CDMA2000 was one of many protocols outlined for 3G networks and is now years outdated and being phased out worldwide. Nonetheless, there are nonetheless huge numbers of telephones that can fortunately hook up with it, creating a chance for hackers looking for to run their very own mobile networks. [Chrismoos] lately made this endeavour considerably simpler by releasing 1xBTS, a Rust implementation of the decrease three layers of a CDMA2000 community.
The bottom layer of the stack is an SDR for the precise radio communications. It’s been examined with the USRP B200 and B210, the LimeSDR Mini 2, and the BladeRF Micro 2.0. The code would possibly work with sure different SDRs utilizing the SoapySDR abstraction layer. The SDR is managed by the bottom station (BTS) software program, which, in flip, is managed by the bottom station controller (BSC) over an Abis hyperlink. The BSC manages channels and cellular system associations, and exchanges frames with the cellular switching middle (MSC), which handles message switching.
The stack consists of commonplace 3G verification; earlier than a handset can authenticate to the community, its particulars have to be added to the house location register (HLR). As soon as authenticated, the handset can entry all commonplace providers: inbound and outbound voice calls through a SIP gateway, inbound and outbound SMS, and knowledge packet transfers. An online dashboard supplies a handy administration platform that features packet tracing.
It ought to be famous that utilizing this carelessly is legally hazardous; radio transmissions are strictly regulated in most nations, significantly within the mobile bands. Should you’d nonetheless prefer to run your personal cell community, we’ve additionally seen a number of different efforts, corresponding to this 4G implementation, this 1G recreation, and a GSM community made for a hacker camp.
