GSM CELLULAR MONITORING SYSTEMS

Transcription

1 GSM CELLULAR MONITORING SYSTEMS PKI ELECTRONIC INTELLIGENCE GmbH GERMANY

2 Dear Customer, For the past 10 years PKI has been developing cellular monitoring systems. We offer the full range of surveillance devices for mobile phones, including passive systems for 5.0/5.1/5.2 encryption and active systems, that are also for 5.0/5.1/5.2 encryptions, as well as for CDMA. Additionally, our products include a huge range of accessories, such as IMSI catchers, decryption units, direction finders, jammers, power amplifiers, WLAN, etc. In spite of their complex functionality, all devices come with an easily understandable instruction manual, which also describes their advantages and disadvantages and their possible field of application. Therefore, you as the end-user have the possibility to combine all desired devices according to your needs and wishes. Of course we can be of assistance, if you specify your personal requirements and we would be pleased to establish a personally designed and tailor-made configuration of devices. Our devices allow surveillance and localization of mobile phones without any restriction. All you need is a computer and some knowledge of the systems. In order to cover this, we also offer 4-weeks training courses. Your PKI-Team Contents Comparison Active vs. Passive GSM Monitoring Systems page 3 PKI 1520 Passive GSM Monitoring System for A5.2 (A5.0) Encryption page 4 PKI 1540 Passive GSM Monitoring System for A5.1, A 5.2(A5.0) Encryption page 5 PKI 1560 Active GSM Monitoring System page 6 PKI 1580 Active GSM Monitoring System with IMSI Catcher and Decryption Unit page 7 PKI 1600 CDMA Monitoring System page 8 PKI 1620 GSM IMSI Catcher page 9 PKI G UMTS IMSI Catcher page 10 PKI PKI 1675 Transmission Power Amplifier page 11 PKI 1680 GSM Direction Finder page 12 PKI 1700 GSM Direction Finder for Mobile Vehicles page 13 PKI 1720 High Power 3G and GSM Jammer page 14 PKI 1740 High Power Jammer page 15 2 Catalogues are available for download at

3 Production and Development Comparison Active vs. Passive GSM Monitoring Systems A passive GSM Monitoring System is completely invisible for the target and the network operator. The passive system exclusively uses receiver units in order to intercept the transmissions between the mobile phone and the network. This way, you are limited to receiving data that is transmitted between the network and the mobile phone, which does not contain any information that allows identifying a known target again or which could indicate the target s appearance in the nearby area. Therefore, the use of a passive system makes sense at places, where many potentially suspect persons are making calls in the area nearby, and you don t know your specific target in advance. Alternatively the use near a base station could make sense, enabling you to monitor all conversations within the surrounding area. If you are looking for a specific target mobile phone, or you want to be informed of the arrival of a specific target, then an active system should be your choice. Once captured by the simulated base station of the monitoring system, you can collect all information of the target, such as the IMSI, IMEI, telephone number and other unchangeable data, which allows identifying the target again later or to connect it to your base station. Even impersonating the suspect is possible, so you can send or receive calls or text messages instead of the target person or manipulate the text messages by changing their contents. You obtain full control of the mobile phone, which allows for example increasing its transmission power in order to avoid losing your target. This facilitates the tracing of a suspect during mobile use of the system. It is even possible to covertly turn the mobile phone into transmission mode, in order to locate it with directional finding systems. With a passive system you are constrained to wait until the target phone is making a call, or you have to call it yourself in order to force the mobile phone to switch into transmission mode. The active system itself generally is not detectable by the user or a network operator. The calls are not diverted and there is no need for a SIM card in order to direct the calls to the network operator. The calls are invoiced to the subscriber s telephone bill, and compared to former active systems there are no limitations on interception of incoming calls and text messages. The active system works as a true and invisible man in the middle attack. Tel.: +49(0) Fax: +49(0) information@pki-electronic.com 3

