Verizon Court Order & Subpoena Compliance Team. Vonage AT&T Sprint Metro PCS T-Mobile AI, 2,

Transcription

1 ( Verizon Court Order & Subpoena Compliance Team Vonage AT&T Sprint Metro PCS T-Mobile AI, 2,

2 The Verizon Wireless Court Order & Subpoena Compliance Team is relocating to Bedminster, New Jersey. Court Order & Subpoena Compliance Team

3 Our Contact Information Our Mission The Verizon Wireless Court Order & Subpoena Compliance Team is dedicated to responding to all lawful process for business and customer information. The team assists the law enforcement community in a professional, knowledgeable and expeditious manner, while maintaining the privacy and security of business and customer information. Our Responsibilities E2f Ensuring all court orders, search warrants and subpoenas are processed confidentially and in compliance with all applicable laws. 0' Providing 24/7 technical assistance for exigent situations and electronic surveillances. 0' Ensuring CALEA compliance, both technically and procedurally. E2f Providing educational presentations for law enforcement organizations and associations, to further demonstrate our commitment to and support of public safety. E2f Coordinating court appearances for Verizon Wireless Custodian of Records. Option 1: Mailing Address & Fax Numbers Option 2: Subpoenas & Search Warrants Option 3: Court Ordered Surveillances Option 4: or life Threatening Emergencies Our Fax Numbers Subpoena Team Court OrderTeam 911!Exigent ONLY Our Mailing Address Hours of Operation The Court Order & Subpoena Compliance Team is available seven days a week, 7:00AM to 8:00PM. Option 4, for or Life Threatening Emergencies, is available 24 hours!7 days a week

4 IMMEDIATE THREAT/PUBLIC SAFETY MADE PURSUANT TO 18 U.S.c (c) AND/OR STATE STATUTE: TO: Cellco Partnership d/b/a Verizon Wireless Custodian of Records Fax: RE: Cellular No: ( ) Call to: ( Destination Number ) --::-c--::--- on =-- at = ~ Date Time Our agency is handling a situation involving the immediate danger of death or serious physical injury to a person. Accordingly, I request a copy of the Verizon Wireless information to be immediately sent as instmcted below. Information for verification purposes: Name: RankiTitle: Law Enforcement Agency: Address: Phone No: Fax No: Please provide the following information to the above fax number as soon as possible: By signing this form, I swear to the facts contained herein. Requesting officer/agent signature:, Date:

5 Explanation Form For Calls With Cellsites SWITCH DATE TIME ORIG CIG TERM CIG DIR MDN CALLED # CPN SZR This is the This is the date This is the start This is valid eel! This is valid cell MO=Outbound This is your switch that the of the call time of the call site for outgoing site for an call target # call is hitting off calls. Valid onlv incoming call. of on MO calls Valid only on MT calls, MT Incoming call MF-Incoming call to Yoic In rare cases, it CQuld be mobile forwarding MM-Mobile to Mobile call LL, en, TR all pertain to routing information and will not be relevant to your investigation If the call was This is the This is the an out going calling party # duration of the call=then the cal! in seconds outgoing # that your target dialed will be in this column If the call was If the call was an incoming an outgoing #=then your ca!l=then your target # will target # will be appear this in this column column If the call was an incoming call=then the incoming # to your target will appear in this column Codes: *86 is voice mail retrieval #225 is checking account balance #646 is checking minutes #777 is data/web services #738 is prepaid voic retrieval #729 is adding minutes for prepaid '67 is used to block the mobile # '82 is used to unblock the mobile #

6 Explanation Form For Historical Records Network Element name This Is the switching equipment that transacted the call. A switch Is nambed by the basic geographic area it covers, Switches rout calls for hundreds of cell sites. This Is This is the number your target dialed to Initiate the # call. For Inbound calls this number will be the same as the CUST ACCT column and for outbound calls this Is the number your target dialed. Call DlrecfIon Seizure nt Tm Seizure Duration First Servlna Cell Slte Last ~ervtna Cell Site Callinn Parfv Numher This Is the type of cau, this Is the exact This is the This Is the cell site # for This;s the cell site # for This IS the calling party e.g. inbound. date and time of duration of the OUTGOING calls ONLY INCOMMING cans that Initiated the can. If outbound, or the start of each call In seconds ONLY the call is outbound this volc . cal! column will be the same inbound calis display the following numbers: o & 6. Calls to volcemall display the!euer nf." Outbound calls display the following numbers: 1 & 3 Mobile to Mobile calls do not capture cell sites and display the number 2. Any other lauer or number Is a routing or unknown cal1 type and does not detail actual transactional data for a completed call. as the CUST ACeT number. If the call is inbound, this is the number that diated your target. Codes; '""86 is voicemall retrieval #225 Is checking account balance #64615 checking minutes #777 Is data/web services #73B Is prepaid volcemau retrieval #729 Is adding minutes for prepaid *6715 used to block the mobile # "'82 Is used to unblock the mobile #

7 Law Enforcement Resource Team. (lert) FBI TICTU Spring 2008 '.,.. -.'" '-- '

8 Company Overview Verizon Wireless began its coast-to-coast venture on April 4, 2000 by combining the domestic US operations of Bell Atlantic Mobile, AirTouch Communications and PrimeCo Personal Communications On June 30, 2000 Bell Atlantic and GTE merged completing the creation of Verizon Wireless by adding GTE wireless assets Verizon Wireless is headquartered in Basking Ridge, NJ Duplicate Limited to (name of agency) Distribution Limited to the Law Enforcement Community

