BlueBOX

Hello to you, Igor!!! Once on Tuesday September 21, 1999 at 15:47:00 Igor Krauklis wrote to Kirill Frolov on the theme 'BlueBOX': KF>> is nowhere to use or am I wrong? On Peterstar KF>> definitely won’t work. IK> What is this blue box anyway? :-/ IK> Why won't it work on Peterstar? There is a dock here, if necessary, I can throw in some software for the PC... ===================== file: BBG.TX .C ======================================= /-----------------------/ Delerium Tremens '98 pR0UdLy pREzENtZ bLUE b0X /-----------------------/ A lot of people ask questions such as: - What is Blue Box? - How does Blue Box work? - And why is Blue Box called Blue Box? - How is Blue Box connected to the ATC? And so, after a lot of convincing by one dude, I still I decided to give answers to these “incomprehensible” questions :). ===================================================================================================== So what exactly is “this” Blue Box? Blue Box is not- such a big "Fenka" that issues a "non-interval packet" while determining the number on the ATS (I hope I expressed myself clearly? :) )That is, after the AOH sends a 500Hz request, after connection with a subscriber, or long-distance, or with anyone else who wants determine your number :))) . Blue Box is called Blue Box because before “Fenka” looked la in the form of a “Blue Box”, which consisted of several buttons pok. Now she doesn't look the same as before and she doesn't look like that anymore you name it :). Nowadays this thing is called a TARIFFIER. And so, the “non-interval package” includes several numbers, corresponding the corresponding digits of the subscriber number (each digit has its own purity) and one more number - the category of the subscriber and the so-called register KP, which means the end of the code. Also in this "package" may also include the ST2P register - repeat register, sometimes this The register is simply designated by the letter "P". When the room is on repeat two digits, then ST2P is put in place of the first digit. In some in countries such as the USA, Japan, a register is added at the very beginning ST, meaning the beginning of the code and the countdown already goes from it to KP register, but on Russian PBXs everything works without it :). Length The duration of each digit is 50ms +/- 5ms. Pause between numbers in in our country it can be from 0 (that is, not at all) and up to 30ms. What The most important thing is that this entire “package” is issued in reverse. But the register KP, it stays that way in the end. There are a number of other registers, but inI won’t describe them in this document for now and they are not particularly needed ;). Yes, I completely forgot... strange as it may seem, but electronic PBXs the duration of each digit can be reduced by 2 times and Therefore, some “ancient” Russian AONs define the no- memp :) . !!"Raw" room codes: 5495015:[1] └╨╨╨╨╨┤ ╙─ Subscriber category └──── Number !Looks like this: ┌> 5 4 9 5 0 1 5 : [1]<─── Category └─────────────────── ───────────────────┐ Category ──>[1] : 5 1 0 5 9 4 5 KP ╓─┴─╖╓─┴─╖╓─┴─╖╓─┴─╖╓─ ┴─╖╓─┴─╖╓─┴─╖╓─┴─╖╓─┴─╖ ...1111155555111110000055555999994444455555*****...<─── "Raw" code ╙─┬─╜╙───────────────┬ ─────────────────╜╙─┬─╜ Category ────┘ │ │ Number ───────────────────────────┘ │ End of code (KP) ──────────────────────────────────────┘ 3345928:[3] └╨╨╨╨╨┤ ╙─ Category └──── Number !Looks like this: ┌───────────────────────────────────┐ │ ╓─┴─╖ │...333338888822222999995555544444PPPPP33333*****...<─── “Raw” code Repeat ─┘ ╙─┬─╜╙───────────────┬ ─────────────────╜╙─┬─╜ Category ────┘ │ │ Number ───────────────────────────┘ │End of code (KP) ──────────────────────────────────────┘ -: One digit equals 10ms, therefore “11111” - five digits and 50ms :) -:P-ST2P -: * - KP Now why "..."? But because the ATS issues all this “de- lo" not once, but from 2 to 4, sometimes up to 5, and the countdown continues from the KP register. How did AOH count the required number of digits from KP (from the last time, then is when the ATS answered for the last time) everything else he “threw out” blows." If the last time, the ATS did not respond correctly, then that the KP was not designated, then the AOH counts from the second to last one. Attention! If KP is not recognized in all 4 “times”, the number is not decide! Although on some AONs, such as on an IDC modem, it will be determined, but there may be a glitch. !Example1:(Number: 3345928:[3]) ...382954P3?382954P3?382954P3?382954P3?... -: One digit equals 50ms -:P-ST2P -: ? - unidentified KP The AOH will issue "CALLER'S NUMBER: ?33459283334592833345928333450283". He will issue it four times and put “?” at the beginning, which is the number not fully or incorrectly identified (KP not identified). !Example 2: ...382954P3?382954P3*382954P3?382954P3?... ╙─── I recognized it! -: One digit equals 50ms -:P-ST2P -: * - KP -: ? - unidentified KP AOH will show everything as it should be"CALLER'S NUMBER: +33459283" "+" means completely! ╙─── Category! !Example 3: Something specifically happened for us: ... 