4 Passiv Cellular Monitoring Systems PKI 1520 Passive GSM Monitoring System for A5.2 (A5.0) Encryption front back The PKI 1520 is a combination of a laptop, the reception unit (the size depends on the desired channels) and the key decryption unit. Power supply and antenna are included in the package. This system is expandable until up to 32 duplexchannels. Each reception unit disposes of 8 duplex-channels. Recording of all incoming conversations, as well as all text messages is possible. The controller software allows data evaluation from the laptop s hard disk at any time. A localization of this passive system is impossible, because it does not emit any active signals. The surveillance of GSM telephone conversation is possible via handheld device as well as via the base station. PKI 1520 establishes a log file of all telephone numbers of all incoming and outgoing calls. For the identification of the telephone number of the surveyed person our active systems PKI 1560 and PKI 1580 can be used. Our PKI 1520 allows direct decryption of A5.2 encrypted conversations on the dual-band networks GSM 900/1800 and the single-band networks GSM 1900 or GSM 850. The system has been developed for mobile use (4-8 duplex-channels) and can be used at any place where conversations shall be monitored. A similar device developed for stationary use, for example in a car, can also make sense due to its maximal exploitation of 32 duplex-channels and is also available in our product range. Unlike our PKI 1560 and PKI 1580 the stationary system is not able to identify and hold specifically targeted conversations on mobile phones, because it works on a passive basis and therefore does not have any influence on the monitored mobile phone. Receiver unit, Laptop computer with software, antenna. Frequency ranges: 900/1800 or 850 or 1900 MHz Power supply: inside 12 V DC, 110V 230V power supply Receiver Unit Dimensions: 320 x 300 x 80 mm Weight: 3,8 kg 4 Catalogues are available for download at

5 Production and Development PKI 1540 Passive GSM Monitoring System for A5.1, A 5.2 (A5.0) Encryption The PKI 1540 is not limited to A5.2 decryption, but can also decrypt the much more elaborated A5.1 encryption system. The A5.1 encryption is mainly used in Europe and the USA. A localization of the monitoring devices is impossible, as this system works on a passive basis and does not emit any signals. The decryption unit is the main piece of the PKI 1540 in order to decrypt A5.1 encoded conversations. Because such a professional high-capacity processor of course has its price, it is advisable to use only one decryption unit for several monitoring systems. Internet, VPN or LAN can provide the necessary data connections, which, as a further advantage, allows mobile use of this system. This provides a maximum flexibility for numerous monitoring operations. On request we can also supply a device for stationary use, which also includes the decryption unit. The PKI 1540 is equipped with a receiver unit with a maximum of 32 duplexchannels, a laptop, antenna, power supply and a key decryption unit. Monitoring of GSM telephone conversations in the near surrounding is possible with both, the handheld device as well as the base station. As all conversations and text messages are recorded on the hard disk of the laptop, an evaluation of the data is possible at any time. PKI 1540 creates a log file listing all telephone numbers of incoming and outgoing calls. The identification of the telephone number of the monitored person can be done with our active systems PKI 1560 or PKI With the PKI 1540 it is not possible to find and hold specific mobile phones, because a passive system does not have any influence on the monitored telephones. For this purpose, however, we offer our active systems PKI 1560 and PKI The PKI 1540 works in the dual-band range GSM900/1800 or in the single-band range GSM 850 and GSM 1900 and can be equipped with up to 4-32 duplex-channels according to your needs, i.e. it is possible to record a maximum of 32 duplex-channels (both conversation partners). Each receiver unit is equipped with up to 8 duplex-channels. Receiver unit, Laptop computer with software, Decyption unit, antenna. Frequency ranges: 900/1800 or 850 or 1900 MHz Power supply: 12 V DC, 110V - 230V power supply Connectors: LAN, antenna, power supply Receiver unit Dimensions: 320 x 300 x 80 mm Weight: 3,8 kg Decryption unit Dimensions: 510x320x190 mm Weight: 19,8 kg Tel.: +49(0) Fax: +49(0) information@pki-electronic.com 5

