Hi All:
I have just posted this evocative topic to encourage experimentation on Motorola Systems Saber radios. Those familiar with the Systems Saber radio are aware that a fraction of the interior cubic space is occupied by either a SECURENET module or a bypass module consisting of a wire. Now due to FCC part 90 narrowbanding the SECURENET operation of these radios is largely obsolete. For experimenters this is good news because e-bay is flooded with System Sabers to experiment with.
I have taken a few hours out of my very busy schedule to map out schematically the signals available in the SECURENET space of these radios.
Briefly; there is complete access to transmit and receive audio paths, switched and unswitched B+, Regulated +5V, paths to and from the universal connector as well as access to the 9600 baud interior serial data bus, serial data /busy line and radio /reset.
Functionally when the radio is programmed to operate with a Multikey SECURENET module, the radio can communicate TX and RX modes, 0-7 multi-key, secure/clear commands from the U400 CORE processor to the SECURENET module. In theory one could hijack these signals and install a module that uses these signals to do something completely different.
The communications protocol used is somewhat cryptic, however terms such as LH (Long Horn?), SCI and SB9600 have been found in the documentation. Since some of you have reverse engineered these protocals in more current product, it seems likely the same could be done for the SYSTEM SABER.
What sort of things could be done?
1) A multipurpose board with a microchip to exploit the signalling bus to provide interface to other experiments such as APRS.
2) A D-STAR interface. Maybe an ICOM UT-121 D-STAR board can be angled into the space along with the interface board to provide basic D-STAR features. Maybe an AMBE 2020-10 chip can be installed along with a CML data pump? I know there have been some large scale D-STAR retrofits, maybe time is right to miniaturize?
3) A frequency hop spread spectrum (FHSS) module using a small GPS receiver for synchronization. I am curious to know if the synthesizer can be bit banged to a new frequency while transmitting and receiving without significantly disturbing the PLL lock.
4) An analog encryption module interface.
5) A Rodger Beep (ha ha ha!)
6) A Blue Tooth headset adapter
7) Ideas??????
Please feel free to visit the web page below and copy the bit map of the schematic. Those wishing a Visio file may contact me directly.
http://leikhim.com/page15.php
- Board index Focused Discussion Experimental and Next Generation LMR
- Search
-
- It is currently Wed Feb 12, 2025 9:07 am
- All times are UTC-08:00
MOTOROLA SYSTEM SABERS HW HACKING
This forum has been created to foster the discussion on future and cutting edge technology. This discussion is not limited or restricted to Motorola. Examples of allowed discussion are open source hardware (GNU Radio for example) and software (Open source P25, Asterisk, ROIP, etc). Discussion is also permitted where older technology could be applied to areas where it had previously not been used (Example: Trunking on amateur radio).
Moderator: Queue Moderator
-
- Posts: 51
- Joined: Fri Jun 02, 2006 7:23 pm
MOTOROLA SYSTEM SABERS HW HACKING
Post by RFI-EMI-GUY »
TV DINNER BY THE POOL, IM SO GLAD I FINISHED SCHOOL. FZ
Return to “Experimental and Next Generation LMR”
Jump to
- Administrative
- ↳ Announcements and Forum News
- ↳ Forum Rules
- General
- ↳ General Motorola Solutions & Legacy Radio Discussion
- ↳ Radio Programming
- ↳ Software & Firmware Releases & Issues
- ↳ Codeplug Information
- ↳ NFPA 1802 Discussion
- Current Motorola Solutions Public Safety / Astro Product Line
- ↳ APX NEXT
- ↳ APX Series Subscribers
- ↳ ASTRO Series (Astro Saber, Spectra, XTS3000/3500) Subscribers
- ↳ ASTRO25 Series (XTS/XTL 1500/2500/5000) Subscribers
- ↳ ASTRO Experimental - How to do things a little out of the box
- ↳ ASTRO Products Feature Requests & Future Speculation
- ↳ Legacy Batboard Motorola ASTRO (VSELP/IMBE/AMBE) Equipment Forum
- Current Motorola Solutions Professional / Business Product Lines
- ↳ MotoTRBO ION Devices
- ↳ Motorola CP/CM Series Subscribers
- ↳ MotoTRBO Portables and Mobiles (4xxx/6xxx) 1.0 Series Subscribers
- ↳ MotoTRBO Portables and Mobiles (3xxx/5xxx/7xxx/SL) 2.0 Series Subscribers
- ↳ MotoTRBO Repeaters, Trunking, and Site Infrastructure
- ↳ MotoTRBO 3rd Party Application Discussion & Support
- ↳ MotoTRBO/Business Products Feature Requests & Future Speculation
- ↳ Experimental - How to do things a little out of the box
- Motorola System Infrastructure (Consoles, Base Stations, Repeaters, Trunking, etc.)
- ↳ Smartnet/Smartzone/Project 25 (Phase I/II) Systems
- ↳ Base Stations, Repeaters, General Infrastructure
- ↳ Consoles
- ↳ Experimental - Mods, and how to do things a little out of the box
- ↳ Infrastructure Product Feature Requests & Future Speculation
- Focused Discussion
- ↳ Motorola Digital and Voice Paging
- ↳ Converting Motorola Equipment to 900MHz Amateur
- ↳ Test Equipment & RF Equipment Alignment
- ↳ Vehicle Radio Installs
- ↳ Experimental and Next Generation LMR
- ↳ Motorola Digital Radio Compatability
- Off-Topic Discussion
- ↳ Vehicle Warning Equipment Discussion
- ↳ Computer/Technical Assistance
- ↳ Knowledge Base