SYSTEM AND METHOD FOR REAL-TIME SPECTRUM ANALYSIS
This application claims priority to the following U.S. Provisional Patent Applications, all of which are incorporated herein by reference:
U.S. Application No. 60/374,365, filed April 22, 2002.
U.S. Application No. 60/380,890, filed May 16, 2002.
U.S. Application No. 60/319,435, filed July 30, 2002.
U.S. Application No. 60/319,542, filed September 11, 2002. U.S. Application No. 60/319,714, filed November 20, 2002.
U.S. Application No. 60/453,385, filed March 10, 2003.
U.S. Application No. 60/320,008, filed March 14, 2003.
This application is a continuation-in-part of U.S. Application No. 10/246,365 filed September 18, 2002, the entirety of which is incorporated herein by reference.
BACKGROUND OF THE INVENTION
The present invention is directed to technology used in a radio communication device to derive information about the signals active in a radio frequency band where the radio communication device is operating, such as an unlicensed radio frequency band shared by many different devices.
In certain radio communication systems, it would be desirable to know whether and what types of other signals or devices are active. For example, an unlicensed radio frequency band is, by its nature, free to be used by any device that emits radio energy within certain power levels in that part ofthe allocated spectrum. It is possible that many devices would share the unlicensed frequency band at the same time, potentially causing interference with each other. Under these circumstances, what would be useful is to provide the capability of processing signals that represent activity in the frequency spectrum over a time interval to derive information about the basic characteristics of those signals in order to identify or classify them.
SUMMARY OF THE INVENTION
A real-time spectrum analysis engine (SAGE) is provided that generates information about the signal activity in a frequency band. The SAGE has several components to produce generalized spectrum information as well as specific information concerning the type of signal pulses in the frequency band at any given time.
The SAGE is, for example, a hardware accelerator that resides in a communication device and comprises a spectrum analyzer component, a signal detector component, a universal signal synchronizer component and a snapshot buffer component. The spectrum analyzer component generates data representing a real-time spectrogram of a bandwidth of radio frequency (RF) spectrum. The signal detector detects signal pulses in the frequency band and outputs pulse event information entries which include the start time, duration, power, center frequency and bandwidth of each detected pulse. The signal detector also provides pulse trigger outputs which may be used to enable/disable the collection of information by the spectrum analyzer and the snapshot buffer components. The snapshot buffer collects a set of raw digital signal samples useful for signal classification and other purposes. The universal signal synchronizer synchronizes to periodic signal sources, useful for instituting schemes to avoid interference with those signals. Some or all ofthe functions ofthe SAGE may be implemented entirely in software executed by a processor.
The above and other objects and advantages will become readily apparent when reference is made to the following description taken in conjunction with the accompanying drawings.
BRIEF DESCRIPTION OF THE DRAWINGS
FIG. 1 is a block diagram showing the spectrum analysis engine (SAGE).
FIG. 2 is a block diagram of a radio transceiver interface that interfaces the SAGE to a radio transceiver or radio receiver. FIG. 3 is a more detailed block diagram ofthe SAGE.
FIG. 4 is schematic diagram ofthe spectrum analyzer component ofthe spectrum analysis engine.
FIG. 5 is a graphical diagram showing a representation ofthe FFT data generated by the spectrum analyzer.
FIG. 6 is a more detailed block diagram ofthe peak detector and pulse detector components ofthe spectrum analysis engine. FIG. 7 is a graphical plot showing a signal peak that is detected by the peak detector.
FIG. 8 is a schematic diagram ofthe components ofthe pulse detector.
FIG. 9 is a graphical plot showing exemplary signal pulses and pulse event information generated by the signal detector for the exemplary signal pulses. FIG. 10 is a schematic diagram ofthe stats module ofthe spectrum analyzer component ofthe SAGE.
FIG. 11 is a diagram showing exemplary stats that are accumulated by the stats logic module.
FIG. 12 is a diagram showing the exemplary peak stats that are accumulated by the stats logic module.
FIG. 13 is a block diagram showing the dual port RAM (DPR) storage used to store data generated by the spectrum analysis engine, and from which a microprocessor control unit (MCU) may obtain output ofthe SAGE.
FIG. 14 is a diagram showing the addressing scheme for data stored in the DPR.
FIG. 15 is a diagram showing the circular list structure ofthe data stored in the DPR.
FIG. 16 is a diagram showing the position list format ofthe circular list for data stored in the DPR. FIG. 17 is a block diagram of a universal clock module component of the universal signal synchronizer.
FIG. 18 is a timing diagram showing how a universal clock module is used to synchronize to an exemplary pulse detected in the frequency band.
FIG. 19 is a block diagram of a clock update process to update the frequency offset between the clock of a detected signal and a local clock.
FIG. 20 is a diagram showing how the SAGE may be operated.
FIG. 21 is a block diagram showing another environment in which the
SAGE may be deployed.
FIG. 22 is a diagram showing an application ofthe SAGE in an unlicensed frequency band wireless environment. FIG. 23 is a block diagram showing use ofthe SAGE in a spectrum management system that manages activity in a frequency band.
FIGs. 24 through 27 are graphical diagram showing how SAGE output may be displayed.
FIG. 28 is a ladder diagram illustrating how messages are generated to access SAGE data through a network spectrum interface (NSI).
DETAILED DESCRIPTION OF THE DRAWINGS
The spectrum analysis engine, hereinafter referred to as "SAGE" is a hardware accelerator useful to generate in real-time information about the activity in a frequency band. FIG. 1 is a block diagram showing the SAGE 10 together with other hardware components that SAGE interacts with during operation. The SAGE 10 and related components may be implemented in a variety of ways. One way is with digital logic gates on a single or multiple semiconductor chips configured to perform the functions described herein. Another way is in one or more semiconductor devices using a CMOS process. For example, the majority of the SAGE 10 can be implemented as part of or the entirety of an application specific integrated circuit (ASIC) by digital logic gates. It is also envisioned that for certain applications, some or all ofthe functions ofthe SAGE 10 are implemented with software instructions stored on a processor readable medium, and executed by a processor, such as the MCU, or another processor in another device coupled to receive as input the output an ADC that converts the downconverted signals to a digital signal. An example of one software implementation ofthe SAGE 10 is described hereinafter in connection with FIG. 21. The SAGE 10 comprises a spectrum analyzer (SA) 100, a signal detector
(SD) 200, a snapshot buffer (SB) 300 and a universal signal synchronizer (USS) 400. The SA 100 generates data representing a real-time spectrogram of a
bandwidth of radio frequency (RF) spectrum, such as, for example, up to 100 MHz. As such, the SA 100 may be used to monitor all activity in a frequency band, for example, the 2.4-2.483 GHz ISM band, or the 5.15-5.35 GHz and 5.725-5.825 GHz UNII bands. Power vs. frequency information generated by SAGE 10 is stored in a dual-port RAM (DPR) 500 and is also used by the signal detector 200.
The signal detector 200 detects signal pulses in the frequency band and outputs pulse event information entries, which include one or more ofthe start time, duration, power, center frequency and bandwidth of each detected pulse. The signal detector 200 also provides pulse trigger outputs which may be used to enable/disable the collection of information by the spectrum analyzer 100 and the snapshot buffer 300 components.
The snapshot buffer 300 collects a set of raw digital signal samples useful for signal classification and other purposes, such as time of arrival location measurements. The snapshot buffer 300 can be triggered to begin sample collection from either the signal detector 200 or from an external trigger source using the snapshot trigger signal SB TRIG.
The universal signal synchronizer 400 synchronizes to periodic signal sources, such as Bluetooth SCO headsets and cordless phones. The USS 400 interfaces with medium access control (MAC) logic 750 that manages scheduling of packet transmissions in the frequency band according to a MAC protocol, such as, for example, the IEEE 802.11 protocols. The MAC logic 750 may be implemented in DSP firmware, or in higher level software.
The SAGE 10 is useful in a radio communication device where a radio transceiver 600 (or a radio receiver) is used to process received RF signals and convert them to baseband signals. A microprocessor control unit (MCU) 700 interfaces with the SAGE 10 to receive spectrum information output by SAGE 10, and to control certain operational parameters of SAGE 10 for particular functions described in detail hereinafter. The MCU 700 may be any suitable microprocessor that resides either on the same semiconductor chip as the SAGE 10, or on another chip. The MCU interfaces with SAGE 10 through the DPR 500 and the control registers 560. The SAGE 10 interfaces with the MCU 700 through a memory interface (I/F) 550 that is coupled to the DPR 500.
The control registers 560 include registers to enable the MCU 700 to configure control and monitor the SAGE 10. There is a control/status register, an interrupt enable register, an interrupt flags register, spectrum analyzer control registers, signal detector control registers, snapshot buffer control registers and USS control registers. The control/status register includes a field to perform a reset ofthe SAGE components. The interrupt enable register is used to indicate one or more pending interrupt conditions to the MCU 700. The MCU 700 also uses the interrupt flags register to clear any processed interrupts.
Two clock signals are used to drive the SAGE 10. The main clock signal, CLK, runs at the sampling rate of the ADC 810 and controls most of the SAGE logic. The other clock, BUSCLK, is used to control the MCU side of DPR 500, interface to the control registers 560, the global timer interfaces (GFIs), and the lower medium access control (LMAC) interfaces. The DPR 500 is driven using a separate clock on each port: CLK on the SAGE side and BUSCLK on the MCU side. The control registers 560 may be double-buffered to avoid synchronization problems between SAGE and MCU control logic.
The SAGE 10 operates on digital signals derived from the baseband signals output by the radio transceiver 600. An RF interface 800 is provided that pre- processes the baseband signals for processing by the SAGE 10. Turning to FIG. 2, the RF interface 800 will be described. The RF interface
800 comprises an analog-to-digital converter (ADC) block 810, an automatic gain control (AGC) block 820, a direct current (DC) correction block 830 and an amplitude/phase correction block 840.
The radio transceiver 600 that generates the received (Rx) baseband signals may have an RF receiver in which the local oscillator (LO) for the quadrature downconverter is placed at the center ofthe band of interest. As such, DC, amplitude and phase offset compensation circuits are provided before the Fast Fourier Transform (FFT) to maximize LO and sideband suppression.
The Rx baseband signals are sampled at the CLK frequency using two ADCs, one for the in-phase signal (I), and another for the quadrature signal (Q). Only one ADC is shown in FIG. 2 for simplicity. An example of a CLK and ADC frequency is 120 MHz, which is sufficient to digitize the entire 2.4 GHz ISM band.
Consequently, the maximum FFT rate is 468.8 kHz (2.13 microseconds per FFT) at
CLK = 120 MHz, though faster or slower rates may be suitable for other applications.
The AGC block 820 dynamically adjusts the gain ofthe receiver to optimize the placement ofthe Rx signal within the dynamic range ofthe ADC 810.
A slow, feedback-driven algorithm is useful, in which the Rx gain is adjusted to place the maximum signal level received in the last T seconds (nominally T = 1 second) 6 dB below full-scale on the ADC 810. The use of a "slow" AGC algorithm is beneficial because it prevents the ADC 810 from saturating when sampling the entire frequency band of interest (wideband mode) whenever strong signals appear suddenly in the band, without requiring rapid adjustments in gain which can cause distortion and discontinuities in Rx signal pulses. The output of the AGC 820 is an AGCcomp signal, the use of which is described hereinafter. The DC correction and amplitude/phase correction blocks 830 and 840, respectively, compensate for LO leakage and amplitude/phase imbalance in the quadrature mixer ofthe radio transceiver. DC correction is performed adaptively by estimating the DC offset at the ADC output and updating a correction DAC to remove large DC offsets. Any residual DC offset after course correction is removed after the ADC via digital subtraction. The MCU estimates the amplitude and phase imbalance and programs the correction values into the appropriate control registers. The output ofthe RF interface 800 comprises a digital signal Datal representing the in-phase received signal and a digital signal DataQ representing the quadrature phase received signal. The signals Datal' and DataQ' represent the output ofthe summer 835, uncorrected for DC and amplitude/phase, and can be supplied as the raw data to the snapshot buffer 300.
The SAGE 10 can be used in a radio communication device that includes a RF receiver capable of operating in a wideband mode or narrowband mode. In a wideband mode, the RF receiver may downconvert an entire or a substantial portion of a frequency band in which the radio communication device operates. In the wideband mode, the RF interface 800 supplies digital signals representing activity in the entire frequency band for successive time intervals as input to the SAGE 10. In a narrowband mode, the RF receiver may downconvert only a single
RF channel or portion ofthe frequency band, in which case, the RF interface 800 would supply digital signals representing activity in that single RF channel or portion ofthe frequency band. The RF receiver may be tuned to different portions ofthe frequency band so as to scan across the frequency band. An example of a radio receiver having a wideband mode as part of a radio transceiver is disclosed in commonly assigned U.S. Provisional Application No. 60/319,434 filed July 30,
2002, the entirety of which is incorporated herein by reference.
The Spectrum Analyzer With reference to FIGs. 3 and 4, the spectrum analyzer 100 performs realtime FFT-based spectrum analysis on the Datal and DataQ signals. As an example, the SA 100 is capable of providing real-time spectrum analysis information of a frequency band (whether from wideband radio receiver or a scanning narrowband receiver), and as such can be used to monitor all activity in either the 2.4 GHz or 5.7 GHz unlicensed bands, for example. Other applications for monitoring smaller or greater bandwidths are also possible using similar techniques.
The data path leading to the SA 100 comprises a windowing block 110, a Fast Fourier Transform (FFT) block 120 and a spectrum correction block 125. These components are external to the SA 100 because they can be shared with other components in a system. The SA 100 itself comprises a power calculation block 130, a lowpass filter block 140, a linear-to-log converter (dB conversion) block 150, a history buffer 160, stats logic 170 and a SA memory controller 190.
As shown in FIG. 4, the windowing block 110 performs pre-FFT windowing on the I and Q data using either a Harming or rectangular window with a multiplier 112 and a ROM 114 that stores slope coefficients for the windowing process.
The FFT block 120 is, for example, a 256 frequency bin FFT block that provides (I and Q) FFT data for each of 256 frequency bins that span the bandwidth of frequency band of interest. An example ofthe FFT data field is shown in FIG. 5. For each FFT sampling time interval, the FFT block outputs M (such as 10) bits of data for each FFT frequency bin, for example, 256 bins. Thus, it can be seen that two-dimensional data structure can be defined for the FFT data fields across
time intervals. This diagram is a useful paradigm to understand the further operations that are performed on the FFT data.
