DesktopSDR: A new free textbook about using the RTL-SDR with MATLAB

On the 26th of August a new technical text book titled “Software Defined Radio using MATLAB® & Simulink® and the RTL-SDR” is due to be released for free in eBook form and in print form for an as of yet unknown price on Amazon. The book is written by four members of the Department of Electronic and Electrical Engineering at the University of Strathclyde in Scotland. 

MATLAB is a technical computing language and software suite used commonly by professional and student scientists and engineers. It is similar to GNU Radio in terms of its digital signal processing (DSP) capabilities. Back in January 2014 the MATLAB team released an update which enabled the RTL-SDR to be used as an RF input device.

The text book’s blurb reads:

The availability of the RTL-SDR device for less than $20 brings software defined radio (SDR) to the home and work desktops of EE students, professional engineers and the maker community. The RTL-SDR can be used to acquire and sample RF (radio frequency) signals transmitted in the frequency range 25MHz to 1.75GHz, and the MATLAB and Simulink environment can be used to develop receivers using first principles DSP (digital signal processing) algorithms. Signals that the RTL-SDR hardware can receive include: FM radio, UHF band signals, ISM signals, GSM, 3G and LTE mobile radio, GPS and satellite signals, and any that the reader can (legally) transmit of course! In this book we introduce readers to SDR methods by viewing and analysing downconverted RF signals in the time and frequency domains, and then provide extensive DSP enabled SDR design exercises which the reader can learn from. The hands-on SDR design examples begin with simple AM and FM receivers, and move on to the more challenging aspects of PHY layer DSP, where receive fi lter chains, real-time channelisers, and advanced concepts such as carrier synchronisers, digital PLL designs and QPSK timing and phase synchronisers are implemented. In the book we will also show how the RTL-SDR can be used with SDR transmitters to develop complete communication systems, capable of transmitting payloads such as simple text strings, images and audio across the lab desktop.

While the book is not yet released the full table of contents is currently available for viewing on their downloads page. From looking at the table of contents, we can see that the text book looks very comprehensive and will likely be extremely useful for students who are learning RF and DSP concepts in university level classes. The team behind the book (desktopsdr.com) also have a YouTube channel where it appears that they are releasing supporting videos.

We will post again when the book is released.

Download the book at desktopsdr.com
Download the book at desktopsdr.com

Breaking into cars wirelessly with a $32 homemade device called RollJam

At this years Def Con conference speaker Samy Kamkar revealed how he built a $32 device called “RollJam” which is able to break into cars and garages wirelessly, by defeating the rolling code protection offered by wireless entry keys. Def Con is a very popular yearly conference that focuses on computer security topics.

A rolling code improves wireless security by using a synchronized pseduo random number generator (PRNG) on the car and key. When the key is pressed the current code is transmitted, and if the code matches what the car is expecting the door opens. The seed for the PRNG in the car and key is then incremented. This prevents replay attacks.

The RollJam hardware currently consists of a Teensy 3.1 microcontroller and two CC1101 433 MHz RF transceiver modules. It works by recording the wireless key signal, but at the same time jamming it so that the car does not receive the signal. When the key is pressed a second time the signal is first jammed and recorded again, but then the first code is replayed by the RollJam device. Now you have an unused code stored in RollJam that can be used to open the car. Samy shows how this works using an SDR and waterfall display graph in the following slide.

How RollJam Works
How RollJam Works

Samy’s full set of presentation slides can be downloaded from samy.pl/defcon2015. Also several large publications including networkworld.coWired.com and forbes.com have also covered this story with longer more in depth articles that may be of interest to readers.

Micheal Ossmann’s First Look at the Rad1o Badge

Last month we posted about the Rad1o badge, a HackRF inspired software defined radio that is being given out for free to participants of the Chaos Computer Club (CCC) camp conference in Germany. The Rad1o has an operating frequency range of 50 MHz – 4000 MHz, an ARM Cortex M4 CPU, a color LCD screen, a 2.5 GHz ISM band PCB antenna, an audio connector for headphone and microphone connections and an on board battery for portable use. It is also fully compatible with HackRF software. It is not for sale at the moment and only available to conference participants.

Micheal Ossmann, creator of the original HackRF was able to get a Rad1o from a CCC member who helped in the design. He has posted his first impressions of the radio on his blog. Micheal writes how the Rad1o is a variation on the HackRF and how it is kind of similar to a HackRF plus Portapack on a single PCB. He also mentions how he noticed some peculiar component choices on the Rad1o, which is due to the fact that they had to use several components freely obtained from sponsors, in order to be able to afford give them away for free to conference antendees.

The Rad1o Prototype
The Rad1o Prototype

An RTL-SDR Comic Book!

We’ve recently been informed that the RTL-SDR has become so popular that is now has it’s very own Japanese Manga comic book! If you don’t know what Manga is, it a type of Japanese comic book. The manga appears to be a one off self published work in a continuing series about military radio interception. Other popular technical manga books have been released before, such as the manga guides to statistics, physics, calculus, electricity, linear algebra, biochemistry, the universe and relativity, but this is the first one we’ve seen on the RTL-SDR.   

The comic is written in Japanese and it looks like it explains what the RTL-SDR is as well as providing a tutorial on its installation and use. It is yet to be released but the release date is stated as mid August. The comic is sold on this Japanese web store (note that on the store it is possible to see some illustrated images that may be considered explicit by some so don’t click if you want to avoid that). It may be an interesting gift for RTL-SDR fans, or for Japanese readers who want a fun way to learn about radio. We’re not sure how to buy the comic if you reside outside of Japan, but this Japanese forwarding service might be able to buy it for you.