9 Faets-at-a -G la nee Wireless Phone Customers Million Employees - 69,000 U.S. Market Coverage - 49 of top 50 and 97 of top Digital Network Technology - Code Division Multiple Access (COMA) Stores & Kiosks - 2,400 Switching Centers Duplicate Limited to (name of agency) Distribution Limited to the Law Enforcement Community

10 Leader in Ire.. Voice & Data Services Built the nation's first wide-area wireless broadband network Delivered the nation's first wireless consumer 3G multimedia service Launched the most comprehensive mobile music service in the world Has the highest customer loyalty in the industry based on lowest-in-industry churn Duplicate Limited to (name of agency) Distribution Limited to the Law Enforcement Community." {"''''''.' ":

11 law Enforcement Resource Team The LERT is centralized and handles all requests from local, state, county and federal law enforcement nationwide Duplicate Limited to (name of agency) Distribution Limited to the Law Enforcement Community, -"

12 \...',.-' lert Mission The Verizon Wireless LERT is dedicated to responding to all lawful process for business and customer information. We assist law enforcement personnel and members of the legal community in a professional, knowledgeable and expeditious manner while maintaining the privacy and security of business and customer information. We provide informational presentations for law enforcement organizations and associations to further demonstrate our commitment and support of ublic safety P Duplicate Limited to (name of agency) Distribution Limited to the Law Enforcement Community

13 lert Responsibilities Ensuring all court orders, search warrants and subpoenas are processed confidentially and in compliance with all applicable laws and company policies Providing 24x7x365 technical assistance for electronic surveillances Providing 24x7x365 support for exigent situations Ensuring CALEA compliance both technically and procedurally Coordinating court appearances for a Verizon Wireless Custodian of Records Providing informational presentations for law enforcement org~~at~q~t~'tbqn~s;gciations agency) Distribution Limited to the Law Enforcement Community

14 General Information Company Name: Cellco Partnership d/b/a Verizon Wireless Mailing Address: Verizon Wireless Normal Hours of Operation: 7am-8pm Sun-Sat Exigent Situations: 24x7 on-site (prompt "4/1, should also be used for emergencies that may result in loss of information) Duplicate Limited to (name of agency) Distribution Limited to the Law Enforcement Community

15 LERT Hotline - Prompt 1: General Information - Prompt 2: Subpoenas & Search Warrants - Prompt 3: Court Ordered Surveillances - Prompt 4: Exigent (24x7) Duplicate Limited to (name of agency) Distribution Limited to the Law Enforcement Community

16 lert Fax Numbers Subpoenas & Search Warrants: Court Orders: Eyi(l~nt Duplicate Limited to (name agency) Distribution Limited to the Law Enforcement Community

17 Contact Information Supervisor - Subooenas & Search W~rr;mts: Supervisor - Court Orders/Exigent Situations: Associate Director - Law Enforcement Resource Team: ~r. Ana Iyst - CALEA:. Manager - CALEA: Director - Law Enforcement Resource Team: Duplicate Limited to (name of agency) Distribution Limited to the Law Enforcement Community '". "."i':'

18 Court Order roup Staffed on-site 24x7 Responsible for all surveillances, per court order requests, exigent situations, requests for location information and any content requests (Le., text messages) Goals -Exigent Situations - immediately -Surveillances - same day -Per Court Order Requests - within 24 to 48 hours Duplicate Limited to (name of agency) Distribution Limited to the Law Enforcement Community

19 Court Ordered Surveillances Fax required worksheet along with court order -Names of authorized points of contact -Address (street, city, state and zip code) -Billing contact name and number All court orders must have a complete worksheet with set-up and billing information when faxed in order to be processed in a timely manner Duplicate Limited to (name of agency) Distribution Limited to the Law Enforcement Community

20 Exigent Situations Complete, sign and fax exigent formjletter* Call Release of information LEA to follow-up with legal process, dependent on situation *If fax is unavailable because the officer/agent is in the field, we will use a call back verification process. Duplicate Limited to (name of agency) Distribution Limited to the Law Enforcement Community

21 Tracki ng I Location Information Cell site and sector information is available for completed calls and text messages Approximate distance from cell site is available for Lucent and Motorola switches, Nortel currently limited to cell and sector calls are Phase II compliant but output delivered is dependent on the answering point's equipment Cannot obtain information in a timely manner for a call in progress if the mobile number is unknown Cells are 1 sector throuah 6 sector and vary..djllilicatei.imited to (name of th roug h ou t ne tw or 1\ agency) Distribution Limited to the Law Enforcement Community

22

23 CALEA VZW Law Enforcement Resource Team is centralized and responsible for all surveillances VZW Delivery Functions and the various Intercept Access. Points are geographically diverse for load-sharing and. redundancy Delivery methods -Circuit Switched audio: dial-out from all switch platforms -Data delivery: VPN or Frame Relay Duplicate Limited to (name of agency) Distribution Limited to the Law Enforcement Community

24 CALEA (cont'd) Switched Services include Nortel, Lucent and Motorola. Call Identifying Information, Call Content, Short Message Service, Dial-up Data and WAP 1.0 are subject to surveillance from the switch or an adjunct platform Broadband Services VZW provides lawful intercept for Broadband Services The intercept access points provide the Delivery Function a copy of all packets to and from the target based on the IP assigned to the MIN of target Duplicate Limited to (name of agency) Distribution Limited to the Law Enforcement Community

