filtering (electrolytic capacitor). In other words the chemical process more efficient if charging occurs in pulses (pulsed DC as the old Nokia chargers).
The pin:
1 GROUND
2 GROUND
5 TX
6 RX
7 RTS
8 REPROGRAMMING
With PCB down and jack on top, pins are in order from left to right: 1,2,3,4, .... Pins 1 and 2 are easily identified because they are both GND.
Another detail for serial cable installation - most serial cable (including USB-UART) that are found in the towns have drivers for older versions of Windows. To be R-Click installation executable installer -> Properties -> Compatibility tab -> Run this program in compatibility mode for: -> Windows ..... Usually the programs are COM1 or LPT1.
You can use software for monitoring serial port. Other software like "Virtual serial" create pairs of virtual serial ports mode. HyperTerminal, which must be installed on Windows 7. Usually communications are 9600N1.
Basically most software of this kind are for reading memory 24C166 (not included here reprogramming, flashing). An integrated 2x4 pin, which can be simply detached from the plate and read or written.
Outline jack is on:
http://www.herwell-asia.com/mob%20phone%20conn/Philips%20Spark%20DIGA%20ISIS%20TWIST.jpg
================================================== ===========
PICKIT2, reading bus, PLL IC
================================================== =========
Instead storage battery connected to Vcc and GND from PICKIT2. The start of the phone (NO key) has a solder strap (is permanently pressed). Initially when the phone is turns on, then the keypad is locked and stays on. The supply voltage in PICKIT2 is set to 5V.
The image below is showing. Two power wires + and GND, thick red and black respectively. Initially identified Clock (Blue) Date (thin red) and Enable denied (White) following pins Integrative UMA1021 PLL (hence it can be seen easily that the bus Date and Clock PCB is the same for IC SA1638BE (same thread)) .
Care must be taken when solder. In the attached images LCD has many lines "fallen" but you can still read what is displayed. The magnified image is observed bonding mode - a SMD capacitor (Data and Clock are ceramic capacitors to ground) sticks a very thin wire, stranded wire preferably a multicore cable.
PICKIT2 v2.61 software is used in the logic analyzer will be used. PICKIT2 contains a PIC18F USB (PIC18F2550) with a 20MHz quartz. Thus, the images obtained does not clearly show the Data and Clock. Therefore a third connection was made. Not Enable pin.. It appears clear now on logic analyzer. We have four "words" that are given separately for configuration of UMA1021. This is seen by the four "fall into 0-logic" of Enable denied.
When changing only the frequency set, we had only one "word" configuration, ie one "fall into 0-logic".
Not Enable (not E) is active for 21.25uS. Compared to the number of bits to be sent serially, each bit should last 1.25uS. However smallest division is 2.5us, and "window" is up to 1MHz as shown in the picture. Most likely, the logic analyzer can not "catch" the channel which is faster than it is capable of recording.
It is noted, moreover, that the bus is used before the PLL IC (UMA1021) to receive "Enable".
The interface
===========================================================
Increasingly often use mobile serial interface. We can write the firmware through that interface. More modern it is to use this. Automotive ECU it is programming options via CAN.
No matter how modern and elegant as though, in practice I noticed for such use it is not useful.
The micro controller on the board have an algorithm that reads "what is given" serial and write their own program memory. In other words, we have a bootloder - a basic program that can not be written only with a specific program.
Many speak of resof or flash. Still has great inconvenience. If during serial computer crashes, the phone can not be restarted. That is why it is uselees in development programs.
The 4x1.2V battery can be replaced by a source with stabilizer 7805. The phone can be, moreover, powered directly from the USB or PICKIT. Basically 3 pins from the battery to the phone are of interest: +, - and a third pin that has a resistor to ground. The value of this resistor is measured KOhm order and it "looks" type battery. Batteries of different types have different charging regime.
