Professional Documents
Culture Documents
Instruction Manual
Manual Number 05 40 2000
Rev 080104
Voice: 760-738-3282
FAX: 760-480-0233
Email: service@cimtechcorp.com
Web: www.cimtechcorp.com
C H A P T E R 1
Features and Specifications
What Is the QS-5000
The QS-5000 is a device that combines ANI encoder/decoder signaling
with Cimarron Technologies QuikSync voice inversion scrambling. The
board is capable of sending PTT ANI and Emergency ANI in GE Star®,
or MDC-1200® signaling format. It is capable of reception of Selective
Calls, Group calls and All calls and will provide audible alerts when
called. It responds to radio check commands (interrogates), and to over
the air open microphone monitor commands and radio disable/enable
commands. The inversion scrambling scheme is unique in that it is
adaptive to the communications system in which it will be used. When
initially setting up the communications system, the QS-5000 boards must
be programmed with configuration information. QuikSync uses dynamic
frequency inversion scrambling, but, unlike other schemes, the range of
inversion frequencies is specified during set-up as well as minimum and
maximum dwell times. In this manner, the actual inversion frequency
can be fixed so that all units always use the same split frequency (like
current low end boards on the market); or the inversion frequency can
change for each press of the PTT, staying at that split frequency only for
the period of that transmission; or the board can hop around a pre-
defined range of frequencies in a random manner and for random dwell
times. The actual decision (and level of security) can be tailored
precisely to the limitations of the communications system. There are five
preset levels of security to choose from when configuring the board.
These five preset levels can be additionally adjusted if necessary for
precise system integration.
Features
• Identify every transmission source with the assigned ANI ID in
Signaling formats of MDC-1200®, GE Star®
• Reduce nuisance and obscene transmissions
• Trunking compatible Increased trunking flexibility compatible
with latest trunking schemes
• Programmable ANI PTT repeat timer limits data bursts during
continued conversations
• “Go-ahead” beep sounds when ready for voice transmission
• Courtesy beep transmitted when radio is unkeyed
• Emergency and Man-Down situations instantly identified
• Programmable open microphone monitor during emergency
• Stuck microphone identification
• Time-Out-Timer with alert tone
• ANI sent at beginning, end or both
• Responds to selective call, group call and all call messages as
well as open microphone monitor and over the air activated
Chapter 1 Features 8
Specifications
Data Format GE Star® MDC-1200®
Modulation Type PSK (Phase Shift Key) FSK
Rate 400 bps on 1600hz carrier 1200/1800 Hz
ID Range 0001 to 16,383 0001-DEEE
ID Locations ANI at Beginning, End or Both
Messages PTT ANI, Emergency, Man- PTT ANI, Emergency.
Down, TOT. Programmable to Programmable to any allowable
any allowable GE Star® MDC message bit pattern.
message.
Sidetone User definable, fully programmable
Burst Length 280mS plus preamble time. Fixed length 180mS
Attack Delay 0 mS to 1000 mS programmable in 10 mS steps.
ANI Repeat Timer (Time since last PTT press. If less, don’t send ANI) Programmable 0
S (Send every PTT); 0 to 255 S.
Scrambling Type Unique Dynamic Hopping Inversion Scrambling
Cipher/Clear Automatic receive detection and selection of cipher/clear mode
Detection
Transmit Mode Automatic Cipher/Clear on per channel basis with manual over-ride
State Warning Device warns user at keyup whether transmission will be encrypted or
plain
Rate Up to 100 Hops per second with up to 2000 Hz difference in inversion
frequency per hop. Mean difference of 1000 Hz per hop
Signaling Method Incorporates MDC-1200® and GE Star® signaling formats and
features.
Function All ANI and Encryption functions can be programmed via Over the air
Programming Re-Programming or via inexpensive programming cable
Encryption Re- Keys entered via software, or Over the air Re-Keying
Keying
Key Length 64 bits (provides 18 quintillion keys)
Inversion Programmable for a dynamic range of 2.1 kHz through 4.1 kHz
Frequency
Dwell Time Programmable for a dynamic range between 0 mS (no hop) through
1000 mS
Unique System Unique system protection available to ensure incompatibility with any
Identifier other radio system even if key is compromised
Messaging Includes Short Messaging capability of eight canned
messages/statuses with definition aliasing of eight characters
Messaging Capable of digitally encrypting MDC-1200 data burst for added
Security messaging and ANI security
Synchronization MSK sync burst required only at beginning of transmission
Burst
Sync Burst 80 mS
Length
Multi-Agency Up to 16 Encryption keys or inversion frequencies can be stored. In
Interoperability many host radios, changing the radio channel also changes the key
(or inversion frequency) to be used with the agency on that channel.
Additionally, ANI ID’s and types can be assigned to the sixteen
available channels.
Chapter 1 Features 10
C H A P T E R 2
Installation
Physical Installation
Find a location in the radio for the Model QS-5000, preferably away from the
transmitter output amplifier stage. Locate the interface points for the QS-5000
interface wiring, cut wires to the appropriate length and solder between the radio
interface points and the QS-5000 interface pads. Keep all wires as short as
possible to avoid RF and noise interference. Place the insulating sleeve over the
QS-5000 module and firmly affix to the radio.
Radio Connections
Teflon insulated wires are included in the QS-5000 package to interface the
device to the host radio. Use only the wires required and keep all used wires as
short as possible. A wire stripping tool is essential for the correct stripping of
Teflon coated wires. Conductors will be nicked or cut if an appropriate stripping
tool is not used. Definitions of all radio connections can be found on page 19.
Discriminator
The discriminator connection should be attached as close to the radio
discriminator as possible. This dedicated input line is used exclusively for
detecting and decoding data. If your application only uses basic fixed inversion
scrambling with no receive ANI functions and no digital encryption setup
message, then this connection is not required.
