무선통신 - secuinsidesecuinside.com/archive/2016/2016-1-5.pdf · fm radio receiver carrier...

41
1

Upload: vuongthu

Post on 21-Aug-2018

215 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

1

Page 2: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

2

무선통신?

On-Line

Page 3: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

3

무선통신?

Propagation Wave

Page 4: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

4

무선통신?

Not Distanse, Range

Page 5: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

5

신호의 유(1), 무(0)

무선통신?

!

Page 6: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

6

무선통신?

Continuous time : Discrete time = Analog : Digital

01000101011∙ ∙ ∙

Page 7: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

7

장점?

무선통신?

Page 8: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

8

SDR

SDR(Software Defined Radio)

Page 9: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

9

SDR

Low Cose:

RTL2832U – Realtek SDR dongle 24-1766MHz

Medium Cose:

FunCube DonglePro + 150kHz-2.05GHz

HackRF One 10MHz-6GHz

BlacdRF 300MHz-3.8GHz

High Cost:

USRP1

USRP B200 70MHz-6GHz

USRP B210 70MHz-6GHz

UmTRX 300MHz-3.8GHz

Matchstiq 300MHz-3.8GHz

Page 10: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

10

GNURadio

시각적 블록 다이어그램 설계

설계를 바탕으로 Python 코드 생성

SDR 장비에 코드 삽입

Page 11: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

11

FM Radio receiver

Block

작업 필드

Page 12: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

12

FM Radio receiver

Carrier Frequency

Time domain product = Frequency domain shift

433MHz? 2.4GHz?

0Hz 0Hz 2.4GHz

baseband Carrier frequency

신호 생성시 신호 전송시

𝒇 𝒇

Page 13: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

13

FM Radio receiver

FFT(Fast Fourier Transform)

Page 14: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

14

FM Radio receiver

Channel Detection

𝑨(𝒄𝒐𝒔(𝒘𝟏𝒕 + 𝜽𝟏) + 𝐜𝐨𝐬(𝒘𝟐𝒕 + 𝜽𝟐) × 𝒄𝒐𝒔 𝒘𝟏𝒕 + 𝜽𝟑 𝒅𝒕

= 𝑨𝒄𝒐𝒔(𝒘𝟏𝒕 + 𝜽𝟏) × 𝒄𝒐𝒔 𝒘𝟏𝒕 + 𝜽𝟑 𝒅𝒕

+ 𝐀𝐜𝐨𝐬(𝒘𝟐𝒕 + 𝜽𝟐) × 𝒄𝒐𝒔 𝒘𝟏𝒕 + 𝜽𝟑 𝒅𝒕

= 𝑨′

Page 15: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

15

FM Radio receiver

Page 16: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

16

FM Radio Transmitter

2 Channel Multicasting

Page 17: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

17

FM Radio Jammer

HackRF One

10 MHz to 6 GHz operating frequency

half-duplex transceiver

up to 20 million samples per second

8-bit quadrature samples (8-bit I and 8-bit Q)

compatible with GNU Radio, SDR#, and more

software-configurable RX and TX gain and baseband filter

software-controlled antenna port power (50 mA at 3.3 V)

SMA female antenna connector

SMA female clock input and output for synchronization

convenient buttons for programming

internal pin headers for expansion

Hi-Speed USB 2.0

USB-powered

open source hardware

Page 18: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

18

FM Radio Jammer

Page 19: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

19

RKE replay

RKE(Remote Keyless Entry)

Page 20: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

20

RKE replay

Signal Detection

Page 21: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

21

RKE replay

Signal Detection

Page 22: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

22

RKE replay

Signal save

Page 23: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

23

RKE replay

Play

Page 24: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

24

RKE signal analysis

Page 25: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

25

RKE signal analysis

Page 26: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

26

math.pi = 𝝅

fsk_deviation_hz

: fsk modulation에 사용된

주파수간 차이

RKE signal analysis

Page 27: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

27

𝒇𝒄 = 𝟒𝟑𝟑. 𝟗𝟗𝟓𝑴𝑯𝒛 ∆𝒇 = 𝟑𝟓𝒌𝑯𝒛

RKE signal analysis

433.92MHz

433.99MHz

Page 28: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

28

RKE signal analysis

Page 29: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

29

About 200 samples

Bits Extraction

Page 30: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

30

About 200 samples

Bits Extraction

Page 31: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

31

1. 200 samples = 1 bit

2. 0 crossing = bit change

3. Total about 1000 bit

Bits Extraction

Page 32: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

32

Bits Extraction

Page 33: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

33

Bits Extraction

88

Page 34: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

34

1. Preamble = 97 bits

2. ID = 14 bits

3. Action bits = 2 bits

4. Rolling code = 44 bits

5. End bits = 17 bits

총 3번 반복

Bits Extraction

Page 35: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

35

Bits Generation

FSK Modulation

dmfjdmftS

tftqStftiS

tfjtftqjStiS

etStS

tqjStiStS

dd

cc

cc

tfj c

22

22

22

0

00

00

2

0

000

sincos)(

...sin)(,cos)(,

sincos)(,)(,Re)(Re)(

)(,)(,)(

Page 36: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

36

Bits Generation

30MB 크기의 파일 생성

Page 37: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

37

Bits Generation

Page 38: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

38

시연

Bits Transmission

Page 39: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

39

1. 신호 수신 방법을 알면 생성도 가능

2. 생성 방법은 수식의 코드전환 수준

3. 대부분의 소형 장비의 신호는 매우 단순

4. 대해적의 시대가 왔습니다.

Conclusion

Page 40: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

40

Q & A

Page 41: 무선통신 - SECUINSIDEsecuinside.com/archive/2016/2016-1-5.pdf · FM Radio receiver Carrier Frequency Time domain product = Frequency domain shift 433MHz? 2.4GHz? 0Hz 0Hz 2.4GHz

41

감사합니다.