The output ofthe FFT block 120 is coupled to the spectrum correction block 125. The spectrum correction block 125 corrects for I and Q channel imbalance by estimating an I-Q channel imbalance parameter related to phase error and amplitude offset between the I and Q channels. To suppress a side tone resulting from the RF downconversion process, the following relationship is used:
S(k) = w(k) * [Y(k) + v(k) * Y(-k)] , k= 0... 255 where w(k) and v(k) are not greatly dependent on frequency dependent, so that we can use one of w(k), v(k) vectors for sixteen k-indexes. In the wideband mode, it is the one spectrum correction coefficient for 6.25 MHz bandwidth. To find the optimized w and v vectors, the spectrum correction block 125 collects at least 8 samples from the output ofthe FFT 120 and optimizes the vectors using the following recursive algorithm.
Q(k,i), E(k,i) is a real number
C(k,i), v(k,i), w(k,i) is a complex number
v(k,0) = 0, E(k,0) = 0 for i = l : _V
C(k,i) = Y
f(k,i) * Y
r(k,i)
E(k, = (^) * E(k, i - 1) + ώ * Q(k, ϊ) M M KM-vCW-i)-^'-0 M**6E*(k0,ϊ)*0*0
end return(w(k, N)) return(v(k,N))
Other suitable spectral correction algorithms may be employed. Further details concerning one correction algorithm are disclosed in the publication "A Spectral
Correction Algorithm for I-Q Channel Imbalance Problem," Tien-Yow Liu, Stuart Golden and Naiel Askar, IEEE, 2001, publication.
The power calculation block 130 comprises two multipliers 132 and 134 and an adder 136. The multipliers 132 and 134 compute (FFTdatal) and (FFTdataQ) , respectively, and the adder 136 adds them together, to output a power value.
The lowpass filter block 140 comprises a multiplier 142, multiplier 144, an adder 145, a flip-flop 146 and a history RAM 148. The lowpass filter block 140 performs a unity-gain, single-pole lowpass filtering operation on the power values ofthe signal at each FFT frequency bin. Using Pfft(k) to denote the power value at FFT frequency f(k), the lowpass filter output Pjpf (k) is updated once per FFT interval (t) as follows: Plpf(k, t) := α.P(k, t) + (l-αι)Pιpf(k, t-l), 1 = k = 256, where αl and (1-αl) are parameters for the multipliers 142 and 144, respectively specifying the LPF bandwidth which is configured by the MCU 700. The history RAM 148 stores the FFT power data for the previous FFT interval that is used with multiplier 144 according to the mathematical relationship described above.
The dB conversion block 150 at the output ofthe lowpass filter block 140 computes the decibel value PDB(k) = 10*log(|Pιpf(k, t)|) for each FFT bin value Pipf(k, t) (in dBFS, i.e., dB from full-scale on the ADC). The ROM 152 stores a table used for the dB conversion computation and the adder 152 subtracts the gain compensation AGCcomp output by the AGC 820, calibrated by RSSI0. RSSI0 is input signal power, RX(dBm), when dBFS equals 0 dB with setting GC as 0 dB. The output ofthe dB conversion block 150 is a PDB(k) data field (k = number of frequency bins) containing dB power data at each frequency bin and a PDB START signal that indicates the start ofthe following PDB(k) field.
The stats logic block 170 will be described hereinafter in conjunction with FIG. 10.
The spectrum analyzer 100 has two operating modes for writing data into the DPR 500. In a continuous mode, one power vs. frequency value is written to the DPR 500 every N FFT cycles (N = decimation factor). In a transitional mode, a power vs. frequency value is written whenever a pulse event is detected by the signal detector 200, in response to a spectrum analyzer trigger event signal
SD SAENT, described hereinafter. The transitional mode generally improves
DPR storage efficiency over the continuous mode since in the former case power vs. frequency information is written to the DPR only after pulse transitions.
Examples of control registers for the spectrum analyzer include a control field, a register for the lowpass filter parameter a, registers for the DPR address of the DPR buffers that store the spectrum analyzer stats, a register that counts the number of times the stats have been updated, a register that stores a value that determines the number of FFT intervals for a statistic update cycle, a register that stores the power threshold value for the duty cycle stats (described hereinafter), and a register for the structure for the power vs. frequency circular list.
The spectrum analyzer control register includes fields to, among other things, indicate received signal strength indicator (RSSI) mode, absolute or relative. The relative mode means that power measurements are in units of dB full scale; absolute mode means the measurements are in units of dBm. In addition, there is a field to indicate the operational mode ofthe spectrum analyzer, continuous mode or transitional mode.
The Signal Detector
With reference to FIG. 3 in conjunction with FIG. 6, the signal detector 200 identifies signal pulses in the Rx data path, filters these signals based on their spectral and temporal properties, and passes characteristic information about certain detected pulses to the MCU 700 via the DPR 500. The signal detector 200 also provides pulse timing information to the universal signal synchronizer 400 to allow it to synchronize its clocks to transmissions to/from other devices operating in the frequency band, for example, to eliminate interference with QoS-sensitive devices such as cordless phones, Bluetooth™ headsets, video-over-802.11 devices, etc.
As shown in FIG. 3, the signal detector 200 comprises a peak detector 210 and a one or more pulse detectors 220. For example, there are four (4) pulse detectors 220. The peak detector 210 looks for spectral peaks in the FFT sequence at its input, and reports the bandwidth, center frequency and power for each detected peak. The output ofthe peak detector is one or more peaks and related
information. The pulse detectors 220 detect and characterize signal pulses based on input from the peak detector 210.
The peak detector 210 detects a peak as a set of FFT points in contiguous
FFT frequency bins, each above a configured minimum power level. Once per FFT interval, the peak detector 210 outputs data describing those frequency bins that had a FFT value above a peak threshold and which frequency bin of a contiguous set of frequency bins has a maximum value for that set. In addition, the peak detector 210 passes the PDB(k) data field for each FFT interval. This can be represented by the pseudo code (where k is the frequency bin index): PDBd )= PDB(k) - SD PEAKTH ;
If(PDBd ) = 0)
PDBpeak(k)= PDB(k) ; PEAKEN(k)= 1 ; Else
PDBpeak(k)= 0 ; PEAKEN(k)= 0 ; end
The peak detector 210, as shown in FIG. 6, comprises a comparator 212, a register file 214, a FIFO 216 and a FIFO 218. The comparator 212 compares the dB power value PDB(k) with the peak threshold (SD_PEAKTH). The FIFO 216 stores a data word that indicates which frequency bins k had a power value above the peak threshold, and which did not. For example, if the FFT outputs 256 FFT values, the FIFO 216 stores a 256 bit word, with 1 's indicating FFT values that exceed the peak threshold and 0's indicating FFT values that do not exceed the peak threshold. The register file 214 stores the maximum peak power value in any set of contiguous FFT values that exceed the peak threshold. This maxpeak information is used in the pulse detector. The FIFO 218 stores the PDB(k) data field corresponding to the data stored in the register file 214 and FIFO 216.
FIG. 7 shows an example where a peak is detected at the frequency bin 130 by a contiguous set of points above a peak threshold shown in the dotted line. In
this example, NFFT = 256, fs = 120 MHz, configured min power level = - 80 dBm
(not shown), kO - 129, kl = 127, kh = 131, P(kO) = -50 dBm, BW_THRESH = 15 dB, bandwidth = 1.875 MHz, center frequency = 0.4688 MHz. These latter parameters will be described hereinafter in conjunction with the pulse detector 220. The variable fs is the sampling rate ofthe ADC (FIG. 2), which will depend on the width ofthe frequency band to be processed. Narrowband and wideband operation ofthe radio transceiver is described above.
The signal detector 200 has one or more pulse detectors 220 (such as 4), allowing several pulses to be detected and characterized simultaneously. Generally, a pulse detector calculates relative thresholds based on configured information, and checks whether pdB exceeds the relative threshold. If pdB exceed the relative threshold, it defines the peak as a pulse candidate. Once a pulse candidate is found, the pulse detector compares the identified pulse candidate with a pulse definition such as power, center frequency, and bandwidth (defined by the pulse detector configuration information). After matching pulse candidate with a defined pulse, it checks the defined pulse duration. If it is the first time to detect (which means pulse duration counter is zero), it registers current pulse candidate information as a DETECTED PULSE. If duration counter is not zero, it increases pulse duration count. After increasing pulse duration count, if it is greater than a minimum required pulse duration, it triggers start of pulse. If it is greater than a maximum allowed pulse duration, it triggers termination of pulse. When the pulse detector does not detect a pulse at a given time slot, and there is a non-zero value of the pulse duration counter, then it triggers termination of pulse as well.
As shown in FIG. 6, each pulse detector 220 comprises a pulse identifier block 230, a pulse finder block 250, a pulse tracking block 270 and a detect buffer 290. These components, described further in conjunction with FIG. 8, are operated with configurable parameters to execute a set of rules:
Pulse Shaping Rules: How should pulse information be extracted from raw peak information — performed by the pulse identifier 230. Pulse Detection Rules: Under what conditions is the start of a pulse detected — erformed by the pulse finder 250.
Pulse Termination Rules: Under what conditions should an individual pulse be considered complete — performed by the pulse tracker 270. Pulse Shaping Rules.
For a detected FFT peak at frequency index kO, the bandwidth ofthe peak is defined as the length ofthe largest interval over which the FFT power level is at least a certain value below the peak FFT power level. Specifically, the bandwidth is FPBW = Bandwidth (Hz) = (kh - kl + 1) * fs / NFFT, where kl and kh are the smallest and largest integers, respectively, satisfying (1) kl = kO = kh, and (2) P(k) = P(kO) - BW_THRESH for any kl = k = kh, where fs is the ADC sampling rate in Hz, NFFT is the number of points/bins in the FFT, and P(k) denotes the power (in milliwatts) at FFT frequency bin k.
Similarly, the center frequency ofthe peak is FPCENTER = Center Frequency (Hz) = [(kh + kl) / 2] * fs / NFFT. This definition of center frequency locates the signal in the Nyquist band only. The actual center frequency at RF is given by RF Center Frequency (Hz) = FPCenter - fs/2 + fLO, where fLO is the RF LO frequency used to convert the FFT band to baseband, and a zero-IF receiver architecture is assumed (i.e., the LO is in the center ofthe RF band).
The peak detector 210 uses the following formula to estimate the power of a peak: Power (dBm) = ? PDBpeak(k), from k = kl to kh. This is only an estimate and its accuracy depends on the signal itself and the value of BW THRESH. The pulse identifier 230 shown in FIG. 8 comprises components to perform the pulse shaping rules using the bandwidth threshold (BW THRESH) parameter to identify those pulses that have a bandwidth that is greater than or exceeds the bandwidth threshold. Pulse Detection Rules. The pulse detection rules specify the conditions under which the start of a pulse is to be detected and these rules are performed by the pulse finder 250. For example, a pulse is considered DETECTED if there is a peak from the pulse shaping rules that satisfies ALL ofthe following conditions: 1 ) Estimated power is between the peak detector minimum power and the peak detector maximum power. The pulse power level DETECTJPOWER which triggered the detection of this specific pulse is used by the pulse termination rules.
2) Center frequency ofthe peak is between a center frequency minimum and a center frequency maximum. The detected center frequency DETECT_CFREQ is used in pulse termination rules.
3) Bandwidth ofthe peak is within a bandwidth minimum and a bandwidth maximum.
Pulse Termination Rules. A pulse may be considered TERMINATED if, for example, the pulse duration exceeds a duration maximum, or NONE ofthe detected peaks from the peak detector satisfies ALL ofthe following conditions:
1 ) Estimated power of the peak is within +/- a power hold value of the power of the pulse when it was originally detected.
2) Center frequency ofthe peak is within +/- a frequency hold value of the center frequency ofthe peak when it was originally detected.
3) Bandwidth of the peak is within a bandwidth hold value of the bandwidth ofthe peak when it was originally detected. The pulse tracker 270 comprises components to detect the termination of a pulse according to these rules.
When a pulse terminates, the pulse tracker 270 writes a pulse event entry into the pulse event list if the pulse duration exceeds a pulse duration threshold value. Otherwise, the pulse event entry is discarded. The conditions which terminate the pulse are stored in a bit field which is included in the pulse event structure for the pulse. The pulse event structure will be described hereinafter. A finite state machine may be used in a pulse detector to assist determining and tracking a pulse event.
Each pulse detector has its own configuration register (as part ofthe signal detector control registers) that stores values for each ofthe pulse parameters (described above) within which a pulse detector will process peak information. The following are examples of these parameters.
PWRMIN: Minimum power threshold (1 dBm) PWRMAX: Maximum power threshold (1 dBm) BWTHRESH: Bandwidth threshold (1 dBm)
CFREQMIN: Min center frequency (fs/NFFT Hz) CFREQMAX: Max center frequency (fs/NFFT Hz)
BWMIN: Min pulse bandwidth (fs/NFFT Hz) BWMAX: Max pulse bandwidth (fs/NFFT Hz) DURMAX: Max pulse duration (TMR_PULSE) DURMIN: Min pulse duration (TMR PULSE) PWRHOLD: Power hold value ( 1 dB)
FRQHOLD: Frequency hold value (fs/NFFT Hz) BWHOLD: Bandwidth hold value (fs/NFFT Hz) FPCENTER: Current pulse center frequency (fs/NFFT Hz) FPBW: Current pulse bandwidth (fs/NFFT Hz) PWR: Current pulse power estimate (1 dBm)
The terms fs and TMR_PULSE are described above and/or referenced in FIGs. 1-3.
Each pulse detector can be configured by the MCU 700. The MCU 700 writes appropriate values to the configuration registers) ofthe signal detector to configure one or more pulse detectors to look for and characterize a certain type of pulse in the frequency band. The control register controls clearing and resetting of a pulse detector so that it can be reconfigured to look for a different type of pulse. The pulse detector control register includes a field that identifies which, if any, universal clock module ofthe universal signal synchronizer 400 is to be associated with the pulse detector. The universal clock module (UCM) is described hereinafter. When there is an association between the pulse detector and the universal clock module, the pulse detector stores the counter value of that universal clock module into the pulse event list whenever it detects a pulse. The counter values can be used by the MCU 700 to phase lock a universal clock module to a periodic interference source, as described hereinafter.
Each pulse detector outputs pulse event data for storage in the DPR 500. The following is an example of pulse event data. SDID: Pulse detector identifier. TERMCODE: Pulse termination codes: Bit 0 (LSB): Pulse power outside of hold range
Bit 1 : Center frequency outside of hold range Bit 2: Bandwidth outside of hold range
Bit 3: Duration exceeds durMax
FCENTER: Center frequency (at beginning of pulse)
BW: Pulse bandwidth (at beginning of pulse)
DUR: Pulse duration in TMR_PULSE cycles. The pulse duration value is given by toff - ton, where toff and to„ denote the
TMR_TSTMP values latched at the FFT_START pulse associated with the first and last FFT of a detected pulse, respectively.
