IOT Malaga

  We have adquire from AliExpress this USB module for 5€ This includes the USB connector, the USB to Serial conversor, the famous SIM800 module, simcard slot, and gsm antenna. You have just to insert this kit, and the COM Port will automatically appear. In my case I didnt need any driver. Just plug and send AT commands. Now we are continue improvement our python software to send binary SMS. Making a full study of the different AT commands.

 Thanks to the Santander Bank for creating academy and accepting me. IoT introduction course completed.

  Only for learning purposes we have been understanding the GSM traffic. When we say GSM, we refer to 2G. Learning terms as: SDR hardware, Dragon OS (a complete Linux Ubuntu distribution filled and configured with a full set of hacking software for SDR) Grgsm_scanner, grgsm_capture, grgsm_decode, gsm_evil, wireshark, decode sms, decode voice, imsi catcher, etc. 2G is weak in terms of security. Interesting below are two articles, in which it seems that by the time of GSM conception, it was intentionally baked into the algorithm to provide a backdoor for law enforcement agencies to access sensitive data transmissions. How many times have we heard the switch off 2G?  This is delayed continuously due to the still big amount of old connected devices, and some lack of frequencies. Recommendations: in your phone settings configure always to high connexion available 4G/5G, and avoid 2G networks. When buying IOT devices, gsm routers, etc, make sure they have right network technologies....

 This xmas we have been playing with an old usb gsm dongle that was at home. We have created a visual python application that making use of AT commands, it is able to send text sms and also binary 3.48 OTA messages to any simcard in the world.

 Interesting reading real GSM traffic with wireshark. Making a full analysis of the gsm protocol. Next step would be to setup a testing BTS so that our mobile latch to this BTS. The Broadcast Control Channel (BCCH) is a fundamental component of the Global System for Mobile Communications (GSM) cellular network, which is widely used for mobile phone communication worldwide.  The BCCH is responsible for broadcasting essential information about the network to mobile devices, such as cell identity, frequency allocation, and timing information.  This is point to multipoint; from BTS to mobiles. And unidirectional downlink. These messages also provide a list of absolute radio-frequency channel numbers (ARFCNs) used by neighboring BTSs.  The messages themselves are described in 3GPP Technical Specification 44.018. In this slot 0 we can found information like: cell id, LAI, etc This control channel is essential in the GSM.

 gr-gsm is a powerful library that in conjuntion with any GSM receptor, give lot of utilities for playing. Below the link for the utilities: GitHub - ptrkrysik/gr-gsm: Gnuradio blocks and tools for receiving GSM transmissions Today, in some minutes, we have been able to scan: grgsm_scan and locate a connected gsm device. You can note the frequence, and then in a second command you can type: grgsm_livemon  -f 927.8M That will show in console the different GSM packets received, Finally in a third window you can filter into wireshark to execute with the filter gsmtap. wireshark -k -Y '!icmp && gsmtap' -i lo We got very surprise to be able to get GSM traffic in the wireshark, ready to be analysed. We have been reading different times about the imsi catcher. Today we have been able to check how easy is to capture IMSIs, in 5 seconds, we have capture lot of imsi of different persons. No need to say this is just for learning purposes. Note, all instructions are in the in...

We have adquire this USB dongle RTL2838.  What is RTL2838? It's a high performance radio demodulator, that receive frequencies from 500 kHz up to 1.75 GHz.  Most software for the RTL-SDR is also community developed, and provided free of charge. Note that RTL-SDRs cannot transmit. Idea is to play and understand radio GSM standards. And fully understand with wireshark. We will make use of the library GR-GSM. GSM uses a digital modulation format called 0.3GMSK (Gaussian minimum shift keying).  The 0.3 describes the bandwidth of the Gaussian filter with relation to the bit rate. GMSK is a special type of digital FM modulation. 1's and 0's are represented by shifting the RF carrier by plus or minus 67.708KHz.  In the next entry our plan is to learn GSM internal, and radio protocols. Only for learning purposes: LTE sniffer, IMSI catcher, SMS decryption, etc. Note all information is available on the internet.

 We have acquired this GPIO extension board, thats allow a quick connection of the raspberry GPIO connector into our bread board for quick prototypes. We continue creating python programs that have connection to the network, and we are able to API control the different sensors/leds/servo-motors/reles, etc Today we tested a very simple web browser to control the status of a LED via internet. Next steps to send/receive commands via MQTT, access via WEB/API, send commands to the UICC via AT+CSIM commands. We can read/update files inside simcard for a full secure environment. Specific files in the simcard can be a mapping of the status of the different sensors.

 Hello, after the great success of yesterday, on which we managed to send APDUs to the UICC via AT+CISM commands. Today we have sent a 3.40/3.48 envelope to the UICC via AT+CSIM. Envelope was prepared with the right otakeys, counter, etc. File inside the simcard was updated!! In the mean time we are also playing with python and basic led and switch test programs.