Codes entered from the keyboard
IMEI *#06#
Connect Time *#2558*#
(No) Blocking List *#3333*
Init, Flags, Sim Lock *#3377*#
Resets the (No) Blocking List *#3353*#
Displays the Security Code *#7489*#
Next will be posted photos with phone, charger and some that do not need to comment. Charger, as shown has rectifer (four diodes), but no filtering (electrolytic capacitor). In other words the chemical process more efficient if charging occurs in pulses (pulsed DC as the old Nokia chargers).
The pin:
1 GROUND
2 GROUND
5 TX
6 RX
7 RTS
8 REPROGRAMMING
With PCB down and jack on top, pins are in order from left to right: 1,2,3,4, .... Pins 1 and 2 are easily identified because they are both GND.
Another detail for serial cable installation - most serial cable (including USB-UART) that are found in the towns have drivers for older versions of Windows. To be R-Click installation executable installer -> Properties -> Compatibility tab -> Run this program in compatibility mode for: -> Windows ..... Usually the programs are COM1 or LPT1.
You can use software for monitoring serial port. Other software like "Virtual serial" create pairs of virtual serial ports mode. HyperTerminal, which must be installed on Windows 7. Usually communications are 9600N1.
Basically most software of this kind are for reading memory 24C166 (not included here reprogramming, flashing). An integrated 2x4 pin, which can be simply detached from the plate and read or written.
Outline jack is on:
http://www.herwell-asia.com/mob%20phone%20conn/Philips%20Spark%20DIGA%20ISIS%20TWIST.jpg
================================================== ===========
PICKIT2, reading bus, PLL IC
================================================== =========
Instead storage battery connected to Vcc and GND from PICKIT2. The start of the phone (NO key) has a solder strap (is permanently pressed). Initially when the phone is turns on, then the keypad is locked and stays on. The supply voltage in PICKIT2 is set to 5V.
The image below is showing. Two power wires + and GND, thick red and black respectively. Initially identified Clock (Blue) Date (thin red) and Enable denied (White) following pins Integrative UMA1021 PLL (hence it can be seen easily that the bus Date and Clock PCB is the same for IC SA1638BE (same thread)) .
Care must be taken when solder. In the attached images LCD has many lines "fallen" but you can still read what is displayed. The magnified image is observed bonding mode - a SMD capacitor (Data and Clock are ceramic capacitors to ground) sticks a very thin wire, stranded wire preferably a multicore cable.
PICKIT2 v2.61 software is used in the logic analyzer will be used. PICKIT2 contains a PIC18F USB (PIC18F2550) with a 20MHz quartz. Thus, the images obtained does not clearly show the Data and Clock. Therefore a third connection was made. Not Enable pin.. It appears clear now on logic analyzer. We have four "words" that are given separately for configuration of UMA1021. This is seen by the four "fall into 0-logic" of Enable denied.
When changing only the frequency set, we had only one "word" configuration, ie one "fall into 0-logic".
Not Enable (not E) is active for 21.25uS. Compared to the number of bits to be sent serially, each bit should last 1.25uS. However smallest division is 2.5us, and "window" is up to 1MHz as shown in the picture. Most likely, the logic analyzer can not "catch" the channel which is faster than it is capable of recording.
It is noted, moreover, that the bus is used before the PLL IC (UMA1021) to receive "Enable".
================================================== ================= ===========
Power transmission principle diagram
================================================== ============ ================
Final amplifier power is PCF0141:
================================================== ================= ===========
Power transmission principle diagram
================================================== ============ ================
Final amplifier power is PCF0141:
In the PCF0141 enter directly the VCO signal. A 4002 variant is present in TDK Ericsson A1018. It is much the same at Diga (in our case).
The varicap diode voltage of VCO is contol from PLL IC UMA1021:
But the power output is controlled by the PCF5077:
All this share bus DAT, CLK and E (or Strobe) including RF transceiver.
Examples of use is on the forum vrtp.ru (not connected wire is entering the control voltage to frequency):
Boost DC-DC covertor with MC34063 is for increasing voltage applied to the varicap diode. Because VCO is designed for download band, and must to "reach" in the upload band.
