A self-tuning portable RF jammer.
Original idea and design by Limor Fried ca. 2003-2004 and updated by Mictronics in 2010.
References:
Software Prerequisites:
Hardware and Tools Used:
- EXTENDED:
0xFF - HIGH:
0xD5 - LOW:
0xE2
See documentation or an AVR fuse calculator for details.
Connect the battery board to the main board via the 4-pin jumper. Power the main board using ~4.8V (limit power supply current to 250mA).
See Makefile or MSBuild configuration.
Firmware notes:
- Oscillator calibration (i.e. OSCCAL) is not needed in firmware, produces garbage serial output.
- Be aware of variable sizing and cast appropriately when bit shifting. Understand and fix all warnings.
- Unintuitive EEPROM memory layout. Importand because
settings_eesection grows and can clobber other memory. Last variable declared (dummybelow) for.eepromsection is lowest address in memory and first (settings_eebelow) is highest:
uint8_t EEMEM settings_ee; // Offset to save setting (EEPROM byte offset: 0x06)
uint8_t EEMEM curr_program = 0; // Number of program in use (EEPROM byte offset: 0x05)
uint8_t EEMEM num_programs = 0; // Number of programs in EEPROM (EEPROM byte offset: 0x04)
uint16_t EEMEM validity = 0; // Validity value to check for empty EEPROM (EEPROM byte offset: 0x02)
uint16_t EEMEM dummy = 0; // A dummy word to prevent data corruption (EEPROM byte offset: 0x00)Build and flash the .hex (or .elp) file using an AVR programmer.
Need to hold "Power On" button while flashing or burning fuses due to design error. Select ATmega168 device target in programmer.
Run the tests by connecting the battery board via USB and using a terminal program.
Plug in the USB into the computer, it should show up as a virtual COM port. Open that COM port with a terminal program (configuration settings below).
PuTTY configuration:
- Connection type:
Serial - Serial line to connect to:
COM3 - Speed (baud):
19200 - Data bits:
8 - Stop bits:
1 - Parity:
None - Flow control:
None - Implicit CR in every LF:
checked - Implicit LF in every CR:
checked
In Test Firmware, type characters to run tests from the menu. Note that there is no echo of characters during test, probe the Test Points with oscilloscope and/or multimeter for feedback.
In Operational Firmware, type character to enter the menu. Otherwise it runs the saved programs. In the menu, follow the prompts to configure the Wave Bubble. Outside of the menu, the LED indicates the program number being run by blinking.
- Set current limit to power supply (e.g. 250mA).
- Connect power supply to battery leads, set voltage above 4.2V so that fuel gauge IC thinks battery is fully charged.
- Press and hold "Power On" button to bootstrap the board's regulators until the microcontroller is booted.
- Once text is on serial terminal use keyboard to control. Once again no visual feedback is shown in terminal - only changes in board behavior.
| Name | Frequency Band | Notes |
|---|---|---|
| GSM 850 Downlink | 870-894MHz | Starting to become more popular in the US |
| GSM 900 Downlink | 925-960MHz | Original and most common frequency band used in Europe |
| GSM 1800 Downlink | 1805-1880MHz | Starting to become more popular in Europe |
| GSM (PCS) Broadband 1900 Downlink | 1930-1990MHz | Original and most common frequency band used in the US |
| Cordless Phones | Handset: 900-910MHz / Base: 920-930MHz | |
| Bluetooth | 2400-2483MHz | Small electronics |
| 802.11b/g | 2400-2483MHz | Wi-Fi |
| ZigBee | 868 (Europe) 915 (USA) and 2400-2483MHz | Home automation |
| Global Positioning System (GPS) | Civilian: 1575.42 MHz and 1227.6 MHz / Military: 1227.6 MHz |
PCBs originally manufactured by BatchPCB in 2012.