Below we’ve posted the cover image and the preview pages.

rtl_manga_1rtl_manga_2rtl_manga_3rtl_manga_4rtl_manga_5rtl_manga_6

Creating a FIS-B ADS-B Weather Information Receiver for Pilots with an RTL-SDR

Recently a pilot wrote in to let us know about how he’s been using his RTL-SDR to receive real time FIS-B ADS-B weather updates in ForeFlight while flying in his plane. ForeFlight is an iOS app for pilots that helps with flight planning and provides access to important information like charts, real time weather reports and airport information. However, to access real time weather information usually you need to buy a $549 – 899 Stratus receiver

Now it is possible to use an RTL-SDR to receive the FIS-B weather information that is transmitted on the 978 MHz UAT frequency which is available only in the USA. UAT stands for Universal Access Transmitter and is similar to ADS-B transmitted at 1090 MHz, however UAT has some extra features for pilots compared to ADS-B. In addition to location information UAT provides a Traffic Information Service (TIS-B) which allows pilots to see what ground control sees on their traditional RADAR system. It also provides a Flight Information Service-Broadcast (FIS-B) which includes weather and other information. UAT is commonly used on small aircraft due to it’s lower cost and additional features. 

To receive UAT FIS-B weather information the pilot used dump978 on a Raspberry Pi 2. Dump978 is a UAT decoder, similar in operation to dump1090. He has also created a program called “Stratux“, which together with a WiFi adapter allows the decoded FIS-B data to be transmitted from the Raspberry Pi by WiFi to an iPad running ForeFlight. Running the software is as simple as piping the 978 MHz signal from rtl_fm into dump978, and then piping the decoded output of dump978 into stratux. Foreflight can then connect to the WiFi signal and work like it is connected to an expensive Stratus receiver.

In the video example below you can see some weather radar animations from FIS-B data received from the RTL-SDR shown on the ForeFlight screen at around 4:29 and onwards.

RTL-SDR, Rasperry Pi, WiFi dongle and portable battery pack for receiving UAT.
RTL-SDR, Rasperry Pi, WiFi dongle and portable battery pack for receiving UAT.
FIS-B UAT Weather Report received on Foreflight from a Raspberry Pi and RTL-SDR running dump978.
FIS-B UAT Weather Report received on Foreflight from a Raspberry Pi and RTL-SDR running dump978.

ADS-B Air Demo (ForeFlight)

 

RTLSDR Scanner Standalone Application Released

RTLSDR Scanner is a program that can be used with an RTL-SDR to do a power scan over a very wide frequency. It works by quickly scanning the selected bandwidth in chunks and stitching the results together. Previously to install this software you had to run an installer which installed many dependencies. However just recently the author has released a standalone version which doesn’t require any installation. To use this version simply download the RTLSDR Scanner .exe file, and place it into the same folder as the official Windows librtlsdr drivers, which can be downloaded from Osmocom.

One useful application that RTLSDR Scanner can be used for is to generate a signal strength heatmap. If you connect a GPS device to your laptop, RTLSDR scanner will record GPS coordinates together with signal strengths as you drive around. From this a heatmap of signal strengths can be generated which can help you to find signal sources, or sources of interference.

RTLSDR Scanner scanning the cellular bands.
RTLSDR Scanner scanning the cellular bands.

Setting audio levels correctly when decoding with an RTL-SDR

When decoding a digital signal with an RTL-SDR the digital audio is usually piped from receiver software like SDR# via stereo mix or software like Virtual Audio Cable/VBCable into the decoding software. The decoding software expects a clean audio signal with the volume levels set not too loud, but also not too quiet. Usually this can be achieved by trial and error.

However amateur radio hobbyist K3RRR found that setting the audio level correctly was critical for maximizing decodes on his digital HF signals when using his RTL-SDR. To correctly set the audio levels he uses a program called Peak Level Meter and another called Soundcard Oscilloscope. Peak Level Meter is used to ensure that the audio levels are set correctly and Soundcard Oscilloscope is used to ensure that the audio is not being over driven into square waves.

Checking for over driven audio waveforms in Soundcard Oscilloscope.
Checking for over driven audio waveforms in Soundcard Oscilloscope.

Setting up a Raspberry Pi based APRS RX IGate with an RTL-SDR

Recently amateur radio hobbyist WB20SZ wrote in to us to let us know about his work with creating an easy to build receive only APRS internet gateway (IGate) with a Raspberry Pi and RTL-SDR dongle. The process involves using WB20SZ’s “Dire Wolf” software which is a free Linux based APRS encoder/decoder. He writes that it can be used to observe APRS traffic, as a digipeater, APRStt gateway or Internet Gateway (IGate). Setting up the APRS IGate is a simple matter of piping the received APRS audio from rtl_fm into the direwolf software. Instructions for installing direwolf can be found here.

APRS stands for Automatic Packet Reporting System and is a packet radio protocol used by radio amateurs to broadcast real time data such as messages, announcements, weather station reports and sometimes the location of vehicles. If an APRS station has a GPS attached to it, the broadcasts will also contain the GPS coordinates. Internet Gateways or IGates are repeaters that are used to receive messages from a local radio and pass them on via the internet to a transmit capable IGate repeater anywhere in the world. To run an IGate you should be a radio amateur with a callsign. A global aggregation of APRS broadcasts received by IGates can be seen at aprs.fi.

Various APRS messages seen on aprs.fi
Various APRS messages seen on aprs.fi