Wiki » History » Version 12
tsaitgaist, 07/10/2018 06:43 PM
rename simtrace 2 board to simtrace v2, add more info for trace
1 | 1 | tsaitgaist | h1. Osmocom SIMtrace 2 |
---|---|---|---|
2 | |||
3 | 8 | laforge | Osmocom SIMtrace 2 is a software, firmware and hardware system for passively tracing SIM-ME communication between the SIM card and the mobile phone, and remote SIM operation. |
4 | 9 | tsaitgaist | While it was designed for SIM-ME communication, it supports all ISO 7816 smart-cards using the T=0 protocol (the most common case). |
5 | 1 | tsaitgaist | |
6 | 12 | tsaitgaist | It is a followup of the "SIMtrace project":/project/simtrace/Wiki, providing more functionalities (e.g. remote SIM operation) and supporting multiple boards (e.g. SIMtrace with SAM3S, "sysmoQMOD":https://www.sysmocom.de/products/sysmoqmod/index.html). |
7 | 1 | tsaitgaist | |
8 | h2. Hardware |
||
9 | |||
10 | 10 | tsaitgaist | The SIMtrace 2 firmware supports several boards. |
11 | The firmware is written for an "ATSAM3S4B":https://www.microchip.com/wwwproducts/en/ATSAM3S4B micro-controller. |
||
12 | 1 | tsaitgaist | |
13 | 12 | tsaitgaist | Note: The SAM3S is meanwhile labelled as _not recommended for new designs_ by Atmel. However, there are plenty of hardware and software compatible upgrade options, including SAM4S. The upgrade is possible in the future. |
14 | 1 | tsaitgaist | |
15 | 12 | tsaitgaist | h3. SIMtrace v2 |
16 | 1 | tsaitgaist | |
17 | 10 | tsaitgaist | !{width:20%}simtrace-board-mini.jpg! |
18 | 9 | tsaitgaist | |
19 | 10 | tsaitgaist | The main purpose of this board is to sniff the communication between a phone and a SIM card (or any card reader and smart-card). |
20 | 1 | tsaitgaist | |
21 | 12 | tsaitgaist | This is the same circuit board as the previous "SIMtrace v1":/project/simtrace/wiki/SIMtrace_Hardware, with the exception that the "ATSAM3S4B":https://www.microchip.com/wwwproducts/en/ATSAM3S4B micro-controller replaces the old "AT91SAM7S64":https://www.microchip.com/wwwproducts/en/AT91SAM7S64. Since the SAM3S is pin compatible with the SAM7S, any SIMtrace v1 board can be converted into a SIMtrace v2 board simply by replacing the micro-controller. |
22 | 1 | tsaitgaist | |
23 | 10 | tsaitgaist | Note: This hardware is "open source":https://git.osmocom.org/simtrace/tree/hardware. |
24 | 1 | tsaitgaist | |
25 | h3. sysmoQMOD |
||
26 | |||
27 | !{width:25%}sysmoqmod.png! |
||
28 | |||
29 | The SAM3S micro-controller with SIMtrace 2 firmware is also used on the "sysmoQMOD":https://www.sysmocom.de/products/sysmoqmod/index.html board to provide remote SIM operation capabilities. |
||
30 | |||
31 | Note: This hardware is not open source. |
||
32 | |||
33 | h2. Firmware |
||
34 | |||
35 | 10 | tsaitgaist | The SIMtrace 2 firmware source code is available in "git":https://git.osmocom.org/simtrace2/. |
36 | It is currently under active development and we recommend to [[Flashing|flash]] the new firmware images to profit from the latest bug fixes and added functionalities. |
||
37 | 1 | tsaitgaist | |
38 | The SIMtrace 2 firmware is a complete rewrite and *can only be flashed on hardware with SAM3S* ARM Cortex-M3-based micro-controllers. |
||
39 | 12 | tsaitgaist | *The SIMtrace 2 firmware is not compatible with the older "SIMtrace v1":/project/simtrace/wiki/SIMtrace_Hardware using SAM7S ARM7TDMI-based micro-controllers.* |
40 | 1 | tsaitgaist | |
41 | 12 | tsaitgaist | h3. trace |
42 | 1 | tsaitgaist | |
43 | 12 | tsaitgaist | The trace application firmware allow to sniff the communication between a phone and a SIM card (or any card reader and smart-card). |
44 | It is intended for the [[Wiki#SIMtrace v2|SIMtrace v2 hardware]] and its function is analog to the "SIMtrace v1":/projects/simtrace/wiki/SIMtrace_Firmware. |
||
45 | 10 | tsaitgaist | |
46 | 12 | tsaitgaist | The sniffing is completely passive. It uses the RST, ATR, PPS (baud rate tested with F/D up to 512/32), and WT (waiting timeout) to properly parse the ISO 7816-3 TPDUs. |
47 | Currently only the T=0 protocol is supported since this is the most common protocol used (we haven't seen T=1 in use). |
||
48 | |||
49 | 10 | tsaitgaist | !{width:25%}simtrace_and_phone.jpg! |
50 | |||
51 | The application firmware to be flashed using [[Flashing#DFU|DFU]] is attachment:simtrace-trace-dfu.bin. |
||
52 | |||
53 | h2. Flashing |
||
54 | |||
55 | The [[Wiki#Firmware|firmware images]] can be flashed as described [[Flashing|here]]. |
||
56 | 1 | tsaitgaist | |
57 | 11 | tsaitgaist | h2. Development |
58 | 1 | tsaitgaist | |
59 | To compile the firmware using the source code, or participate in the development, please refer to the instructions provided in the "README":https://git.osmocom.org/simtrace2/tree/firmware/README.txt . |
||
60 | |||
61 | h2. Host PC Software |
||
62 | |||
63 | TODO |