Chapter 2 Installation 12
Referring to the above schematic which represents one of the three multilevel
capable outputs, the following table describes jumper combinations and resulting
output characteristics. Note that there are two output columns, one with “normal
assertion” and one with “inverted assertion”. This relates to how the output
function is programmed in QS-5000 configuration software.
Without the digital encryption setup databurst, transmissions are scrambled using
simple inversion at a frequency fixed and selected from the 16 pre programmed
frequencies. This mode permits the QS-5000 to be compatible with most low
security simple inversion scrambling systems while still permitting future use of
higher quality secure methods.
The Key or Frequency in use is selected with four Inversion Code Input lines.
Many radios provide interface pads for these Code select lines which are then
manipulated according to user preferences in the radio programming software on
a per-channel basis.
Chapter 2 Installation 15
Jumpers
B A
A = 3.3V
B = A+
C = NPN
D = Direct
E = NPN + PNP
See page 13 for details
E
C
A B
D
EE
D C
Jumper Purpose
JP-1 Selects pull-up voltage (A+, 3.3V or none) to be applied to inputs IN0
through IN8. Default is 3.3V
JP-2 Selects voltage to be used (A+, 3.3V or none) for multilevel output
OUT4
JP-4 Selects output criteria for multilevel output OUT4
JP-6 Selects voltage to be used (A+, 3.3V or none) for multilevel output
OUT2
JP-7 Selects output criteria for multilevel output OUT2
JP-8 Selects voltage to be used (A+, 3.3V or none) for multilevel output
OUT3
JP-9 Selects output criteria for multilevel output OUT3
JP-10 Combines Sidetone audio and AFOut audio. This jumper is installed
for radio installations where only one wire would be required.
JP-12 Combines OUT0 and IN4. In default conditions, KEY function is
assigned to OUT0 and PTT function is assigned to IN4. This jumper is
installed for radio installations where only one wire would be required.
JP-13 Supply voltage select. Install jumper if QS-5000 is to be supplied with
regulated 3.3VDC. Otherwise provide 3.6 VDC or greater and on-
board regulator will be used. Default condition is “OUT”.
Chapter 2 Installation 16
Pads
T33/GND
T28/IN6
T11/IN0
T32/OUT3 T8/OUT2
T37/Tone
T14/OUT4
Chapter 2 Installation 17
Pad Information
PAD SIGNAL FUNCTION
This is the radio receive discriminator signal. It is used by
T1 DISCIN
the QS-5000 for detecting and decoding data.
RX Audio Output. This is receive audio back to the radio. If
in scramble mode, the microprocessor will have processed
T2 AFOUT the RX Audio In and presented it to the Codec. If in plain
mode, the microprocessor will route the RX Audio In back to
the Codec. In both cases, this codec output is RX Audio Out.
TX Audio Output. This is microphone audio back to the
radio. If in scramble mode, the microprocessor will have
processed the TX Audio In and presented it to the Codec. If
T3 MICOUT
in plain mode, the microprocessor will route the TX Audio In
back to the Codec. In both cases, this codec output is TX
Audio Out.
RX Audio Input. This is receive audio from the radio. The
T4 AFIN
audio is digitized and presented to the microprocessor.
T5 AIN0 Analog input for future use
T7 AIN1 Analog input for future use
Configurable output, configured with combination PNP and
NPN transistors and jumper options to permit many different
output configurations.
T8 OUT2 Default = This line is used to activate a radio amplifier or
audio pass gate when Sidetone is being generated by the
QS-5000. Sidetone is not powerful enough to drive a radio
speaker directly so the radio’s amplifier must be used.
T9 RXD0 Microprocessor digital communications input port
TX Audio Input. This is microphone audio from the radio.
T10 MICIN
The audio is digitized and presented to the microprocessor.
Default = Emergency activation input. The input can be
T11 IN0 software programmed for reverse logic. This line can
alternately be used as a status or canned message.
T12 TXD0 Microprocessor digital communications output port
T13 IN8 Digital input can be pulled up to A+ or 3.3V with JP-1
Configurable output, configured with combination PNP and
T14 OUT4 NPN transistors and jumper options to permit many different
output configurations.
T15 IN7 Digital input can be pulled up to A+ or 3.3V with JP-1
Open collector transistor output, capable of sinking up to 100
T16 OUT0 mA. Default = Key output used to place the associated radio
in transmit mode when required.
T17 TCK Factory use
Digital input can be pulled up to A+ or 3.3V with JP-1.
Default = Man-Down activation input from an external sensor
T18 IN1 or switch. The input can be software programmed for
reverse logic. This line can alternately be used as a status or
canned message.
T20 TMS Factory use
Digital input can be pulled up to A+ or 3.3V with JP-1.
T21 IN2 Default = Channel Busy input used to detect when the radio
is actively receiving. The input can be software programmed
Chapter 2 Installation 18
Physical Assignments
A-
Black Supply ground
Sleep Input
White/Orange The sleep input will stop the QS-5000 from modulating ANI data when active.
The input can be software programmed for reverse logic. This is useful if ANI is
desired on selected channels only. Emergency and Man-Down features are not
available when sleep is active.
Sidetone Output
Orange Sidetone output should be attached to the input to the radio audio amplifier. The
audio is generated for presentation to the local speaker amplifier from two
sources; one is directly from the micro (PA1_BEEP) and the other via the Codec
(AFOUT). If sidetone is being generated while the radio is in transmit mode, the
sidetone source will be from PA1_BEEP. Volume can’t be adjusted through
Chapter 2 Installation 21
PA1_Beep so R14 reduces the amplitude to compensate for the VCC square
wave. Additional resistance can be added between the sidetone pad and the
radio during radio installation.
If the radio is not in transmit mode, the sidetone source will be via the Codec.