54P3*382954P3*38295 ... ╙╨╨╨╨╨╨╨╨── No glitches :) . -: One digit equals 50ms -:P-ST2P -: * - KP In this case, too, everything will be determined correctly. Digit codes in Hz (CCITT-5): ╒══════╤════════════╕ │ 0 │ 1300 1500 │ │ 1 │ 700 900 │ │ 2 │ 700 1100 │ │ 3 │ 900 1100 │ │ 4 │ 700 1300 │ │ 5 │ 900 1300 │ │ 6 │ 1100 1300 │ │ 7 │ 700 1500 │ │ 8 │ 900 1500 │ │ 9 │ 1100 1500 │ ├──────┼────────────┤ │ KP │ 1100 1700 │ │ ST2P │ 1300 1700 │ │ ST │ 1500 1700 │ ╘══════╧════════════╛ Categories: ╒═════╤══════════════════════════════ ════════════════════════════════════╕│ 0 │ Intercity, detection Eggog! :-) │ │ 1 │ Intercity access on a general basis (Apartments). │ │ 2 │ Intercity travel is paid immediately (Hotels). │ │ 3 │ Bummer - with long distance :( (Work phones) │ │ 4 │ Has the right to intercity travel. (Looks like it's all free ;) ) │ │ 5 │ Long-distance negotiations are not paid, but are taken into account! │ │ 6 │ Long-distance pay phones. │ │ 7 │ A dude who has the right to use a long-distance information service. │ │ 8 │ Freebies in categories 4 and 7. │ │ 9 │ City pay phones. │ ╘═════╧══════════════════════════════ ════════════════════════════════════╛ GAME!OVER ===================================================================================== P.S. I hope everything is clear... :-) If I'm wrong about anything, write! Attached to the dock is a program that generates numbers in .WAV format called Blue Box Number Generator v0.04 beta. With this version, DTMF codes are also supported. Maybe someone will find it useful... :) ST2P and KP are installed by myself. Although in this versions are supported by manual dialing using the "/R" key. And don't forget- the ones with 8 digits in the number! P.P.S. A small glitch was found in the first two versions of the generator. Glitchis as follows, if there are 3 identical ones in the room numbers, the generator replaced the second ST2P, and the second, it happened was replaced by the same register, as a result of which one of the digits was not detected :(. In version 0.03b everything is fixed, but it will find Another bug, minor, but still. The calculation is a little crooked - The length of the file in the header was wrong, which is why the WAV file was played not by all players, this bug has been fixed in this version, but only in Blue Box generation, not in DTMF yet, :-? Specific non- fleece of time. :( I advise you to play WAVs by Cubic Player v2.XX, in order to avoid a crooked title. :) And one more news, in connection with the use of FPU, the generator began those without FPU will not be able to work four times faster use this program. P.P.P.S. Who wants to play with definitions on many electronic PBXs with tone dialing, the number inside the PBX is not determined, so It’s quite possible to try it :). You can go to the ATS and ask so that the tarifficator is turned off, but it is unlikely that the ATCs are will do :(. You can also try if you know what time the AOH is sends request(s) to block identification of your number by regular Anti-AON or simply by pulse dialing a number, preferably “0”, and then immediately send the “left” number, sometimes it works. :)I would also like to note that Anti-AOH does not work on digital PBXs! Whoever needs I-NET can try the generator for everything... well-known provider in 5020, MTU. Quite good. I want in particular will appeal to the lucky ones of the North. Butovo with ATS 712/713, because numbers of this PBX are not determined by the standard AON request: “Okay! miss your chance!" This can also be used by subscribers (not all) of the following PBXs: 126, 195, 284, 293, 546, 592 and ATS subscribers 296-9xxx (General Staff). In addition, you can call paid services by transferring your account to anyone. ;) YOU USE THE GENERATOR/DOCUMENT AT YOUR OWN RISK! NO CLAIMS WILL BE ACCEPTED! IF YOU DO NOT AGREE WITH THIS RULE, PLEASE IMMEDIATELY REMOVE THIS WHOLE PACKAGE! :-0 Bye for now... (c) Delirium Tremens 1998. .. Written by dR.No [ViP] [DTg] [PMP] .. ==================== end of BBG.TX .C ======================= With best wishes, Dmitry. [ZX] [LETI]