6 Active Cellular Monitoring Systems PKI 1560 Active GSM Monitoring System The PKI 1560 can monitor all connections with A5.2 or A5.0 encryption. Depending on the system of the monitored GSM-network and the used device, it is also possible to monitor and record conversations with A5.1 encryption. The PKI 1560 allows full control of all incoming and outgoing conversations of the monitored mobile phones. Unlike the passive systems, this device supplies extensive information about the monitored devices, such as IMEI, IMSI, telephone number, and much more. Furthermore, it features numerous search und filtering options in order to locate the target mobile phone. In combination with our locating device/direction finder PKI 1680 it is possible to specifically track a target mobile phone, even in populated areas. Our active GSM monitoring system works on a fully transparent basis and is completely undetectable. The detection of all active mobile phones in the near surrounding is done by the IMSI catcher, which offers numerous manipulation possibilities of the target mobile phone s connections. Establishing a direct contact (call / text message) with the monitored telephones is possible as well. All incoming conversations and text messages are recorded on the hard disk of the laptop. The PKI 1560 includes the network access station (dual-band), the BTS unit (radio cell) and the laptop with the controller software. Depending on the application area and network quality one or two single-band BTS units are necessary. Network Access Station, BTS unit, laptop computer with software, antennas. Frequency ranges: 900/1800 or 850 or 1900 MHz Operating range: m Power supply: 12 V DC, 110V - 230V power supply Connectors: LAN, antennas, power supply. Network Access Station Dimensions: 320 x 300 x 80 mm Weight: 3,8 kg BTS Unit Dimensions: 320 x 300 x80 mm Weight:3,8 kg 6 Catalogues are available for download at

7 Production and Development PKI 1580 Active GSM Monitoring System with IMSI Catcher and Decryption Unit This system leaves nothing to be desired in the field of cellular monitoring. It offers monitoring of all connections with GSM A5.1, A5.2 or A5.0 encryption. Thus, a complete control of all incoming and outgoing conversations of the monitored mobile phone is possible, as well as the identification of all active mobile phones nearby (IMSI catcher). All incoming conversations and text messages can be stored on the hard disk of the laptop with the controller software. The decryption unit can be used independently from the monitoring system. All it needs is a data connection, e.g. internet, VPN or LAN between the PKI 1580 and the decryption unit. One decryption unit can be used by several cellular monitoring systems. This also makes sense when using the mobile version, as due to its weight and dimensions the decryption unit is intended for stationary use only. The active GSM monitoring system has many advantages compared with the passive system, as it captures a lot of information of the monitored mobile phones, e.g. IMEI, IMSI, their own telephone number, and much more. Its search and filtering features offer numerous possibilities to track the target mobile phone. Furthermore, it features multiple manipulation possibilities concerning the connections of the target phone. In spite of its numerous features, the PKI 1560 works in a complete transparent manner and remains absolutely undetectable. Of major importance of course is the tracking and locating of the monitored mobile phones. For this purpose we offer different types of locating devices and direction finders, as for example the PKI 1680 and PKI With these devices it is possible to locate the target mobile phone up to an accuracy of 2 m, even in populated areas. Our active GSM Monitoring System PKI 1580 includes the network access station (dual-band), the BTS unit, the laptop with the controller software and decryption unit. According to the network quality and place of operation one or two single-band BTS units are necessary. The system can be upgraded to a maximum of 32 duplex channels. This maximum upgrade is intended for stationary use. The version with 4-8 duplex channels with separate decryption unit has been developed for mobile use. Network Access Station, BTS Unit, decryption unit, laptop computer with software, antennas. Frequency ranges: 900/1800 or 850 or 1900 MHz Operating range: m Power supply: 12 V DC, 110V - 230V power supply Connectors: LAN, antennas, power supply. Network Access Station Dimensions: 320 x 300 x 80 mm Weight: 3,8 kg BTS Unit Dimensions: 320 x 300 x 80 mm Weight: 3,8 kg Decryption Unit Dimensions: 510 x 320 x 190 mm Weight: 19,8 kg Tel.: +49(0) Fax: +49(0) information@pki-electronic.com 7

8 Active Cellular Monitoring Systems PKI 1600 CDMA Monitoring System The PKI 1600 CDMA Monitoring System works in the CDMA x and IS95a and b networks. As it works in a completely passive mode, it cannot be located and does not cause any interference in the mobile telephone networks. This system includes a reception unit with antenna as well as a laptop with the monitoring software. It captures the strongest mobile phone transceiver station in the surrounding area and then starts monitoring the conversations, text messages and all data of the persons captured in the reception area. All captured data is stored on the laptop for further evaluation at any time. It is possible to record conversations that have been selected according to specific criteria or to directly listen into the conversation. This might be important, if no other information about the target is known. If due to unfavorable circumstances only one side of the conversation can be captured, the PKI 1600 however continues to record the communication on the remaining channel. Both, stationary and mobile use is possible as it is equipped with all relevant connections. Laptop with Windows operating system and controller software, receiver unit, aerial. Connection between receiver unit and laptop: USB 2.0 connector. Power supply: 12V - 24V, 110V - 230V power supply Receiver Unit: Dimensions: 320 x 300 x 80 mm Weight: 3,8 kg 8 Catalogues are available for download at