1. With beginning send ANI and scrambling setup data, the sidetone will start at
PTT and last through scrambling setup data and PTT ANI data.
2. With beginning send ANI without scrambling setup data, the sidetone will
start at PTT and last through the PTT ANI data.
3. With endsend ANI with scrambling setup data, the sidetone will start at PTT
and last through scrambling setup data.
4. The tone that is generated in connection with the impending transmission of
a critical message (Emergency, Man Down).
5. Upon receipt of a selective call, group call or all call and continues until
receipt of a call cancel or the radio PTT button is pressed.
6. Upon receipt of a critical message from any other unit.
7. After receipt of a scrambled message while the radio is not in scramble
mode. The device will descramble the audio and advise the user that the
received message was descrambled.
Transmit Audio In
White This is microphone audio from the radio. The audio is digitized and presented to
the microprocessor.
RX Audio In
Gray/Red This is receive audio from the radio. The audio is digitized and presented to the
microprocessor.
RX Audio Out
Gray/Orange This is receive audio back to the radio. If in scramble mode, the microprocessor
will have processed the RX Audio In and presented it to the Codec. If in plain
mode, the microprocessor will route the RX Audio In back to the Codec. In both
cases, this codec output is RX Audio Out.
Discriminator
White/Red This is the radio receive discriminator signal. It is used by the QS-5000 for
detecting and decoding data.
Chapter 3 Programming 23
C H A P T E R 3
Programming
Many functions and features of the QS-5000 are user programmable. In
addition to signaling type, ID and radio interface parameters, the device
can be optimized for the application’s particular needs.
Main Menu
Mode
Available selections are Technician, Supervisor, and Manufacturer.
Technician level requires no password but does not permit changing or
viewing of inversion parameters. Supervisor level permits changing but
not viewing of inversion parameters and requires a password to access.
Manufacturer level is only for Factory use.
Supervisor
Technician
Manufacturer
Product Type
Available selections are VQS-400, VQS-420, VQS-500, QS-4000, QS-
4200, and QS-5000.
Type Function
VQS-400 Vertex plug-in capable of simple inversion
secure voice
VQS-420 Vertex plug-in with full MDC-1200 or GE-Star
signaling, including decode and display of
decoded ID and simple inversion secure
voice
Chapter 3 Programming 24
FW Version
Once the board has been read, the version of the firmware installed in
the board is displayed here.
COM Port
This box displays which com port has been selected. To change the
com port, select “Communications” from the menu bar and then “Setup”.
Chan
A maximum of 16 channels can be designated. If “Respond to Channel
Codes” in the Common menu is set to “No” then only channel one will be
accessible. If a Supervisor right clicks on a channel row, they will be
prompted to select one of six predefined security levels, or “Manual”.
Once a security level is selected, the appropriate parameters are
automatically entered. After the selection, the supervisor can then
modify any of the entered parameters in order to fine tune. See
appendix “A” for further details of pre-defined security levels.
Inv Type
Inversion type can be None, Fixed, Fixed with Setup, Hop PTT and Hop
Fast. None grays out all inversion related cells. Fixed grays out
min/max freq cells and Hop grays out the Fix freq cell. If “None” is
selected, then inversion will not be available on that channel.
Fix Frq
This inversion frequency is used if the inversion type selected is “Single”.
Min Frq
This parameter determines the lowest frequency to be used when
performing hopping inversion. The field is available if inversion type
selected is “Multi”, otherwise it is grayed out. Valid entries are from
2100 to 4100 Hz.
Max Frq
This parameter determines the highest frequency to be used when
performing hopping inversion. The field is available if inversion type
selected is “Multi”, otherwise it is grayed out. Valid entries are from
2100 to 4100 Hz.
Chapter 3 Programming 25
Min Dwl
This parameter determines the smallest amount of time to rest at a
particular inversion frequency before moving to the next inversion
frequency. Valid entries are from 10 to 1000 mS in 10 mS steps.
Max Dwl
This parameter determines the largest amount of time to rest at a
particular inversion frequency before moving to the next inversion
frequency. Valid entries are from 10 to 1000 mS in 10 mS steps.
Mute Mode
If set to “ON”, in GE Star®, the radio will remain muted unless a GE
Star® Selective Call command is received. A Call Cancel will again
mute the receiver. In MDC-1200®, VSC will be enabled. In a system
that uses Voice Select Call (VSC), all radios remain muted until a VSC
command to their ID is received. Then the radio unmutes until loss of
receive carrier. If this feature is enabled, the radio will remain muted
unless a VSC command is received.
P/U INV
The power up mode parameter determines the condition of voice
inversion scrambling when the radio is powered up. If On, the radio will
scramble all transmissions unless it is manually changed to plain mode.
If the mode is set to plain, the radio will not scramble transmissions
unless it is manually changed to scramble mode. This field is grayed out
and unavailable unless the “Inversion Enable” input line is programmed
for “PULSE”.
ANI Type
“MDC” or “GE x” where x designates the GE Star® format. GE Star®
formats are selectable from A through P. See page 47 for more details.
ANI Loc
None, Start, End, Both [Default = Start]
If programmed “Start”, the ID will be transmitted when the user keys the
radio. If programmed “End”, the ID will be transmitted when the user
unkeys the radio. “Both” will provide ID transmissions at both the Start
and the End.
PTT ID – EM ID – M/D ID
Generally, the PTT ID Emergency ID and the Man Down ID are the
same; however, they could be programmed different if desired. In MDC-
1200®, the valid ID range is from 0001 through DEEE. A radio ID cannot
contain the character F nor can it begin with the character E as these are
defined as wildcards. However, a radio can encode to a target ID
containing these characters. In GE Star®, The actual maximum value
depends on the GE Star® format type selected (1 – 16383). A radio
cannot be programmed for an ID of 0 (zero) but a radio can encode to a
target ID of 0.
