ANTI TERROR EQUIPMENT

ANTI TERROR EQUIPMENT PKI ELECTRONIC INTELLIGENCE GmbH GERMANY

Contents Dear Customer page 3 German Turn-Key Solutions page 4 Interception and Monitoring Systems page 5-22 GPS / GSM Technology page 23-28 Audio Surveillance Equipment page 29-66 Counter Surveillance page 67-80 Video and Night Vision Systems page 81-132 Jamming Systems page 133-154 Police, Customs and Military Equipment page 155-250 Training Program page 251-256 Terms of Sale, Delivery and Payment page 257-258 2 Catalogues are available for download at www.pki-electronic.com

Production and Development Dear Customer, With this catalogue PKI Electronic Intelligence GmbH has enlarged its product range considerably. For more than 40 years we have been specialists for surveillance systems. Substantial orders from government departments reflect the worldwide requirements due to terrorist attacks. PKI stays abreast of these changes and has become specialized supplier for many international departments. For this reason we offer a wide range of anti-terror equipment. Now it is much easier for government departments to find and purchase discretely the necessary equipment according to their approved budgets. Mutual confidence and long-time experience is indispensable in this field. PKI Electronic Intelligence GmbH offers all these conditions and will meet your individual requirements and produce sample devices on request. We hope you will find our program interesting and will be pleased to answer your enquiries. We are looking forward to a fruitful business relation. Your PKI-team Tel.: +49(0)4154-98 96 32 Fax: +49(0)4154-740 16 E-mail: information@pki-electronic.com 3

German turn-key solutions from one source developed and produced by PKI engineers PKI is a leading solution provider in the field of Anti Terror Equipment for among others: GSM Cellular Monitoring Systems Surveillance Devices Video and Night Vision Systems using Image Intensifying and IR Cameras Thermal Cameras IP Monitoring Systems Intelligent Broadband Jamming Systems Miniature Audio Transmitter Mechanical and Electronic devices for Police, Customs and Military Departments EOD Equipment Explosive Detectors Custom-made and Portable Devices for Digital Audio/Video Transmission, Receivers and Recorders GPS, GSM Navigation and Tracking Systems Video Observation Systems for Interception and Monitoring of IT and Radio Transmission Protective Clothing Armored Vehicles Systems for Optical and Wireless Detection, Inspection and Analysis All Types of Devices for Counter Surveillance X-ray Inspection Systems Electronic Devices for Prisons Professional Equipment for Emergency Aid Professional Maintenance and Training Program Established more than 40 years ago, the independent company is well known for its services in more than 50 countries worldwide. The headquarters are in Germany near Hamburg. PKI ELECTRONIC INTELLIGENCE GmbH GERMANY Großenseer Str.18 D-22952 Lütjensee / Hamburg / Germany Tel.: 49(0)4154-98 96 32 Fax: 49(0)4154-740 16 E-mail: information@pki-electronic.com Internet: www.pki-electronic.com 4 Catalogues are available for download at www.pki-electronic.com

Interception and Monitoring Systems Production and Development INTERCEPTION AND MONITORING SYSTEMS PKI ELECTRONIC INTELLIGENCE GmbH GERMANY Tel.: +49(0)4154-98 96 32 Fax: +49(0)4154-740 16 E-mail: information@pki-electronic.com 5