25 CALEA (cont'd) Web-based services are intercepted the same as Broadband Services Push to talk over cellular services (PoC) VZW does offer PoC services VZW provides lawful intercept solution for PoC Intercepted the same as any other service using the packet data network as its transport TIA-1072 formatting applied at DF Duplicate Limited to (name of agency) Distribution Limited to the Law Enforcement Community

26 implemented by Verizon Wireless Circuit Switched J-STD-025 Punch list capability J-STD-025A Packet Data J-STD-025B Push to Talk over Cellular l1a-1072 June 30, 2004 May 2004 May 14, 2007 March 2005 May 14, 2007 December 2006 icate Limited to (name of agency) Distribution Limited to the Law Enforcement Community.., ::-:

27 Subpoena G Responsible for all subpoenas, search warrants and the coordination of court appearances Goals -Subpoenas & Search Warrants - 14 days or within compliance time frame -To accommodate same or next day emergency requests (volumes permitting) Duplicate Limited to (name of agency) Distribution Limited to the Law Enforcement Community. '";" "

28 Termlno Subscriber - name, address, contact numbers, activation date, and number of mobiles on the account for the most current customer unless a timeframe is provided Social Security Number - the social security number of the subscriber (not available or valid on most prepaid accounts) Tolls - date, time and length of call for outgoing calls, only nonrestricted inbound Call Detail Records - date, time and length of call for outgoing and incoming calls; captures outbound digits and incoming numbers Features - list of the features subscribed to by the customer ESN - electronic serial number of the phone Payment History - date, source and amount of payments Calls to a Number - date, time and length of calls for all mobiles that called a specific destination number Location - cell site that handl...led the c;:all (requires a court order) -U-uplfcate Imlted to (nam~ of agency) Distribution Limited to the Law Enforcement Community

29 Available Information Type of information Current Retention Subscriber - post paid Typically 3-5 yrs* Call detail records/cell sites 1 rolling year Text message detail 1 rolling year Text message content 3-5 days IP session information 1 rolling year IP destination information 30 days Pictures only if on web site** Bill copies - post paid Last 12 months Payment history - postrfdaj(fj Limited tc (I ~liy 3-5 yrs* *ma y va ry b y former com p an y C:lgc[](;Yeustomer can add or delete pictures at any time Distribution Limited to the Law Enforcement Community

30 Information Stored In the phones Dependent in some cases on make and model Managed by person in possession of phone Types of information: - Text messages - Contact list/information - Calendar/schedule - Pictures - Downloads from internet (Le., games, ring tones) - Dialed numbers - Incoming numbers Duplicate Limited to (name of agency) Distribution Limited to the Law Enforcement Community

31 Sample Ca e w I Cell Sites Switch Date Time Orig C/G Term C/G Dir MDN Called # ESN CPN Szr Plymouth_Meeting2 7/13/ :10: MF aOab6c Branchburg1 7/13/ :10: MO *86 2aOab6c Branchburg1 7/13/ :00: MT aOab6c Plymouth_Meeting2 7/13/ :00: MF aOab6c Branchburg1 7/12/ :07: MO aOab6c /11/ :09: MT aOab6c /11/ :31: MO aOab6c /11/ :31: MO aOab6c /11/ :30: MO aOab6c /11/ :30: MO aOab6c /11/ :03: MT aOab6c /11/2006 9:27: MT aOab6c agency) Distribution Limited to the Law Enforcement Community

32 ;" Description ()'f Ca Detail Switch: The switch the call is hitting Date: The date of the call Time: The time of the start of the call (based on the switch) Orig C/G: Valid cell site for outgoing calls (Only for MO calls) Term C/G: Valid cell site for incoming calls (Only for MT calls) Dir: - MO=Outgoing - MT =Incoming - MF=Incoming to voic and in rare cases, mobile forwarding MDN: Your target number Called #: If outgoing, this is the number your target dialed ESN: Electronic Serial Number of your target CPN: If incoming, this is the number that called your target Szr: Duration of the call ifi~~i'\li;i~ited to (name of agency) Distribution Limited to the Law Enforcement Community

33 "5'",",> ampe,:"" "':<'/ Message Detail MDN MSG SND - DT - TM MSG - DLVR -- DT TM ORIG ADDR DEST ADDR /15/2006 7:25 5/15/20067: /16/2006 8:27 5/16/20068: :, /16/20067:15 5/16/2006 7: /31/200616:00 5/31/200616: ,i /4/2006 9:56 6/4/2006 9:56 endofitem@ebay.com : /8/2006 6: 56 6/8/2006 6: ' /12/200614:40 6/12/200614: /13/20068:12 6/13/20068: : /13/ :20 6/13/200617: /13/ :49 6/13/ : /13/ :21 6/13/ :21 endofitem@ebay.com ' /13/20067:52 6/13/20067: /13/20067:52 6/13/2006 7: agency Distribution Limited to the Law Enforcement Community

34 Useful Websites - registry for internet numbers - land or cell number, company - phone and equipment manuals - user guides - number portability administration center government website for CALEA Duplicate Limited to (name of agency) Distribution Limited to the Law Enforcement Community

