==Phrack Magazine==

                 Volume Five, Issue Forty-Five, File 23 of 28

****************************************************************************

                           AN INTRODUCTION TO OCTELS
                      AUTOMATIC SPEECH EXCHANGE NETWORK
                                BY OPTIK NERVE
                              (nerve@netaxs.com)


The Automatic SPeech Exchange Network, or ASPEN for short, is a high
performance voice processing system which interfaces and integrates with a
variety of PBX and Central Office (CO) equipment. Interfaced systems require
the caller to enter an extension, while integration provides a personal
greeting automatically. Both of these provide the ability to return to the
operator if necessary. ASPEN systems offer voice mail, Information Center
Mail-Boxes (ICMB), Enhanced Call Processing (ECP), networking, and
transaction processing. The Aspen, Branch, Branch XP, and VPC 100 hardware
is only significantly different in their port and drive capacities. The
following information is presented to introduce an overview of the hardware
in an ASPEN system, and its function for it as a whole. This is not a
"how-to" file and you will not find anything related to fraud in this
article.


SYSTEM COMPONENTS LIST
-=-=-=-=-=-=-=-=-=-=-=-

Each ASPEN system contains the main cardcage, the I/O cardcage, the drives,
power supplies, and the system manager terminal. The system manager printer
is optional. ASPEN hardware consists of:

    o  CPU Board
    o  File card
    o  Line board
    o  Telephone Interface Card (TIC)
    o  Scanner board
    o  Winchester drives
    o  Power supplies
    o  System manager terminal
    o  System manager printer (optional)

The cardcages of the system contain the following boards, each identifiable
by a unique color coded tab indicating the slot into which the board fits.

 MAIN CARDCAGE

    o  CPU (yellow)
    o  File card (dark green)
    o  Line boards (light green)

 INPUT/OUTPUT CARDCAGE

    o  Scanner board (pink)
    o  TICs (purple)


SYSTEM COMPONENTS OVERVIEW
-=-=-=-=-=-=-=-=-=-=-=-=-=-

The following subsections present a functional description of the
characteristics considered standard on ASPEN system hardware.


CENTRAL PROCESSING UNIT
~~~~~~~~~~~~~~~~~~~~~~~
The CPU board contains a microprocessor with access to one megabyte of
RAM. It is identical, in function, to a personal computers' CPU,
executing instructions, and controlling serial I/O to the scanner board
and system manager terminal.

SYSTEM DATA BUSES
~~~~~~~~~~~~~~~~~
System communication between the boards uses three main buses: the control
bus, the data bus, and the polling/status bus. The eight megahertz control bus
works on a request/response procotol; for each 16 byte message sent by the
CPU to a board, a 16 byte response must be sent back to the CPU. The data bus
moves large amounts of data (20KB transfers) between the CPU, file card, and
line boards at eight megahertz. All digitized speech to and from the line
boards and file card travel on this bus. The polling/status control bus is
used only between the scanner board and TICs. The scanner board polls each TIC
port for an on-hook/off-hook status every ten milliseconds.

FILE CARD
~~~~~~~~~
The file card controls the drives and is the primary system file manager.
The file card controls the Winchester ST-506 interface. The file card also
stores frequently used prompts of less than three seconds in a speech cache
memory.

LINE BOARD
~~~~~~~~~~
The line board contains microprocessors with access to 128KB of RAM. The
line board has four channels, each matching a channel on a TIC. The Aspen may
contain as many as six line boards, but this is limited to four, and even
two on lower end Aspen models. Line boards perform several important
functions including: encoding and decoding of digitized speech, tone
detection, DTMF detection, silence detection, speed control, and DTMF tone
generation. Speech is encoded at a rate of 25K samples per second using Delta
modulation. Each of the four channels on the line board has a tone detection
circuit, which detects dial, busy, reorder, and ringback tones generated by
most PBXs and COs. The proprietary design limits talk-off during message
playback.  Talk-off may occur when the voice generates tones similar to DTMF
tones.  Silence detection recognizes spaces between words so that the voice
message can be compressed for disk storage, optimizing disk space. The
system also recognizes silence during message recording and prompts the user
to continue.  The line board controls message playback speed without
affecting voice frequency pitch by controlling the amount of silence
between words.  Playback can be normal, slow, or fast. The line board is
equipped with a tone generator used for dialing when ASPEN places an
outcall or transfers a call.

TELEPHONE INTERFACE CARDS
~~~~~~~~~~~~~~~~~~~~~~~~~
The Telephone Interface Cards (TICs) provide interfaces to either the
Public Switched Telephone Network (PSTN) including CO, or to a PBX. In
most installations, the TIC emulates a regular telephone to the PBX or the
CO.  Octel Communications has special TICs that emulate electronic digital
sets in a Mitel PBX and ROLM PBX. The four channels on a TIC connect
directly to the four channels on a line board. The TICs use transformers to
provide electrical isolation to protect the line board and the network or PBX.
The TICs communicate with the scanner board through the polling/status
control bus located on the I/O backplane.

SCANNER BOARD
~~~~~~~~~~~~~
The scanner board, as mentioned above,  communicates with all TICs through
the polling/status control bus. By continually polling all TIC channels, the
scanner board detects new incoming calls and reports this change in status
information to the CPU board though one of the four serial I/O ports. It also
provides RS-232 data connection to the PBX when required, and the serial I/O
port which interfaces the system managers terminal with the CPU. The scanner
board includes a built in modem used to remotely access the system
administration functions. The local system manager terminal and the modem
circuit share the same serial I/O port, and the first connection has priority
over the second. (ie: If the modem is connected, the local system manager
terminal cannot access the system)

SYSTEM MANAGER TERMINAL/PRINTER
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
The system manager terminal is used to enter and change information within
the system database. The system manager terminal is a Wyse 50 terminal
used by ASPEN to report administrative information. The printer is an
optional device used to produce a hard copy of output produced.