Chapter 3 Programming 26
PTT MSG
In MDC-1200®, the default PTT message is 8001. In GE Star®, the
default is “01”. Although these values are adjustable to permit worldwide
system flexibility, they should never be changed except to accommodate
documented system variances.
EM MSG
In MDC-1200®, the default emergency message is 8000. In GE Star®,
the default is “07”. Although these values are adjustable to permit
worldwide system flexibility, they should never be changed except to
accommodate documented system variances.
TOT MSG
In MDC-1200®, the default PTT message is 8001. In GE Star®, the
default is “09”. Although these values are adjustable to permit worldwide
system flexibility, they should never be changed except to accommodate
documented system variances.
M/D MSG
In MDC-1200®, the default man down message is 8000. In GE Star®,
the default is “0F”. Although these values are adjustable to permit
worldwide system flexibility, they should never be changed except to
accommodate documented system variances.
Group ID
In GE Star® format, the actual maximum value depends on the GE
Star® format type selected (0 – 16383). A GE Star® “ALL CALL” is a
selective call to ID 0 (zero) and is not re-definable. A group call can be
any valid number but must not be used as a PTT or Emergency ID on
any radio in the system. The default is 0 (zero) which effectively means
that there is no group call (only the all call). In MDC-1200®, units can be
assigned group ID’s that consist of three HEX digits excluding the digit
“F”.
Crit ANI
If enabled, any PTT press during a critical cycle (e.g. emergency or man
down) that would generate a PTT ANI will generate the critical message
instead.
CRIT RVRT
(ONCE, ALL, NONE) [Default ONCE] Determines how the Critical
Channel Revert output line reacts (if one is programmed in the I/O).
“Once” means that the line momentarily goes low at the beginning of the
critical cycle. “ALL” means that the line goes low for each critical data
transmission within the cycle. “NONE” means that the Critical Channel
Revert output is not activated on that channel.
CT
Unkey Courtesy Tone. If programmed “Yes”, a tone will be transmitted
when the user unkeys to inform the listener that they may now transmit.
Chapter 3 Programming 27
ACK
(Y/N) [Default Yes]
If this feature is enabled, an acknowledgment will be transmitted
whenever required.
Base ID
[Default=0001]
Additional security can be realized by defining the ID of the base
authorized to make over the air key changes and reprogramming. If this
parameter is set to 0000, then Base ID will be ignored and the QS-5000
will react to commands from any base ID.
Encrypt ANI
QuikSync is capable of digitally encrypting ANI. This renders the Unit ID
and other MDC-1200® data transmissions unreadable except to users
that have a correctly keyed decoder.
Encryption Key
If “Hop” or “Fixed with Setup” is selected in Inv Type, or “Encrypt ANI”
has been selected, then an encryption key will be necessary (otherwise,
the field is grayed out). A supervisor can enter a key in three different
ways:
1. Click on the appropriate Key field, highlight the entry and enter the
new 16 character key.
OR
Click on the appropriate Key field, then click on the appearing button .
2. Enter a “Pass Phrase” and then click on “Generate Key” and the
phrase is converted to a key. The same phrase always generates
the same key
3. Click on “Random” and then click on “Generate Key”.
Audio Control
Gain Settings
Gain settings can range from -42 to +20 dB. There are a total of eight
independent settings, four that affect levels with inversion taking place
and four with inversion disabled.
Chapter 3 Programming 28
Common Settings
Attack Delay
0ms to 1000ms in steps of 50ms. [Default 300mS]
The period of time from when the user keys the radio and the data
begins to be transmitted. This delay allows the communications system
to stabilize and be ready for transmission.
Chapter 3 Programming 29
Acknowledgment Delay
(0mS to 2550 mS in 10 mS steps) [Default 800 mS]
The period of time from when an acknowledgeable message is received
and the acknowledge data packet is sent. This delay allows the
receiving radio to relax from transmit mode before receiving the data.
Startup Delay
(0mS to 2550 mS in 10 mS steps)[Default 100mS]
This parameter holds off the startup of the device after power is applied.
Used to ensure host radio stability on power up.
TX Data Level
(0 – 255) [Default 50]
Changes the data output level in 255 steps. Enter a value between 0
and 255 that provides a data deviation that is just below radio voice
deviation.
PTT Sidetone
(Beginning send only) (Y/N) [Default Yes]
If programmed “Yes”, a tone will sound through the local speaker to
advise the user to hold off talking. Prevents “Voice syllable clipping”
which could occur during data transmission.
Mute Data
(Y/N) [Default Yes]
Some applications may require that received ANI data not be stripped
from the incoming audio. If this is set to “No” then data will be forwarded
from RX Audio In to RX Audio Out. This is especially necessary if the
application is in a base dispatch console that has an ANI decode feature.
Disconnect Delay
(0 – 2550 mS) [Default = 500]
The disconnect delay is the time to wait after losing carrier that the board
will cease following the hopping sequence. This delay will permit
momentary loss of carrier (due to fading, etc) without losing
synchronization with the hopping sequence. If a new MSK initialization
burst is received during this delay period, the delay will be terminated
and the new burst information will be followed.
Inversion Preamble
(8, 16, 32, or 64) [Default = 16]
The encryption initialization data burst has a preamble length that is
programmable for 8, 16, 32, or 64 preamble bits. Longer preambles
provide for more robust data transmissions but make the secure voice
setup message take longer to transmit.
Unlock PIN
Not available in the QS product.
Emergency
Number of repeat emergency transmissions
(1, 5, 10, 15, 20, forever) [Default =5]
Number of times that an emergency message is transmitted. (1, 5, 10,
15, 20, forever) The emergency message transmission will be repeated a
programmed number of times with a programmed period between
transmissions. The repeats will be transmitted regardless of radio status.