TIMEON: Timestamp for start of pulse event. TIMEON contains the TMR TSTMP value latched at the FFT_START pulse associated with the first FFT that produces a pulse detection match.
UCMCNT: Counter values from an associated universal clock module (UCM, described hereinafter) in the USS. The low-order 16 bits contain the UCM down counter value at the beginning ofthe pulse event. The least-significant 2 bits in the upper half-word contain the mod(N) counter value (also in the associated UCM) at the beginning ofthe pulse event. If there is no associated UCM with a pulse detector, this field is set to all zeros.
PWR: Pulse power estimate (at beginning of pulse, 1 dBm)
The signal detector 200 outputs descriptions of detected pulses as pulse events, containing the data described in the table above for example, into a circular list called the pulse event list in the DPR 500. A single list is used by all ofthe pulse detectors. The source pulse detector of an individual pulse event in the list is indicated by the pulse event "SDID" field.
FIG. 9 illustrates exemplary signals and the corresponding pulse event data. There is IEEE 802.1 lb signal activity consisting of pulses 1-6. Pulses 1, 3 and 5 are the forward channel 802.1 lb transmissions and pulses 2, 4 and 6 are acknowledgement signals. There is also a frequency hopping signal, such as a
Bluetooth™ SCO signal comprising pulses 7-14. The timing, strength and duration ofthe signals are not shown at precise scale. Two pulse detectors are configured in a device where it is expected that an
802.1 lb signal and a frequency hopping signal would occur. A first pulse detector
is configured to detect signals, such as the 802.11 signals, and would have the following parameters:
Pulse Bandwidth: 10 to 20 MHz Center Frequency: 36-38 MHz (To cover channel 6—2437 MHz) Pulse Duration: 70 microsec to 20 msec Power: -30 dBm to -80 dBm
It is possible that the first pulse detector could be configured to detect a pulse on any frequency, but through prior general knowledge that can be acquired by looking at the spectrum statistics, it is possible to determine that an 802.11 signal pulse is occurring at a particular frequency in the frequency band.
A second pulse detector is configured to detect signals such as the frequency hopping signal and would have, for example, the following parameters:
Pulse Bandwidth: less than 2 MHz
Center Frequency: 0 to 83 MHz (i.e., anywhere in the 2.4 GHz band)
Pulse Duration: Up to 1 msec
Power: -50 dBm to -75 dBm
Exemplary pulse event data for these pulses are listed below. For simplicity, the time-on data associated with these pulses is omitted.
Pulse 1
SDID: 1 (identifying
Pulse Bandwidth: 11 MHz
Center Frequency: 37 MHz
Pulse Duration: 1.1 msec
Power: -75 dBm
Pulse 2
SDID: 1
Pulse Bandwidth: 11 MHz
Center Frequency: 37 MHz
Pulse Duration: 200 microsec
Power: -60 dBm
Pulse 3
SDID:
Pulse Bandwidth: 12 MHz Center Frequency: 37 MHz Pulse Duration: 1.1 msec Power: -75 dBm Pulse 4
SDID: 1
Pulse Bandwidth: 11 MHz
Center Frequency: 37 MHz
Pulse Duration: 200 microsec
Power: -60 dBm
Pulse 5
SDID: 1
Pulse Bandwidth: 13 MHz
Center Frequency: 37 MHz
Pulse Duration: 18 msec
Power: -75 dBm
Pulse 6
SDID: 1
Pulse Bandwidth: 11 MHz
Center Frequency: 37 MHz
Pulse Duration: 200 microsec
Power: -60 dBm
The pulse event data for pulses 7-14 are very similar to each other, with the exception ofthe center frequency. For example, pulses 7-14 may have a pulse bandwidth of 1 MHz, a pulse duration of 350 microsec, whereas the center frequency will vary across nearly all ofthe 2400 MHz to 2483 MHz frequency band. The SDID for pulses 7-14 is 2, since pulse detector 2 is configured to detect these types of pulses.
There are other signal detector functions. One or more pulse detectors in the signal detector 200 may be configured to monitor pulse activity and the signal detector 200 may send a snapshot buffer trigger signal (SD_SBENT) to the snapshot buffer 300 when a pulse event occurs corresponding to a configured pulse
detector. The signal detector will monitor all pulse detectors and if any one of them detects such an event, the snapshot trigger signal SD SBENT is generated, either on the rising edge or falling edge ofthe detected pulse. The snapshot buffer trigger signal SD SBEVT will cause the snapshot buffer 300 to capture samples of the Datal and DataQ signals, as described hereinafter.
Similarly, the signal detector may be configured to monitor activity on each pulse detector and send a spectrum analyzer trigger signal (SD S AEVT) to the spectrum analyzer 100 (presumed to be in the transitional mode) when a desired pulse event is detected by any one ofthe pulse detectors. Again, this spectrum analyzer trigger signal is generated either on the rising edge or falling edge ofthe detected pulse. The SD_SAEVT signal is coupled to the SA memory controller 190 which will output to the DPR 500 samples (snapshots) ofthe PDB(k) data fields.
Turning to FIGs.10- 12, the stats logic block 170 has modules to accumulate statistics for power, duty cycle, maximum power and a peaks histogram. Statistics are accumulated in the DPR over successive FFT time intervals. After a certain number of FFT intervals, determined by a configurable value stored in the spectrum analyzer control registers, an interrupt is generated to the MCU so that the MCU reads out the stats from the DPR into its memory. For example, the stats are maintained in the DPR for 10,000 FFT intervals before the MCU reads out the values from the DPR.
FIG. 11 illustrates an example of stats that are accumulated by the stats logic module shown in FIG. 10. The table on the left side of dB power values for exemplary frequencies during time intervals t = 0 through 5. The table on the right represents values updated in the DPR for the SumPwr, DutyCnt and MaxPwr statistics at those frequencies. In this example, the peak threshold is -50, and it is assumed that there are essentially three peaks: a first from frequency bin 0 to frequency bin 20; a second from frequency bin 125 to frequency bin 175; and a third from frequency bin 200 to frequency bin 255. All other frequency bins are assumed to be at -100 dB. Though not shown as such, the SumPwr statistic may be averaged by the MCU or another processor, and the DutyCnt may be converted to a percentage number.
To accumulate power stats, the PDB(k) data field is supplied to the stats logic block 170. It may be decimated by an optional decimator 172. The power at each frequency bin for a previous time interval is added by the adder 174 to the power at that frequency bin for the current time interval. The running power sum at each frequency bin is output to the DPR 500 as a SumPwr stat, also referred to hereinafter as the average power stat.
A duty count stat is generated by comparing the PDB at each frequency bin k with a power threshold (SA_PWRTHRESH) at the adder 176 and MSB block
178. Each time the power at a frequency bin exceeds the power threshold, the previous duty count statistic for that frequency bin is incremented by the increment block 180. The output ofthe increment block 180 is the duty count stat (DutyCnt), which again, is a running count ofthe number of times the power at a FFT frequency exceeds the power threshold.
A maximum power stat (MaxPwr) is tracked at each frequency bin. The current maximum power value at each frequency k is compared to the new power value at each frequency k by the adder 182 and MSB block 183. The multiplexer 184 selects for output either the current power maximum or the new PDB(k), depending on whether the new PDB(k) exceeds the current power maximum at the frequency. The number of peaks that are detected by the peak detector during each FFT time interval is counted by the counter 185, buffered in the flip-flop (FF) 186 and stored in the histogram registers 187 for output to the DPR 500. The PEAKEN signal is the output ofthe peak detector that goes high when a peak is detected. The PKDETSTART signal restarts the counting process for a statistic update cycle. FIG. 12 shows exemplary content ofthe histogram registers 187 including a running count ofthe number of time intervals (i.e., stats update cycles) that have 0 peaks, 1 peak, 2 peaks, ... up to 9 peaks. This histogram is useful to estimate the number of different devices or networks operating simultaneously at different frequencies in the frequency band. As shown in FIG. 12, up until stats update cycle 5, there are two with no peaks, one stats update cycle with one peak and three stats update cycles with three peaks.
The Snapshot Buffer
The snapshot buffer 300 is a flexible data storage and triggering mechanism used to collect a set of raw ADC samples (Datal and DataQ or Datal' and DataQ', FIG. 2) for post-processing by the MCU 700. When a snapshot trigger condition is detected, the snapshot buffer 300 buffers up a set of ADC samples and asserts an interrupt to the MCU 700. The MCU 700 may then perform background-level processing on the ADC samples for the purposes of identifying or locating another device operating in the frequency band, or these samples may be passed to a different processor at for processing.
In a pre-store mode, the snapshot buffer 300 writes continuously to the DPR 500 and stops writing and interrupts the MCU when a snapshot trigger signal is detected. In a post-store mode, the DPR write operation begins only after a trigger is detected. A combination pre and post store scenario may be created (using the DELAYSTART and DELAYEND control registers) to capture samples of the receive data signals both before and after a snapshot trigger condition.
There are two types of snapshot trigger signals supported: SB TRIG and SD_SBEVT. The snapshot trigger signal SD_SBEVT is sourced from the signal detector 200 as described above, and the SB_TRIG signal is sourced from a module external to the SAGE 10, such as a location measurement module. For example, the MCU 700 may be programmed to collect raw ADC samples when a particular signal pulse is detected for signal classification processes. The MCU 700 configures a pulse detector to generate the snapshot trigger signal SD SBEVT upon detecting a pulse that meets a certain set of characteristics, as described above. The snapshot buffer 300 clears this bit when it has finished its processing (usually within one clock).
The snapshot buffer 300 samples may be stored in a variety of formats. One example of a format is one complex sample per 32-bit word. The high-order 16 bits contain the real part ofthe sample; the low-order 16-bits contain the imaginary part. The real and imaginary parts may be stored in a Q15 format, where 0 represents ON on the ADC in the RF Interface 800, and 0x7FFF and 0x8000 represent positive and negative full-scale, respectively. A B-bit QΝ fractional
number x takes on the values {n/2N, n = -2B 1, ..., 2B"1-1 }. The B-bit signed integer n = 2N * x is used to represent x and is usually stored as a signed, two's complement integer.
Examples ofthe control registers (and what they do) for the snapshot buffer are described below.
DELAYSTART: Number of samples to wait after the SB_TRIG signal before starting to write into DPR. Only valid if
CNTRL.PRESTORE=0.
DELAYEND: Number of samples to write into DPR before DPR writes are disabled and a "snapshot complete" interrupt is posted to the MCU. The count begins (1) when a trigger condition is asserted in prestore mode, or (2) DELAYSTART samples after a trigger condition in poststore mode. START ADDR: Address in DPR of first word of snapshot buffer. END ADDR: Address in DPR of last word of snapshot buffer.
WADDR: Starting write address into snapshot buffer (STARTADDR <= WADDR <= END ADDR). When writing to the snapshot buffer, WADDR is incremented and after a write to END ADDR, WADDR wraps back to STARTADDR. After a snapshot operation is complete, MCU may use this register to determine the address ofthe most recent write into the DPR. TSTMP: Contains the TMR TSTMP value latched immediately after the most recent snapshot trigger condition was asserted. The control register includes the fields described below. PRESTORE: Trigger prestore mode select. 1 = Prestore mode
(samples are written continuously to DPR while SB looks for a trigger signal) 0 = Poststore mode (samples written to DPR DELAY START samples after trigger detected). REP: Repetition mode select. 1 = Continuous mode - After a trigger signal is detected, immediately start looking for next trigger and continue writing to DPR if prestore mode enabled. STATUS always reads 1 in this mode. 0 = One shot mode - Perform one snapshot
buffering operation (during which STATUS will set to 1) and set
STATUS to zero when done.
GO: Begin snapshot buffering operation. When GO is set to 0, SB is idle and does not look for a trigger. When the MCU sets GO to 1, SB starts looking for a trigger signal and prestoring samples in DPR
(only if PRESTORE set to 1).
STATUS: Status field. 00 = SB in idle state due to GO = 0. 01 =
Waiting for trigger. Always set to 1 in continuous mode. 10 =
SB_TRIG detected in one shot mode and snapshot buffering operation complete. 11 = SD SBEVT detected in one shot mode and snapshot buffering operation complete. The SDID field indicates which pulse detector (1-4) caused the trigger.
SDID: Indicates which pulse detector caused the trigger condition.
The Dual Port RAM
The DPR 500 will be described with reference to FIGs. 13-16. Referring first to FIGs. 13 and 14, the DPR 500 is partitioned into several buffers or storage areas to store information generated by the spectrum analyzer 100, signal detector 200 and snapshot buffer 300. A power vs. frequency circular buffer (PF Buf) 510 stores real-time power vs. frequency information output by the spectrum analyzer 100. The table on the left in generally resembles the PF Buffer 510. A stats buffer 520 stores SumPwr, DutyCnt, MaxPwr and peaks statistics output by stats logic module. FIGs. 11 and 12 show represented data that is stored by the stats buffer 520. A pulse event circular buffer 530 stores pulse event data output by the signal detector 200 and a snapshot circular buffer 540 stores raw ADC samples from the snapshot buffer 300. Information is exchanged between elements ofthe SAGE 10 and the DPR 500 via the RAM interface (I/F) 550.
The DPR 500 is, for example, a 32-bit wide, synchronous DPR. Different clocks are used to drive the logic at each port. The CLK signal is used on SAGE components side and the BUSCLK signal is used on the MCU side. The DPR 500 is word addressable from the SAGE side and byte addressable from the MCU side. An AHB bus interface maps an internal MCU byte address into the corresponding
word addresses (MDADDR) and byte enable (MDBYTEN) signals attached to the
MCU side ofthe DPR.
The data structures used to manage the DPR buffers 510-540 are stored in the control registers associated with DPR. The MCU 700 is responsible for configuring the addresses and relative sizes of each buffer using these control registers after reset.
Referring to FIGs. 15 and 16, the SAGE 10 uses circular lists to manage some ofthe data stored in the DPR 500. As indicated above, buffers 510, 530 and
540 use circular lists. A circular list (Clist) consists of a list of fixed sized entries (ClistEntries) and a management structure (ClistMgt). The ClistEntries portion of the list is stored in the DPR 500. Each Clist has an associated ClistMgt structure which resides within the peripheral address space. The DPR location ofthe ClistEntries is held within ClistMgt. The entry size (ClistMgt. sizeofEntry) ofthe list is configurable. The Clist is essentially a circular buffer, i.e., a first-in-first-out (FIFO) buffer.