DISK COMMUNICATOR
~~~~~~~~~~~~~~~~~
The Disk Communicator provides connections between the file card and the
drives. If more than four drives are installed, a multiplexer (MUX)
communicator board selects the four drives in the first cabinet and the
four drives in the second cabinet.

WINCHESTER DRIVES
~~~~~~~~~~~~~~~~~
These drives store system software, mailboxes, voice prompts, messages, and
greetings. Octel Communications uses its own formatting technique and disk
controllers. Standard drives are formatted for a capacity of 60, 90, or 190
megabytes. The drives (0-1) contains all software and voice prompts needed to
operate the system.

POWER SUPPLY
~~~~~~~~~~~~
The ASPEN power supply is located in the center of the system housed in a
single case, which actually contains two supplies. One supplies +5/-5 and
+12/-12 volts to the boards, while the other provides +12 volts for the
drive motors. There are no replaceable fuses in an ASPEN system. If the
current draw or input voltage reaches a defined level, the power supply
turns itself off automatically, necessitating a reset of a single circuit
breaker.

SPECIAL INTEGRATION DEVICES
~~~~~~~~~~~~~~~~~~~~~~~~~~~
The Woobox and the PBX Integration Device (PID) provide integration to
different PBXs. These devices stand alone and are peripheral to the ASPEN
chassis. ASPEN integrates with the AT&T Systems 75 and 85 using an A/PID.


THE CALL PROCESS
-=-=-=-=-=-=-=-=-

The following is a general description of a typical call through ASPEN and
the boards involved in the process:

  o  Subscriber dials the ASPEN pilot number, either directly or is
     forwarded to APSEN by the PBX.
  o  A TIC senses ring voltage and raises a flag to indicate an
     incoming call.
  o  The scanner board polls all TICs for change of status using the
     polling/status control bus and detects the raised flag.
  o  The scanner board commands the TIC to answer the call (go off-hook)
     by sending a command on the polling/status control bus
  o  The scanner board alerts the CPU board of an incoming call
     by sending port identification information over the serial
     I/O port.
  o  The CPU commands the corresponding port on the line board to
     begin listening for DTMF tones, silence, or dial tone. The line
     board informs the CPU of call process through the control bus.
  o  The CPU commands the file card to send digitized voice prompts,
     "Hello, this is ASPEN...", over the data bus to the proper
     port on the line board. The line board converts these prompts
     to analog and passes them to the TIC
  o  The caller dials the desired destination number through DTMF.
     The line board interprets these and passes the information
     to the CPU.
  o  The CPU instructs the file card to find the user record of the called
     party, check for the location of the personal greeting, retrieve the
     greeting, and pass it to the line board. The line board converts the
     greeting to analog and passes it to the TIC
  o  After the greeting plays, the caller records a message. The line board
     digitizes speech and stores it in buffers of six seconds each (20KB)
  o  Using the control bus, the CPU sets a data bus transfer between the line
     board and file card. The file card decides which drive has the most free
     space and where to wire this message. The six seconds of digitized speech
     is transferred from the line board to the file card. The file card then
     writes the six second segment to the disk. This process continues until
     the caller finishes the message.
  o  The file card updates the user record of the called party by placing 11
     bytes in the mailbox. The 11 bytes define the message location on the
     disk, sender, time, priority, and length.
  o  The caller terminates the call by pressing the one key
  o  The line board informs the CPU through the control bus that the call has
     been terminated
  o  The CPU commands the file card to send the good-bye prompt to the line
     board which converts it to analog and passes it to the TIC
  o  The CPU commands the scanner board to disconnect that port
  o  The scanner board commands the TIC to hang-up (go on-hook) through the
     polling/status control bus
  o  The scanner board continues polling all TIC ports for change of status


CONCLUSION
-=-=-=-=-=-

I hope this information provides you with a more solid background of
how the ASPEN system functions. The basic aspects of this system can also
apply to other similar PBX interfaces. Although the above information
cannot really be used for anything illegal, I have provided it, for
informational purposes, to those who "feed" on telco-bits as I do.

Greets go out to: Ludichrist, Squarewave, the ID-Crew,
                  #hack, and #phreak

You can reach me at nerve@netaxs.com, but please use my following
public key to encrypt all mail before sending it. Thank you...


-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.3

mQCNAizV9xMAAAEEALvTChdFrhZvZ9wqJI8q7v0cEUdnjGBmoFGLzIWb1I8G9ZWA
8rDmxxeU5NBtJ7uK4Ea74MCNL35TGEnuoRQNZl5af9iJDfJjs/LVKNCWwWrPRMUi
6gPO6ui1bSfnvQn1ykZ2wj9fVwek9Is4Lneh1vOfpVMZPlTNRN23FvWw7yeVAAUT
tB5PcHRpayBOZXJ2ZSA8bmVydmVAbmV0YXhzLmNvbT4=
=K44O
-----END PGP PUBLIC KEY BLOCK-----