Jump to content

HackRF One GSM repeater


Recommended Posts

  • 4 months later...

You have 2 options:

1) Use 2x HackRFs (1x receiver, 1x transmitter) - due to the 1/2 duplex nature

2) Use a bladeRF - as its full-duplex

Edited by midnitesnake
Link to comment
Share on other sites

  • 1 month later...

I can think of another option but not with an analog GSM radio.

Use a single HackRF1 and set it to time division multiplex once a carrier is detected (46 mS receive or transmit and 4 mS idle) on a single frequency to sync with another HackRF1 on the opposite cycle. It's like having two, two stroke engines exactly operating exactly 180 degrees out of phase. The antenna ports (RX/TX) can either have their own antenna but will have better performance with a circulator in between them to feed a single antenna.

DMR radios do a form of this today, albiet on two different frequencies to offer two voice paths. But a simplex DMR repeater sits in the receive mode and will sync with the first carrier to come up when an operator accesses it. The repeater starts cycling and listens for DMR packets on the receive cycle. Once a payload is recovered it is then fed to the input buffer of the transmitter output cycle and wraps the output in the repeater output protocol to announce the output to the other receivers, all on the same frequency.

Link to comment
Share on other sites

  • 1 month later...

You have 2 options:

1) Use 2x HackRFs (1x receiver, 1x transmitter) - due to the 1/2 duplex nature

2) Use a bladeRF - as its full-duplex

I can think of another option but not with an analog GSM radio.

Use a single HackRF1 and set it to time division multiplex once a carrier is detected (46 mS receive or transmit and 4 mS idle) on a single frequency to sync with another HackRF1 on the opposite cycle. It's like having two, two stroke engines exactly operating exactly 180 degrees out of phase. The antenna ports (RX/TX) can either have their own antenna but will have better performance with a circulator in between them to feed a single antenna.

DMR radios do a form of this today, albiet on two different frequencies to offer two voice paths. But a simplex DMR repeater sits in the receive mode and will sync with the first carrier to come up when an operator accesses it. The repeater starts cycling and listens for DMR packets on the receive cycle. Once a payload is recovered it is then fed to the input buffer of the transmitter output cycle and wraps the output in the repeater output protocol to announce the output to the other receivers, all on the same frequency.

The solution was demonstrated this past weekend before TadHack 2015 @ IIT and I've posted about it here: https://forums.hak5.org/index.php?/topic/36044-wideband-sdr-successfully-demonstrated-before-tadhack-2015/

Link to comment
Share on other sites

  • 5 weeks later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...