35 About Vonage: Vonage is a leading provider of broadband telephone services with over 2.2 million subscriber lines as of December 31,2006. Vonage's VolP technology enables anyone to make and receive phone calls with a touch tone telephone almost anywhere a broadband Internet connection is available. Vonage Service: Vonage provides service to of the 18,549 US rate centers, offering local numbers in approximately 250 area codes. Vonage customers can make VolP calls using traditional phones (corded or cordless), connected to an Adapter or Wi-Fi router/adapter or from non-traditional devices and services, such as a Wi-Fi phone, V-Phone or soft phone service on a computer. Vonage and Law Enforcement: Vonage supports the efforts of law enforcement and can quickly provide subscriber date and historical call information in response to a subpoena or evidence of exigent circumstances or immediate threat to life. Additionally, by May 14, 2007, Vonage intends to support FCC mandated electronic' surveillance requirements. Verify Vonage: Vonage has created a way for LEAs to verify that a phone number in question belongs to a Vonage customer. Simply dial and follow the voice prompts. After entering the ii-digit (including leading 1) telephone number to verify, an automated response will let you know whether the number is being utilized by a Vonage customer. Subscriber Data and Gall Records: In response to a subpoena, Vonage can provide subscriber's name, address, telephone number and account start and end date, billing name and address, shipping name and address, E911 address, credit card and checking account information, call detail records (which includes session times), types of services utilized, Internet-Protocol (IP) Address, Media Access Control (MAC) address, address and contact information. Non-Emergency Subpoena Requests: Hours of Operation: 8:30 AM to 5:30 PM (Monday - Friday - ET) Response time for valid subpoena requests: 3-5 days Emergency Requests (Immediate TIHeat to Life): Emergency (life-threatening situation) Requests must be followed by the proper legal demand within 48 hours. We will verbally provide the information, and once we have received the proper legal demand, we will follow-up with a hard copy. Hours of Operation: 2417 Phone: : Please state immediately that you are from a LEA with an emergency threat to life situation

36 Electronic Surveillance: Vonage will use a Trusted Third Party solution provided by VeriSign's NetDiscovery service for CALEA compliant lawful interception of communications by May VeriSign's NetDiscovery network thus becomes the demarcation point for law enforcement agencies to access intercepted call data and call content. Law enforcement agencies must contact VeriSign, and are urged to coordi~ nate connectivity as early as possible to allow adequate time for change management processes and testing. Additionally, most LEA Collection Systems will need to complete development or configuration changes to decode VolP call content. Law enforcement agencies are urged to contact their Collection System vendors as soon as possible. Call Data and Content Delivery: Vonage's intercepted call data is transmitted to Veri Sign's NetDiscovery network for mediation and delivery to law enforcement. Vonage's intercepted call content (voice) is transmitted to Veri Sign's NetDiscovery network for correlation with call data and delivery to law enforcement. Intercepted call content is delivered in EIAITIA Tl.678 VolP format which requires a TCP/!P transport facility for delivery to law enforcement. VeriSign supports a variety of TCP/IP connection options for law enforcement agencies to use for interconnect. l!i Virtual Private Networks (VPNs) - are the preferred method of connectivity. VPNs can be established in a relatively short period of time, and offer a considerable level of security. VPN Specifications: Authentication Method: Encryption Scheme: Diffe-Hellman Group: Encryption Algorithm: Hashing Algorithm: Main or Aggressive Mode: Lifetime (for renegotiation): Pre-Shared Key or I PSEC Certificates IKE Group 2 3DES SHA-l Main Mode seconds m Private circuits - such as frame relay and point~to~point circuits may also be used for call content delivery, but typically take longer to implement, and involve recurring provider fees. Law enforcement agencies are responsible for submitting provisioning requests for private circuits and paying all associated fees. Frame Relay Specifications: Provider: CIR: Poi nt -to-poi nt Fractional T-l Sprint or AT&T 56K (Per Intercept, Call Data), 256k (Per Intercept, Call Content) 56k (Call Data) 512K (Call Content) II Dial-up circuits - may used for cal! data delivery only, but have inherent bandwidth limitations and have proven to be less reliable than other methods. Toll charges may also apply. *Note: Dial-up circuits do not offer adequate bandwidth for transporting call content. Connectivity Contact Information: Please contact VeriSign NetDiscovery Security Office' connectivity if you have not already done so. to request assistance in coordinating Electronic Surveillance Requests: Prior to May 2007, Vonage will publish a complete LEA Support Services guide similar in format to that recommended by the FBI. This guide will provide additional information on how to contact Vonage with an electronic surveillance request. To request a copy of this guide when available, please LEASupport@Vonage.com

37 FS-Referral rev NeuStar, Inc. NEUSTAR' Legal Process (Subpoena, Court Order, Search Warrant Statutory Authorization, Emergency Situations or Written Certification) Contact Instructions LAW ENFORCEMENT REFERRAL GUIDE,, Instructions for Record Production & Technical Assistance, + For prompt handling, ALL Legal Process should be made out to the appropriate Service Provider but faxed, mailed, or delivered to the NeuStar's Fiduciary Compliance office. + Legal Process must include return instructions, contact information (contact name, return address & contact telephone number(s)) in order to ensure timely and accurate responses. + Emergency situations or calls after business hours should be directed to (Option 1). + The following contact numbers are available on business days, from 8:30 a.m. to 5:00 p.m. (Eastern Time) For... + Records Production Subpoenas, Court Orders Search Warrants Statutory Authorizations Mailing Address NeuStar, Inc. Then Refer To... ~Technical Assistance for Electronic Surveillance Court Orders Written Certifications ~ Emergency and After Hours Requests- Records Production or Technical Assistance