When performing input/output with a circular list, read and write indices are maintained to indicate the next entry to be read or written. Whenever the end of the list is reached the index is wrapped back to the starting position (i.e., circular list). Whenever a read or write index is wrapped to the starting position, a corresponding read pass number or write pass number is incremented. This combination of index and pass number is called a "position" or ClistPosition. The ClistPosition is, for example, a 32-bit quantity consisting of a 16-bit "pass" and a 16-bit "index." When the pass number is updated, the entire 32-bit ClistPosition is written out as a single "atomic" operation. Similarly, a read operation reads the entire 32-bit ClistPosition to ensure the pass number and index components are consistent when wrap occurs. The Universal Signal Synchronizer
The universal signal synchronizer 400 is useful to lock to interfering periodic signal sources. The USS 400 consists of multiple programmable clock generators referred to as USS clock modules (UCMs) 410. The MCU 700 can detect interference from a periodic signal source such as a Bluetooth™ headset, a cordless phone, etc., by examining traffic statistics gathered by the host
communication device. For example, the MAC logic 750 will accumulate traffic statistics indicating how successful the host communication device has been in transmitting to and receiving information from other devices according to a MAC protocol, such as IEEE 802.1 lx, employed by the device. Traffic statistics that may reveal the presence of an interferer are: (1 ) un-acknowledged messages; (2) repeated cyclic redundancy code (CRC) errors; (3) low received signal strength, etc. For example, the fact that several messages are sent from the device that are not acknowledged by the intended destination device is very revealing of interference in the frequency band. When the MCU determines to look for the cause ofthe interference, it configures the appropriate frequency and phase parameters corresponding to the interference source into a UCM 410, and, using pulse timing information from the signal detector 200, phase/frequency locks the UCM timing to the transmit timing for the interference source. After phase/frequency lock has taken place, the UCM can be used as a timing reference to prevent data transmissions to/from the MAC logic 750 (FIG. 1) from overlapping and interfering with data exchanges with the interference source.
A block diagram of a UCM 410 is shown in FIG. 17. A timing diagram for an exemplary interferer, such as a Bluetooth™ signal, is shown in FIG. 18. Each UCM clock interval consists of two on/off segments (on = logic 1, off = logic 0), the duration of which is specified by the DurOnl, DurOf l, DurOn2, and DurOfϊ2 registers 412, 414, 416 and 418, respectively. The two segment UCM clock scheme is used to accommodate interference sources such as Bluetooth SCO links that exchange bidirectional data using two unequally-spaced pulses, as shown in FIG. 18. A multiplexer 420 selects input from one ofthe registers 412 through 418, where selection from register 418 is via an adder 422 coupled between the register 418 and an input to the multiplexer 420.
A down counter 424 is connected to the output ofthe multiplexer 420 and counts down from the duration of each duration segment. A mod(N) counter 426 is connected to the down counter 424 and is used to reload the down counter 424 with the duration ofthe next segment after the down counter 424 counts down to zero. For the case shown, the mod(N) counter 426 is a mod4 counter. An accumulator
428 is coupled to the mod4 counter 424 and has a carry output that is coupled back to the adder 422. The most significant bit (MSB) output ofthe mod4 counter 426 is used to drive the count input ofthe accumulator 428. The accumulator 428 is a Z bit accumulator used to offset the UCM clock frequency, advancing or delaying the UCM clock by one TMR_CLK cycle every 2 /freqOffset UCM cycles, where the freqOffset parameter is configurable by the MCU via an adder 430 coupled to the accumulator 428. There is a phaseOffset register 425 and a freqOffset register 427 that the MCU writes to for the purposes explained hereinafter.
In general, the clock module comprises at least N registers, each of which stores a programmable duration value associated with one of two states of a pulse ofthe communication signal, where N is equal to 2 times the number of pulses in a cycle ofthe communication signal, and the mod(N) counter coupled to the down counter counts up to N-l by one in response to the down counter reaching zero and when reaching N-l, causing content ofthe next ofthe N registers to be loaded into the down counter. The count input ofthe Z-bit accumulator 428 is coupled to an output ofthe mod(N) counter, and the adder 430 adds an output ofthe accumulator 428 with the frequency offset value and supplies the sum to an input ofthe accumulator, wherein a carry output ofthe accumulator is coupled to the Nth register to increment or decrement the value ofthe Nth register before it is loaded into the counter, thereby extending or contracting the length of a cycle ofthe clock signal used to drive the down counter by one clock pulse every 2z/(frequency offset value) clock cycles.
A UCM TMR_CLK frequency of rMR_CLK = 2 MHz provides sub- microsecond timing granularity on the pulse duration intervals. An 18-bit register size for the duration registers 412-418 accommodates transmission frequencies as low as 10 Hz. A 16-bit (Z = 16) accumulator is suitable for the accumulator 428 to provide less than 0.01 ppm frequency resolution for a UCM clock frequency of 1 kHz. The following additional characteristics may apply to the UCM 410 shown in FIG. 17: Output frequency = f
CLκ/[(M +
~ f
CLκ/M{l-
(freqOffset/M216)}Hz, where M = DurOnl + DurOffl + DurOn2 + DurOff2. Frequency Resolution ~ fC /(M2216) Hz = 106/(M216)
Output clock frequency range: 1.9 Hz (DurOnl = DurOffl = DurOn2 =
DurOff2 = 218 - 1) to 500 kHz (DurOnl = DurOffl = DurOn2 = DurOff2 = 1)
When the MCU 700 detects and classifies a periodic interference source, it takes the following steps to lock the UCM timing to the transmission timing associated with the interference source.
First, the MCU initializes and configures a UCM 410 to the appropriate
(nominal) frequency using the DurOn and DurOff registers and it sets the content ofthe freqOffset register 425 to zero. The MCU writes values to the duration registers based on knowledge gained about the interferer from pulse events output by a pulse detector 220 (FIG. 3) and/or from snapshot buffer data supplied to the MCU that lead to the MCU determine that there is an interference event. The MCU also associates a pulse detector with the UCM 410 and configures the pulse detector to measure the phase offset between the interference source and the UCM 410. During the synchronization process, information about the timing ofthe interferer signal is obtained from pulse events generated by the assigned pulse detector, and the MCU compares them against the duration values written into the duration registers. The pulse events include the count values ofthe down counter and the mod(N) counter at the detection of a pulse, as described above in connection with the description ofthe signal detector. The MCU examines the count values ofthe down counter and the mod(N) counter to measure a phase error between the clock signal that drives the down counter and the occurrence ofthe pulse ofthe communication signal. The MCU removes the initial phase offset/error between the UCM 410 and the interference source by loading a phase adjustment value into the PhaseOffset register 425. This causes the UCM 410 to retard the phase by the value specified in the PhaseOffset register 425 the next time the down counter 424 and mod4 counter 426 cycle to zero.
After removing the initial phase offset, the MCU periodically monitors the phase count values ofthe down counter and the mod(N) counter in the pulse event data to measure the phase error. The MCU generates a frequency offset between the interference source (from the pulse detector) and the UCM clock and updates the FreqOffset register 427 to compensate for frequency drift between the two
signals. A block diagram of an update technique using a second order phase lock loop (PLL) is shown in FIG. 19, which will be described hereinafter. The MCU writes a value into the FreqOffset register that causes the accumulator 428 to retard or advance (depending on the sign ofthe adder 422) the frequency a certain number of times per UCM clock cycles.
When the phase offset samples converge to zero, the UCM is said to be phase/frequency locked to the interference source. Once the loop is locked, the
MCU may let the UCM clock "flywheel" for a period of time without monitoring the phase offset from the interference source. The MCU may continue to periodically monitor the phase offset and update the loop parameters since the clocks will eventually drift (primarily due to temperature changes in the near and far end reference oscillators). A good rule of thumb to use for estimating the drift rate in this case is 1/2 microsecond per second, assuming an oscillator with +/- 20 ppm of variation over 70 degrees C (4/7 ppm per degree C), and 3 degrees F = 1.7 degrees C temperature variation over 5 minutes (due to air conditioner hysteresis, etc.).
Reference is now made to FIG. 19, which shows a process 440 useful by the MCU to update for clock drifts. The process 440 updates the frequency offset between the clock ofthe interfering signal and the local clock operating the UCM. Step 442 represents the pulse detector 220, associated with the particular interfering signal, generating phase information by reading the states of down counter 424 and mod(N) counter 426, and step 444 represents retrieving of information from the pulse event circular list in the pulse event buffer 530 ofthe DPR 500. Multiple pulse events from the signal detector 200 may be buffered up in the DPR 500 before the MCU has time to retrieve them. Next, in step 446, the phase detection information is updated depending on the value ofthe down counter 424 relative to the value ofthe DurOnl register 412. If the down counter value 424 is less than the value of DurOnel divided by 2, then the phase detection information is set equal to the value ofthe down counter 424. Otherwise, the phase detector information is set equal to the value ofthe down counter 424 less the value ofthe DurOnl register 412. In step 448, output of step 446 is averaged to reduce noise effects. Next, a filter or phase-lock-loop (PLL) process 449 is performed to lock to
the phase and frequency ofthe interfering signal clock. Any suitable first-order or second-order filtering or PLL process can be used. FIG. 19 shows a second order PLL process comprising two scaling operations 450 and 452, an adder 454, a z"1 block 456 and an accumulator 458. The parameters kl and k2 are PLL constants that depend on the UCM clock rate and a buffering factor ofthe pulse event circular list in the DPR. The output ofthe process 440 is a frequency offset value that is stored for later use in synchronizing to the near clock and the far-end clock (that ofthe particular interfering signal). Once the frequency offset value is computed, the interfering signal can be ignored for a period of time, and the UCM can more quickly lock to the interfering signal by loading the stored frequency offset (FreqOffset) into the FreqOffset register 427 ofthe UCM as shown in FIG. 17.
Examples ofthe registers used to control and monitor a UCM 410 from the MCU are described below. DURON 1 : Duration in TMR_PULSE cycles of first "on" interval of a UCM clock cycle. The MCU may update this value anytime (regardless of whether the UCM is enabled). DUROFF 1 : Duration in TMR PULSE cycles of first "off" interval of a UCM clock cycle. The MCU may update this value anytime (regardless of whether the UCM is enabled).
DURON2: Duration in TMR PULSE cycles of second "on" interval of a UCM clock cycle. The MCU may update this value anytime (regardless of whether the UCM is enabled). DUROFF2: Duration in TMR_PULSE cycles of second "off interval of a UCM clock cycle. The MCU may update this value anytime (regardless of whether the UCM is enabled). FREQOFFSET: Creates a frequency offset of (FTMR_PULSE*FREQOFFSET) / (M2*216) Hz relative to the nominal clock frequency (FTMR_PULSE/M) on the UCM clock. The CNTRL.FOFFSET bit specifies the sense ofthe offset. If
CNTRL.FOFFSET = 1, a positive frequency offset is applied, otherwise a negative frequency offset is applied (a positive
frequency offset corresponds to a higher-than-nominal UCM clock frequency). The MCU may update this value anytime (regardless of whether the UCM is enabled).
PHASEOFFSET: Retards the phase ofthe UCM clock by PHASEOFFSET TMR_PULSE cycles by loading the value
PHASEOFFSET into the Down Counter at the end ofthe next
Durl Off interval. The phase adjustment is made once each time the
PHADJUST bit in the CNTRL register is set.
MINGAP: If the time between two consecutive interference events on the UCM signals specified by USS SELECT is less than
MINGAP TMR_PULSEs, the USS will merge the two events and report on them as if they were one interference event spanning both interference pulse durations. DOWNCTR: Contents of UCM down counter register (updated once per TMR PULSE)
The fields ofthe control register for a UCM are defined below. ENABLE: UCM enable. Setting the ENABLE bit for 1 TMR_PULSE cycle causes the clock to start counting in the Durl Off state. Clearing ENABLE for 1 or more TMR_PULSEs causes the UCM clock to stop counting.
PHADJUST: Writing a 1 to this bit causes the UCM to retard its clock phase by PHASEOFFSET TMR_PULSE cycles by loading the value PHASEOFFSET into the Down Counter at the end ofthe next Durl Off clock segment. The UCM clears this bit after the phase change has taken place.
FOFFSET: Specifies whether a positive or negative frequency offset is to be applied using the FREQOFFSET field. 1 = Positive frequency offset applied. 0 = negative frequency offset applied MOD4CT: Contents of Modulo 4 counter The USS 400 passes UCM timing information to an external component, such as the MAC logic 750, using the NEXTINTFDUR and NEXTINTFTIME signals described hereinafter. The USS_SELECT signals, also described in the
table above, allow for selection of which UCMs to include in next event calculation.
Other Interfaces to the SAGE With reference to FIG. 1, other interfaces to the SAGE 10 will be described.
The global timer interfaces (GTI) are used by the spectrum analyzer 100 and signal detector 200 to timestamp transmission events in the sampled frequency band. The GTI comprises, for example, the timestamp signal (TMR TSTMP) and a global timer clock signal (TMR PULSE), where TMR PULSE = 1 on the positive edge of BUSCLK indicates a new value of TMR_TSTMP. The GTI logic runs at the BUSCLK clock frequency. The TMR TSTMP field is updated periodically, such as at 2 MHz, during BUSCLKs in which TMR_CLK = 1.
The SAGE 10 communicates timing information for periodic interference sources (such as Bluetooth headsets or cordless phones) to another hardware element (external to the SAGE 10), such as the MAC logic 750. There are primarily three MAC interface signals, USS_SELECT, NEXTINTFDUR and NEXTINTFTIME. NEXTINTFDUR is the duration in TMR_PULSEs ofthe next interference event among the selected UCM clocks via USS SELECT. The interference condition is said to be active (due to an interferer's transmission) when any ofthe selected UCM clocks is high. When all ofthe selected interference sources are inactive (i.e., all UCM clocks are low), NEXTINTFDUR indicates the duration ofthe next interference event in TMR_PULSEs. When at least one ofthe interference sources is active, NEXTINTFDUR indicates the time in TMR_PULSEs until the end ofthe current interference transmission, and is updated once per TMR_PULSE.
NEXTINTFTIME is the time remaining in TMR_PULSEs until the next interference event among the selected UCM clocks via USS SELECT. The interference condition is said to be active (due to an interferer's transmission) when any ofthe selected UCM clocks is high. When all ofthe selected interference sources are inactive, NEXTINTFTIME indicates the time until the next interference event and is updated once per TMR_PULSE. When at least one ofthe interference sources is active, NEXTINTFTIME reads zero.
USS_SELECT is a signal that selects which USS UCMs 410 to include in the next interference event calculations, as reported to the MAC logic 750 through the NEXTINTFXXX signals. USS_SELECT[i] = 1 means include UCM(i) in the calculation. Examples of MCU interface signals are described below. Some of these signals are identified in FIGs. 1, 3 and 6.
