Japanese Navy fleet broadcast, a review of the "Japanese Slot Machine" (I)

i56578-swl.blogspot.com 4 miesięcy temu

Japanese Maritime Self-Defence Forces (JMSDF) HF Fleet Broadcast, besides known as the "Japanese Slot Machine", heard with data payloads on 8312.50 KHz/USB utilizing a distant KiwiSDR located in Azumino-city, Nagano Japan [1]. This signal has the Enigma designation "xsl" but I honestly don't realize why it was placed among the "mysterious signals" or even among the number stations: most likely due to its characteristic idling refrain due to the fact that it is nothing more than a fleet broadcast as well as the continuous and uninterrupted STANAG-4285 transmissions.

The waveform is composed of the idle phase and the traffic/data phase.


The data waveform occupies a 2 KHz bandwidth and usage a 1500 Hz sub-carrier which is QPSK modulated at the symbol rate of 1500 Baud (Figure 1).
Fig. 1 - QPSK parameters of the data waveform

The signal has strong ACF spikes all 93.33 ms (Figure 2) that, at the velocity of 1500 Bd, correspond to a frame of 140 dibit symbols in dimension (frame rate of 10.71 Hz).

Fig. 2 - autocorrelation spikes and comparative bitmap (data waveform)

The demodulated bitstream in Figure 3 shows a framing consisting of a probe/sync aimed "preamble" series (ps) of 28 known symbols (56 bits) in dimension followed by 112 unknown symbols representing the transferred data

[10001010001000100000001010100010101010100000100000101000]

Fig. 3 - 140 QPSK symbols (28 + 112) frame structure

Looking at the representation of the QPSK symbols of a frame (Figure 4) you can see that the 28 symbols of the preamble series are PSK2 modulated and then mapped to dibit symbols.

Fig. 4 - graphic rapresentation of a 140-symbol frame

The confirmation comes from the examination of the second degree harmonics in Figure 5 where the PSK2 modulation of the subcarrier can be clearly distinguished for a duration of 18.66 ms corresponding to 28 symbols at the keying velocity of 1500 Baud. besides note the accentuated PSK transitions in the phase diagram.

Fig. 5 - PSK2 modulations

Data symbols have a flat autocorrelation indicating a (convolutional?) coding another than interleaving and encryption: bit distribution and Shannon entrophy graphs are good clues.

Fig. 6 - bit distribution and Shannon entropy of the data symbols

The idle waveform besides is QPSK modulated at a symbol rate of 1500 baud but has a complex framing which to any degree follows the traffic waveform. As in the traffic waveform, the framing consists of repetions of 140 symbols/93.33 ms frames which make the distinctive audio refrain (Figure 7).

Fig. 7 - idle phase signal

The underlying clicks audible during the idle phase have a frequency of 11.5 Hz and corresponds to the 140-symbol frames (Figure 8).

Fig. 8 - 11.5 Hz ticks

The autocorrelation of the idle signal (Figure 9) shows strong 5973 ms spikes grouping the lower 93.33 ms spikes; since the 1500 Bd keying speed, from a simple calculation the 5973 ms ACF results as a group of 64 frames each of 140 symbols: the 64 frames series is here designated as "superframe" and it precisely lasts as the refrain.

Fig. 9 - autocorrelation spikes and comparative bitmap (idle waveform)

The superframe structure is visible in the demodulated bitstream erstwhile reshaped to 140 symbols (280 bits) in order to item the 64 component frames: it's worth noting the presence of the same 28 symbols preamble series seen in the demodulated data bitstream (Figs 10, 3). Since the preambles are repeated in all frames, they are the origin of the underlying clickings mentioned above.

Fig. 10 - idle waveform, superframe structure

After the removal of the preamble sequence, it's easy to see that the remaining 112 symbols of the superframes are formed of 4 28-symbols blocks, each block consisting of the same patterns (Figure 11).

Fig. 11

After having isolated a single block I identified eleven patterns (designated here as p01 - p11) which are repeated in various ways within it (Figure 12).

☆ delight announcement that: ☆

1) the "designations" I utilized here are only mine and are introduced just for convenient reference.