9 Production and Development PKI 1620 GSM IMSI Catcher This handy device creates a list of all active (switched on) mobile telephones in your proximity. All captured data, such as IMSI, IMEI are recorded in the data base and can be evaluated at any time. It offers substantial statistical evaluation possibilities of the recorded data. The PKI 1620 can easily be combined with our PKI 1680 direction finder, a combination that allows exact locating of a specifically selected mobile phone. Additionally, with the PKI 1620 you have the possibility to selectively block conversations between specific persons. The GSM IMSI Catcher PKI 1620 comes in a complete set including the laptop and controller software, the BTS unit, antenna and power supply. Main device, Laptop computer, BTS unit, antennas, power supply. Frequency ranges: 900/1800 or 850 or 1900 MHz Power output: 0,1 W - 8W Power supply: battery pack inside 12 VDC/5Ah, 110V - 230V power supply Size: 320 x 280 x 75 mm Weight: 3,5 kg Tel.: +49(0) Fax: +49(0) information@pki-electronic.com 9

10 Active Cellular Monitoring Systems PKI G UMTS IMSI Catcher With the PKI 1640 you can catch all active UMTS mobile phones in your proximity. All captured data, such as IMSI, IMEI, TMSI will be stored in the data base and are available for further evaluation at any time. A huge range of statistical data analysis methods is possible. With our 3G UMTS IMSI Catcher you can redirect single UMTS mobile phones to specific GSM frequencies, in order to monitor the conversation with our active or passive cellular monitoring systems. Furthermore, the PKI 1640 allows suppression of specifically selected conversations of targeted persons. The PKI 1640 comes with BTS unit, laptop with controller software, antenna and power supply. Laptop computer, BTS unit, antennas, power supply. Frequency ranges: 900/1800 or 850 or 1900 MHz Power output: 0,1 W - 8W Power supply: battery pack inside 12 VDC/5Ah, 110V - 230V power supply Size: 320 x 280 x 75 mm Weight: 3,5 kg 10 Catalogues are available for download at

11 Production and Development PKI 1660 PKI 1665 PKI 1670 PKI 1675 Transmission Power Amplifiers The PKI 1660 / 1665 / 1670 / 1675 transmission power amplifiers considerably enlarge the operating range of the PKI 1620 IMSI Catchers and the active monitoring systems PKI 1560 and PKI The increased transmission power covers a larger area and consequently allows the IMSI Catcher to capture more information. In combination with the active monitoring systems PKI 1560 and PKI 1580 it is possible to extend and hold the connection of the captured mobile phone to the BTS. This may be of special importance during mobile use in a car, for example. If several BTS units with different frequency ranges are used with the active monitoring systems or the IMSI Catcher, one transmission power amplifier for each BTS unit with the same frequency is necessary. PKI 1660 Frequency range: 900MHz / 1800MHz / 1900MHz Max. power: 16W Max. amplification: 18dB Power consumption: less than 80W Power supply: 24V Dimensions: 180x100x220 mm Connections: 2x antenna (in/out), power supply PKI 1665 Frequency range: 900MHz / 1800MHz / 1900MHz Max. power: 16W Max. amplification: 18dB Power consumption: less than 80W Power supply: 24V Dimensions: 180x100x220 mm Connections: 2x antenna (in/out), power supply PKI 1670 Frequency range: 900MHz / 1800MHz / 1900MHz Max. power: 16W Max. amplification: 18dB Power consumption: less than 80W Power supply: 24V Dimensions: 180x100x220 mm Connections: 2x antenna (in/out), power supply PKI 1670 Frequency range: 1800MHz Max. power: 50W Max. amplification: 18dB Power consumption: less than 80W Power supply: 230V Dimensions: 340x250x190 mm Connections: 2x antenna (in/out), power supply Tel.: +49(0) Fax: +49(0) information@pki-electronic.com 11