(from vrtp.ru)
(from vrtp.ru)
================================================== ============
It can reverse?
================================================== ============
S. P. Sk. (reference at request) after research work thesis with subject 'Copy Protection in Modern Microcontrollers' explains that it is useful to protect code written in microcontroller, but we expected that this protection is not absolute :
- Microprobing Techniques - is an invasive method by which the capsule is broken, the chip is scanned and analyzed (eg. SEM). Requires a specialized laboratory.
- Software - using a logic analyzer, scanning interface, to draw conclusions about the operation,
- Eavesdropping - will be monitored power consumption with high fidelity and resolution. When start various modules to running, this these can be observed as a 'fine" variation of power consumption,
- Fault generation - code read protection is not functioning properly and has not been tested in strong pulse voltage (steep).
Noninvasive method: mainly act on his "power" and his "clock". It will explore around normal. In addition and minus. Some over- and undervoltage protection integrated. But as a rule do not have protection from sudden variation.
This can lead to errors in the execution of instructions. For example, a flip-flop of integrated will need a minimum time to switch. If the impulse clock is too short it will not switch, but other operations were performed.
As numerical data approx. 10 ohms serially connected to power and the voltage across this resistor monitored at a resolution of 12 bits.
Drivers for example, by the nature of construction, will have considerable peiesire stray capacitance that will put the output in the short-circuit at shoart voltage pulses. In this manner, the signal strongest generates error in writing the SRAM.
Carry bit is a special case he needs to pay attention in reverse. Static RAM can retain data after turning off the power. With decreasing temperature the residence in time increases. For microcontllerele flash memory will generate error reading from "fuses" to "code protect". But mostly, you will not need this method to an old 2G. Because on the one hand we have Open BTS, the protocols are published, and, on the other hand had the external memory that can be read.
===========================================================
Where should start
================================================== ==========
From the bus. As shown, three-wire serial bus. It should be disconnected from the "one who writes." It is intended for micro controller and disconnect the circuit or the DSP.
It will: check PLL module via the varicap voltage of VCO (voltage out variocap "is" the frequency of VCO).
Checking the transmission power controller voltage on pin Vapc.
Check antenna switching incandescent bulb.
Verification of emissions on the phone with NET Monitor.
Purpose: "Closure" amateur band 1.2GHz band and achieve communications in this band. Measuring efficiency in this band.
Integratele are hybrid so some will be opened and modified capacities of "filters coupling 'between floors. Using DSP demonstration GSM. The reception of a frame in the TDMA.
The varicap diode voltage of VCO is contol from PLL IC UMA1021:
But the power output is controlled by the PCF5077:
All this share bus DAT, CLK and E (or Strobe) including RF transceiver.
Examples of use is on the forum vrtp.ru (not connected wire is entering the control voltage to frequency):
Boost DC-DC covertor with MC34063 is for increasing voltage applied to the varicap diode. Because VCO is designed for download band, and must to "reach" in the upload band.
(from vrtp.ru)
(from vrtp.ru)
================================================== ============
It can reverse?
================================================== ============
S. P. Sk. (reference at request) after research work thesis with subject 'Copy Protection in Modern Microcontrollers' explains that it is useful to protect code written in microcontroller, but we expected that this protection is not absolute :
- Microprobing Techniques - is an invasive method by which the capsule is broken, the chip is scanned and analyzed (eg. SEM). Requires a specialized laboratory.
- Software - using a logic analyzer, scanning interface, to draw conclusions about the operation,
- Eavesdropping - will be monitored power consumption with high fidelity and resolution. When start various modules to running, this these can be observed as a 'fine" variation of power consumption,
- Fault generation - code read protection is not functioning properly and has not been tested in strong pulse voltage (steep).
Noninvasive method: mainly act on his "power" and his "clock". It will explore around normal. In addition and minus. Some over- and undervoltage protection integrated. But as a rule do not have protection from sudden variation.
