Motpages projects HELP WANTED!

This page will feature different project ideas that I think would be interesting to investigate and explore. I really need help from some dedicated people that have the knowledge and time to look into these and share what they discover - Full credit given.

This page is preliminary at the moment. Progress and more detailed descriptions will be added later.

1) BDM interface software customized for Mot GSM

Look at all the wonderful things that are possible with a Nokia d-box (A digital TV receiver box, not a phone). Some brilliant people at CCC have shown the way. This should also be possible with the Motorola GSM phones (both use the MC683xx). You will need to add a BDM connector, but I consider it a low price to pay for the possiblilty to dump and upgrade the software. I really want to encourage people to experiment with dumping and uploading firmware via. the BDM. Lot's of other possibilities need to be explored as well. The ultimate thing would be to do these things through the butt-plug DSC interface. Unfortunately information on the DSC bus is very, very hard to come by.

2) SPI bus monitoring (The ultimate network monitor mode)

The idea would be to camp the radio on a BCCH carrier and try to decode the "raw" BCCH blocks that comes out the MODEM IC - this would as a start just be the MISO (Master In Slave Out) line to see data going from the MODEM IC to the MCU (not the most ambitious approach, but let's keep it simple for now). The MODEM IC has done all the hard work, decrypting and de-interleaving the data. The SPI bus is very well documented (order QSM Reference manual QSMRM/AD from Mot) and is common to most Mot MCU's. To translate the SPI serial data to 8 bit parallel, another MOT MCU could be used. I am investigating using a HC11, but the baud-rates have to match, so it might have to run at a rather "odd" x-tal frequency in order to be able to support the baud rate of the 68332/338 running at 13 MHz. The SPI bus is also used for communication to/from the GUSS and IF IC so that data would have to be filtered away. The QSM registers that define the configuration (baud rate, bits per transfer etc.) of the SPI are located in the MCU memory map and can be read using the BDM.

3) Emulation of iButton one wire bus (Dallas) with PIC 12C509 (Improve aftermarket batts etc.)

4) Fancy two coloured LED on the d460 - 8900 (COMPLETED)

The StarTAC is equipped with a LED that signals the network status. The LEDs are controlled via a transistor driver from two I/O pins on the 68332 (Green is CTS24B p128, Red is CTS24A p127). It would be interesting to know if those two pins are active on the other phones and all that is missing is the LED and drivers for them. I believe that one of the asian 8700 like phones does have the LED- this could indicate that it's possible to add on it's "sister". UPDATE: The pins are active on the 8700. In normal standby mode with a charged battery, both pins are high and the green output pulses low. It might be easier to use a smd 7407 instead of transistors to drive the LED's. Look at the bottom of the hardware page for information on how to add the LED.