GBPPR Carrier Current Transmitter Detector


This is a device which can be used during a TSCM sweep to check a standard, single-phase 120 VAC power line for a hidden carrier current transmitter.  It works by isolating, attenuating, and then high-pass filtering the incoming AC voltage to "detect" any signals in the frequency range between 10 kHz and 500 kHz.  This is the most common operating frequency range for consumer-level (i.e. baby monitors) carrier current surveillance transmitters.  There are some high-quality carrier current transmitter models out there which transmit above 500 kHz.  For example, some "anywhere" telephone extensions operate in the 2 MHz range.  To check a 120 VAC power line for transmitters operating above 500 kHz, you'd be better off using a spectrum analyzer.  Connect the spectrum analyzer to the line's "hot" side using a simple resistor/capacitor combination attenuator and high-pass filter.

This particular detector can also be used to check phone lines, alarm wires, intercoms, or other additional wiring for carrier current transmitters.  Another useful idea is to add an audio amplifier and speaker to the detector's output.  You can then directly "listen" to power lines.

For this project, the output will be sent to an oscilloscope.  Any high-frequency signals will then be displayed on the oscilloscope's screen.  Important Note:  If you power the oscilloscope from the same AC wiring which you are checking, you must use an isolation transformer to protect your oscilloscope.  An example isolation transformer will be shown during the construction information portion of this article.  You can overcome the need for an isolation transformer by using a battery powered oscilloscope.

The device is fairly easy to construct and operate.  First, the incoming 120 VAC power line is sent through a DPDT switch and on to some common neon lamps, which are available at Radio Shack.  This helps to determine if the outlet under test is wired properly.  If the red neon lamp lights, it indicates that the "hot" and "neutral" wires on the outlet are not connected properly.  You can flip the "reverse" switch (marked REV) to correct this.  When everything appears to be safe, you can finally flip the "apply" switch (marked APP), which applies the 120 VAC power line to a simple resistor/capacitor attenuator and high-pass filter.  This attenuates the 120 VAC signal down to only a few millivolts and helps to remove any 60 Hz interference.  Both the incoming "hot" and "neutral" lines are protected with fast-acting circuit breakers to protect anything from shorting out.

After the attenuating and filtering, any signals above 10 kHz are sent to a low-noise OP27 operational amplifier whose gain value is adjustable via a panel-mount 100k potentiometer.  The output of the OP27 is then sent to the oscilloscope via a chassis-isolated BNC jack.  These can be salvaged from old coaxial Ethernet cards.  The oscilloscope wlll then display the time-domain of any detected signals above 10 kHz.  Be warned, there can be alot of interference, making the detection of carrier current transmitters difficult.  You may need to do a "before-and-after" picture comparison, or install a temporary isolation transformer on the incoming 120 VAC power line (right after the meter or distribution box).  This should clean up the line from any outside interference while still allowing you to check the AC power lines for carrier current transmitters.

Pictures & Construction

Isolation transformer which will be used for the dedicated AC outlet for the oscilloscope.  It is from an old Korean War-era teletype machine.  High-quality, sealed voltage transformers often show up at swap fests for only pennies, or even for free.  The transformer will be mounted to the side of the case with a little aluminum bracket.

Close up picture of the transformer's label.  We'll be using it as an isolation transformer.  Standard 120 VAC input is on the right (pins 1 & 2), while the 240 VAC output is via pins 5 & 7.  Note that the output winding has a 120 VAC center tap (pin 6).  If your oscilloscope doesn't draw too much current you can use this instead.  If your oscilloscope does draw alot of current (more than 0.5 A), adjust its internal power supply to accept 240 VAC input and use the 240 VAC output winding.

The aluminum L-bracket is attached to the transformer as shown.  The back of the transformer has a piece of art foam for protection.

The output of the isolation transformer is sent to a single-ganged outlet.  It is mounted inside a metal box and is connected to the case via two 1/2-inch L-brackets.

Ammo case used to house this project.  The long, retangle cut is for the oscilloscope outlet box.  The rest of the holes on the front panel are for switches, LEDs, neon lights, circuit breakers, etc.

The isolation outlet mounts like this.  Cut the retangle hole using a Dremel tool with a cut-off wheel.  Be sure there is room for the cover.

Internal view of the isolation outlet box.

The signal output to the oscilloscope needs to be isolated from the case.  A good way to do this is to salvage an isolated BNC connector from an old 10base2 (coaxial) Ethernet card.  A 3Com EtherLink III is shown above.

Close up picture of the isolated BNC connector.  The two pins on the rear are for the BNC's center pin and shell.

Isolated 240 VAC outlet for the oscilloscope.

Front panel overview.  On the top left are three neon lamps.  If the "hot" and "neutral" lines are reversed, the RED neon lamp will light.  If the hot, neutral, and ground lines are applied correctly, the two GREEN neon lamps will light.  To the lower-right of the neon lamps are two switches.  The one on the far-right controls the main power (PWR) to the Carrier Current Detector and lights the LED above it.  The one to the left, (REV) reverses the "hot" and "neutral" lines, in case they happen to be applied incorrectly.  Below the neon lamps, with the red switch cover, is the APP switch, which is the final control switch that applies the power line to the main detector circuitry.  To the right of that, are three 1 Amp circuit breakers.  Two are in series with the "hot" and "neutral" lines, and one is for the isolated 240 VAC outlet.  Below that, is the isolated BNC output (OUT) connector and the detector's manual gain (GAIN) control.  The AC power line to be checked comes in via the socket on the lower-left.  This is also tapped by the isolation transformer to power the oscilloscope.

Oh Lordy!  The start of the wiring behind the front panel.  It'll be a mess.

Close up, alternate view.  The 120 VAC input (top) is on a little connector board.

Wiring connections for the isolation transformer and the AC outlet.

The main carrier current detector board.  It consists of a simple resistor/capacitor voltage divider, and low-pass filter feeding two OP27 low-noise operational amplifiers.  Two back-to-back 5.1 V zener diodes protect the incoming op-amps.  The detector circuit needs to be powered via two 9 volt batteries to generate the "plus" and "minus" power supplies.

Alternate view.  The resistors and capacitors in the voltage divider / filter section should be of the high-voltage type.  Silver mica or 1000V ceramic capacitors are recommended.  Metal oxide resistors should also be used.

Zoomed out a little bit.

Overall view with the detector board mounted inside the case with the wiring complete.

In operation.  Connected to a 120 VAC power line, but with the APP switch in the "off" position.

Note the oscilloscope's power cord connected to the isolated 240 VAC output (right side).

In operation, with the APP switch now "on."  The oscilloscope's time-base setting is 1 mS per division.  The volts settings is 500 mV per division.

The oscilloscope's display shows noise and switching transients on the power line I was checking.  You'll need to compare these signals as a before-and-after picture against a "clean" line if you wish to determine if a carrier current transmitter is on the line.

Also note that this "noise" is what degrades the use of carrier current surveillance transmitters.

Close up photo.  2 mS per division time-base setting.

Close up photo.  0.5 mS per division time-base setting.


Return to Homebrew Military & Espionage Electronics Page