12 Active Cellular Monitoring Systems PKI 1680 GSM Direction Finder Our cellular monitoring devices not only allow monitoring of conversations, identification of telephone numbers, etc., but also the locating of a target mobile phone with an accuracy of 2 m. The PKI 1680 is a handheld device that has been developed for locating of mobile phones. It can be combined with our GSM monitoring systems PKI 1560 and PKI A directional antenna can either be worn on the body or inside the laptop bag. With our PKI 1560 or PKI 1580 you can identify the necessary reception channel, which must be manually entered into the GSM direction finder. In order to locate a mobile phone with the PKI 1680, the target phone must be in transmission mode, which is the case during a conversation. Alternatively, it can be switched into transmission mode with our active GSM monitoring systems PKI 1560 or PKI 1580 or with our IMSI catcher PKI In addition to its field strength display, the PKI 1680 furthermore offers locating via audio control by means of earphones, which is especially useful during covert monitoring operations. The operating range of the PKI 1680 covers the GSM frequencies 900 (channel 1 to 124), 1800 (channel 512 to 885) and 1900 MHZ. Handheld device, antennas, charger, headphones. Dimensions: 120 x 75 x 25 mm Weight: 400 g Power supply: 3.6 V / 1950 mah, Li-Ion battery Frequency range: 900, 1800, 1900 MHz 12 Catalogues are available for download at

13 Production and Development PKI 1700 GSM Direction Finder for Mobile Vehicles The PKI 1700 is a direction finding system that allows locating and tracking of GSM mobile devices. It is equipped with an antenna unit, which can be mounted on the roof of the car, and a controller unit, that displays the direction of the located mobile phone in relation to the position of your car. The PKI 1700 can be used in combination with the active monitoring systems PKI 1560 and PKI 1580, as well as with the PKI 1620 IMSI Catcher, with which the target mobile phone can be switched into transmission mode. Its special advantage is its extremely high sensibility that allows exact locating even over greater distances. For further locating operations, e.g. inside of buildings we recommend our mobile direction finder PKI Direction finding device with display, cables, direction finding antenna for use on car roof. Frequency ranges: 900/1800/850/1900 MHz Operating range: m depending on topology Power supply: 12 V DC Connectors: Direction finding antenna, power supply. Tel.: +49(0) Fax: +49(0) information@pki-electronic.com 13

14 Active Cellular Monitoring Systems PKI 1720 High Power 3G and GSM Jammer The PKI 1720 is a high capacity jammer for the 3G/UMTS frequency range, as well as for GSM frequencies. This highly developed jamming device is perfect for combination with our GSM monitoring systems and the GSM IMSI catcher. By selectively jamming the 3G/UMTS frequencies, all UMTS telephones in the operating area are switched into GSM mode. Once changed into GSM mode, they can easily be monitored with our monitoring systems. Its special advantage is its high capacity, which is of special importance during operation near UMTS base stations, in order to obtain the desired effect. It is possible to separately activate the single frequency ranges of the PKI 1720, which allows specifically targeted operation and an individual adaptation to any requirements. Output power: up to 15 watt (TX power can be decreased by steps for each band seperately) Shielding radius: up to 40 meters Operating temperature: 0-50 C Operating humidity: up to 85% Power supply: V or power converter Size: 25 x 18 x 5 cm 14 Catalogues are available for download at

15 Production and Development PKI 1740 High Power Jammer The PKI 1740 is a high power jammer for all GSM and 3G (UMTS) frequency ranges. It reliably disables all communications within the direct proximity of the PKI The transmission power of each single frequency range can be adjusted or deactivated independently from each other. In combination with our GSM monitoring systems or the GSM IMSI Catcher it is possible to transfer 3G (UMTS) mobile phones specifically onto GSM frequencies, where they can be monitored for further investigations. Due to its high transmitting power, the PKI 1740 is perfect for use in areas with good cellphone coverage. It jams all downlink frequencies between the BTS of the network operator and the mobile phone. By this, the GSM/3G telephone network will not be affected at all. Frequency ranges: - GSM GSM GSM GSM G/UMTS Output power: up to 250W (TX power can be decreased by steps for each band seperately) Dimensions: 72 x 46 x 35 cm Weight: about 80 kg including areals Operating temperature: 0-50 C Operating humidity: up to 80% Accessory: 230V or 110V power supply, or 12 / 24 V DC optional dbi directional antenna 7-8 dbi omni directional antenna Tel.: +49(0) Fax: +49(0) information@pki-electronic.com 15

16 PKI Building PKI ELECTRONIC INTELLIGENCE GmbH GERMANY Großenseer Str.18 D Lütjensee / Hamburg / Germany Tel.: 49(0) Fax: 49(0) information@pki-electronic.com Internet: