Skip to content

A self-tuning portable RF jammer.

License

Notifications You must be signed in to change notification settings

jecassis/wave-bubble

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

28 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Wave Bubble

A self-tuning portable RF jammer.

Original idea and design by Limor Fried ca. 2003-2004 and updated by Mictronics in 2010.

Preparation

References:

Software Prerequisites:

Hardware and Tools Used:

Technical Information

ATmega168 Fuse Settings

  • EXTENDED: 0xFF
  • HIGH: 0xD5
  • LOW: 0xE2

See documentation or an AVR fuse calculator for details.

Connections

Connect the battery board to the main board via the 4-pin jumper. Power the main board using ~4.8V (limit power supply current to 250mA).

Hardware Test and Firmware Build Configuration

See Makefile or MSBuild configuration.

Firmware notes:

  • Oscillator calibration (i.e. OSCCAL) is not needed in firmware, produces garbage serial output.
  • Be aware of variable sizing and cast appropriately when bit shifting. Understand and fix all warnings.
  • Unintuitive EEPROM memory layout. Importand because settings_ee section grows and can clobber other memory. Last variable declared (dummy below) for .eeprom section is lowest address in memory and first (settings_ee below) is highest:
uint8_t EEMEM settings_ee;      // Offset to save setting (EEPROM byte offset: 0x06)
uint8_t EEMEM curr_program = 0; // Number of program in use (EEPROM byte offset: 0x05)
uint8_t EEMEM num_programs = 0; // Number of programs in EEPROM (EEPROM byte offset: 0x04)
uint16_t EEMEM validity = 0;    // Validity value to check for empty EEPROM (EEPROM byte offset: 0x02)
uint16_t EEMEM dummy = 0;       // A dummy word to prevent data corruption (EEPROM byte offset: 0x00)

Flashing

Build and flash the .hex (or .elp) file using an AVR programmer.

Need to hold "Power On" button while flashing or burning fuses due to design error. Select ATmega168 device target in programmer.

Serial Interface

Run the tests by connecting the battery board via USB and using a terminal program.

Plug in the USB into the computer, it should show up as a virtual COM port. Open that COM port with a terminal program (configuration settings below).

PuTTY configuration:

  • Connection type: Serial
  • Serial line to connect to: COM3
  • Speed (baud): 19200
  • Data bits: 8
  • Stop bits: 1
  • Parity: None
  • Flow control: None
  • Implicit CR in every LF: checked
  • Implicit LF in every CR: checked

In Test Firmware, type characters to run tests from the menu. Note that there is no echo of characters during test, probe the Test Points with oscilloscope and/or multimeter for feedback.

In Operational Firmware, type character to enter the menu. Otherwise it runs the saved programs. In the menu, follow the prompts to configure the Wave Bubble. Outside of the menu, the LED indicates the program number being run by blinking.

Test Setup

  1. Set current limit to power supply (e.g. 250mA).
  2. Connect power supply to battery leads, set voltage above 4.2V so that fuel gauge IC thinks battery is fully charged.
  3. Press and hold "Power On" button to bootstrap the board's regulators until the microcontroller is booted.
  4. Once text is on serial terminal use keyboard to control. Once again no visual feedback is shown in terminal - only changes in board behavior.

RF Bands

Name Frequency Band Notes
GSM 850 Downlink 870-894MHz Starting to become more popular in the US
GSM 900 Downlink 925-960MHz Original and most common frequency band used in Europe
GSM 1800 Downlink 1805-1880MHz Starting to become more popular in Europe
GSM (PCS) Broadband 1900 Downlink 1930-1990MHz Original and most common frequency band used in the US
Cordless Phones Handset: 900-910MHz / Base: 920-930MHz
Bluetooth 2400-2483MHz Small electronics
802.11b/g 2400-2483MHz Wi-Fi
ZigBee 868 (Europe) 915 (USA) and 2400-2483MHz Home automation
Global Positioning System (GPS) Civilian: 1575.42 MHz and 1227.6 MHz / Military: 1227.6 MHz

Bill of Materials

PCBs originally manufactured by BatchPCB in 2012.

USB/Battery Board

Name Value Package Qty.
BAT1 LiPo 3.7V/1800mAh 1
C1 0.10μF/50V 1206 1
C2 0.10μF/50V 1206 1
C3 0.10μF/50V 1206 1
C4 0.10μF/50V 1206 1
C5 1uF/25V 1206 1
C6 220uF/6.3V SMD_R8X5.4_ELKO 1
C7 47uF/6.3V SMD_R5X5.4_ELKO 1
C8 1u 1206 1
C9 47n 1206 1
C10 22n 1206 1
C11 100n 1206 1
D1 GREEN 1206-D 1
IC1 FT232RL TSSOP-28 1
IC2 LTC1730-4.2 SO-8 1
JP1 Mini USB MINI-USB-SMD 1
R1 0.05 1206 1
R2 1k 1206 1
R3 4.7 1206 1
R4 10k 1206 1
R5 10k NTC 1206 1
R6 4.1k 1206 1