Press RESET immediately, Dmitry! 23 Sep 99 22:21, Dmitry Sharikov wrote to Igor Krauklis & All: DS> There is a dock here, if necessary, I can throw in software for the PC... [...skip...a lot...] This is not all, and in general AOH lies here from the very edge. It even the numbers are going the other way around... BEPCTAK Blue Block (C) Master A. Pixel (SLY FOX) AOH PRINCIPLES OF ACTION Signal PARAMETERS VARIATIONS of designs 1. Operating principles In ancient times, at the dawn of telephony, long-distance calls were switched operators, voice informing the next operator along the call route about establishing a connection. Thus, to make long-distance calls a whole chain of operators was involved. With the introduction of automatic long-distance communication, a system was installed remote control of remote switching equipment. The point is that pulse dial (using DC interrupt) cannot get through directly through long-distance communication channels, with many along the way amplifiers and signal converters, such as compaction equipment. So Thus, control of the remote party required either the use of special control channels, or transmitting out-of-band tonesfrequencies of regular telephone communication, or transmission within this band (300-3000 Hz). The design of special control channels required the creation of one. Transfer out-of-band signals - extension of this band for trunk signals (between central PBX communication points) channels, which required replacing all amplification devices and led to a decrease in the number of compacted channels for each pair. All this was associated with additional costs, and AT&T, which was pioneering automatic telephony, chose the cheapest method - transferring control to working band of the telephone channel. By now, this signaling system has become a de facto standard for around the world and is described in the CCITT recommendations. Countries that joined worldwide communication system, were forced to use this imperfect interface or install matching (broadcasting) equipment. To understand the process of long-distance communication, you need to understand the general principles building telephone networks. There are several levels (ranks) of the network. First level - local (local), using local PBXs with the main subscriber pool for 10,000 numbers. It is economically profitable to combine on one stations have several (2-5) such pools. The pool capacity is determined by technical considerations, and is closely related to the design of switching devices. So, incoordinate commutators are used so-called. tandem connecting subscriber cable with one movable arm with one wire from subscriber assemblies loops, commuting range numbers ??-** (connection of thousands - hundreds) and others - with another wire of the assembly, connecting tens - ones. Technically the device is a contact movable in two planes, sliding by type field. Setting thousands moves the contact vertically, and hundreds moves the contact vertically. horizontal. A set of tens - ones sets in motion the second tandem apparatus. The subscriber who picks up the handset on his machine is connected to an available tandem, which is notified by the station's readiness signal (continuous tone with frequency 425 Hz). If all dialers are busy, a signal is sent to the subscriber station busy - “indicating signal” (a rare situation on modern telephone exchanges, equipped with a sufficient number of typing devices). and each station has dial transmission channels to remote stations. abor first digits (prefix) selects the remote station (or the same station for "neighboring" prefixes). Through the transmission channel, further dialing takes place on remote station (of the same level) (each prefix has its own channel, while one physical channel is used for several outgoing connections with other PBXs due to PCM multiplexing, or, on more modern ones, packetcompaction and transmission according to the X.25 protocol) and already occurs on it on the selected tandem. For a long-distance connection, dial the long-distance code (in Moscow - number 8) connects the subscriber to the long-distance station. Selecting a region code indicates stations choose a communication route across the country. When dialing an international code further request will be transmitted to the international station. and long-distance communication stations calculation equipment is also included, which, according to the AO system, determines the number caller and prepares to charge the call. From now on further dialing occurs at the far end and is impossible using DC. Therefore, the equipment at the long-distance communication station is turned on, translating pulse dialing into a two-frequency code (standard defined CCITT specification R1-2). After dialing is completed, this equipment generates a control frame framed by codes KP1 at the beginning of the frame and ST at the end, and sends it to the called party. For example, a number in Texas, Amarillo, dialed by the client as 1+806-258-1234 is broadcast to KR1+806-258-1234+ST. Thus, dual-frequency (DF) package contains area code (806), station prefix region (258) and number in the subscriber pool (1234). It is important to note that the code prefix region is padded on the left with zeros up to three characters. For example, Japan code (81) appears as 081, and Russia (7) as 007, although the caller dials 81or 7 respectively. In addition, the equipment can broadcast the number for connections on other routes, say, to Japan via America :), if the lines busy with heavy traffic or faulty. For routing on the remote side (in the destination country) automatic operator