38 ~: at&t

39 Day to Day Operations at the Nee A call rings into AT&T Mobility's National Compliance Center (NCC) in North Palm Beach Florida. It's 6:51 AM and the 911 operator on the line advises they have just received a callfirom a customer whose home is in the process of being burglarized. As officers arrive on the scene, they realize the customer has been abducted. Assistance from an NCC analyst provides law enforcement with information that quickly helps them determine which direction the car is traveling. They are able to get ahead of the car and make a traffic stop. They discovered the victim handcuffed and duct taped. In addition, the attacker had two loaded guns in the car. San Bernadino Sheriff's Office credits assistance ji-om AT&T with saving this woman's life. 10: 45 PM an individual calls 911 and tells them their friend is tlying to commit suicide. The NCC is able to provide location information that helps the Florida Highway Patrol locate the victim and get her to the hospital in time to save her life. Unfortunately these calls are typical - the NCC receives an average of 1 00 life/death emergency calls each day K calls, 150K requests, 500K records produced

40 LOCATOR TOOL Available in near real time in areas with strong coverage AND e-9jj Phase II capability Phone 111ust be on Results may be ed at pre-determined intervals Costs will apply in non emergency situations for this. service Location orders or Exigent Circumstances - Require paperwork

41 Dobson Communications 1.7 M Subscribers AT&T Mobility Compliance Center assumed all requests as of Court Ordered surveillance work was assumed in early February Provisioning on both networks when applicable - Maintain those connections to the Dobson legacy network until further notice. Planned l1'zigration to AT&T billing systeln early SUlnmer TDMA Network has been turned dolivn

42 Dobson Network nligration still in planning stages Market Areas AK, AZ, KS, KY, MD, MI, MO, NY, OR, OI( P A, VA, WI, WV

43 TDMA Network AT&T Mobility TDMA network turned down early March 2008 TDMA phones are no longer able to call 911 for assistance unless they pick up another carrier's network

44 Packet Data Ongoing testing with Quantico 3 Switch Vendors: Lucent, Ericsson, Nokia 3 unique streanls of data to LEA connection AT&T Mobility is pursuing different solutions and working with vendors to fine tune data streams All network elements are provisioned due to capacity for each surveillance

45 Requests Pursuant to Court Orders Order is received with a request for subscriber/toll information Records are sent with a response requesting that future requests are forwarded without an additional copy of the court order and a reference to the AT&T internal file nlllnber. Future requests pursuant to court orders are sent in referencing the AT&T Mobility File number. Following these steps will assist in a more timely response for all future requests

46 Encrypted Responses Voltage used by AT&T Mobility to send encrypted e mail responses to your agency Silnple registration required with Voltage for first time users. Agency must have the ability to validate the encryption keys via the internet

47 Contact Information AT&T Mobility's Compliance Center is staffed 24X7-365 Option 1 - Subpoena Option 2 - Court Orders Nationwide cell site lists are sent monthly to Quantico and placed on internal web site for field offices

48 cricket Subpoena Compliance Law Enforcement Hotline: To obtain records/information or provision an Interception, serve: Cricket Communications, Inc. or on behalf of Leap Wireless International, Inc., Hargray Wireless, LLC, or LCW Wireless, LLC: on our Registered Agent for Service of Process in the applicable state. Transmittal options to Subpoena Compliance: Mailing Address: Custodian of Records Cricket Communications. Inc. Pen register/trap & trace or Wiretap, or scan (.pdf or.tit) to: (follow with mailed hard copy of order) General subpoenas, orders, or search warrants, or scan (.pdf or.tit) to: Or, request may be faxed to: Response time is approximately 2-3 weeks. A fee may be assessed for production of requested information. PLEASE INCLUDE A SECURE RETURN ADDRESS FOR RESPONSE. EXPEDITE FEES: (These are in addition to any charges for production of records) AUTHORIZATION FOR THE SPECIFIC EXPEDITE SERVICE DESIRED MUST BE INDICATED PROMINENTLY ON THE FAX COVER SHEET OR THE SUBJECT LINE OF THE SUBMISSION - For example, "One business day expedite authorized" FEES: One Cricket Business Day turnaround: $loolrequest 2-3 Cricket Business Days tumaround: $SOIre.quest One Cricket Business Week turnaround: $2S/requcst. REQUESTS VVILL BE COMPLETED BY 5:30 PM Pacific Time ON THE FINAL DAY OF THE EXPEDITED TURN-AROUND TIME (for example, a one day expedite request received Monday moming will be completed by 5:30 pm Pacific Time Tuesday evening). REQUESTS RECEIVED AFTER 5:30 PM Pacific Time of a Cricket business day WILL BE ENTERED AS BEING RECEIVED AT 7:00 AM Pacific Time ON THE NEXT BUSINESS DAY (for example, a one day expedite request received at 6 pm Pacific Time on Monday evening will be completed by 5 :30 pm Pacific Time Wednesday evening). THIS MESSAGE IS INTENDED ONLY FOR THE USE OF THE INDIVIDUAL TO WHOM IT IS ADDRESSED AND CONTAINS INFORMATION THAT IS PRIVILEGED, CONFIDENTIAL AND EXEMPT FROM DISCLOSURE UNDER APPLICABLE LAW, If the reader of this message is not the'intended recipient, or the employee - or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, lease notify us immediately. TI1~_~_k you!