Chapter 3 Programming 31
ManDown
Number of repeat Man Down transmissions
(1, 5, 10, 15, 20, forever) [Default =5]
Number of times that a Man down message is transmitted. (1, 5, 10, 15,
20, forever) The man down message transmission will be repeated a
programmed number of times with a programmed period between
transmissions. The repeats will be transmitted regardless of radio status.
If this value is set to 1 (one), the transmission will be considered a non-
critical message instead of man down.
Chapter 3 Programming 32
If not set to zero, once a Man Down is activated, the radio will key up and
transmit ambient noise for this period of time (0s to 55s, 5s steps). It will
then unkey and remain unkeyed for a programmed amount of time and
then repeat the process. It will alternate between TX and RX throughout
the Man Down cycle. The length of the cycle is determined by the
settings of “Number of repeat Man Down transmissions” and “Time
between Man Down repeats”. If the value is set to zero, there will be no
open microphone monitor.
Memory Characteristics
Programming parameters are stored in non-volatile memory and will be
retained when the radio is turned off or when the battery is removed.
Chapter 4 Operation 41
C H A P T E R 4
Operation
QS-5000 Basic Operation
The QS-5000 combines ANI encoder/decoder signaling with the
Cimarron Technologies QuikSync voice inversion scrambling function.
The board is capable of sending PTT ANI and Emergency ANI in GE
Star® or MDC-1200® signaling format. It is capable of reception of
Selective Calls, Group calls and All calls and will provide audible alerts
when called. It responds to radio check commands (interrogates), and to
over the air open microphone monitor commands and radio
disable/enable commands.
After the data is transmitted, the PTT sidetone stops and the
microphone is activated. The digital ANI burst can be programmed to
occur when the PTT is first pressed, or when the PTT is released, or at
both times. If the burst is programmed for transmission when the PTT is
released or the radio is on a non signaling channel, a short “go ahead”
beep will be heard and there will be no sidetone with data transmission.
Regardless of ANI location (beginning or end), the encryption setup
message occurs at the beginning of transmission. When the PTT is
released and transmission is over, a courtesy beep is transmitted to
inform the listener that they can now transmit. The PTT sidetone and
courtesy beep can be individually deactivated in personality
programming.
Time-out-timer
When a mobile or portable radio inadvertently remains keyed due to a
stuck microphone switch, it generally means that the radio frequency is
unusable for communications. Unfortunately, this activity is sometimes
deliberately caused by a field operator. Whenever a microphone switch
is held closed for more than the designated time-out-timer time either the
offending unit's identification is transmitted and a local tone is sounded
every ten seconds, or the unit can be programmed to transmit the unit's
ID once, sound a local tone, and then automatically open the key line
until the microphone switch is released.
Radio Disable/Enable
The QS-5000 will respond to GE Star® or MDC-1200® radio
disable/enable commands. This feature makes the radio unusable and
is activated by a command sent over-the-air by a capable base station.
Depending on how installed, the radio’s Transmit and/or receive
functions will be disabled until receipt of an ‘Enable” command also sent
over-the-air. Not affected by cycling of power. The QS-5000 reacts to a
disable command by breaking the receive audio path and by activating
the “Disable” output and (if Key-Follows-PTT is enabled) by not
forwarding PTT information to the Key output. The actions are reversed
only upon receipt of an Enable command.
The selective call output can be user programmed to pulse when active
or remain in a steady state when active. The line becomes active upon
receipt of a selective call, group call or all call. It becomes deactivated
upon receipt of a call cancel or the press of the radio PTT button. The
line can be used to activate a call lamp which would give a visual
indication that the user had been called.
Microphone Monitor
An over-the-air microphone monitor command can be sent by the
dispatcher to a target radio equipped with a QS-5000. When the target
Chapter 4 Operation 43
Emergency Message
An Emergency message is transmitted whenever the designated
emergency button is held down for greater than the time programmed in
the personality of the radio.
Man-Down
The Man-Down feature is primarily for use by law enforcement, security
agencies, and fire departments. It also finds uses in business and
industry where individuals can be overcome by toxic fumes, lack of
oxygen, etc.
Status
Status messages typically relate to the status of the field unit, such as “In
Service”, “Out Of Service”, “On Break”, etc. and their appropriate
meaning can be displayed at the decoding site equipped with a Cimarron
Technologies C Plus decoder. The QS-5000 is capable of transmitting
status messages in lieu of the Man-Down, Emergency and PTT ANI as
required.
Canned Messages
“Canned” messages handle such communications as “Request-To-Talk”,
“Priority-Request-To-Talk”, “Repeat Last Transmission”, “Repeat
Address”, “10-4”, “Roger”, and other routine requests and responses.
Their appropriate meaning can be displayed at the decoding site
equipped with a Cimarron Technologies C Plus decoder. The QS-5000
is capable of transmitting canned messages in lieu of the Man-Down,
Emergency and PTT ANI as required.
The receiving QS-5000 can automatically select the correct mode (plain
text/cipher) in which to operate. The operator selects whether to
transmit in plain text mode or cipher mode. The devices can also be
programmed to force the radio receiver to remain muted unless the
correct key is in use.
Chapter 4 Operation 45
A go-ahead tone in the local speaker advises the user regarding which
mode he is transmitting in.
For unique data transmission security, the QS-5000 has the capability of
digitally encrypting all MDC data.
The encryption engine used is a Feistel type cipher that uses operations
from mixed (orthogonal) algebraic groups.
Chapter 5 Technical Information 47
C H A P T E R 5
Technical Information
GE Star® Format Selections
Radio systems using GE Star® can define the T1, T2 and S1 bits to have
different values or various meanings. Industry-wide, there are sixteen
accepted variants with Format “B” being the industry defacto standard.
The QS-5000 is programmable for any of the sixteen variants.
Format Definitions
The following table defines the sixteen GE Star® formats.