ADDR: Control register word address
BUSCLK: Clock used to control the MCU side ofthe DPR, USS,
Lower MAC and Global Timer interfaces: IRQ: Level-triggered interrupt request to MCU. Whenever an enabled interrupt condition becomes active, SAGE 10 asserts an interrupt to the MCU by setting IRQ to 0. The MCU clears the interrupt by clearing the appropriate bits in the IF register. SAGE automatically sets IRQ to 1 when all active interrupt conditions have been cleared in the IF register.
MDADDR: DPR word address - MCU side
MDBYTEEN: DPR byte enable - MCU side
MDRD: DPR read strobe - MCU side MDRDATA: DPR read data - MCU side
MDWR: DPR write strobe - MCU side
MDWDATA: DPR write data - MCU side
RD: Control register read strobe
RDATA: Control register read data SDADDR: DPR word address - SAGE side
SDRD: DPR read strobe - SAGE side
SDRDATA: DPR read data - SAGE side
SDWR: DPR write strobe - SAGE side
SDWDATA: DPR write data - SAGE side WR: Control register write strobe
WD ATA: Control register write data
Operation and Uses ofthe SAGE
With reference to FIG. 20, one example of how the SAGE 10 may be operated is described. The SAGE 10 may reside in a communication device that comprises the radio transceiver 600 and a MCU 700. In addition, for higher level processing, a host processor 900 may also be provided that is coupled to the MCU
700. The MCU 700 and host processor 900 may share responsibility for configuring the SAGE 10 and the radio transceiver 600. The host processor 900 may be responsible for more complex functions. However, it should be understood that the functions ofthe MCU 700 and the host processor 900 may be executed by a single processor of suitable processing capability and power consumption characteristics. The radio transceiver 600 is shared by the SAGE 10 and other communication device functions, such as receiving signals from or transmitting signals to another communication device. The receiver ofthe radio transceiver 600 cannot be used by the SAGE 10 when the communication device is receiving a signal, and in some cases, the same is true when the communication device is transmitting a signal to another device.
There are many ways to employ the features and functions ofthe SAGE 10, some examples of which are explained. The MCU 700 or the host processor 900 may be programmed to configure the receiver portion ofthe radio transceiver 600 to operate in a wideband mode, thereby sampling activity in an entire frequency band for a time period, such as 100 msec or longer. In addition, the MCU 700 or host processor 900 may configure certain basic parameters ofthe SAGE 10, such as the decimator factor, the cycle count ofthe number of spectrum analyzer updates (i.e., FFT intervals) before forwarding the stats to the MCU 700, the minimum power threshold for duty counting, the lowpass filter parameter ofthe spectrum analyzer. The receiver portion ofthe radio transceiver 600 may also be configured to operate in a narrowband mode at a configurable center frequency.
While the radio transceiver 600 is operated in a wideband mode, the SAGE 10 is activated to "sniff" the spectrum with the spectrum analyzer component ofthe SAGE 10. The spectrum analyzer stats, such as those shown in FIGs.11 and 12, are accumulated in the DPR and read by the MCU 700 and further processed by the host processor 900. During this sniff mode, the pulse detectors ofthe signal
detector component may be configured in a default mode to look for signal pulses of commonly expected signals in the frequency band. In the case of an unlicensed frequency band, such signals may include an IEEE 802.11 signal, a cordless phone signal, or a Bluetooth™ frequency hopping signal. Alternatively, during the sniff mode the output ofthe pulse detectors may be completed ignored and the spectrum analyzer stats processed to determine generally what is happening in the frequency band. Based on intelligence gathered by the spectrum analyzer stats generated from the sniff mode, the host processor 900 or MCU 700 may configure one or more pulse detectors ofthe SAGE 10 to look for certain types of signal pulses in the frequency band using the pulse detector configuration parameters described above.
Still another possibility is to iteratively change the configuration of one or more pulse detectors so as to cycle through pulse detector configurations over time. For example, the center frequency, bandwidth, pulse duration and/ or time between pulses parameters can be changed to process incoming signal data. The incoming signals are processed during each cycle with the one or more pulse detectors. Eventually, by cycling through different pulse detector configurations, the goal is to eventually find a pulse detector configuration that fits the type of signal activity occurring in the frequency band. This is useful, for example, in a signal classification process.
Further operation ofthe SAGE to gather output from the signal detector may occur while the radio is in a wideband mode or a narrowband mode, depending on the demands ofthe radio for communication services and the type of signals suspected to be present in the frequency band. Whether configured based on information gathered from a sniff mode, or operated using predetermined configuration information, the pulse detectors will generate pulse event information that is output to the MCU 700, together with spectrum analyzer stats and any snapshot buffered data. In addition, the universal signal synchronizer component ofthe SAGE 10 may be operated by the MCU to synchronize to the clocks of potentially interfering communication signals in the frequency band. This synchronization information can be used in an interference mitigation or coexistence algorithm executed by the MCU 700 or the host processor 900 to
schedule transmissions by the communication device so as to avoid collisions with other communication signals in the frequency band.
In addition, the output ofthe SAGE 10 can be used in a signal classification process to identify/classify signals in a frequency band, such as for example: a wireless headset operating with a frequency hopping communication protocol (e.g., Bluetooth™); wireless file/print services; radar systems; microwave ovens, an IEEE 802.11 wireless local area network; a HomeRF™ network; a frequency hopping cordless phone; an analog cordless phone; wireless infant/security monitors; devices operating using the IEEE 802.15.3 communication protocol. A signal classification process is disclosed in the aforementioned commonly assigned patent application.
FIG. 21 illustrates an exemplary block diagram of a device, called a spectrum sensor, which employs the SAGE 10. The spectrum sensor is a device that receives signals in the frequency band of interest. In this sense, the spectrum sensor is a spectrum monitor of a sort. The spectrum sensor comprises at least one radio receiver capable of downconverting signals in the frequency band of interest, either in a wideband mode or scanning narrowband mode. It is possible, as shown in FIG. 21, that the spectrum sensor comprises one or more radio receivers 610 and 620 (dedicated to different unlicensed bands) or a single dual band radio receiver. There is an ADC 640 that converts the output ofthe radio receiver to digital signals that is then coupled to the SAGE 10. A DAC 650 may be useful to supply control signals to the radio receiver via a switch 630.
An interface 570, such as a Cardbus, universal serial bus (USB), mini-PCI, etc., interfaces the output ofthe SAGE 10 to a host device 3000 or another device. In addition, there may be an optional embedded processor 572 to perform local processing, an Ethernet block 574 to interface to a wired network, FLASH memory 576 and SDRAM 578. There are also an optional lower MAC (LMAC) logic block 4080 associated with a particular communication protocol or standard ("protocol X") and a modem 4090 associated with protocol X. Protocol X may be any communication protocol that operates in the frequency band, such as an IEEE 802.1 lx protocol. Multiple protocols may be supported by the device. Many of the blocks may be integrated into a gate array ASIC. The larger block around the
radio(s) and other components is meant to indicate that the spectrum sensor device may be implemented in a NIC form factor for PCI or mini-PCI deployment.
Alternatively, many of these components, save the embedded processor, may be implemented directly on a processor/CPU motherboard. The host device 3000 may be a computer (e.g., PC) having a processor
3002 and memory 3004 to process the spectrum activity information supplied by the spectrum sensor via a wired network connection, USB connection, or even a wireless connection (such as an 802.1 lx wireless network connection). The memory 3004 may store software to enable the host processor 3002 to execute processes based on the output ofthe SAGE 10, including signal classification, location measurement, etc., as further described hereinafter. A display monitor
3010 may be coupled to the host device 3000. The host device 3000 may be a desktop or notebook personal computer or personal digital assistant, or any other computer device local to or remote from the spectrum sensor. The memory 3004 in the host device may also store driver software for the host device, such as drivers for operating systems such as Windows operating systems (Windows® XP,
Windows® CE, etc.).
Either the embedded processor 4040 or the host processor 3002 may implement upper MAC logic associated with Protocol X. For example, if Protocol X is an IEEE 802.1 lx protocol, the processor 404 or processor 3002 may generate
802.11 statistics.
Examples of IEEE 802.11 MIB Global Extensions that may be provided are: Rx Bad Ver/Type; Rx Too Long; Rx Bad Multicast; Rx Self; Rx CTS other
STA; Rx CTS Unexpected; Rx Ack other STA; Rx ACK Unexpected; Channel Rx Time; Tx Opps Skipped; Channel Tx Time; Tot/Num Deferrals; Num Deferrals;
Rx CCA (802.11 , non); Rx Filtered by Cause; Rx Forwarded by Type; Rx No
Buffer; Tot Chan CCA; and Tot Chan Idle.
Examples of IEEE 802.11 MIB Extensions that maybe provided for STAs are: Tot Chan Disable Time Last Rx Tx; Rx Undefined Key; Rx RTS other STA; Rx CTS expected; Tx ACK/CTS; Tx Dropped (retries); Rx Timeout ACK/CTS; Rx
ACK frags; Retry Attempt Histogram; Tx Size PER Histogram; Rx CRC for
CTS/ACK; and Rx Too Small; Rx ACK Expected.
Still another variation is to implement the functions ofthe SAGE 10 in software on the host processor 3002. The output ofthe ADC 640 of any one or more device(s) operating in the frequency band (particularly those devices having a wideband capable radio receiver) can be supplied to a host processor where the SAGE and other functions described herein are performed entirely in software, such as the measurement engine, classification engine, etc. For example, the output ofthe ADC 640 may be coupled across any one ofthe interfaces shown in FIG. 21 to the host processor 3002.
The spectrum sensor may be deployed in any device that resides in a region where operation in an unlicensed or shared frequency band is occurring. For example, it can reside in a consumer device such as a camera, home stereo, peripheral to a PC, etc. Any other device connected to a spectrum sensor may obtain the spectrum knowledge that the spectrum sensor acquires.
Referring first to FIG. 22, an environment is shown where there are signals of multiple types that may be simultaneously occurring. For example, at some point in their modes of operation, there are multiple devices that may transmit signals within a common frequency band. When these devices are sufficiently close in proximity to each other, or transmit signals at sufficiently high power levels, there will inevitably be interference between signals of one or more devices. The dotted-line shown in FIG. 22 is meant to indicate a region where activity from any ofthe devices shown may impact other devices. FIG. 22 shows a non- exhaustive exemplary selection of devices that may operate in an unlicensed frequency band, including cordless phones 1000, frequency hopping communication devices 1010, microwave ovens 1020, A wireless local area network (WLAN) comprised of a WLAN station (STAl) 1030 and a WLAN STA2 1040 associated with a WLAN access point (AP) 1050, infant monitor devices 1060 as well as any other existing or new wireless devices 1070. The WLAN AP 1050 may be connected to a wired network (e.g., Ethernet network) to which also connected is a server 1055 computer that exchanges data with the WLAN STAs 1030 and 1040 using, for example, an IEEE 802.1 lx communication standard. Cordless phones 1000 may be analog, digital and frequency hopping devices, depending on the type. Frequency hopping communication devices 1010 may
include devices operating in accordance with the Bluetooth™ wireless communication protocol, the HomeRF™ wireless communication protocol, as well as cordless phones. In addition, radar devices 1080 may operate in an unlicensed frequency band. Finally, there may be one or several spectrum sensor devices 1200, 1210 and 1220 that are positioned at various locations in the frequency band and include the SAGE to monitor activity in the frequency band. Any one or more ofthe other devices shown in FIG. 22 may also include the SAGE, such as a
WLAN STA or WLAN AP.
Also shown in FIG. 22 is a network management station 1090 that may play a role in the spectrum management system described hereinafter. The network management station 1090 need not physically reside in the region where the other devices are operating. The network management station 1090 may be connected to the same wired network as the server 1055 and may receive spectrum activity information from the WLAN AP 1050 and or from a spectrum sensor 1210. The network management station 1090 has, for example, a processor 1092, a memory 1094 that stores one or more software programs executed by the processor and a display monitor 1096. The network management station 1090 may also execute one or more software programs that manage wired networks as well as wireless networks. Currently, in the United States, the unlicensed frequency bands are in the
Industry, Scientific and Medical (ISM) and UNII frequency bands, and include an unlicensed frequency band at 2.4 GHz and unlicensed frequency bands at or near 5GHz. These are only examples of existing unlicensed bands. In other countries, other portions ofthe spectrum have been, or may be, set aside of unlicensed use. By definition, an "unlicensed" frequency band generally means that no one user has any preferred rights to use that frequency band over another. No one party has purchased exclusive rights to that spectrum. There are a set of basic power and bandwidth requirements associated with the unlicensed band, but any user that operates within those requirements is free to use it at any time. A consequence of the "unlicensed" character of these frequency bands is that devices operating in them will inevitably interfere with the operation of each other. When interference occurs, a signal from one device to another may not be received properly, causing
the sending device to retransmit (and therefore reducing throughput), or possibly entirely destroying the communication link between two communication devices.
Moreover, because these frequency bands are free to use, the zero-cost encourages more applications and users ofthe unlicensed band, which in turn, will make it more crowded and more susceptible to interference. There is, therefore, a need to manage the operation of devices operating in an unlicensed frequency band to ensure efficient and fair usage by all users.
FIG. 23 is diagram illustrating how the SAGE 10 may be part of a larger spectrum management system. The SAGE 10 in cooperation with the radio 600 generates spectrum activity information that is used by one or more software programs. SAGE drivers 5000 are used by the one or more software applications to configure and access information from the SAGE 10. Examples of software the software programs that may use information from the SAGE 10 including a measurement engine 5100, a classification engine 5120, a location engine 5130 and a spectrum expert 5140. These processes may be executed by an embedded processor or host processor (see FIG. 21). Controls generated by the spectrum expert 5140, network expert 5210 or other applications are coupled to a device through the spectrum aware drivers 5020, which in turn may control the baseband signal processing (e.g., modem) 5010 and/or the radio 600. At still a higher level above these software programs may be higher level application services 5200, such as user interface applications, network management applications, etc. A network spectrum interface (NSI) 5150 serves as an application programming interface between the higher level application services 5200 and the processes on the other side ofthe NSI 5150. The measurement engine 5100 collects and aggregates output from the
SAGE 10 and normalizes the data into meaningful data units for further processing. Specifically, the measurement engine 5100 accumulates statistics for time intervals of output data from the SAGE 10 to track, with respect to each of a plurality of frequency bins that span the frequency band, average power, maximum power and duty cycle. In addition, the measurement engine 5100 accumulates pulse events for signal pulses output by the SAGE that fit the configured criteria. Each pulse event may include data for power level, center frequency, bandwidth, start time, duration
and termination time. The measurement engine 5100 may build histograms of signal pulse data that are useful for signal classification. Finally, the measurement engine 5100 accumulates raw received signal data (from the snapshot buffer ofthe SAGE 10) useful for location measurement in response to commands from higher levels in the architecture. The measurement engine 5100 may maintain short-term storage of spectrum activity information. Furthermore, the measurement engine 5100 may aggregate statistics related to performance of a wireless network operating in the radio frequency band, such as an IEEE 802.11 WLAN. In response to requests from other software programs or systems (via the network spectrum interface described hereinafter), the measurement engine 5100 responds with one or more of several types of data generated by processing the data output by the SAGE 10.