service may be requested, returning the code of the route used to communicate with a given country at a given moment. Thus, the number actually sent, encoded in the PM package, is may differ from that dialed by the client, and is determined by the operation of the equipment. For more information about using codes and operators, see the documentation for practical phreaking. It is important to understand that the transmission of the set in PM parcels occurs between central regional long-distance communication stations, via trunk network (CL channels), and pulse dialing is used only in the subscriber line (AL channels) for transmission from subscriber to his PBX. Illustration: pulse tone HF tone HF tone HF Ab.1 ----->--- mATS1 ----->--- dATS1 ======>======dATS2 --->---mATS2 ab. loop communication line trunk. line communication line - where mATS is a local station, dATS is a long-distance station. Since signals in the frequency band are used to transmit MF messages, fits into conversational language, there is the possibility of direct transmissionsuch parcels from the client to the equipment. In some circumstances the equipment will receive these messages and make connections in accordance with them. The trunk channel allocation system operates as follows: when the station long-distance (on the calling side) receives a connection request, it scans available free trunk lines. To signal that the line is idle, a tone signal with a frequency of 2600 Hz is used. (transmitter +-2 Hz, receiver +-20 Hz at -6 dB). Register views all available lines are taken in turn to see if they have that frequency on the lines, and Having found one, it connects to it, considering it free. In this case the signal 2600 Hz is removed from the line, indicating that it is busy (frequency receiver parameters 2600 Hz are also standardized for noise immunity to triggering from conversational currents (with a probability of 10^-4) and response delay per connection - 50..120 ms, for disconnection - 30..80 ms). The called party's far station, noticing loss of signal 2600 on one of the lines, connects your HD translator and tandem on the line, and is thus ready to receive and dial a number, transmitted from the calling station, which is what happens. When the called subscriber picks up the handset, the line is removed from the tandem and direct connection of the subscriber with her, freeing up the tandem for otherssets. A conversation takes place. When the called party hangs up, the far the station disconnects the line from its loop and sends a 2600 Hz signal into it, meaning that the conversation is over and the line is free. The calling party, having accepted this signal completes the billing for the call and disconnects the caller subscriber from the trunk. That is why (that immediately upon arrival of the 2600 Hz signal the trunk turns off), the caller does not hear this signal, and not at all because that, as foreign colleagues write, bandpass filters are installed in the circuits. And no such filtering will occur in the spoken frequency band. Interception of control consists of sending, after establishing a connection into the line from the calling side a signal with a frequency of 2600 Hz. Equipment on both stations interprets this as a command to break the connection, which is what will happen. Subscribers on both sides will hear short beeps. However, the equipment does not reset immediately, but after about 2 seconds. If the 2600 signal is interrupted before this time expires (0.8 sec), the trunk will be disconnected, but the calling the subscriber will remain connected to his long-distance telephone exchange. The station interprets the end of the signal as an incoming request from remote station to which the last connection was made (the equipment is still did not reset). The most important thing is that the subscriber station will: 1) wait for the arrival of a PM package from a remote station;2) do not charge the invoice, because this is a matter for the remote station. Accordingly, the caller, using the Blue Block, issues into the line emulation of the HF transmission of a remote station, forcing the equipment of its station make the connection. His station will think it is operating under control remote station, and will do what is indicated to it (and in fact - blueboxer subscriber) connection. Completion of communication is achieved by sending a 2600 Hz signal into the line by the subscriber and by lowering his handset, which means for the dATS1 station that he is remote the subscriber hung up and his station dATS2 released the trunk. If Ab.1 is not puts down the handset and removes the 2600 Hz signal after 1...2 s, he will again receive dATS1 at your disposal. :) 2. Signal parameters CCITT R1 Frequency Table (AT&T Rank 5 Stations) 900 1100 1300 1500 1700 700 1 2 4 7 11 900 3 5 8 12 1100 6 9 KP1 1300 0 KP2 1500 ST Duration: tones 60 ms (RUS - 100 ms?) pauses 60 ms (RUS - 100 ms?) signal