For System types I through P, the C Plus decoder looks for a match in
the T1 and T2 bits. If the bits match then the C Plus decoder will react to
the received message. If not, the message is ignored. This is for
communications systems that have multiple unrelated users so that
different users do not see ID’s from other users.
In this table, “Code Line State” refers to logical inputs after QuikWare
Digital I/O crossbar polarity has been applied to physical inputs (Neg
polarity assigned).
Trunking Operation
In LTR trunking mode, we will not generate data until we know that the
user has been given permission. When the QS-5000 is placed in
Trunking mode, the channel acquired line will be used to sense that the
channel is ready for use.
Emergency
The radio operator has just pressed the emergency button. The QS-
5000 activates the radio PTT line and watches the Channel Acquired
line. It holds off modulating data until the channel acquired has become
active and remains active for the duration of the time set in the trunk
select debounce timer. It then sends out the data and un-keys the radio.
Chapter 5 Technical Information 50
In this timing chart, the distance between green lines is 100mS and
between brown lines is 200mS. Trunk select debounce time is set for
200mS and channel acquired input is set for trunk available when high.
PTT at beginning
The user has just keyed up the radio to speak, he waits for the go-ahead
beep from the radio speaker, and the QS-5000 starts monitoring the
Channel acquired line. Once the line becomes active and stays active
for the duration of the trunk select debounce timer, the QS-5000 sends
the PTT ANI data and the radio sends the go-ahead beep to the speaker
so the user can begin talking.
PTT at end
The user has keyed the radio, received the go-ahead beep and has sent
his voice message. The QS-5000 detects that the radio unkeyed and
then rekeys it and waits for the Channel acquired line to become active
and remain active for the duration of the time set in the trunk select
debounce timer. The QS-5000 then sends out the PTT ANI data and
unkeys the radio. If the radio PTT line is placed in series with the QS-
5000 by using the PTT line and the KEY line and programming Key
follows PTT, the QS-5000 will hold the radio keyed and send ANI after
the user releases the PTT without actually unkeying the radio.
Inversion Scrambling
The Cimarron inversion scrambling scheme is unique in that it is
adaptive to the communications system in which it will be used. When
initially setting up the communications system, the QS-5000 boards must
be programmed with configuration information. QuikSync uses dynamic
frequency inversion scrambling, but, unlike other schemes, the range of
inversion frequencies is specified during set-up
as well as minimum and maximum dwell times.
In this manner, the actual inversion frequency
can be fixed so that all units always use the same
split frequency (like current low end boards on
the market); or the inversion frequency can
change for each press of the PTT, staying at that
Chapter 5 Technical Information 51
split frequency only for the period of that transmission; or the board can
hop around a pre-defined range of frequencies in a random manner and
for random dwell times. The actual decision (and level of security) can
be tailored precisely to the limitations of the communications system.
There are six preset levels of security to choose from when configuring
the board. These preset levels can be additionally adjusted as
necessary for precise system integration.
Each transmission that does not use simple single frequency inversion is
prefaced with a very short MSK “setup” data burst. This digitally
encrypted data burst initializes the receiving radios and presents the
“game plan” for the inversion scrambling process which is valid only for
that transmission. Because the MSK data burst is encrypted, only those
QuikSync units with the correct crypto key will successfully decrypt the
game plan and be able to extract clear audio from the voice inversion
scrambling hash. Additionally, special codes are available for assignment
to demanding clients which will make their QS-5000’s totally
incompatible with any other QS-5000 even if the crypto key is
compromised.
If the security level selected is not simple single frequency inversion, the
receiving QS-5000 will automatically select the correct mode (plain or
scrambled) in which to operate. So even though a radio has the QS-
5000 installed and activated to transmit scrambled speech, if an
unscrambled transmission is received, the board will not attempt to
unscramble it, allowing it to pass directly to the receive audio circuits.
However, the user will need to turn off his voice inversion scrambling in
order to reply to the individual transmitting in plain mode.
Component Location
Chapter 5 Technical Information 53
Schematics
Chapter 5 Technical Information 54
Chapter 5 Technical Information 55
Chapter 5 Technical Information 56
Chapter 5 Technical Information 57
Parts List
C H A P T E R 6
Troubleshooting
Installation Hints
The QS-5000 must be programmed with your desires before it will work
in your system. For data transmissions, the QS-5000 will be keying the
associated transmitter and injecting audio data into the radio. It is very
important to adjust data out to ensure the correct deviation level. The
deviation level should be just marginally below that of voice. Keep in
mind that most transmitters have limiter circuitry. Limiter circuits ensure
that the radio will never over-deviate and violate FCC rules. The limiter
does this by clipping the transmit audio. The output of the QS-5000 must
be adjusted to a point just below where limiter clipping occurs. If the
limiter is allowed to function, the data will be distorted.
Timing is very important. If you have system problems, the first place to
spend your energies is with timing issues. Check attack delay in
repeater systems. Start with a long delay that gives you 100% decode
and then shorten it up.
If you have trunking system problems using the QS-5000, review the
trunking information located on page 49 of this manual.
Equipment Problems
Radio Keys and Stays Keyed
If the radio sends ANI data and then stays keyed even after releasing the
PTT button, verify the condition of jumper JP-12 on the QS-5000 and the
programming parameter “Key follows PTT”. If you have “Key Follows
PTT” enabled or jumper JP-12 connected when they should not be, this
symptom could occur.
can use these lines to permit the user to assign, on a per channel basis,
different ANI type, ID and inversion parameters as well as crypto keys
and frequencies on up to 16 channels. When installing into a host radio
with this capability, note the levels on the associated radio pads while
changing the channels as some radios label the code lines in reverse
order. Also, note the polarity of active lines and use the QuikWare
Digital I/O crossbar polarity field to match that of the radio.