The classification engine 5120 compares the outputs ofthe SAGE 10 against data templates and related information of known signals in order to classify signals in the frequency based on energy pulse information detected by the SAGE. The classification engine 5120 can detect, for example, signals that interfere with the operation of one or more devices (e.g., occupy or occur in the same channel of the unlicensed band as a device operating in the band). The output ofthe classification engine 5120 includes classifiers of signals detected in the frequency band. A classification output may be, for example, "cordless phone", "frequency hopper device", "frequency hopper cordless phone", "microwave oven", "802.1 lx WLAN device", etc. The classification engine 5120 may compare signal data supplied to it by the measurement engine against a database of information of known signals or signal types. The signal classification database may be updated for new devices that use the frequency band. In addition, the classification engine 52 may output information describing one or more ofthe center frequency, bandwidth, power, pulse duration, etc. ofthe classified signal, which is easily obtained directly from the signal detector output ofthe SAGE. This may particularly useful for a classified signal that is determined to interfere with operation of other devices in the frequency band.
Examples of signal classification techniques are described in commonly assigned co-pending U.S. Application No. 10/246,364, filed September 18, 2002,
entitled "System and Method for Signal Classification of Signals in a Frequency
Band," the entirety of which is incoφorated herein by reference. These signal classification techniques that may be used are based on pulse histograms, pulse time signatures and other custom algorithms, examples of which are described in the aforementioned pending patent application. It should be understood that other signal classification techniques may be used with the output ofthe SAGE 10.
The location engine 5130 computes the physical location of devices operating in the frequency band. One example of a location measurement technique involves using snapshot buffer data collected by the measurement engine 5100 to perform time difference of arrival measurements at known locations of a signal transmitted by the device to be located and another reference signal to determine a location of a variety of devices (such as interferers) operating in the region ofthe frequency band. Sometimes simply moving an interferer to a different location can resolve transmission problems that another device or network of devices may be experiencing. The location engine 5130 may coordinate measurements obtained from multiple locations in the network. An example of a location engine is disclosed in commonly assigned co-pending U.S. Application No. 60/319,737, filed November 27, 2002, entitled "System and Method for Locating Wireless Devices in an Unsynchronized Wireless Network," the entirety of which is incorporated herein by reference.
Many other techniques to determine the location of wireless radio communication devices are known in the art and may be used as well. The location engine 5130 may alternatively reside in software "above" the NSI 5150. When an interference condition in the frequency band is detected, the spectrum expert 5140 may command the location engine 5130 to locate the source ofthe interferer. The output ofthe location engine 5130 may include position information, power level, device type and/or device (MAC) address. In addition, a network security application below or above the NSI may command the location engine 5130 to locate a rogue device that may present a possible security problem. The spectrum expert 5140 is a process that optimizes operation of devices operating in the frequency band, given knowledge about the activity in the frequency band obtained by the measurement and classification engines. For
example, the spectrum expert 5140 processes data from the SAGE 10 and optionally statistics from a particular wireless network operating in the frequency band, such as an IEEE 802.1 lx network, in order to make recommendations to adjust parameters of a device, or to automatically perform those adjustments in a device. The spectrum expert 5140 may be a software program that is executed, for example, by a network management station. Parameters that can be adjusted
(manually or automatically) based on output ofthe spectrum expert 5140 include frequency channel, transmit power, fragmentation threshold, RTS/CTS, transmit data rate, CCA threshold, interference avoidance, etc. Example of interference mitigation techniques are described in commonly assigned and co-pending U.S. Application No. 10/248,434, filed January 20, 2003, and entitled "Systems and Methods for Interference Mitigation with Respect to Periodic Interferers in Short- Range Wireless Applications," the entirety of which is incoφorated herein by reference. The spectrum expert 5140 may operate on triggers for alert conditions in the frequency band, such as detection of a signal that interferes with the operation of a device or network of devices operating in the frequency band, to automatically report an alert, and/or adjust a parameter in a device in response thereto. For example, the spectrum expert 5140 may operate to control or suggest controls for a single WLAN AP. The NSI 5150 may be fransport independent (e.g., supports Sockets, SNMP,
RMON, etc.) and parses spectrum information into sub-sections for session and radio control, measurement, events (classification), location and protocol specific enhanced statistics and controls. End user on-demand commands to check the spectrum knowledge or activity information at a particular device may be received from an application residing above the NSI 5150 and translated into a request for a particular process below the NSI 5150 to supply the requested information. The higher level application services 5200 may include software and systems that perform broader analysis of activity in a frequency band, such as managing multiple WLANs, managing a WLAN associated with one or more wireless LANs, network security for both wired and wireless LANs, etc. These applications may call upon the services of any one or more ofthe software processes shown on the other side of the NSI 5150. For example, there may be a
network expert 5210, security services 5220, location services 5230, user interfaces
5240, and systems integrations 5250 to integrate the lower level processes with other applications, such as a network management application 5260. For example, the network management application 5260 may be executed by the network management station 1090 that is located in a central monitoring or control center
(telephone service provider, cable Internet service provider, etc.) coupled to the sensor devices, APs, etc., as well as the devices which it confrols (e.g., APs) via a wide area network (WAN) connection, e.g., the Internet, a dedicated high speed wired connection, or other longer distance wired or wireless connection. An example of a security application use ofthe SAGE 10 is to identify a particular device for security puφoses based on its pulse signature. For example, a network management system may manage a wireless network, such as an IEEE 802.11 network. Security ofthe wireless network is one function ofthe network management system. Each device authorized to operate in the wireless network may be assigned an address used to associate and operate in the network. An IEEE 802.11 access point (AP) may also require authorization to operate. Whenever a device goes active in the wireless network, whether it is a station (STA) or AP, its pulse characteristics are captured when it transmits (by a device operating in the network having a SAGE 10) to verify whether it is an authorized device (i.e., not a fraudulent device masquerading as an authorized device). These characteristics may include very specific pulse duration, pulse bandwidth, pulse power, etc. that may uniquely identify each device. The network management system may store a database of pulse characteristics against addresses (e.g., MAC addresses or IP addresses) for each device. When a device transmits, it will inevitably include an address that is recognized by an AP in the network. The pulse characteristics (captured by a SAGE enabled device, such as an AP operating in the band) associated with a signal transmitted by a device on an address are compared to the data in the database for that address. If there is a substantial match, the device is said to be authorized. If there is not a match, the device is declared to be unauthorized and steps can be taken to investigate that device further.
Consequently, a fraudulent device masquerading as a valid device under a valid address can be detected.
Spectrum Activity Information and Accessing it Using the NSI
The measurement engine 5100, classification engine 5120, location engine
5130 and spectrum expert 5140 perform spectrum analysis functions and generate information that may be used by application programs or systems that access these functions through the NSI 5150. The NSI 70 may be embodied by instructions stored on a computer/processor readable medium and executed by the processor
(server 1055 or network management station 1090) that executes the one or more application program or systems. For example, this processor would execute instructions for an NSI "client" function that generates the request and configurations for spectrum analysis functions and receives the resulting data for the application program. The processors) that execute(s) the measurement engine, classification engine, location engine and/or spectrum expert will execute instructions stored on an associated computer/processor readable medium (shown in FIGs. 20-22) to execute an NSI "server" function that responds to requests from the NSI client to generate configuration parameters and initiate spectrum analysis functions by the measurement engine, classification engine, location engine and/or spectrum expert to perform the requested spectrum analysis function and return the resulting data. The measurement engine may in turn generate confrols for the SAGE drivers 5000 to configure the SAGE 10 and/or radio 600. It should be further understood that the classification engine, location engine and spectrum expert can be viewed as a client to the measurement engine and would generate requests to, and receive data from, the measurement engine similar to the manner in which an application program would interact with the measurement engine. Further still, the spectrum expert can be viewed as a client to the classification engine and location engine and request analysis services of those engines.
The NSI 5150 may be transport independent (e.g., supports Sockets, SNMP, RMON, etc.) and may be designed for implementation in a wired or wireless format, such as by TCP/IP traffic from an 802.11 AP to a PC which is running software designed to accept the traffic for further analysis and processing. The TCP/IP traffic (or traffic using some other network protocol) could also be carried by a PCI bus inside a laptop PC, provided the PC has built-in 802.11 technology, or
an 802.11 NIC. If the source ofthe spectrum information data stream is a TCP/IP connection, the application program would implement a socket, and access the correct port, to read the data stream. A sample of typical code for this puφose is shown below. (The sample is in Java, and shows client-side code.) Once the port connection to the data stream is established, the use ofthe data stream is determined by the network management software itself.
The class DatalnputStream has methods such as read. The class DataOutputStream allows one to write Java primitive data types; one of its methods is writeBytes. These methods can be used to read data from, and write data to, the NSI 5150.
If the transport ofthe data stream occurs over other low-level media, other methods are used to access the data stream. For example, if the data is carried over a PC's PCI bus, a PCI device driver will typically provide access to the data.
The information provided by the NSI to an application program corresponds to data generated by the measurement engine 5100 (through the SAGE), classification engine 5120, location engine 5130, and/or the spectrum expert 5140.
In acting as the API, the NSI has a first group of messages that identify (and initiate) the spectrum analysis function (also called a service or test) to be performed and provide configuration information for the function. These are called session control messages and are sent by the application program to the NSI. There is a second group of messages, called informational messages, that are sent by the NSI (after the requested spectrum analysis functions are performed) to the application program containing the test data of interest.
Most ofthe spectrum analysis functions (i.e., tests) have various configuration parameters, which are sent via session control messages, and which determine specific details ofthe test. For example, in monitoring the spectrum, session control messages tell the NSI how wide the bandwidth should be (narrowband or wideband), and the center frequency of the bandwidth being monitored. In many cases, detailed test configuration parameters for a spectrum analysis function can be omitted from the session control messages. In those cases, the NSI uses default settings.
Examples of spectrum analysis functions that the measurement engine 5100 (in conjunction with the services ofthe SAGE 10) may perform, and the resulting data that is returned, include:
Spectrum Analyzer Power vs. Frequency Data. This data describes the total power in the spectrum as a function of frequency, over a given bandwidth.
Spectrum Analyzer Statistics Data. This data provides a statistical analysis ofthe data in RF power vs. frequency measurements.
Pulse Event Data - This data describes characteristics on individual RF pulses detected by the SAGE 10. The characteristics for (and thus the types of pulses) detected by the SAGE 10 can be configured.
Pulse Histogram Data. This data describes the distribution of pulses per unit of time, in terms ofthe percentage of pulses distributed among different frequencies, energy levels, and bandwidths.
Snapshot Data. This data contain portions of raw digital data ofthe RF spectrum captured by the snapshot buffer ofthe SAGE 10. The data can help identify the location of devices, and can also be used to extract identifier information which can determine the brand of certain devices operating in the frequency band, for example. Snapshot data may also be useful for signal classification.
The classification engine 5120 may perform spectrum analysis functions to determine and classify the types of signals occurring in the frequency band, and together with optional recommendation or descriptive information that may be provided by the classification engine or spectrum expert 5140, the resulting data that is returned are called spectrum event data, which describe specific events, such as detecting a particular signal type as going active or inactive in the frequency band. The spectrum expert 5140, as well as the network expert 5120 and other applications or processes may use the output ofthe classification engine 5120. There are numerous ways to format the NSI messages to provide the desired
API functionality in connection with the spectrum analysis functions. The following are examples of message formats that are provided for the sake of completeness, but it should be understood that other API message formats may be used to provide the same type of interface between an application program and spectrum analysis functions pertaining to activity in a frequency band where signals of multiple types maybe simultaneously occurring.
A common message header may be used by both session control messages and information messages. The common header, called the sml StdHdr_t header, comes at the very beginning of all messages and provides certain general identifying information for the message. An example ofthe general format ofthe common header is explained in the table below.
Informational messages are started with two headers: the common header (smlStdHdr t), followed by the Info Header (smllnfoHdrJ). The smllnfoHdrJ header provides specific identifying parameters for information messages:
A summary of all the messages that may be sent via the NSI is contained in the table below. The numeric values in the table below correspond to the values that are used in the msgType sub-field ofthe sml StdHrdJ field.
Examples of informational messages, which as suggested above, are NSI formatted versions ofthe output ofthe measurement engine 5100 and classification engine 5120, and optionally the spectrum expert 5140, are described.
Spectrum Analyzer Power vs. Frequency Data
The SAGE 10 will analyze a frequency band centered at a frequency which may be controlled. Moreover, the bandwidth ofthe frequency band analyzed may be controlled. For example, a portion, such as 20 MHz (narrowband mode), of an entire frequency band may be analyzed, or substantially an entire frequency band may be analyzed, such as 100 MHz (wideband mode). The selected frequency band, is divided into a plurality of frequency "bins" (e.g., 256 bins), or adjacent frequency sub-bands. For each bin, and for each sample time interval, a report is made from the output ofthe SAGE 10 on the power detected within that bin as measured in dBm. The measurement engine 5100 supplies the configuration parameters to the SAGE drivers 15 and accumulates the output ofthe SAGE 10 (FIG. 1).
FIG. 24 (also described further hereinafter) illustrates a graph that may be created from power measurements taken at a given time interval. In the illustration, the vertical bars do not represent the distinct frequency bins. Of the two jagged lines shown in FIG. 24, the lower line represents a direct graph ofthe data in a single snapshot ofthe spectrum at a given instant in time. It corresponds to the data in one, single sapfLisfEntries field, described below. However, a spectrum analysis message may contain multiple sapfListEntries fields; each such field corresponding to a single snapshot ofthe spectrum. The upper jagged line was constructed by a software application. It represents the peak values seen in the RF spectrum over the entire testing period to the present instant.
An example ofthe structure ofthe spectrum analyzer power vs. frequency data is as follows.
In the second standard header, the msgType is 46 to identify the message as an informational message, and the sessType is 10 (SM L1 SESS SAPF) to identify that data results from a session that is a spectrum analyzer power vs. frequency test.
The field below is the standard information header for spectrum analyzer power vs. frequency data.