Interception and Monitoring Systems PKI 1100 IP Monitoring System The technologies applied for communication have increasingly shifted into the IP sector. Whether e-mail, telephone (VOIP), fax, etc.: today, all these means of communication demand digital bandwidth and are transmitted via IP-based networks. In contrast to the technologies applied so far, with IP technology no direct connection is established between the communication partners but communication is digitized, packed in small packets, possibly encrypted and subsequently more or less quickly and frequently exchanged. In case of previous monitoring systems, a known sender automatically meant that the receiver was known, too. The conversation, fax, etc. was realized via a line to which both participants were connected. The data volume recorded this way is and remained manageable. The problem with today s IP-based technology is that there is no direct connection any longer but only a communication distributed onto numerous packets. It is therefore necessary to separate the corresponding packets from the entire mass of data and to merge and decode them subsequently. Such a system shall in fact record the ongoing data traffic but it can not participate actively. What is difficult are e.g. lost packets which can not be requested again or also packets transmitted several times in order to put together the original message. The solution to this is our PKI 1100 IP Monitoring System. Integrated into the network to be monitored, any communication is stored and decoded to the greatest possible extent. And it is irrelevant whether a WLAN or a wired network is eavesdropped on here. The actual access to the network is realized with a repeater establishing the connection to the PKI 1100. The system logs all captured data into a database and thus enables a subsequent evaluation. Via the IP address, an assignment is then possible, via the data of the providers, to the user identity. Monitoring of up to 4 networks simultaneously Data storage on internal HDD up to 5 TB Protocols: ARP, FTP, Gopher, HTTP, SMTP, POP, Telnet, ICMP, IP, VOIP Connections: LAN 4 x for repeater 1 x for WAN Repeater: LAN or connection via tapping module directly to a telephone or ISDN line. WLAN receiver. Operating voltage: 230 V Housing: 19 inch 3 RU PKI 1200 GSM Repeater This GSM repeater amplifies received signals of all networks which considerably enlarges the action range. Especially in rooms where GSMreception is restricted or even impossible, this is very important. Often this is the fact in buildings and constructions out of concrete and steel. The PKI 1200 repeater is designed for specific application and ensures successful data exchange at full signal strength. It comes with power adapter 220 V AC / 12 V DC, instruction manual incl. circuit diagram, installation material and antenna. GSM amplifier: 70 db - 900 MHz Frequency:uplink: 890-915 MHz downlink: 935-960 MHz Power: uplink: 19dBm downlink: 19dBm Gain: 70dB Bandwidth: 6 MHz 25 MHz Return loss: <-18 db Noise coefficent: <5 db V.W.S.R.< 1.5 Delay: 1 µsec Impedance: 50 Ohm Power supply: 220 VAC / 12 VDC (included) Connector type: N-female Size: 200 x 150 x 40 mm Option: ext. step down converter DC/DC 24V/12V GSM amplifier: 55dB 1800 MHz Frequency: uplink: 1710-1785 MHz downlink: 1805-1880 MHz Power: uplink: -32dBm - -27dBm downlink: -38dBm - -37dBm Gain: 55 db Bandwidth: 6 MHz 25 MHz Return loss: <-18 db Noise coefficent: <5 db V.S.W.R. < 1.5 Delay: 1 µsec Impedance: 50 Ohm Power supply: 220 VAC / 12 VDC (included) Connector type: N-Female Size: 300 x 200 x 50 mm Option: ext. step down converter DC/DC 24V/12V G3 UMTS amplifier: 60dB- 2100 MHz Frequency: uplink: 1935-1990 MHz downlink: 2125-2170 MHz Gain: <60dB In-band fluctuation: < 2dB Output power: < 17 dbm Miscellaneous radiation: -30dB, Time delay: 5µsec Third order intermodulation (dbm): 9K-1 GHz -36/1G-12.75 GHz -30 Standing wave: 1.5 Power supply: 220 VAC / 12 VDC Connector type: N-Female Noise coefficient: 5dB Impedance: 50 Ohm Size: 300 x 200 x 50 mm Working temperature: -10 C - +60 C Option: ext. step down converter DC/DC 24V/12V 6 Catalogues are available for download at www.pki-electronic.com

Interception and Monitoring Systems Production and Development Dear Customer, For the past 10 years PKI has been developing cellular monitoring systems. We offer the full range of surveillance devices for mobile phones, including passive systems for 5.0/5.1/5.2 encryption and active systems, that are also for 5.0/5.1/5.2 encryptions, as well as for CDMA. Additionally, our products include a huge range of accessories, such as IMSI catchers, decryption units, direction finders, jammers, power amplifiers, WLAN, etc. In spite of their complex functionality, all devices come with an easily understandable instruction manual, which also describes their advantages and disadvantages and their possible field of application. Therefore, you as the end-user have the possibility to combine all desired devices according to your needs and wishes. Of course we can be of assistance, if you specify your personal requirements and we would be pleased to establish a personally designed and tailor-made configuration of devices. Our devices allow surveillance and localization of mobile phones without any restriction. All you need is a computer and some knowledge of the systems. In order to cover this, we also offer 4-weeks training courses. Your PKI-Team Tel.: +49(0)4154-98 96 32 Fax: +49(0)4154-740 16 E-mail: information@pki-electronic.com 7