This can lead to errors in the execution of instructions. For example, a flip-flop of integrated will need a minimum time to switch. If the impulse clock is too short it will not switch, but other operations were performed.
As numerical data approx. 10 ohms serially connected to power and the voltage across this resistor monitored at a resolution of 12 bits.
Drivers for example, by the nature of construction, will have considerable peiesire stray capacitance that will put the output in the short-circuit at shoart voltage pulses. In this manner, the signal strongest generates error in writing the SRAM.
Carry bit is a special case he needs to pay attention in reverse. Static RAM can retain data after turning off the power. With decreasing temperature the residence in time increases. For microcontllerele flash memory will generate error reading from "fuses" to "code protect". But mostly, you will not need this method to an old 2G. Because on the one hand we have Open BTS, the protocols are published, and, on the other hand had the external memory that can be read.
===========================================================
Where should start
================================================== ==========
From the bus. As shown, three-wire serial bus. It should be disconnected from the "one who writes." It is intended for micro controller and disconnect the circuit or the DSP.
It will: check PLL module via the varicap voltage of VCO (voltage out variocap "is" the frequency of VCO).
Checking the transmission power controller voltage on pin Vapc.
Check antenna switching incandescent bulb.
Verification of emissions on the phone with NET Monitor.
Purpose: "Closure" amateur band 1.2GHz band and achieve communications in this band. Measuring efficiency in this band.
Integratele are hybrid so some will be opened and modified capacities of "filters coupling 'between floors. Using DSP demonstration GSM. The reception of a frame in the TDMA.
======================================== ==============================================
Radio and and intrerfmediata frequency
======================================================================================
Certainly, the most fascinating part for those who want to steal ideas from GSM technology is radio interface.
About microstrip lines, lines with controlled impedance, there is a lot of documentation. Until now I used RFSim tool, software that can be downloaded free. Frequency is classified as part of the microwave range.
We started the discussion about PLL, since most passionate realized frequency counter or frequency synthesizer. Therefore I have to start from a popular projects:
The best known is LMX2322, a PLL that is found in the phone Ericsson 628, Ericsson A1018 and in A2018 Ericsson already beginning to be integrated as BGA, much smaller than an aspirin.
As clarification, when bit "test" is on logical 1, the output frequency divider is connected directly to the output pin (it said in datasheet)
Summary frequency counter made by me was witth LMX2336 from a 509 Bosh.
Besides the difference between PMR446 channel and frequency, measurement accuracy is shown. Display quality is only up to the fifth most significant digit.
The Philips Diga frequency synthesis is MA1021 (UMA1021) produced by Philips. Maximum Power 5.5V. 300MHz-2.2GHz.
http://pdf.datasheetcatalog.com/datasheet/philips/UMA1021AM.pdf
Serial communication module is detailed in the datasheet. Basically there are four rows of 4 + 17biti. MBS first.
SA1638BE produced by Philips, IF I / Q trasceiver:
http://pdf.datasheetcatalog.com/datasheet/philips/SA1638_2.pdf
3.3V-7.5V supply
70-400 MHz IF (intermediate frequency)
GSM transceiver Philips SA1620 product (the name appears CD8395BE phones, being an equivalent)
http://www.datasheetcatalog.com/datasheets_pdf/S/A/1/6/SA1620.shtml
Maximum 5.5V supply
Typical scheme in which the transceiver works - in below images
The difference is that instead of UMA1019 we UMA1021 and power amplifier output is 5077 instead of 5075 as shown.
Note that SA1638 is contralat all 3-wire serial. The datasheet is presented and how it can be controlled series.
Address a0, a1, a2, a3 = 1110
We can use the same lines as Clock and Data because the transceiver and the synthesis have different addresses.
Integrated under discussion following:
11.SA1638, 8.SA1620 and 6. GSM PLL UMA1021
As you can see this 'combination' offers direct output in the I and Q signals for DSP GSM (GSM processor).
Analog sound transmission can be tested at pin i or q.
Radio and and intrerfmediata frequency
======================================================================================
Certainly, the most fascinating part for those who want to steal ideas from GSM technology is radio interface.