Chapter 7 Product Support 60
C H A P T E R 7
Product Support
If you have any questions or comments about Cimarron products, please make
use of our technical support hotline at (760) 738-3285.
WARRANTY
Cimarron Technologies Corporation warrants this product to be free from defects in material and
workmanship for a period of three years from date of shipment. If a malfunction occurs due to defective
material or workmanship, the product will be repaired or replaced (Cimarron's discretion) without charge if
returned to the factory
This warranty does not apply to any failure or damage caused by accident, neglect, unreasonable use,
improper installation, or to alterations or modifications to the unit. Nor does the warranty extend to damage
incurred by force majeure (natural causes) such as lightning, fire, floods, or other such catastrophes, nor to
damage caused by environmental extremes, power surges and/or transients
Cimarron Technologies Corporation makes no other warranty, either expressed or implied, with respect to this
product. Cimarron Technologies Corporation specifically disclaims the implied warranties of merchantability
and fitness for a particular purpose. Some states or provinces do not allow limitations on how long an implied
warranty lasts, so the above limitation or exclusion may not apply to you.
The remedies provided herein are customer's sole and exclusive remedies. In no event shall Cimarron
Technologies Corporation be liable for any lost profits, direct, indirect, special, incidental, or consequential
damages, whether based on contract, tort, or any other legal theory.
Appendix A Secure Voice Considerations 61
A P P E N D I X A
Secure Voice Considerations
The QS-5000 is designed to permit adjustment of its inversion
parameters to meet the security requirements of the user while
remaining within the constraints of the communications system and the
desired audio quality of the communications.
These adjustments allow the implementing facility (radio shop) to get the
best audio quality that their communications system and security
requirements will allow.
Voice Quality
Voice quality is a function of the permitted voice spectrum and the quality
of the procedure (and components) that performs the inversion process.
The radio transmitted voice spectrum is limited by the actual radio
equipment to a band from 300 Hz to 3000 Hz. So normal audio that has
not been processed by an inversion scrambler is limited to that spectrum.
Appendix A Secure Voice Considerations 62
Example 1:
Inversion frequency is 2200 Hz and results in 300 becoming 1900 and
3000 becoming (!) -800 Hz. Radio processing then allows only the
resultant spectrum of 300 through 1900 Hz to be transmitted. At the
recovery, 300 becomes 1900 and 1900 becomes 300 resulting in a
recovered spectrum of 300 - 1900. A loss of the 1900 Hz through 3000
Hz audio.
Example 2:
Inversion frequency is 4000 Hz and results in 300 becoming 3700 and
3000 becoming 1000 Hz. Radio processing then allows only the
resultant spectrum of 1000 through 3000 Hz to be transmitted. At the
recovery, 1000 becomes 3000 and 3000 becomes 1000 resulting in a
recovered spectrum of 1000 - 3000. A loss of the 300 through 1000 Hz
audio.
But, a scrambler that inverts at 3300 Hz all of the time only provides
minimal security from eavesdroppers while providing the best audio
quality.
Security Level
So, there’s minimal tactical security to a scrambler that always uses the
same frequency for inversion. In many cases, this level of security is
sufficient, and it affords the best audio quality. But, resourceful
adversaries require resourceful countermeasures.
The more frequently you change your inversion frequency, the higher
level of security you achieve. Additionally, the greater the change in your
Appendix A Secure Voice Considerations 63
The greater the frequency difference from one stop to another, the higher
the level of security. Additionally, the more frequent the change, the
higher the security. Now, together, permit random changing of the
direction of the frequency shift, random selection of inversion frequency
and random period of time before changing, and your tactical security
level has been drastically improved.
System Considerations
Existing voice security equipment provides a particular fixed level of
security. The manufacturer has designed multiple model number
scramblers with varying levels of security and voice quality. Typically, a
system manager would decide which model number to use by analyzing
customer requirements balanced with system capabilities. Then they
would implement the model that matched those requirements. The
higher level of security, the more the manufacturer charges for the board.
If the requirements change, or the communications system is upgraded,
they are either stuck with the level of security they already have, or they
need to replace all security components with ones that match the new
requirements. The QS-5000 has been designed so that the security
level is software defined. This means that as requirements change, the
boards can be simply reprogrammed to once again match the
Appendix A Secure Voice Considerations 64
We have discussed how as voice security goes up, voice quality goes
down. But those are not your only considerations when deciding on
inversion process parameters. The overall communications system must
be capable of transporting your scrambled signals and, in the case of
hopping schemes, the data message that synchronizes the process.
Making it Simple
The QS-5000 offers software definable voice security. To make initial
scheme implementation easier, the QS-5000 allows the selection of pre-
programmed levels of inversion scrambling when configuring the board.
These preset levels can be additionally adjusted if necessary for precise
system integration. The lowest level uses only one inversion frequency
which is never changed. The remaining levels progressively increase
the inversion frequency range and rapidity of changing the inversion
frequency. These preset levels will provide the system manager with a
starting point and a development tool for experimentation if desired.
Once a level is selected that meets user requirements, the parameters
can then be further adjusted to “fine tune” them to attain the security
level, voice quality and system limitations desired.
Level One
Level one is the simplest scrambling method and consists of one non-
varying inversion frequency. The inversion frequency selected provides
for the widest bandwidth inversion resultant. This provides the most
Appendix A Secure Voice Considerations 65
Level Two
Level two provides basic security using dynamic inversion scrambling
where the inversion frequency is changed for every transmission. The
inversion frequency range used is centered around “sweet” frequencies
that afford the largest resultant bandwidth and most easily pass through
complex communications systems. A different inversion frequency is
selected each time the radio PTT is depressed.
Level Three
Level three security uses a wide range of inversion frequencies that is
changed for each transmission.
Level Four
This level provides stronger security by varying inversion frequency at a
fixed dwell time. This is dynamic inversion scrambling that hops from
frequency to frequency. Inversion frequency range is limited. A typical
one minute transmission will be scrambled by different inversion
frequencies approximately 250 times.