49 metmpcse Permission to speak freely, Cl l.aw Enforcement Agencies: Welcome to metropcs.! Please read for new information!!! MetroPCS gives its customers Permission to speak freely." with unlimited calls for one flat fee pa'ld 'In advance of service. MetroPCS currently operates in the greater metropolitan areas of Atlanta, Dallas/Ft. Worth, Detroit, Sacramento and San Francisco as well as central and southern Florida. The Subpoena Compliance Group consists of a Manager, one Supervisor and four Excellent Compliance Analysts. We receive, review, and process all law enforcement requests centrally in the Corporate Office in Dallas, TX. We handle 911 calls, exigent/emergency situations, routine subpoena and court order requests, pen registers, Title III wiretaps and fraud cases. We represent MetroPCS in all state and federal trials as evidentiary witnesses/custodians of records. MetroPCS retains call detail records for up to 6 months; after which they are no longer available. Because MetroPCS allows its customers unlimited use of its service, call detail reports are typically much more voluminous than reports by other carriers. Therefore, beginning April 15, 2006 MetroPCS will charge $50 for call detail records for more than 15 days. Call detail records without cell site location can be obtained with a subpoena. Call detail records with cell site location will require a court order. MetroPCS is highly motivated to attain its goal of responding as quickly as possible to legal requests, however, technical issues do arise that sometimes lead to delays. To further assist us in expediting your request, please provide contact information, fax number and an address with your subpoena. is the fastest method of receiving results. Voic Voic s are kept for approximately seven (7) days unless deleted by the customer. Text Messages: MetroPCS does not store text messages. Cell site location requires a court order. Cell site address lists are updated frequently as sites are added and are available upon request. MetroPCS charges a fee for some services: $50 for call detail records for more than 15 days $50 for each voic password reset Pen Registers: $200 set up fee, plus $20 per day maintenance with a minimum fee of $500 Wire Taps: $400 set up fee, plus $40 per day maintenance Court Ordered Requests for On-going Weekly Call Detail Records: $200 per target number (e.g., fugitive situations) $200 for CFID changes for pen registers and/or wire taps All requests received by fax or generate an automatic receipt of request. The automatic response will provide a link to a website that has been created for checking status. is the fastest method of receiving results. Because MetroPCS allows unlimited calls, a call detail report can easily be too large to fax, so it is advised that you narrow your timeframe as much as possible. metropcs Permission to speak freely. 0 The corporate offices of MetroPCS are located at

50 Corporate Security Law Enforcement Manual A guide to understanding Sprint's processes and procedures in the compliance with. legal demands Created on 3/20/200710:12:00 AM

51 LEA Manual Outline - INTRODUCTION - Important Numbers Reference - Section 1 (REQUESTS) - Section 2 (EMERGENCIES) - Section 3 (EXPEDITED REQUESTS) - Section 4 (TRIALS & APPEARANCES) - Section 5 (MISCELLANEOUS REQUESTS) - Section 6 (Reference Page) Frequently Asked Questions Glossary - Appendix (Sample Forms) Created on 3/20/200710:12:00 AM 2

52 INTRODUCTION This handbook was created for law enforcement agenciesto' help clarify the processes and procedures implemented by Sprint for the compliance of legal demands. The handbook includes contact information, billing information, service of legal demands on Sprint, types of legal demands required and miscellaneous general information for your future reference. With the rapid deployment of new technologies and service areas and the continued growth of our customer base, Sprint looks forward to fostering and maintaining good relationships with law enforcement agencies nationwide. Your comments and suggestions for improvements are appreciated. Please Note: this handbook is created to assist LAW ENFORCEMENT. Please do not release any information to customers that is not specified in the customer request section. Created on 3/20/200710:12:00 AM

53 IMPORTANT PHONE NUMBERS Corporate Security Subpoena Compliance Electronic Surveillance Emergency Line for PSAPS Exigent Line for Law Enforcement direct Subpoena Compliance Fax Electronic Surveillance Fax Trial Line E-Compliance Immediate Response Request Created on 3/20/200710:12:00 AM

54 SECTION 1 REQUESTS SUBPOENA COMPLIANCE 'Subpoena Compliance responds to requests of a historical nature, as described in the table below, When responding to requests, the delivery methods supported by Subpoena Compliance are Fax, , US mail, FedEx (your acct number needed). With some request types, a fee is involved. Reguest tlllh~ Reguired legal Results Wording demand SUBSCRIBER SUBPOENA OR Name, Address, Date account Please provide INFORMATION COURT ORDER was opened, ESN (Electronic subscriber information Basic Serial Number). pertaining to this number from to. [If no time frame is given, you will receive the most current informationl SUBSCRIBER SUBPOENA OR Name, Address, SSN, DSL, Please provide INFORMATION COURT ORDER DOB, Date account was opened, subscriber information ESN (Electronic Serial pertaining to this Number), all numbers associated number with the account. from to. [If no time frame is given, you will receive the most current information] CDR (CALL SUBPOENA w/out cell Incoming and outgoing digits Please provide all DETAIL site - COURT ORDER w/date & time, for the most incoming and outgoing RECORDS) w/cell site recent 45 days, 'Cell site can be calls for this number provided if specifically for most recent requested-court order needed* 45 days, *CDR Is only available for the most recent 45 days* BILLING SUBPOENA OR Bill reprints, showing all billable Please provide all billing RECORDS COURT ORDER calls including outgoing digits, records for this number from to IP REQUESTS SUBPOENA OR Name & time stamps Please provide all COURT ORDER subscriber information for IP Address: from to PAYMENT SUBPOENA OR date & time, type of payment, Please provide any & all INFORMATION COURT ORDER account number (other payment information on information available upon account: Created on 3/20/200710:12:00 AM 5