About microstrip lines, lines with controlled impedance, there is a lot of documentation. Until now I used RFSim tool, software that can be downloaded free. Frequency is classified as part of the microwave range.
We started the discussion about PLL, since most passionate realized frequency counter or frequency synthesizer. Therefore I have to start from a popular projects:
The best known is LMX2322, a PLL that is found in the phone Ericsson 628, Ericsson A1018 and in A2018 Ericsson already beginning to be integrated as BGA, much smaller than an aspirin.
As clarification, when bit "test" is on logical 1, the output frequency divider is connected directly to the output pin (it said in datasheet)
Summary frequency counter made by me was witth LMX2336 from a 509 Bosh.
Besides the difference between PMR446 channel and frequency, measurement accuracy is shown. Display quality is only up to the fifth most significant digit.
The Philips Diga frequency synthesis is MA1021 (UMA1021) produced by Philips. Maximum Power 5.5V. 300MHz-2.2GHz.
http://pdf.datasheetcatalog.com/datasheet/philips/UMA1021AM.pdf
Serial communication module is detailed in the datasheet. Basically there are four rows of 4 + 17biti. MBS first.
SA1638BE produced by Philips, IF I / Q trasceiver:
http://pdf.datasheetcatalog.com/datasheet/philips/SA1638_2.pdf
3.3V-7.5V supply
70-400 MHz IF (intermediate frequency)
GSM transceiver Philips SA1620 product (the name appears CD8395BE phones, being an equivalent)
http://www.datasheetcatalog.com/datasheets_pdf/S/A/1/6/SA1620.shtml
Maximum 5.5V supply
Typical scheme in which the transceiver works - in below images
The difference is that instead of UMA1019 we UMA1021 and power amplifier output is 5077 instead of 5075 as shown.
Note that SA1638 is contralat all 3-wire serial. The datasheet is presented and how it can be controlled series.
Address a0, a1, a2, a3 = 1110
We can use the same lines as Clock and Data because the transceiver and the synthesis have different addresses.
Integrated under discussion following:
11.SA1638, 8.SA1620 and 6. GSM PLL UMA1021
As you can see this 'combination' offers direct output in the I and Q signals for DSP GSM (GSM processor).
Analog sound transmission can be tested at pin i or q.
What is I / Q modulation ?
Documentation on this type of modulation are a lot, but very difficult to find a clear and simple explanation, a point of view of those who understand.
At each step explanation will be accompanied by examples in Mathematica 7.0. The examples will clarify why.
What I learned is that by adding two frequencies (tow signals), their sum and difference can not occur.
I take an examples. This we know from Pioneer House when we went to different technical courses and I remembered reading in college when learn about beating phenomenon.
I never questioned that might otherwise be. But heterodyne radio how it works? After many examples, I realized that you can not obtain the difference from "summation" of the two frequencies.
Indeed, the nonlinear characteristic of a transistor makes a squaring of summ, which implies a multiplication, and that really get the difference between two frequencies.
I'm not saying that it is a new type of modulation but a way to modulate. The modulation can be of two types: amplitude and angle (phase or frequency). And an amplitude modulation we can divide into other categories.
If we have two sinusoids with 90 degrees phase shift between them, both modulated in amplitude by adding them get a complex wave modulated in amplitude and angular as:
http://www.ni.com/cms/images/devzone/tut/trig_equations.jpg
Documentation on this type of modulation are a lot, but very difficult to find a clear and simple explanation, a point of view of those who understand.
At each step explanation will be accompanied by examples in Mathematica 7.0. The examples will clarify why.
What I learned is that by adding two frequencies (tow signals), their sum and difference can not occur.
I take an examples. This we know from Pioneer House when we went to different technical courses and I remembered reading in college when learn about beating phenomenon.
I never questioned that might otherwise be. But heterodyne radio how it works? After many examples, I realized that you can not obtain the difference from "summation" of the two frequencies.