Level Five
Level Five security uses a wide range of inversion frequencies that are
randomly selected and used for random periods of time before they are
changed. This results in audio that is scrambled by varying frequencies
and varying periods. It would not be possible for a listener without the
similar equipment and the precise crypto key to synchronize on the
scrambled signal. Inversion frequency and dwell time ranges are
conservative, affording high security with good audio quality.
Level Six
Level six affords the most secure of the six preset levels. Inversion
frequencies between 2100 Hz and 4100 Hz are randomly selected to
scramble the transmitted audio. The selected audio is used for a random
period of time, changing up to 100 times a second. Even the period of
time that the inversion frequency is used is randomly changed. One
frequency might be used for 10 milliseconds while the next frequency
might be used for 100 milliseconds.
Appendix B Snap-In QS-5000 Carrier 66
A P P E N D I X B
Snap-In QS-5000 Carrier
The QS-5000 snap-in carrier consists of a break-out board with mating
receptacle and latch devices for insertion of a QS-5000. Interface wiring
can be soldered to feed-throughs on the carrier. This is handy for
console applications or bench testing.
2: A+ 1: 3.3V 2: AFOUT 1: A+
4: Reset 3: TXD1 4: MICOUT 3: AFIN
6: Erase 5: PA2 6: Sidetone 5: MICIN
8: TCK 7: RXD1 8: AIN1 7: DiscIN
10: GND 9: PA23 10: IN1 9: AIN0
12: PA9 11: TDO 12: IN3 11: IN0
14: TST 13: TMS 14: IN5 13: IN2
16: GND 15: TMS 16: IN7 15: IN4
18: TDI 17: PA3 18: OUT0 17: IN6
20: USBP 19: RESIN 20: OUT2 19: IN8
22: USBM 21: N/C 22: OUT4 21: OUT1
24: PA4 23: N/C 24: PA6 23: OUT3
26: GND 25: GND 26: GND 25: PA5
Index 67
I N D E X
Acknowledgment delay .................................................................................................................................................. 29
ANI ID............................................................................................................................................................................ 41
ANI repeat timer ............................................................................................................................................................. 29
Attack delay .................................................................................................................................................................... 58
Audio level adjustments.................................................................................................................................................. 12
Audio quality .................................................................................................................................................................. 61
Authorized base ID ......................................................................................................................................................... 27
Automatic Numeric Identification .................................................................................................................................. 41
Canned messages ............................................................................................................................................................ 44
Channel busy ............................................................................................................................................................ 17, 22
Channels ......................................................................................................................................................................... 24
Cipher mode.................................................................................................................................................................... 41
Continuing conversations................................................................................................................................................ 41
Courtesy beep ............................................................................................................................................................. 7, 41
Critical channel revert............................................................................................................................................... 18, 20
Crypto keys..................................................................................................................................................................... 13
Data deviation........................................................................................................................................................... 12, 58
Define authorized base ID .............................................................................................................................................. 27
Disconnect delay............................................................................................................................................................. 30
Discriminator ...................................................................................................................................................... 11, 17, 22
Dwell time ...................................................................................................................................................................... 63
Dynamic hop dwell........................................................................................................................................................... 8
Dynamic inversion............................................................................................................................................................ 8
Emergency .......................................................................................................................................................... 17, 19, 43
Emergency message........................................................................................................................................................ 26
Emergency message repeat ....................................................................................................................................... 30, 43
Emergency TX warning tone .......................................................................................................................................... 31
Emergency warning tone ................................................................................................................................................ 43
Encrypt ANI.................................................................................................................................................................... 27
Encryption key................................................................................................................................................................ 27
Features............................................................................................................................................................................. 7
Flexibility........................................................................................................................................................................ 63
Gain level........................................................................................................................................................................ 28
Gain settings ................................................................................................................................................................... 27
GE Star format type ........................................................................................................................................................ 47
GE Star message descriptions ......................................................................................................................................... 47
GE Star® selective call ................................................................................................................................................... 25
Go-ahead beep .................................................................................................................................................................. 7
Group ID......................................................................................................................................................................... 26
Hoppers........................................................................................................................................................................... 63
ID location ...................................................................................................................................................................... 25
Input ports................................................................................................................................................................. 12, 33
Installation hints.............................................................................................................................................................. 58
Inversion code input........................................................................................................................................................ 14
Inversion code selection.................................................................................................................................................. 21
Inversion frequency ............................................................................................................................................ 13, 24, 62
Inversion preamble ......................................................................................................................................................... 30
Inversion scrambling....................................................................................................................................................... 50
Inversion status ............................................................................................................................................................... 20
Inversion switch.............................................................................................................................................................. 21
Inversion type ................................................................................................................................................................. 24
Jumper options................................................................................................................................................................ 13
Jumpers and pads ............................................................................................................................................................ 15
Key follows PTT....................................................................................................................................................... 30, 58
Key output ................................................................................................................................................................ 17, 19
Level of security ............................................................................................................................................................. 62
Man down ........................................................................................................................................................... 17, 19, 44
Index 68
Timing ............................................................................................................................................................................ 58
Tone control output......................................................................................................................................................... 21
Transmit control.............................................................................................................................................................. 20
Trunking mode................................................................................................................................................................ 49
TX audio in ......................................................................................................................................................... 11, 17, 22
TX audio out ....................................................................................................................................................... 11, 17, 22
TX data level................................................................................................................................................................... 29
Unkey courtesy tone ....................................................................................................................................................... 26
Unmute on selective call................................................................................................................................................. 42
Voice quality................................................................................................................................................................... 61
Voice select call .............................................................................................................................................................. 25
Voice spectrum ............................................................................................................................................................... 61
Warranty ......................................................................................................................................................................... 60