KR1 - doubled - To seize/reset a trunk network, different regions use different frequencies. In the US and Canada it is mainly 2600 Hz. RUS: there is no data on the use of chatots 1200/1600 Hz, most likely they came out of use in connection with the use of these frequencies in all modern modems and fax class 3. RUS: The internal inter-exchange signaling system is described as a "systemalarm system _ 7" or, abbreviated as OKS _7. It has not yet been possible to obtain documentation on this system (protocol). RUS: it’s interesting that in the AO system the information frame is limited to the KP1 code from both sides, while CCITT uses KP1 = transmit request/start of frame, ST - end of frame. In addition, our company also transmits the number backwards. However, We do a lot of things this way... :) 3. Options for constructing Blue Blocks 1) Analog option: + simplicity + efficiency + retuning to other frequencies is possible - no time delays and memory of the dialed number - use of expensive multi-turn resistors - requires adjustment using a frequency meter - frequency shift from temperature, etc. The circuit uses two GU (voltage controlled generators) made on an integrated circuit, lavsan capacitors with low TKE, multi-turn trimmer resistors. The keyboard is short-circuit, single-contact. One terminal of each button is connected to a common wire, the second - through two diodes - to the corresponding pair of frequency-setting resistors (one from GU1, the other from GU2). The output signals of the GUov are mixed and sent through an amplifier to the telephone capsule. To avoid generating incorrect tones, you should avoid pressing several buttons at once. This design is most suitable for self-production inat home, subject to limited radio design skills, and also for experimental purposes. 2) and discrete logic: + accurate frequency shaping + formation of a dialed dial chain from memory + cheap, widely available parts - circuit complexity ~ uneconomical TTL / + economical CMOS The circuit contains a reference frequency quartz oscillator, two counter-divider with variable (downloadable) division coefficient, keyboard, RAM of the dialed number, two small ROMs for converting numbers into coefficients counter divisions. Additionally, there may be a digital indicator of dynamic actions. Pressing the keyboard buttons results in the code of the pressed key being written to RAM. Having written the number to be dialed into RAM, press the “dial” button. Clock circuit supplies a read signal to the RAM in the first phase. numbers from RAM are placed on buses addresses of both ROMs connected in pairs together. and the ROM data bus appears code corresponding to the desired division factor of the counters. By clock to the 2nd phase signal, these coefficients are loaded into the meters and at their outputs signals of component frequencies appear, formed by dividing the reference frequency on the loaded coefficients. The signals are added and amplified and sent to telephone capsule. To form pauses, a division factor = 1 is used,in this case, the output frequency turns out to be very high and the input is filtered amplifier circuit without passing to the output of the unit. The design is most suitable for manufacturing by advanced radio amateurs who do not have the capabilities (skills) to work with microprocessor base. 3) and a microprocessor of the Z80+ series (or similar) + accurate frequency generation + formation of a dialed dial chain from memory + "address book" of numbers in RAM + database (for example, country/city codes) in ROM + flexible configuration/programming options - complexity - uneconomical? This option is a specialized microcontroller. B its composition includes: an I/O port chip, a CPU, a small working RAM, ROM and clock generator. Additionally, a seven-segment digital dynamic indicator. Indicator development, formation of time intervals and other functions are controlled by the CPU according to a program written in ROM. Also in ROM samples of sounds generated by the block are recorded. However, not all of it is encoded. the duration of the sound, but only one period of the repeating sequence interference pattern of a mixture of two frequencies. Play any signal The duration is set by the number of repeated periods. This method allows use small-capacity ROM with lower power consumption, and at the same timethere is enough space to accommodate, for example, additional DTMF signals, signals capture lines of different regions and a directory of country/city codes of the world + directory of operator route codes for these countries. The block practically does not need to be configured, starting to work immediately after inclusion, allows upgrading by simply replacing the ROM and seems to be the most suitable and technologically advanced for commercial production in small series. 4) Computer version + all the above advantages - immobility, only on laptops Kirill Frolov. [ZX]