2) the repeated patterns p01-p11 are numbered in the order of their appearance within a frame (the first pattern is the 1 following the preamble)

3) the choice of which frame in the superframe should be designated as the first one is arbitrary (superframe boundaries may be seen as a fixed-width 64-frame sliding window)

4) I chose the carrier mention phase specified that the probe/sync preamble is

[10001010001000100000001010100010101010100000100000101000]

another arbitrary carrier phase mention could be chosen and then the resulting patterns will differ: so the values of the patterns in Figure 11 are not to be understood here as "absolute"

Fig. 12 - repeated patterns

The repeated patterns are indicated in Table I: note that the pattern p01 is composed of 28 symbols of the same phase and so generates a single speech as well as the pattern p06 does, being in counter-phase with respect to p01 (180° far).

Table I

The superframe is then described as in Table II.

Table II

Patterns p02 and p05 seem to play a peculiar role: in the first 44 frames looks like they are utilized as "separators" between 3 frames of same value (redundancy?) while they are utilized exclusively - and grouped - in the remaining 20 frames. Most likely the long duration of the idle phase provides a strong channel probing and frame/time synchronization for the receive modems. It's worth noting that the duration of the data phase is simply a multiple of the duration of the idle superframe, e.g. 7 times in the example shown in Figure 13.

Fig. 13

A "hybrid" superframe is sometimes transmitted alone or immediately before/after data superframes and consists of a mix of 16 QPSK data inserts and repeating patterns - that's why I called it "hybrid" (Figure 14).

Fig. 14 - hybrid superframe

Frames 16 and 17 are joined in case 2 hybrid superframes are transmitted consecutively (Figure 15)

Fig. 15 - 2 hybrid superframes transmitted consecutively

The demodulated bitstream of a hybrid superframe shows the expected framing: that is, the usual preamble of 28 symbols followed by 4 blocks, each of 28 symbols (Figure 16).
Fig. 16 - demodulated bitstream of the hybrid superframe

The 28-symbol reshaped bitstream (after removing the preamble sequence) clearly shows the 16 QPSK data inserts separated by the 2 patterns hp01 and hp02

[11000000001010101011000000001010101011000000001010101011]
[01101010100000000001101010100000000001101010100000000001]

Fig. 17 - 28-symbol reshaped demodulated bitstream of the hybrid superframe

While idle superframes are most likely utilized for channel probing and frame/time synchronization, the intent of hybrid superframes is unclear as they besides carry coded information.

As said above, the choice of a different carrier phase mention will evidently produce different values of the patterns. So, since that:
- the preamble series is PSK2 modulated (Figs 4,5)
- the phase offsets between preamble and patterns symbols shall be preserved
according to the choice of the carrier phase mention and comparative mappings we'll get 4 different preamble sequences and thus 4 different "sets" of the eleven patterns p01-p11... but the same "formal" strategy as Table II will always be obtained. The same goes for hp01-hp02 patterns of the hybrid superframe.

Table III

The frames structure that is utilized for the idle and data/traffic waveforms is shown in Figure 18, a possible functional block diagram of the modem is illustrated in Figure 19. erstwhile control S is in positions 2-1 the data phase is selected, positions 2-3 are utilized for the idle phase, positions 2-4 are utilized for the hybrid superframes. The presence of the interleaver & grey decoder block is simply a my guess.

Fig. 18 - Frame structure for "Slot Machine" idle and traffic/data waveforms


Fig. 19 - "Slot Machine" (possible) functional block diagram

Direction Finding tries (TDoA algorithm) pinpoint the Ichihara transmitting station as the origin of the signal [2].

Fig. 20 - direction uncovering results

The Ichihara transmitting station occupies an extended area next to a golf course in Ichihara City. It has a microwave tower with 4 dishes, a large HF inverted conical array, strung between six tall masts, a mast with HF and VHF vertically polarised inverted conical monopoles, 2 HF rhombic antennas, 2 large horizontal HF/VHF log-periodic antennas, and a large horizontal curtain antenna [3].

Fig. 21 - Ichihara transmitting station (by google earth image)

Fig. 22 - Ichihara transmitting station antennas (by google street view)

A question inactive remains unanswered: why did JMSDF engineers plan specified a complex, though easy recognizable, idle waveform?

https://disk.yandex.com/d/suGK1GjRDEuX6Q
https://disk.yandex.com/d/qd4Cjj-YptLepg (Ichihara, file KML)


[1] http://jf0fumkiwi.ddns.net:8073/
[2] https://www.mod.go.jp/en/presiding/law/sdf.html
[3] https://www.jstor.org/stable/j.ctt13wwvvt.12

Idź do oryginalnego materiału