55 ( request). SHIPPING SUBPOENA OR Information on where the Please provide shipping INFORMATION COURT ORDER account was set up. information for account: or telephone number: and where the account was set UP. Calls to SUBPOENA OR All incoming calls to the Please ru n a reverse Destination COURT ORDER requested number for the number search on this Search specified date & time. number from to LONG DISTANCE SUBPOENA OR Incoming digits and subscriber Please provide the trace TRACES (LDD) COURT ORDER information on requested calls. results for a call that was received on this long distance line at this date & time Tower Search Court Order All calls that utilized a specific Please provide incoming tower during a specific time and outgoing calls on frame cell towers at or near (address) from to Greenwich Mean Time Retail Store SUBPOENA OR DVD of available video from Please provide available Surveillance COURT ORDER retail store cameras (some video from the Sprint Tapes locations will be on VHS tape retail store located at and available in store) (address & store number if known) on (date) between the hours of (start time) and (end time). Pursuant to Court Order Requested Information as authorized by Court Order ELECTRONIC SURVEILLANCE The request types handled by Electronic Surveillance group are stored communication requests and requests that go into the future. With some request types, a fee is involved (see fee schedule). Reguest tlll2e Reguired legal Additional Results Wording demand Documents LOCATION BASED COURT ORDER OR Precision GPS coordinates Please provide SERVICES CUSTOMER CONSENT Location form (longitude and GPS, Precision (Information provided latitude) Location, to LEA) and/or latjlong coordinates for this number PEN REGISTER / COURT ORDER Completed Real time Please install a TRAP & TRACE(data, CALEA incoming and Pen Registerj iden, interconnect, coversheet. outgoing digits Trap & Trace Created on 3/20/200710:12:00 AM

56 ( PCS, and Readylink) WIRETAP / TITLE III (T-III) (data, iden, interconnect, PCS, and Readylink) CONTEMPORANIOUS BILLING RECORDS STORED ELECTRONIC COMMUNICATION *57 for Cable COURT ORDER COURT ORDER COURT ORDER / SEARCH WARRANT/ CUSTOMER CONSENT FORM Customer Consent LEA must have a CALEA feed established. Completed CALEA coversheet. LEA must have a CALEA feed established. Stored Communications request form *57 request form (cell site provided on... (provide if authorized). the telephone # and Federal/State statute). Real time Please install a incoming and Wiretep/T-III outgoing digits & on... (provide a real time audio. minimum of (Cell site, text, the telephone 3G and ready link number & services provided Federal/State if authorized in statute). order and specified on CALEA Coversheet) Incoming and Please provide outgoing digits. contemporaneo (Cell site, text, us billing and ready link reports for this services provided number if specified in for court order). the time frame (THIS IS NOT of to REAL TIME) voice mail Please messages, provide... (List text/sms the type of messages, stored content, electronic photographs, communication videos, web you need. traffic, tower searches SECTION 2 EMERGENCIES Procedures have been established by Sprint to assist PSAPS and law enforcement during emergency situations. Depending on the situation, we can provide subscriber information, call detail records, cell site information, precision location of mobile device (GPS), real time pen register, or real time audio interception (wiretap). Emergency Exigent Circumstances Request For Sprint, an exigent circumstance is an IMMEDIATE LIFE OR DEATH situation as determined by law enforcement that involves a Sprint pes or Nextel mobile device. To initiate the exiaent nrocess, please contact the Electronic Surveillance Unit at ueated on 3/20/200710:12:00 AM 7

57 ( 911 Emergency Calls Public Safety Answering Point Officials needing assistance with 911 calls made by Sprint and Nextel mobile devices or 3 rd party 911 calls relating to a Sprint or Nextel customer are to contact the Electronic Surveillance Unit. A 911 call MUST have been placed for information to be released. Please contact the Electronic Surveillance Unit at to initiate the 911 Emergency Call procedures. Section 3 IMMEDIATE RESPONSE REQUESTS At times there is a need by law enforcement to obtain the requested information in a rushed manner, but the situation is not an emergency. For those circumstances, Sprint created a special process of taking a legal demand out of the normal course of business and expediting it to a response time of four to eight business hours after receiving the legal demand. This is known as our Immediate Response Request (IRR) process. We charge a nominal fee for expedited responses. Working requests out of order involves additional costs for Sprint due to technical systems issues, additional delays for other requests and more phone calls since older legal demands are delayed. However, no charge is incurred by the requesting agency if no records are found for an expedited request. This is a premium service and not subject to the confines of 18 USC 2706 as we are not charging for the records but for the premium expedited service. Because of past difficulties in obtaining reimbursement for this service, our company only releases expedited records upon payment in full for the service. The IRR group may be reached at and is available Monday - Friday, 8 :00 am - 5: 45 pm, Central time. I ney may also be reached via at SECTION 4 TRIALS & APPEARANCES The Sprint Subpoena Compliance Trial Team offers trained custodians of record to appear and introduce records or explain company policies, practices and procedures at legal proceedings. Only these designated custodians are authorized to give testimony regarding Sprint customer records in most cases. Custodians of record are based out of the Sprint offices in Overland Park Kansas and Reston Virginia. We do not maintain Created on 3/20/200710:12:00 AM 8