Main Board

Name Value Package Qty.
C1 100μF/6.3V SMD_R6.3X5.4_ELKO 1
C2,C3,C6,C7,C9,C16,C17,C19,C21,C22,C25,C26,C27,C28,C31,C32,C33,C61,C62 100nF 1206 19
C4,C5,C8,C14,C15,C34,C35,C42,C45,C64 1uF 1206 10
C10 10nF 1206 1
C11 100μF/4V SMD_R5X5.4_ELKO 1
C12 470pF 1206 1
C13 100μF/10V 6032 1
C18 22μF/35V 7243 1
C20 68μF/16V 6032 1
C23,C24,C29,C30 4.7μF 1206 4
C36,C40,C47 68pF 0603 3
C38,C46,C48,C49,C50,C51,C52,C55 100pF 0603 8
C41,C44 1000pF 0603 2
C43,C53,C54 22pF 0603 3
C56,C57,C58,C63 10nF 0603 4
C59 100nF 0603 1
C60 1μF 0603 1
D1,D2,D3 SS14 SMA 3
D4 Green LED 1206-D 1
D5,D6 SMAZ22-13-F SMA 2
IC1 TPS793 SOT23-5 1
IC2 LM2731 SOT23-5 1
IC3 LT1173 SOIC-8 1
IC4 LT1301 SOIC-8 1
IC5 ATMEGA168 TQFP-32 1
IC6 AD8402 SOIC-14 1
IC7 NE555 8-SMD-1 1
IC8,IC9 LM358 SOIC-8 2
IC10,IC11 MIC2514 SOT23-5 2
IC12 MIC2506 SOIC-8 1
IC13 LMX2433 TSSOP-20 1
IC14 LP2985 SOT23-5 1
JP1 USB/Battery Board 1X04 1
JP2 ISP 2X03-90 1
JP5,JP6 SMA SMA J629 2
L1 7.3μH CDRH6D28 1
L2,L3 33uH CDRH6D28 2
L4,L5 FERRIT 1206 2
L6 22nH 0603 1
L7 33nH 0603 1
R1 510kΩ 1206 1
R2 330kΩ 1206 1
R3 47kΩ 1206 1
R4 13kΩ 1206 1
R5 820kΩ 1206 1
R6 50kΩ 1206 1
R7,R13,R16,R17,R18,R19,R38,R39 10kΩ 1206 8
R8,R9 1kΩ 1206 2
R12 750Ω 1206 1
R14 20kΩ 1206 1
R15 68Ω 1206 1
R20 47kΩ 1206 2
R21 54.9kΩ 1206 2
R23,R24,R25,R27 0603 4
R28,R29 1206 2
R30,R31 50Ω 0603 2
R32,R33,R34,R35 18Ω 0603 4
R36,R37 10kΩ 0603 2
R40,R42 10Ω 0603 2
R41 120Ω 0603 1
R43,R45 22Ω 0603 2
R44 47Ω 0603 1
R46 100Ω 1206 1
R47,R48 100kΩ 1206 2
S1,S2 Program, Power Switch TL3330 2
T1 MMBT3906 SOT23-3 1
T2,T3 SGA-7489Z SOT-89 2
T4 FDN302P SSOT 1
T5 FDV303N SSOT 1
VCO1 ROS-2700-1819 CK605 1
VCO2 ROS-1300 CK605 1
X1 10MHz ABMM Crystal 1

Notes:

  • R20 and R21 adjusted to match Vtune maximum of VCO using the non-inverting step up mode formula for an operational amplifier:
    Vout = Vin * ((Rf / Ri) + 1)
    Example for the ROS-1300 (maximum Vtune is 20V):
    Vout = 3.3V * ((47kΩ / 10kΩ) + 1) = 18.81V
    Example for the ROS2700-1819 (maximum Vtune is 25V):
    Vout = 3.3V * ((54.9kΩ / 10kΩ) + 1) = 21.417V
  • JP3 and JP4 shorted between pads 1 and 2.
  • JP7 shorted between pads 2 and 3.
  • Missing R43 pads in PCB, used 1206 package resistor to bridge the gap.
  • Cut D1 ground pad to 5V trace short in PCB.
  • Used 1Ω (not 15Ω) for R28 and R29 with SGA-7489Z to meet the operating voltage and current specs on the gain stages' amplifier data sheet.

Data Sheets

VCO and PLL Testing and Tuning References

Miscellaneous

Initialize ClangFormat configuration file:

> &"$env:PROGRAMFILES\LLVM\bin\clang-format.exe" -style="Google" -dump-config > .clang-format

About

A self-tuning portable RF jammer.

Resources

License

Stars

Watchers

Forks