SIM card related Projects » SIMtrace

[[PageOutline]]

= Osmocom SIMtrace Hardware =

This page is dedicated to the Hardware for Osmocom [wiki:SIMtrace], which looks like this:

[[Image(simtrace_10_front.jpg, 33%)]]

[[Image(simtrace_connectors_scaled.png, 39%, align=right)]]

STATUS: We have received the second batch of 100 units from the SMT factory, ready for the 28C3 (Version v1.1p)

== Connectors ==

 * USB: USB mini-B connector. The main connector. The host software communicates (sniffing,...) through USB with the board. It can also be used to flash the micro-controller (using DFU).

 * serial: 2.5 mm jack serial cable, as used by osmocomBB. port used to debug the device (printf goes there).

 * debug (P3): same as serial, but using the FTDI serial cable. '''It is recommended to cut the voltage wire of the 6pin FTDI connector before plugging the cable into the simtrace.'''

 * jtag (P1): JTAG 20 pin connector to do hardware assisted debugging.

 * BT1: battery connector (4.5-6V DC). normally the USB provides power, but the battery port can be used for autonomous use of SIMtrace. The sniffing can be saved in the flash (U1).

 * FFC_SIM (P3): to connect the flat flexible cable with SIM end for the phone.

 * SIM (P4): put your SIM in there (instead of in the phone)

 * reset (SW1): to reset the board (not erasing the firmware). If your are too lazy to unplug and re-plug the USB.

 * bootloader (SW2): used to start the bootloader so to flash the device using DFU. press when plugging in the USB.

 * test (JP1): short circuit using a jumper to flash using [wiki:SIMtrace/Firmware#EnteringtheSAM-BAmode SAM-BA].

 * erase (JP2): short circuit using a jumper to erase completely erase the firmware.

== Schematics, Gerber & Co ==

The schematics, Gerber files, etc. can be found in the 'hardware' subdirectory of the simtrace.git repository:

 * http://cgit.osmocom.org/cgit/simtrace/tree/hardware (web browsing

 * git://git.osmocom.org/simtrace (git clone URL)

We're using Kicad as EDA tool.  Most of the work on the schematics and Gerber files has been done by Kevin Redon,

based on the original design by Harald Welte.

The latest schematics are also available as an attachment to this page.

== Interconnections ==

The hardware schematics are very, very simple:

 * Connect SIM-RST with PA7

 * Connect SIM-I/O with PA6(TXD0) and PA1(TIOB0)

 * Connect SIM-CLK with PA2(SCK0) and PA4(TCLK0)

 * Connect SIM-GND with GND

== Mode of operation ==

The USART of the AT91SAM7S is capable of T=0. The documentation only mentions it in clock-master mode, like you

would run it in a smart card reader to actively talk to a smart card. However, by using the USART input clock multiplexer,

you can use an externally-generated CLK like the one from the SIM card socket of the phone.

Unfortunately, the Rx Timeout feature of the USART is not working in T=0 mode, so I had to re-implement Rx timeout (waiting time)

handling by means of the TC (timer/counter) block 0.  Due to technical limitations, we will wait up to one byte (12 etu) more

than we should.

== Revisions ==

=== v1.1p (1.1 Production branch) ===

This is a slightly corrected version of the v1.0p.

Changes:

 * a critical capacitor is near the LDO

 * some other capacitors are nearer to the CPU

 * some power traces are wider

 * the SIM C6/VPP contact is also routed through the bus switch (sometimes used for Single Wire Protocol)

 * sysmocom is added in the copper for legal reasons

 * the FTDI Vcc is cut

Downloads:

 * [attachment:simtrace_v11p_schematic.pdf]

 * [attachment:simtrace_v11p_gerber.zip]

=== v1.0p (1.0 Production branch) ===

[[Image(simtrace_v10p_front_mid.jpg, 33%)]]

This is identical to v1.0 on the schematics side, we simply altered the footprints of some components to accommodate

whatever the SMT factory had in stock.  Specifically the LED are 0805 instead of 0603, and the shottky diodes are

in a slightly awkward looking very large package.

Downloads:

 * [attachment:simtrace_v10p_schematic.pdf]

 * [attachment:simtrace_v10p_gerber.zip]

=== v1.0 ===

[[Image(simtrace_10_front.jpg, 33%)]]

This is the first stable release.  We built some 5 prototypes from this version.

Downloads:

 * [attachment:simtrace_schem_v10.pdf]

 * [attachment:simtrace_10_gerber.zip]

=== v0.9 ===

[[Image(simtrace_v09_top_mid.jpg, 33%)]]

As of June 04, 2011 the components had all arrived and four PCBs were in production.  We assemble the first

units around June 14, 2011.

As of June 21st, we had four re-worked prototypes that are fully functional.

=== v0.8 ===

[[Image(simtrace_08_front_mid.jpg, 33%)]]

Never really was an official release.  However, a friend took the unfinished Gerber files and built 5 units.

Since the Gerber was not finished, we had to do lots and lots of re-work in order to make them work at all.

== License ==

Schematics and Gerber files are released under the Creative Commons CC-BY-SA (Share Alike / Attribution) license.

== Sales ==

Sales started at the 2011 CCC Camp and the hardware can be bought through the web-shop of sysmocom GmbH ([http://shop.sysmocom.de/])

== Credits ==

 * Harald Welte

  * Original project idea, schematic design

  * Olimex SAM7-P64 based prototypes

  * Firmware and host software

 * Kevin Redon

  * KiCAD work on schematics, footprints and routing

  * Soldering of some prototypes

 * [http://sysmocom.de/ sysmocom - systems for mobile communications GmbH]

  * funding for hardware prototyping (PCB, components, etc)

 * Christian Daniel

  * post-production flashing + debugging, design + test of v1.0p rework