58 local representatives in other markets and store personnel lack access to call detail and other frequently asked information required for most appearances. For occasions where more expert and specific information is needed on the characteristics of individual network elements, the Trial Team coordinates the involvement and appearance of Sprint network engineers. In addition to appearances at legal proceedings, Sprint subject matter experts may be available for speaking engagements at workshops and seminars. Topics covered include telephone features review, how to request documents/assistance from Sprint and Sprint network capabilities. Because of Sprint's nationwide network presence, there is a large demand for appearance services. Legal proceeding appearance requests with less than two weeks' notice may not be fulfilled. Seminar and workshop appearance requests with less than four weeks' notice may not be fulfilled. In addition to a subpoena for court appearances, pre-paid travel arrangements must be made by your office in order to guarantee an appearance. To coordinate an appearance or for more information, please contact the Trial Team at Subpoenas and other documents may be sent via fax to, Section 5 Miscellaneous Requests and Contacts Personnel records for Sprint employees: call the Sprint Legal Department at for further assistance. Sprint Legal Department Fraud Management for Customers Fraud Management for Law Enforcement Long Distance Service for Customers Sprint pes Customer Service Created on 3/ :12:00 AM 9

59 What is your legal name? o Sprint Nextel Corporation SECTION 6 Frequently Asked Questions What restrictions apply when I want to obtain records via ? o We are only authorized to send Sprint records to a recognized government addresses. If the agent does not have a government address then we cannot send it via . Any records that are sent via will be encrypted using Entrust encryption. Agencies not currently using Entrust will be required to download a small program from the Entrust website in order to decrypt the records. I Electronic Surveillance Fee Schedule (NO FEES APPLY FOR PSAP REQUESTS!!!!) Type of Request Fee Notes Pen Register Trap and 1) Implementation fee per Implementation is capped Trace & Wiretaps for: market per $2000 for the entire - iden voice - $400 $2000) surveillance. - iden digital dispatch - iden packet data 2) Daily maintenance per No cap on daily - cdma voice technology: maintenance. - cdma data - $10 NOTE: If markets or Note: No fee for text Note: No fee for text technology are added after message or Ready Link message or Ready Link initial implementation the intercepts. intercepts. cao of $2000 still aoolies. Late extension to order Applicable implementation Daily fees apply. (requested after initial fee. surveillance has expired) Stored Electronic $120 for pictures and Fee applies for all the Communications videos applicable stored $60 for communications per $60 for voic mobile number or $30 for text messages address. Contemporaneous Billing $50 each time information CDR's will be provided is sent when requested or on an agreed to interval. Account Takeover $300 per target account LEA takes responsibility for plus any accrued charges any billed amount on on subject account subject account. Keeps accou nt from being suspended for nonpayment. Not always 100% effective. May not be transparent to subject. Precision Location / GPS $25 initial pinq + $20 Provides real-time GPS Created on 3/20/ : 1 2:00 AM 10 I

60 additional ping location information on mobile device. NOTE: No fee in Exigent, PSAP, or customer consent situation. Cell Site / Sector $50 per request Provides real-time cell site / sector of requested NOTE: No fee in Exigent, number. PSAP, or customer consent situation. How much will it cost to implement my surveillance? Fee Schedule: Electronic surveillance nationwide for voice or digital dispatch service the fee is $400 per market j MTA. Implementation fee is capped per request at $2000. Per request means each time the requestor initiates a request for service change. Data surveillance is $400. All data surveillances are nationwide implementation. A $10 per day per technology maintenance fee applies for all active surveillances. No fee to implement text message or Ready Link surveillance unless they are the only surveillance implemented. Example 1: Initial surveillance request for voice + digital dispatch + text message for a nationwide implementation. Applicable fees: Initial implementation would be $ $20jday. Example 2: Initial surveillance request for voice + digital dispatch + data for a nationwide implementation. Applicable fees: Initial implementation would be $ $30jday. Example 3: Initial surveillance request for voice + digital dispatch in 1 market. Applicable fees: Initial implementation would be $800 + $20jday. Example 4: Initial surveillance request for voice + digital dispatch + data in 1 market. Applicable fees: Initial implementation would be $ $30jday Created on 3120/200710:12:00 AM 11

61 Example 5: Initial surveillance request for voice + digital dispatch + data in 1 market. 2nd request received 2 days after initial surveillance start date to add 3 markets. Applicable fees: Implementation fee would be $ markets x ($400 voice + $400 digital dispatch + $400 data) = $2000 cap + $30jday Example 6: Initial surveillance request for voice + data + text messages in 2 MTAs. 2nd request received 15 days after initial surveillance start date to add 4 MTAs. 3rd request received 1 day after 2nd request to add 6 MTAs. Applicable fees: Implementation fee would be $2000 cap. 12 markets x ($400 voice + $400 data) = $2000 cap + $20jday Example 7: Initial surveillance request for Ready Link + text message nationwide. Applicable fees: Implementation fee would be $2000 cap + $10jday. Ready Link or text messages are free if included with at least one other implementation fee. It is up to you to decide which service, RL or TM, generated the implementation fee! T3- Wiretap SMS- Short Message Service LBS- Location Based Services GPS- Global Positioning System GLOSSARY PSAP- Public Safety Answering Point (911 Centers) LDD- Long Distance Division CDR- Call Detail Records Created on 3/ :12:00 AM 12

62 ( ESN - Electronic Serial Number SSN- Social Security Number DSL- Driver's License Number DOB- Date of Birth IRR- Immediate Response Request Appendix Exigent Form CALEA Coversheet Stored Communication Request form Precision Location Request form *57 Request Form Subpoena/Court Order Protocol Created on 3/20/200710:12:00 AM