This field smlSapfMsgHdr t below describes the frequency spectrum that is being monitored. While this message provides the center frequency and the width ofthe bins, it may not provide the total bandwidth being measured. This can be calculated (low end = frqCenterkHz - 128 * binSize, high end = frqCenterkHz + 128 * binSize. The radio receiver being used to monitor the bandwidth need not actually span the full bandwidth. As a result, some ofthe frequency bins at either end ofthe spectrum will typically show zero (0) RF power.
For a single snapshot ofthe RF spectrum at a moment in time, the sapfListEntries field explained below contains the information of primary interest, namely, the power level in dBm for each ofthe frequency bins.
The frequency range corresponding to bin "N", where N goes from 0 to
255, is given by:
LowFrequency[N] = smlSapfMsgHdrJ.frqCenterkHz
+ (N - 128) * smlSaρfMsgHdrJ.binSizekHz HighFrequency[N] = smlSapfMsgHdrJ.frqCenterkHz + (N - 127) * smlSapfMsgHdrJ.binSizekHz
Spectrum Analyzer Statistics Data
The spectrum analyzer statistics data/messages provide a statistical analysis ofthe data in the frequency spectrum.
A single message is built from a specified number of FFT cycles, where a single FFT cycle represents an, e.g., 256 frequency bin output ofthe FFT. For example, 40,000 successive FFTs ofthe RF spectrum, taken over a total time of 1/10 of a second, are used to construct the statistics for a single message.
FIG. 25 shows the kind of information that can be conveyed in the spectrum analyzer statistics data. The bottom line shows the average power over the sampling period (i.e., over the 40,000 FFTs, or 1/10 second). The top line represents the "absolute maximum power" over all spectrum analyzer statistics messages received so far.
An example ofthe overall structure ofthe spectrum analyzer statistics data is:
This message header smlSaStatsMsgHdrJ field contains parameters which describe the sampling process, examples of which are below.
There are, for example, 256 consecutive statsBins, each with four sub-fields as shown in the table below. Each statsBin, with its four subfields, contains the statistical data for a particular bandwidth. To calculate the width of each frequency bin, the following formula may be used: binWidth = smlSaStatsMsgHdrJ. bwkHz / 256
The lower and upper bandwidth for each bin is giving by the following formulas:
LowBandwidth[N] = smlSaStatsMsgHdrJ. centerFreqkHz + ((N - 128) * binWidth)
HighBandwidth[N] = smlSaStatsMsgHdrJ. centerFreqkHz + ((N- 127) * binWidth)
There are ten consecutive activeBins which record "peak" activity. The bins may be viewed as being indexed consecutively, from 0 to 9. For each bin, the value in the bin should be inteφreted as follows. In the Nth bin, if the value in the bin is X, then for (X/2)% ofthe time, there were N peaks in the RF spectrum during the sampling period, except for the special case below for the 10th bin, called bin 9.
As described above in conjunction with the SAGE 10, peaks are spikes, or very brief energy bursts in the RF spectrum. If a burst persists for a certain period of time (e.g., approximately 2.5 μsec), the SAGE 10 will detect the peak, and the peak will be included in the statistics described in this subsection. Such brief peaks are generally not included in pulse data or pulse statistics. Also as described above, if a series of consecutive peaks are seen over a continuous time period, all at the same frequency, this series — once it reaches some minimum time threshold — it will be counted as a pulse. FIG. 25 also shows how the number of peaks may be displayed associated with activity in the frequency band.
The exact minimum duration of a pulse, for testing puφoses, is configurable by the application program, but a typical time may be 100 μsec. Since the SAGE lOcan detect RF events as brief as 2.5 μsec, a typical pulse would need to persist through at least 40 FFTs before being acknowledged as being a pulse.
Pulse Event Data
A signal pulse is a sustained emission of RF energy in a specific bandwidth starting at a specific time. The SAGE 10 detects pulses in the radio frequency band that satisfy certain configurable characteristics (e.g., ranges) for bandwidth, center frequency, duration and time between pulses (also referred to as "pulse gap"). When the SAGE 10 detects a pulse that has these characteristics, it outputs pulse event data for the pulse including:
Start Time - Measured from when the SAGE first begins detecting pulses.
Duration - The lifetime ofthe pulse. Center Frequency - The center frequency of the pulse.
Bandwidth - How wide the pulse is.
Power - Average power in dBm.
The overall structure of a pulse event (PEVT) data/message is shown in the table below.
This information header field is the standard information header for pulse event messages.
There may be one or many pulse events in the message. Each instance of the classPevts field below, describes the properties of one pulse.
Pulse Histogram Data
While it is possible to access information about individual pulses, it may also be useful to work with the statistical information about pulses detected and occurring in the frequency band over time. That information is provided by pulse histogram data. The pulse histograms track distributions of: duration ofthe pulses (the percentage of pulses with short, medium, and long durations); gaps in time between the pulses (the percentage of pulses with short time gaps between them, medium time gaps, and long time gaps); bandwidth of pulses; frequency of pulses; and power of pulses.
FIG. 26 illustrates graphical displays for exemplary pulse histograms.
The overall structure ofthe pulse histogram data is shown in the following table.
This PhistMsgHdr field describes the frequency spectrum which is being monitored, and some other parameters ofthe overall sampling process.
The pulse duration histogram fields contain a series of bytes. Each ofthe data bytes, or bins — in sequence — indicates the percentage (multiplied by two) of
pulses that fall into a given range of durations. The table below categorizes data into smallBins, mediumBins, and largeBins and are only examples of how to track pulse duration.
The first bin (bin 0) contains the percentage (x2) of pulses that were between 0 μsec and 9 μsec. The second bin (bin 1) contains the percentage, multiplied by 2, of pulses that were between 10 μsec and 19 μsec in duration. Each of these "bins" is 10 μsec wide. This continues up to the 20th bin (bin 19), whose value is the percentage, multiplied times 2, of pulses that were between 190 and 199 μsec in length. The next twenty-six bins are similar, except they are wider; specifically, they are 50 μsec wide. Bin 20 has a value which indicates the percentage (x2) of pulses that were between 200 μsec and 249 μsec in length. Again, there are twenty-six bins which are 50 μsec wide. Bin number 45 has a value which indicates the percentage (times 2) of pulses that were between 1450 μsec and 1499 μsec in length.
The final set of 27 bins each indicate the percentage (x2) of pulses that are wider still, specifically 500 μsec wide. Bin number 46 includes pulses whose duration was between 1500 μsec and 1999 μsec in length. Bin 72 includes pulses whose duration was between 14499 and 14999 μsec. Pulse Duration Histogram Bins
The pulse gap histogram indicates the percentage (multiplied by two) of gaps between pulses, where the duration ofthe gap falls within a given time range. The bins do not reflect when the gaps occurred, they reflect how long the gaps were. Gaps are measured between the start ofone pulse and the start ofthe next. This is because the start of a pulse tends to be shaφly delineated, while a pulse may trail off more gradually. For example, assume there were a total of twenty gaps between pulses. Of these twenty, only two gaps had a duration between 10 μsec and 19 μsec. The first gap, which lasted 12 μsec, occurred at time 15.324 seconds. The second gap, which lasted 15 μsec, occurred at time 200.758 seconds. Both gaps are recorded in the second bin (numbered as bin 1). Since the two gaps reflect 10% of all recorded gaps, the value in the second bin (bin 1) will be 2 x 10% = 20 (since all percentages are multiplied by two).
Pulse Gap Histogram Bins
largeBins Each bin contains the percentage (x2) of gaps whose duration fell within a 500 μsec range. Gaps whose duration was between 2500 μsec to 2999 μsec are reflected in the first bin; each consecutive bin increases the duration by 5000 μsec. The final bin — which is the 27th bin ofthe largeBins, the 73rd bin overall, numbered as bin 72 — covers gaps with widths between 14499 to 14999 μsec.
For the pulse bandwidth histogram, each data bin reflects a progressively wider bandwidth. For example, if the first bin represents pulses from 0 to 9.999 kHz in width, then the second bin represents pulses from 10 kHz to 19.999 kHz, the third bin pulses from 20 kHz to 29.999 kHz in width, etc. The value stored in the bin is the percentage (x2) ofthe pulses that had a bandwidth somewhere within the indicated range. For example, assume the size of each bin is 80 kHz. Suppose also that the SAGE 10 detected 1000 pulses and there are 256 frequency bins. The pulses with a bandwidth between 0 and 20,480 kHz. As another example, assume the SAGE 10 detects 65 pulses, each of which had a bandwidth somewhere between 400 and 480 kHz. Then, 6.5% ofthe pulses fall within the sixth bandwidth range, so the 6th bin (bin number 5) will have a value of 2 x 6.5% = 13.
The bandwidth bins may have exactly the same width. For example, if the first bin is 80 kHz wide (and includes data for pulses with bandwidths from 0 to 79.999 kHz), then all successive bins will be 80 kHz wide. The second bin includes pulses from 80 kHz to 159.999 kHz; and the 256th bin— still 80 kHz wide— includes pulses with bandwidths from 20,400 kHz to 20,479.999 kHz.
Pulse Bandwidth Histogram Bins
For the pulse center frequency histogram, each data bin reflects a range of frequencies. The value stored in the bin is the percentage, multiplied times two, of the pulses whose center frequency fell within the indicated range of frequencies. All frequency bins may be exactly the same width. However, in general, the lowest bin (byte number 0) does not start with the frequency 0 Hz. Recall that the pulse histogram message header (PhistMsgHdr J) has a sub-field histCenterFreqkHz, which is measure in kHz. This field defines the center frequency for the pulse center frequency histogram. The following formulae give the actual frequency range covered by each bin of this histogram, indicating both the low frequency and the high frequency of the range. The number N is the bin number, where bin numbers are counted from freqBins 0 to freqBins 255:
Low Frequ. (bin N) - histCenterFreqkHz - (128 * binSizekHz) + (N * binSizekHz)
High Frequ. (bin N) = histCenterFreqkHz - (128 * binSizekHz) + (( N + 1) * binSizekHz))
Suppose the size of each bin, in kHz, is 100 kHz, and that the bandwidth is 2.4 GHz. Frequencies are actually being monitored in the range from 2,387,200 kHz to 2,412,800 kHz.. Suppose also that SAGE 10 detected 1000 pulses, and 80 pulses with center frequencies in the range from 2,387,600 kHz to 2,387,699 kHz. Then 8% ofthe pulses fall within the fifth bandwidth range, so bin 4 will have a value of2 x 8% = 16.
The field structure for the pulse center frequency histogram is indicated in the table below.
Pulse Center Frequency Histogram Bins
Sub-Field Description and Notes Name
For the pulse power histogram, each bin reflects a certain power range, measured in dBm. The value of each bin reflects the percentage (x2) of those pulses whose power level fell within the indicated range.
Pulse Power Histogram Bins
Snapshot Data
Snapshot data, unlike other data provided by the NSI, is not based on data analysis by the SAGE or software. Rather, this data provide raw data from the ADC which precedes the SAGE and that converts the received signal analog signal to digital data.
The raw ADC data may be expressed in n-bit I/Q format, where 'n' is indicated by 'bitsPerSample'. The snapshot samples can be used for location measurements, or for detailed pulse classification (such as identifying the exact model of a device). The size ofthe sample data contained in 'snapshotSamples' is typically 8 K bytes. The overall structure ofthe message is shown in the following table.
An example of a snapshot message smSnapshotMsgJ field is defined below.
Spectrum Event Data
The msgType for spectrum event data is 46 and the sessType is 14 (SM_L1_SESS_EVENT). A format for the smEventMsgJ spectrum event message field is described in the table below.
Sub-Field Name Description and Notes
AlertLevel Warning Levels for Messages
EventMsg This is a brief character string message, null terminated, which identifies the event that caused the message. For example, it may say "Microwave oven has started", or "Cordless phone". The content ofthe message is essentially redundant with the Eventld (above), except that it provides text instead of a numeric identifier.
EventDescription The event description will typically contain more detailed information, and will often include advisory and/or recommendation information as to how to resolve interference or other situation caused by the event source.
EventDetail The event detail will generally include pertinent technical parameters, such as power levels or frequency bandwidth associated with the event. Newline characters delimit individual lines.
Software and systems communicate requests to the NSI for data from the services on the other side ofthe NSI using the session control messages referred to above. An example ofthe format ofthe session control messages is as follows. There is a standard header followed by information elements. An information element is a data structure with several parts, as described in the following table:
Typical information elements provide data such as the SAGE configuration data, radio configuration data, and service specific data (e.g., pulse data, spectrum data, etc.). Examples of NSI information elements are provided in the table below:
There is an advantage to using information elements in NSI session control messages. The format of session control messages can be modified or expanded
over time, as technology is further developed, while requiring no revisions to existing software or systems that use the NSI. In other words, enhancements to the messages do not break legacy code.
In traditional software design, the network management software would be coded with the expectation of specific data structures for each ofthe session confrol messages. Any time the session control messages were changed or enhanced, changes would be required in the code for the network management software, and the code would need to be recompiled.
With session control messages, however, this is no longer necessary. Session control messages are processed as follows.
1. The requesting software or system reads the message header, and determines what kind of message it is receiving.
2. Software developers know what kinds of information elements will follow the header field based on a specification document. Design decisions are made to determine what kinds of actions the software or system will take in response to those information elements.
3. In the code itself, after reading the header field, the software loops through information elements which follow. Only for information elements of interest — which can by flagged by the infoElementType field in each information element — the software takes appropriate action.
Additional information elements may be added to some ofthe session control messages. However, during the "looping" process the requesting software ignores any information elements which are not of interest to it, so the additional information elements in the control messages do not require any changes in the software code. Of course, it may be desirable to upgrade a software program to take advantage of additional types of information; but again, until that new software is in place, existing software continues to function.
This benefit works in both directions. For example, in sending messages to the NSI, the software program can send an information element which fine-tunes the behavior ofthe SAGE. Typically, however, SAGE's default operating modes are satisfactory, and there is no need to make changes. Rather than having to send
an information element containing redundant, default configuration data for SAGE, this information element can simply be omitted.
A handshaking type protocol may be used to setup, initiate and terminate a session between the application and the NSI. There are numerous techniques known in the art to provide this function. For example, all tests are started by sending a smlStdHdrJ field. Additional, optional information elements may follow. The NSI responds with messages indicating that the test has started successfully; that it was rejected; or that the test is pending (the test is queued behind other requests for the same service). The four possible session control reply messages are Started, Pending, Rejected, and Stop.
All Start Messages may have the following structure:
1. A required sml StdHdr J field with a msgType value of SESS_START_REQ (40), and a value for sessType to indicate the test to be performed. This field may come first. For example, to start a pulse event test, the sessType value of 12 is used, to start a pulse histogram test, a sessType value of 13 is used, to start a spectrum analyzer power vs. frequency test, a sessType value of 10 is used, etc.