Indeed, the nonlinear characteristic of a transistor makes a squaring of summ, which implies a multiplication, and that really get the difference between two frequencies.
I'm not saying that it is a new type of modulation but a way to modulate. The modulation can be of two types: amplitude and angle (phase or frequency). And an amplitude modulation we can divide into other categories.
If we have two sinusoids with 90 degrees phase shift between them, both modulated in amplitude by adding them get a complex wave modulated in amplitude and angular as:
http://www.ni.com/cms/images/devzone/tut/trig_equations.jpg
Basically, the last formula we read backwards. We start from two sinusoidal generators, but with a constant phase shift between them 90grd. Both are modulated in amplitude - modulation quite easy technically feasible - then added. Denote the two amplitudes I and Q.
I called in-phase component and Q component of 90 degrees or square.
A simple scheme in which two orthogonal component it collects. We look only emission:
http://www.ni.com/cms/images/devzone/tut/trig_equations.jpg
I called in-phase component and Q component of 90 degrees or square.
A simple scheme in which two orthogonal component it collects. We look only emission:
http://www.ni.com/cms/images/devzone/tut/trig_equations.jpg
At the reception there not appears "+", but appears "x". Mathematically we write:
cos(alfa)*sin(alfa)=coş(alfa)*cos(PI/2-alfa)=0.5*[cos(alfa-PI/2+alfa)+cos(alfa+PI/2-alfa)]=
0.5 * [cos (2 * alpha-PI / 2) + cos (PI / 2)] = 0
For alpha = 2 * pi * fc => first term Cos (alpha-2 * PI / 2) is canceled due to filtering by low pass filter (LPF) al = 0 second term
Perhaps, at this point we note that the reception of broadcast information is not preserved initial phase a wave. We can measure a phase difference, but the initial phase information (from TX) is lost. The frequency of these communications is the microwave, ie waves decimeter, centimeter and millimeter. Basically a distance between Tx and Rx is meter we have many wave fronts "on the road". However based on the fact that an initial changes are minimal, we could have a "wave" like at TX.
It's what makes Costa's loop.
The following figure:
- Returning to the example, by adding two "frequency" (assembly of two sinuses) beat phenomenon occurs, but can not separate low frequency.
- This assumption if LC filter.
- Examples taken, although apparently not part of the discussion is to "feel" the role of filtration:
-We have the question how we could get from the I and Q components filtrates
- The difference between the two forms obtained by adding and multiplying the second sinusoidal sinusoidal:
- Two different signals, for example, triangle and rectangle modulate a sinusoid.
- Signals at emission and at reception.
Filtration was performed mathematically by the relationship:
y (n) = a * y (n-1) + (1-a) * x (n), where a = 0.99 (yield almost that figure)
y (n) = current output sample
y (n-1) = previous output sample
x (n) = current input sample
a is a constant between 0 and 1. The closer ae 1, the filter cutoff frequency is lower
GMSK (Gaussian minimum shift keying) modulation is used by GSM and GPRS. It is similar to MSK. That difference input data are passed through a Gaussian filter.
MSK. (Minimum-shift keying standard).
To simplify, we view in this way: I was sent simultaneously value and Q. In terms of value I and Q value shown in the graphic information is transmitted. For example: if I = 1 (or amplitude) and Q = -1 will forward the information to "10". It is thus conceivable multiple values for I and Q so many combinations.
About Gaussian:
http://www.sfu.ca/sonic-studio/handbook/Graphics/Gaussian.gif
expressed in mathematical statistics as the normal distribution. In other words, if you throw sand :) in a certain place, it will be distributed as a Gaussian - normal distribution (in statistics).
http://www.wisconsinwatch.org/2012/07/22/sand-sites-double/
Gaussian filter has "impulse response" a Gaussian (or close to a Gaussian).
Gaussian filter will not "Overshoot" a step pulse applied but keep mostly during the rise and fall of the signal.
Mostly it is the function sin (x) / x. It is due to inductance in the Main transmission lines and parasitic capacities mainly semiconductorelor and potential arises between fixed points.