 YES!! AT+CSIM commands are working fine. Our linux board is able to send APDUS to the simcard with success. Below commands to read standard file ICC. Until here is the work I can publish. Complex communications with javacard applets falls inside the intelectual property of my company and I cannot publish. This will be published in internal company confluence pages. We have also been able to send text sms, but that is easy peasy :)

  Our IOT devices have WIFI and GSM connectivity. It will try first send data WIFI, if no connection, it will start the GSM!!

 De nuevo gracias emnify por las tarjetas SIM recibidas de forma gratuita. Son tarjetas SIM que se conectan a la red de datos en cualquier pais de forma automática. En el plan gratuito tenemos gratis 10MB. Y mi IOT gasta 1KB por cada request con info de los sensores. Si envio un request cada hora, al día gastaría 24KB= 24.000bytes Si no me equivoco 10MB son 10.000.000 de bytes Dividiendo 10.000.000 / 24.000 = 416 dias!!!!   Amigos, recordad no conectar las sims a un teléfono movil; ya que se conectaría rápidamente a la red, y todas las apps y servicios empezarían a hacer uso de la red, y te podrias gastar el bono de 10MB en segundos.

Hola, la verdad que no es nada del otro mundo. Usando una libreria whatsAPP para nuesto ESP32, pues me llegan directo a mi mobile los whatsapp con alertas y lecturas de mis sensores. Hello, to be honest this is not difficult, and not implemented by myself. I am using a library forwhatsApp for our ESP32 IOT board. Now I am receiving alerts and sensor reading directly in my mobile!!!  

 SI!!!! Podemos enviar APDUs a la tarjeta SIM como si la sim estuviera conectada a un smart card reader. Esto facilita mucho las cosas y podremos realizar operaciones con los applets de la javacard. https://infocenter.nordicsemi.com/index.jsp?topic=%2Fref_at_commands%2FREF%2Fat_commands%2Faccess_uicc%2Fcsim.html Dar las gracias a Nordic Semiconductor por enviarme 2 tarjetas modems IOT para evaluación. YES!!!  we can send APDUs to the simcard like if the sim is connected to a smart card reader. This will easy a lot the project, and we could be able to send commands to applets in the sim javacard. https://infocenter.nordicsemi.com/index.jsp?topic=%2Fref_at_commands%2FREF%2Fat_commands%2Faccess_uicc%2Fcsim.html Thanks very much to Nordic Semiconductor for sending a couple of IOT modems for evaluation.

  Acabamos de realizar la primera conexión de nuestro dispositivo (Thing/IOT) basado en el micro-controlador ESP32 usando el protocolo MQTT a nuestro broker MQTT. Usando un tipo de conexión TCP (el mas simple) hemos podido comprobar como no hay nada de seguridad.  Desde IOT-Malaga la seguridad va a ser siempre lo primero, y siempre vamos a comprobar que todas las conexiones y trafico sean cifrados. Analizando el trafico a nivel de paquetes con tcpdump y wireshark. Interesante ver como podemos ver todos los detalles del protocolo MQTT en wireshark... y el usuario y contraseña. Este ejercicio se ha realizado para comprobar lo importante que es la seguridad en los IOT. We have just done our first connection of our device/thing/IOT (based on micro-controller ESP32) using MQTT protocol, and connected to our own MQTT server. Using type of connection TCP (with no TLS), then we have checked that there is nothing of security. From IOT-Malaga security is going to be always the first ter...

  Hola, en IOT Malaga queremos tener un conocimiento TOTAL de los sistemas implicados en IOT. Por eso hemos instalado nuestro propio broker MQTT. Hello in IOT Malaga we want to have the total knowledge and control regarding the systems for IOT. That is why we have installed our own MQTT broker.

  Hemos recibido hoy las 3 tarjetas SIM para el proyecto IOT. De manera gratuita, gracias EMnify. Pronto subiré mas detalles. We just received 3 SIM cards, ready for our IOT proyect. Free simcards, thanks EMnify. Soon I will post more comments.

  Hola de nuevo, para nuestros experimentos IOT vamos a ir analizando varios equipos hardware. Vamos a empezar por el potente y barato ESP32. Que además es compatible con el entorno Arduino. Estamos siguiendo varios cursos udemy. Hello again, for our IOT experiments we are going to test different pieces of hardware. We are going to start with the powerful and cheap ESP. That is compatible with the IDE arduino. We are following different udemy courses.

  Hola soy Víctor, bienvenidos a mi blog: IOT-Málaga Vamos a ir desarrollando poco a poco ( y aprendiendo al mismo tiempo) un sistema IOT. Intentaremos que sea de fácil comprensión y vamos a usar castellano e inglés. Hello, I am Victor, welcome to my blog: IOT-Malaga. We are going to develop step by step (and learning at the same time) an IOT system. We are going to try to make it easy.