2. An optional common session configuration information element. This configures parameters which are of interest for all the possible tests, described below.
3. For the Pulse Event test only, an optional information element to configure the pulse detectors.
4. Optional information elements to configure the SAGE and the radio.
5. An optional, vendor-specific information element, typically (but not necessarily) related to further configurations to the radio.
6. An optional session-type specific information element, with configuration information for the particular test (PEVT, PHIST, SAPF, etc.).
The general/common session configuration element IE_Session_CFG is optional when starting tests, i.e., with SESS_START_REQ. If it is not sent, the default values are used.
Sub-Field Name Description infoElementType IE SESSION CFG = 2 infoElemenfBody pendingTimeout Number of milliseconds before "START" times out. A Ms value of '0' (default) indicates that the START request should NOT be queued (that is, no SESS_PENDING_RSP, or session pending response, is allowed). configStopFlags This field has an Offset of 8 / 36; it has a size of 4 bytes.
Sometimes it is desired that the service which is now being started should later stop if certain other services are reconfigured; the reconfiguration(s) which stops the current service is indicated by these flags:
0x00000000 : Do not stop for any reconfig 0x00000001 :
SAGE Config
0x00000002 : Radio Config 0x00000004 : SAPF
Config
0x00000008 : SA_STATS Config 0x00000010 : SNAP
Config
(Note that there are four pulse detectors (PDs), numbered 0 through 3.)
0x00000020 : PD 0 Config 0x00000040 : PD 1
Config
0x00000080 PD 2 Config 0x00000100 : PD 3
Config
0x00000200 PHIST Config 0x00000400 : PEVT
Config
0x00000800 80211_STATS Config 0x00001000 :
Vendor Config
OxFFFFFFFF : Use Default Value (depends on service type, see sub-table below)
1. These 'configStopFlags' allow cross-service interdependence. It may seem odd to abort an Spectrum Analyzer vs. Power Frequency (SAPF) session when, say, a PD 0 (pulse detector 0) is reconfigured. However there may be cases where the use ofthe outputs of these sessions are interrelated, particularly for event classification software.
2. lfa session attempts to reconfigure a service to the same values that it already has, the service is NOT stopped and the reconfiguration is considered "successful".
3. Flags can be combined. For example, 0x00000003 flags both SAGE and Radio Config
4. The default value depends on the service type:
Service configStopFlags
The radio is configured to a starting bandwidth (either 2.4 GHz or one of the 5 GHz bands, for example) before the NSI can begin any testing. Similarly, before many pulse test services can be run, at least one (if not more) of SAGE's four pulse detectors need to be configured at least once. These services include Pulse Events, Pulse Histograms, Snapshot Data, and Spectrum Analyzer Power vs. Frequency (but only if this test is to be triggered by pulse events). Once the pulse detectors are configured, they can be left in their initial configuration for subsequent tests, although the application program can reconfigure them.
The radio configuration element IE_Radio_CFG is described in the table below. It is used to fine-tune the performance of the radio. If the information element is not sent as part ofthe message, the radio is configured to the default values.
The SAGE configuration information element IE SAGE CFG is optional. It fine-tunes the performance ofthe SAGE 10. If the information element is not sent as part ofthe message, the SAGE 10 is configured to the default values. An example ofthe SAGE configuration element is set forth below.
The IE_VENDOR_CFG information element contains vendor specific configuration information. Typically this is a configuration that is specific to the particular radio in use.
The NSI provides a pulse detector configuration element (IE PD CFG) which is used to configure the pulse detectors. This element must be used the first time the pulse detectors are configured. It is also used if and when the pulse detectors are reconfigured (which may be infrequent). The optional pulse events test configuration element (IE PEVT CFG) are shown in the table below. If this configuration element is not sent, the default values are used for the test.
Configuring the pulse detectors involves selecting which pulse detector(s) to use for a test. It also involves providing parameters which indicate the kind of signal pulse (for example, ranges for signal power, pulse duration, pulse center
frequency, etc.) will, in fact, be inteφreted as being a pulse. There are a variety of options when dealing with pulse detectors:
Use the existing pulse detector configuration for the service.
Allocate a currently unused detector.
Reconfigure an existing pulse detector.
Release a pulse detector so that other sessions may use it.
Whether configuring a pulse detector before using it for the first time, or reconfiguring the detector, the header field will first be sent with a particular msgType. This will be followed by the pulse detector configuration element, IE PD CFG, described in the table below. (Other information elements may be included in the message as well.) Pulse detectors are selected using PD ID sub- field values from 0 to 3. These do not correspond to physical pulse detectors; rather, they are a logical reference to a pulse detector that is used by that transport connection supporting the sessions.
The field bwThreshDbm takes a signed dBm value that helps determine which RF signals will be counted as pulses. A pulse is defined by a series of time- contiguous, and bandwidth continuous "peaks", or brief spikes, which determine the overall bandwidth ofthe pulse (thus the reference to "bandwidth threshold"). A "peak floor" is established to determine which spikes of radio energy qualify as a valid "peak". Energy spikes below this "peak floor" do not qualify, whereas those above the "peak floor" do qualify. The bwThreshDbm parameter determines the "peak floor" based on whether 'bwThreshDbm' is positive or negative: If bwThreshDbm is negative (ex : -65 dBm), then the peak floor is the same as the value of bwThreshDbm.
If bwThreshDbm is positive (ex : 24 dBm), then the peak floor is determined dynamically based on the current noise floor: peak floor dBm = noise floor dBm + bwThreshDbm. The noise floor based mechanism (bwThreshDbm is positive) is used almost exclusively because it responds well to changes in the radio spectrum environment.
There may be pre-defined pulse detection configurations, shown in the table below, to detect certain types of signal pulses.
This following short pulse profile is suitable for detecting short pulse frequency hoppers, such as Bluetooth™ headsets and many cordless phones.
The following long pulse profile is suitable for detecting long pulses output by Microwave Ovens and television transmissions (infant monitors, surveillance cameras, X-10 cameras, etc.).
Before running a pulse histogram test for the first time, the pulse detectors need to be configured. This is done by first running a pulse event test, described above. A session control message is sent containing a header field with a sessType value of '13'. That is followed by the optional information elements, as shown in the table below detailing the optional pulse histogram test configuration element (IE PHIST CFG). If it is not sent, the default values (shown in the table) are used.
The spectrum analyzer power vs. frequency test is started by sending a session control message containing a header field with a sessType value of '10'; that is followed by the optional information elements, as shown below.
The spectrum analyzer statistics test is started by send a session confrol message containing a header field with a sessType value of '11 '. That is followed by the optional information elements, as described below.
The field pwrThreshDbm takes a signed dBm value that helps determine the minimum power level for the "duty cycle" and the "peak count." The pwrThreshDbm parameter determines the "floor", or minimum energy level for these measurements, based on whether pwrThreshDbm is positive or negative:
If pwrThreshDbm is negative (e.g., : -65 dBm), then the floor is the same as the value of pwrThreshDbm.
If pwrThreshDbm is positive (e.g., : 24 dBm), then the floor is determined dynamically based on the current noise floor: power floor dBm = noise floor dBm
+ pwrThreshDbm. A noise floor based mechanism (pwrThreshDbm is positive) is used almost exclusively because it responds well to changes in the radio spectrum environment.
The spectrum event data test is started by sending a message containing a header field with a sessType value of '14'.
The snapshot message test is started by sending a message containing a header field with a sessType value of '17', followed by the optional configuration elements. The optional snapshot message configuration element (IE_SNAP_CFG) follows. If it is not sent, default values are used for the test.
By specifying which pulse detector is used to trigger the snapshot capture, it is possible to control which types of signal pulses are detected to trigger a raw ADC data capture.
The NSI may reply to test start messages to inform the requesting software application ofthe status ofthe test, and the ability ofthe underlying applications to deliver data for the requested tests. It is also possible to stop a test that has been requested. The table below summarizes the session control status messages which may be sent via the NSI.
FIGs. 24-27 illustrate exemplary screens to display spectrum activity information. An exemplary graphs panel consists ofthe graphs or plots on the right ofthe screen and plot type on the left tree view. When the tree view is opened and any plot type is clicked, the corresponding plot will be added and displayed on the right side. Any plot on the right side ofthe screen can be removed by clicking on the close icon on the plot. As soon as the "Start" button is hit and data is available on the socket the spectrum analyzer plots will be plotted. If the "Stop" button is pressed the plotting action is disabled and the spectrum analyzer plots will no
longer be updated with incoming data. The spectrum activity information is displayed on the spectrum analyzer graphs, pulse histograms and pulse plots.
The spectrum analyzer graph in FIG. 24 contains spectrum analyzer power vs. frequency information, described above. The spectrum analyzer stats are shown in FIG. 25 and include the spectrum analyzer stats graph, the duty cycle graph, and number of peaks bar chart. This SA stats graph displays statistical data on the frequency spectrum. It is based on spectrum messages, where a single message is built from a specific number of successive FFT cycles. Typically, 40,000 successive FFTs ofthe RF spectrum, taken over a total time of 1/10 of a second, are used to construct the statistics for a single message. A first line shows the average power over the sampling period (i.e., over the 40,000 FFTs, or 1/10 second). A second line, which can change rapidly from 1/10 of a second to the next, represents the "maximum power per single sampling period." It shows the maximum power achieved in each of 256 frequency bins, during the 1/10 second sampling period. A third line represents the "absolute maximum power" over all messages received so far. The Duty Cycle graph shows the percentage of the time that, for a given frequency, the power in the RF spectrum is above a specified threshold.
The Number of Peaks chart shows the percentage of time that there are "N" peaks in the RF spectrum. For example, if the "0" bar is hovering around 50%, then 50% ofthe time there are no peaks at all. If the "1" bar is hovering at around 20%, then 20% ofthe time there is just 1 peak in the RF spectrum. If the "2" bar hovers at 5%, then 5% ofthe time SAGE is detecting 2 peaks in the RF spectrum. (The "9" bar is a special case: If the "9" bar is hovering at, say, 3%, then 3% ofthe time SAGE is seeing 9 or more peaks in the RF spectrum.
FIG. 26 shows exemplary pulse histogram plots for center frequency, bandwidth, pulse duration, pulse gap, pulse power and pulse count. As soon as the "Start" button and histogram data is available on the socket the histograms will be plotted. If the "Stop" button is pressed the plotting action is disabled and the histograms will no longer be updated with incoming data. The following types of plots are available for viewing:
Center Frequency shows the distribution ofthe central frequencies ofthe pulses. The graph spans a bandwidth of 100 MHz. The actual cenfral frequency is determined by combining the central frequency shown on the graph with the overall RF center frequency (2.4 GHz). Also, both ends ofthe graph are typically flat, since the actual bandwidth captured by the radio is 83 MHz.
Bandwidth shows the distribution ofthe bandwidths ofthe pulses.
Pulse Duration shows the distribution ofthe duration ofthe pulses. For example, a peak at around 200 μsec indicates that many ofthe pulses persist for about 200 μsec. Pulse Gap shows the distribution ofthe gap times. A peak at about 1500 μsec indicates that many ofthe pulses are separated in time by gaps that are about
1500 μsec long.
Pulse Power indicates the distribution ofthe power ofthe pulses.
Pulse Count indicates, on a logarithmic scale, the number of pulse events counted per sample interval. Colors may be used indicate that the number of pulses poses little risk, some risk, or significant risk, for example, to a particular type of communications occurring in the radio frequency band, such as 802.11 communications.
FIG. 27 shows a pulse chart/plot for various pulses detected in the frequency band. When the "Capture" button is selected, the GUI application will capture the pulses and display them on the pulse chart. Each pulse is defined in three dimensions and presents a single dot for each pulse. It is intended to show the time at which each pulse occurred (horizontal axis), the center frequency
(vertical axis), and the power (the dot color). A color-coded legend may be used on the left side ofthe pulse chart. A zooming action can be performed by dragging the mouse on a specified area in the plot below the area to be zoomed, in order to magnify that area.
An example of how the NSI can be used to configure and obtain data from a
SAGE pulse detector is shown in FIG. 28. In the diagram, solid lines are for the unified message and the dotted lines indicate the headers, information elements and information messages sent that make up a single message. Step 6000 represents a software application sending to the NSI a start message. The message includes a
message header with a particular msgType value that indicates it is a start message and a sessType value to indicate that it is a pulse event test. If it is the first message request sent, the start message includes either the IE_Radio_CFG element, or the IE_VENDOR_CFG element. Two IE_PD_CFG elements are sent to configure pulse detector 0 to detect short pulses and pulse detector 1 to detector long pulses. A pulse event information element IE PEVT CFG is also sent to indicate which ofthe configured pulse detectors to use. The applicable data from the SAGE is generated and made available to the NSI. In step 6010, the NSI replies with a message confirming that the service was started and the status ofthe service in process. In step 6020, a series of informational messages are sent with data. Each message includes indicates that it is an informational message and includes one or more ofthe ClassPevt fields which hold the actual data that described the measured properties of pulses that are detected within the configured parameters. Further information messages are sent as shown at step 6030. In sum, a method is provided for generating information pertaining to activity occurring in a radio frequency band, comprising steps of receiving energy in the radio frequency band in which activity associated with a plurality of signal types may occur; and generating spectrum activity information for activity in the radio frequency band from the received radio frequency energy. In addition, a device is provided for generating information pertaining to activity occurring in a radio frequency band, comprising a spectrum analyzer that computes power values for radio frequency energy received in at least part ofthe radio frequency band for a time interval; and a signal detector coupled to the spectrum analyzer that detects signal pulses of radio frequency energy that meet one or more characteristics.
Furthermore, a processor readable medium is provided that is encoded with instructions that, executed by a processor, cause the processor to perform steps of computing power spectral information for radio frequency energy received during a time interval in at least part of a radio frequency band in which activity associated with a plurality of signal types may occur; and detecting from the power spectral information signal pulses of radio frequency energy that have meet one or more characteristics.
Further still, a system is provided that monitors activity in a radio frequency band where signals of multiple types may be occurring, comprising a process for analyzing radio frequency energy occurring in the radio frequency band and accumulating data associated with activity in the radio frequency band, wherein the process is responsive to a request containing parameters associated with spectrum analysis to be performed by the process.
Further, a system is provided that monitors activity in a radio frequency band where signals of multiple types may be occurring, comprising a process that generates spectrum activity information for activity in the radio frequency band based on received radio frequency energy from the radio frequency band; an application program that processes spectrum activity information pertaining to activity in the radio frequency band; and an application programming interface that presents messages the process and returns spectrum activity information to the application program. The above description is intended by way of example only and is not intended to limit the present invention in any way.