When the signal reached the maximum level, mention potential fixed point.
And some of history .....
In 1749 Benjamin Franklin invented the lightning rod. The deviation from spherical geometry of the earth lead to polarization electropositive (due to different distribution vector electrostatic forces).
Spark-gap radio (1887-1916)
Heterodyne Radio - the received signal is mixed with a local oscillator signal (it heterodineaza)
Edwin Howard Armstrong Superheterodyne Radio 1918 - what we have today.
What I presented, you need to do some exercises. To take your own examples.
In this way they 'catch' the best
cos(alfa)*sin(alfa)=coş(alfa)*cos(PI/2-alfa)=0.5*[cos(alfa-PI/2+alfa)+cos(alfa+PI/2-alfa)]=
0.5 * [cos (2 * alpha-PI / 2) + cos (PI / 2)] = 0
For alpha = 2 * pi * fc => first term Cos (alpha-2 * PI / 2) is canceled due to filtering by low pass filter (LPF) al = 0 second term
Perhaps, at this point we note that the reception of broadcast information is not preserved initial phase a wave. We can measure a phase difference, but the initial phase information (from TX) is lost. The frequency of these communications is the microwave, ie waves decimeter, centimeter and millimeter. Basically a distance between Tx and Rx is meter we have many wave fronts "on the road". However based on the fact that an initial changes are minimal, we could have a "wave" like at TX.
It's what makes Costa's loop.
The following figure:
- Returning to the example, by adding two "frequency" (assembly of two sinuses) beat phenomenon occurs, but can not separate low frequency.
- This assumption if LC filter.
- Examples taken, although apparently not part of the discussion is to "feel" the role of filtration:
-We have the question how we could get from the I and Q components filtrates
- The difference between the two forms obtained by adding and multiplying the second sinusoidal sinusoidal:
- Two different signals, for example, triangle and rectangle modulate a sinusoid.
- Signals at emission and at reception.
Filtration was performed mathematically by the relationship:
y (n) = a * y (n-1) + (1-a) * x (n), where a = 0.99 (yield almost that figure)
y (n) = current output sample
y (n-1) = previous output sample
x (n) = current input sample
a is a constant between 0 and 1. The closer ae 1, the filter cutoff frequency is lower
GMSK (Gaussian minimum shift keying) modulation is used by GSM and GPRS. It is similar to MSK. That difference input data are passed through a Gaussian filter.
MSK. (Minimum-shift keying standard).
To simplify, we view in this way: I was sent simultaneously value and Q. In terms of value I and Q value shown in the graphic information is transmitted. For example: if I = 1 (or amplitude) and Q = -1 will forward the information to "10". It is thus conceivable multiple values for I and Q so many combinations.
About Gaussian:
http://www.sfu.ca/sonic-studio/handbook/Graphics/Gaussian.gif
expressed in mathematical statistics as the normal distribution. In other words, if you throw sand :) in a certain place, it will be distributed as a Gaussian - normal distribution (in statistics).
http://www.wisconsinwatch.org/2012/07/22/sand-sites-double/
Gaussian filter has "impulse response" a Gaussian (or close to a Gaussian).
Gaussian filter will not "Overshoot" a step pulse applied but keep mostly during the rise and fall of the signal.
Mostly it is the function sin (x) / x. It is due to inductance in the Main transmission lines and parasitic capacities mainly semiconductorelor and potential arises between fixed points.
When the signal reached the maximum level, mention potential fixed point.
And some of history .....
In 1749 Benjamin Franklin invented the lightning rod. The deviation from spherical geometry of the earth lead to polarization electropositive (due to different distribution vector electrostatic forces).
Spark-gap radio (1887-1916)
Heterodyne Radio - the received signal is mixed with a local oscillator signal (it heterodineaza)
Edwin Howard Armstrong Superheterodyne Radio 1918 - what we have today.
What I presented, you need to do some exercises. To take your own examples.
In this way they 'catch' the best