Interception and Monitoring Systems GSM Monitoring ACTIVE General Function Mobile phones need contact to a base station to communicate. The active system simulates such a base station and thus enables absolute control of the mobile phones logged in there. The simulated base station allows to control up to 6 mobile phones at the same time. A maximum extension to 36 units is possible. The system's principle of operation is as follows: On the basis of the present mobile network, the machine identifies the local infrastructure and then simulates a base station itself in order to prompt the local mobile phones to log in. In our system, this is a fully automatic process which must not be configured arduously as in the past. The telephones now logged in via our base station are completely intercepted. TMSI (Temporary Mobile Subscriber Identity), IMSI (International Mobile Subscriber Identity), IMEI (International Mobile Equipment Identity) and also the telephone type can be extracted from the trapped phones using the integrated IMSI catcher. This can be realized for any existing network in the shortest possible time. (in Germany e.g. T-Mobile, Vodafone, O2, E-Plus) The telephones that are in 3G (UMTS) mode are switched to GSM mode using the IMSI catcher and are thus intercepted, too. The data captured this way then allow the take-over of selected target telephones. For this purpose, the system simulates the target mobile phone for the network by simply cloning (copying) it completely. The complete copy of the controlled mobile phone makes thorough monitoring possible. Whether conversation or SMS, any communication is effected via the SYSTEM. This so-called Man in the middle procedure allows manipulations in all directions. Answering calls, SMS or also holding conversations, listening to the voicemail with call forwarding, impediments are absolutely undetectable for the monitored mobile phone. You have the overall control of a target/mobile phone and can for example increase its transmission power in order to prevent a loss of the target. Tracking a suspect during mobile use of the system is thus facilitated. Furthermore, it is possible to covertly switch the target phone to transmission mode so that it can be located in the direct surroundings using a direction finding system. GPRS (General Packet Radio Service) is the only service that is entirely disabled. And this is only noticed when using the mobile phone for e.g. data transmission (e-mail, internet, etc.) and is not unusual in reality, too, because of interferences or overloads. Therefore, it is almost impossible for the target mobile phone or the network provider to detect the use of an active system. 8 Catalogues are available for download at www.pki-electronic.com

Interception and Monitoring Systems Production and Development PKI 1100 GSM Monitoring PASSIVE General Function This system has a completely passive operating principle. There are no emissions and tracking of the system is thus impossible. The system absorbs virtually everything from the GSM radio traffic of the surroundings. These data are stored and can be further processed for later analyses. Live interception is also possible. It can, however, only be listened to what is received. If e.g. a mobile phone is transmitting in the shadow of our receiving antenna, only the transmission from the corresponding base station is audible. The transmission from the mobile phone is ignored. SMS are also interceptable. Here, the same applies as for conversations. As with telephone calls, a certain minimum signal quality is required to enable decryption. It is possible to monitor a maximum of 5 channels simultaneously and to record all conversations. But in order to be able to monitor an as large channel spacing as possible, more channels are monitored and the really important targets are prioritized in real operation. Prioritized targets will then be preferred upon detection. The problem here is that even prioritized targets may be ignored as they can not always be identified correctly. A lot of experience is required for monitoring. Different network capacities, coverages, numbers of cells, providers ( E-Plus, T-Mobile, Vodafone, O2...) make monitoring a complex task. Targets (mobile phones, telephone numbers) can be identified on the basis of various collected information (TMSI (Temporary Mobile Subscriber Identity), IMSI (International Mobile Subscriber Identity), IMEI (International Mobile Equipment Identity), dialled telephone number, etc.). However, all data are not always available! These targets are created in the database and are supplemented or updated according to the available information. The providers in Germany modify these data, e.g. the TMSI after each conversation, after a certain time, after a cell change or or or... It therefore depends on the correct analysis of the collected information to properly identify a target and to be able to draw the corresponding conclusions from the captured data. This transferred collected information in Germany varies e.g. from network operator to network operator. The situation can and will also be different from country to country. This is a dynamic process which is constantly changing due to the expansion and modernization of mobile networks. The operator needs the corresponding expert knowledge to meet the different network requirements. Tel.: +49(0)4154-98 96 32 Fax: +49(0)4154-740 16 E-mail: information@pki-electronic.com 9

Interception and Monitoring Systems GSM Monitoring Comparison of PASSIVE vs. ACTIVE System Passive GSM monitoring systems are entirely invisible for the target and the network operator. The passive system exclusively uses receiver modules to intercept the transmission between the mobile phone and the network. You can thus only receive data that are exchanged between the network provider and the mobile phone. You only obtain information when the target is active on the network (places a call / is called). The use makes sense at places where your potential target stays and places or receives calls. You can then synchronize the entries collected in the database and thus determine your targets. So, e.g. a target with identical IMEI, IMSI, telephone number, etc. appearing at point A and point B is quite surely the mobile phone of your target person. But used in the vicinity of a known base station, all conversations can also be intercepted. These voice or SMS messages may also allow conclusions as to the desired target person and enable the identification of the mobile phone / target. With an active system, you can influence the transmission. The mobile phone in question can now be perfectly manipulated with an active system. As soon as this target (mobile phone) logs in close to the simulated base station of an active system, you can capture all information of the target, IMEI, IMSI, etc. You are able to control or even to manipulate any transmission of the target phone at your own base station. Placing calls or sending SMS instead of the target person is no problem. The network operator can not determine any difference as to whether you or the target realized the transmission. Generally, an active system is almost undetectable. The network provider and also the target phone are hardly able to detect that a third person in the middle has assumed the power over the entire transmission. This Man in the middle attack allows to actively influence the proceedings and not to wait passively until the target places a call or is called. 10 Catalogues are available for download at www.pki-electronic.com