| Name | Value | Package | Qty. |
|---|---|---|---|
| BAT1 | LiPo | 3.7V/1800mAh | 1 |
| C1 | 0.10μF/50V | 1206 | 1 |
| C2 | 0.10μF/50V | 1206 | 1 |
| C3 | 0.10μF/50V | 1206 | 1 |
| C4 | 0.10μF/50V | 1206 | 1 |
| C5 | 1uF/25V | 1206 | 1 |
| C6 | 220uF/6.3V | SMD_R8X5.4_ELKO | 1 |
| C7 | 47uF/6.3V | SMD_R5X5.4_ELKO | 1 |
| C8 | 1u | 1206 | 1 |
| C9 | 47n | 1206 | 1 |
| C10 | 22n | 1206 | 1 |
| C11 | 100n | 1206 | 1 |
| D1 | GREEN | 1206-D | 1 |
| IC1 | FT232RL | TSSOP-28 | 1 |
| IC2 | LTC1730-4.2 | SO-8 | 1 |
| JP1 | Mini USB | MINI-USB-SMD | 1 |
| R1 | 0.05 | 1206 | 1 |
| R2 | 1k | 1206 | 1 |
| R3 | 4.7 | 1206 | 1 |
| R4 | 10k | 1206 | 1 |
| R5 | 10k NTC | 1206 | 1 |
| R6 | 4.1k | 1206 | 1 |
| Name | Value | Package | Qty. |
|---|---|---|---|
| C1 | 100μF/6.3V | SMD_R6.3X5.4_ELKO | 1 |
| C2,C3,C6,C7,C9,C16,C17,C19,C21,C22,C25,C26,C27,C28,C31,C32,C33,C61,C62 | 100nF | 1206 | 19 |
| C4,C5,C8,C14,C15,C34,C35,C42,C45,C64 | 1uF | 1206 | 10 |
| C10 | 10nF | 1206 | 1 |
| C11 | 100μF/4V | SMD_R5X5.4_ELKO | 1 |
| C12 | 470pF | 1206 | 1 |
| C13 | 100μF/10V | 6032 | 1 |
| C18 | 22μF/35V | 7243 | 1 |
| C20 | 68μF/16V | 6032 | 1 |
| C23,C24,C29,C30 | 4.7μF | 1206 | 4 |
| C36,C40,C47 | 68pF | 0603 | 3 |
| C38,C46,C48,C49,C50,C51,C52,C55 | 100pF | 0603 | 8 |
| C41,C44 | 1000pF | 0603 | 2 |
| C43,C53,C54 | 22pF | 0603 | 3 |
| C56,C57,C58,C63 | 10nF | 0603 | 4 |
| C59 | 100nF | 0603 | 1 |
| C60 | 1μF | 0603 | 1 |
| D1,D2,D3 | SS14 | SMA | 3 |
| D4 | Green LED | 1206-D | 1 |
| D5,D6 | SMAZ22-13-F | SMA | 2 |
| IC1 | TPS793 | SOT23-5 | 1 |
| IC2 | LM2731 | SOT23-5 | 1 |
| IC3 | LT1173 | SOIC-8 | 1 |
| IC4 | LT1301 | SOIC-8 | 1 |
| IC5 | ATMEGA168 | TQFP-32 | 1 |
| IC6 | AD8402 | SOIC-14 | 1 |
| IC7 | NE555 | 8-SMD-1 | 1 |
| IC8,IC9 | LM358 | SOIC-8 | 2 |
| IC10,IC11 | MIC2514 | SOT23-5 | 2 |
| IC12 | MIC2506 | SOIC-8 | 1 |
| IC13 | LMX2433 | TSSOP-20 | 1 |
| IC14 | LP2985 | SOT23-5 | 1 |
| JP1 | USB/Battery Board | 1X04 | 1 |
| JP2 | ISP | 2X03-90 | 1 |
| JP5,JP6 | SMA | SMA J629 | 2 |
| L1 | 7.3μH | CDRH6D28 | 1 |
| L2,L3 | 33uH | CDRH6D28 | 2 |
| L4,L5 | FERRIT | 1206 | 2 |
| L6 | 22nH | 0603 | 1 |
| L7 | 33nH | 0603 | 1 |
| R1 | 510kΩ | 1206 | 1 |
| R2 | 330kΩ | 1206 | 1 |
| R3 | 47kΩ | 1206 | 1 |
| R4 | 13kΩ | 1206 | 1 |
| R5 | 820kΩ | 1206 | 1 |
| R6 | 50kΩ | 1206 | 1 |
| R7,R13,R16,R17,R18,R19,R38,R39 | 10kΩ | 1206 | 8 |
| R8,R9 | 1kΩ | 1206 | 2 |
| R12 | 750Ω | 1206 | 1 |
| R14 | 20kΩ | 1206 | 1 |
| R15 | 68Ω | 1206 | 1 |
| R20 | 47kΩ | 1206 | 2 |
| R21 | 54.9kΩ | 1206 | 2 |
| R23,R24,R25,R27 | 0Ω | 0603 | 4 |
| R28,R29 | 1Ω | 1206 | 2 |
| R30,R31 | 50Ω | 0603 | 2 |
| R32,R33,R34,R35 | 18Ω | 0603 | 4 |
| R36,R37 | 10kΩ | 0603 | 2 |
| R40,R42 | 10Ω | 0603 | 2 |
| R41 | 120Ω | 0603 | 1 |
| R43,R45 | 22Ω | 0603 | 2 |
| R44 | 47Ω | 0603 | 1 |
| R46 | 100Ω | 1206 | 1 |
| R47,R48 | 100kΩ | 1206 | 2 |
| S1,S2 | Program, Power Switch | TL3330 | 2 |
| T1 | MMBT3906 | SOT23-3 | 1 |
| T2,T3 | SGA-7489Z | SOT-89 | 2 |
| T4 | FDN302P | SSOT | 1 |
| T5 | FDV303N | SSOT | 1 |
| VCO1 | ROS-2700-1819 | CK605 | 1 |
| VCO2 | ROS-1300 | CK605 | 1 |
| X1 | 10MHz | ABMM Crystal | 1 |
Notes:
- R20 and R21 adjusted to match Vtune maximum of VCO using the non-inverting step up mode formula for an operational amplifier:
Vout = Vin * ((Rf / Ri) + 1)
Example for the ROS-1300 (maximum Vtune is 20V):
Vout = 3.3V * ((47kΩ / 10kΩ) + 1) = 18.81V
Example for the ROS2700-1819 (maximum Vtune is 25V):
Vout = 3.3V * ((54.9kΩ / 10kΩ) + 1) = 21.417V - JP3 and JP4 shorted between pads 1 and 2.
- JP7 shorted between pads 2 and 3.
- Missing R43 pads in PCB, used 1206 package resistor to bridge the gap.
- Cut D1 ground pad to 5V trace short in PCB.
- Used 1Ω (not 15Ω) for R28 and R29 with SGA-7489Z to meet the operating voltage and current specs on the gain stages' amplifier data sheet.
- FT232RL
- FDN302P
- FDV303N
- MMBT3906
- LM358
- LM2731
- LMX2433
- LP2985
- TPS793
- NE555
- LT1173
- LT1301
- LTC1730-4.2
- AD8402
- ATmega168
- MIC2506
- MIC2514
- ROS-1300
- ROS-2700-1819
- SGA-7489Z
- ABMM-10.000MHZ
- SMAZ22-13-F
- Wave Bubble Tuning Instructions
- Voltage Controlled Oscillator VCO Design for PLLs
- PLL Phase Locked Loop Tutorial & Primer
- PLL, Phase Locked Loop Filter
- VCO Test Methods by Mini-Circuits
Initialize ClangFormat configuration file:
> &"$env:PROGRAMFILES\LLVM\bin\clang-format.exe" -style="Google" -dump-config > .clang-format