Passiv Cellular Monitoring Systems Production and Development PKI 1520 Passive GSM Monitoring System for A5.2 (A5.0) Encryption front side back side The PKI 1520 is a combination of a laptop, the reception unit (the size depends on the desired channels) and the key decryption unit. Power supply and antenna are included in the package. This system is expandable until up to 32 duplexchannels. Each reception unit disposes of 8 duplex-channels. Recording of all incoming conversations, as well as all text messages is possible. The controller software allows data evaluation from the laptop s hard disk at any time. A localization of this passive system is impossible, because it does not emit any active signals. The surveillance of GSM telephone conversation is possible via handheld device as well as via the base station. PKI 1520 establishes a log file of all telephone numbers of all incoming and outgoing calls. For the identification of the telephone number of the surveyed person our active systems PKI 1560 and PKI 1580 can be used. Our PKI 1520 allows direct decryption of A5.2 encrypted conversations on the dual-band networks GSM 900/1800 and the single-band networks GSM 1900 or GSM 850. The system has been developed for mobile use (4-8 duplex-channels) and can be used at any place where conversations shall be monitored. A similar device developed for stationary use, for example in a car, can also make sense due to its maximal exploitation of 32 duplex-channels and is also available in our product range. Unlike our PKI 1560 and PKI 1580 the stationary system is not able to identify and hold specifically targeted conversations on mobile phones, because it works on a passive basis and therefore does not have any influence on the monitored mobile phone. Components: Receiver unit, Laptop computer with software, antenna. Frequency ranges: 900/1800 or 850 or 1900 MHz Power supply: inside 12 V DC, 110V 230V power supply Receiver Unit Dimensions: 320 x 300 x 80 mm Weight: 3,8 kg Tel.: +49(0)4154-98 96 32 Fax: +49(0)4154-740 16 E-mail: information@pki-electronic.com 11

Passiv Cellular Monitoring Systems PKI 1540 Passive GSM Monitoring System for A5.1, A 5.2 (A5.0) Encryption The PKI 1540 is not limited to A5.2 decryption, but can also decrypt the much more elaborated A5.1 encryption system. The A5.1 encryption is mainly used in Europe and the USA. A localization of the monitoring devices is impossible, as this system works on a passive basis and does not emit any signals. The decryption unit is the main piece of the PKI 1540 in order to decrypt A5.1 encoded conversations. Because such a professional high-capacity processor of course has its price, it is advisable to use only one decryption unit for several monitoring systems. Internet, VPN or LAN can provide the necessary data connections, which, as a further advantage, allows mobile use of this system. This provides a maximum flexibility for numerous monitoring operations. On request we can also supply a device for stationary use, which also includes the decryption unit. The PKI 1540 is equipped with a receiver unit with a maximum of 32 duplexchannels, a laptop, antenna, power supply and a key decryption unit. Monitoring of GSM telephone conversations in the near surrounding is possible with both, the handheld device as well as the base station. As all conversations and text messages are recorded on the hard disk of the laptop, an evaluation of the data is possible at any time. PKI 1540 creates a log file listing all telephone numbers of incoming and outgoing calls. The identification of the telephone number of the monitored person can be done with our active systems PKI 1560 or PKI 1580. With the PKI 1540 it is not possible to find and hold specific mobile phones, because a passive system does not have any influence on the monitored telephones. For this purpose, however, we offer our active systems PKI 1560 and PKI 1580. The PKI 1540 works in the dual-band range GSM900/1800 or in the single-band range GSM 850 or GSM 1900 and can be equipped with up to 4-32 duplex-channels according to your needs, i.e. it is possible to record a maximum of 32 duplex-channels (both conversation partners). Each receiver unit is equipped with up to 8 duplex-channels. Components: Receiver unit, Laptop computer with software, Decyption unit, antenna. Frequency ranges: 900/1800 or 850 or 1900 MHz Power supply: 12 V DC, 110V - 230V power supply Connectors: LAN, antenna, power supply Receiver unit Dimensions: 320 x 300 x 80 mm Weight: 3,8 kg Decryption unit Dimensions: 320 x 300 x 510 mm Weight: 19,8 kg 12 Catalogues are available for download at www.pki-electronic.com

Active Cellular Monitoring Systems Production and Development PKI 1560 Active GSM Monitoring System The PKI 1560 can monitor all connections with A5.2 or A5.0 encryption. Depending on the system of the monitored GSM-network and the used device, it is also possible to monitor and record conversations with A5.1 encryption. The PKI 1560 allows full control of all incoming and outgoing conversations of the monitored mobile phones. Unlike the passive systems, this device supplies extensive information about the monitored devices, such as IMEI, IMSI, telephone number, and much more. Furthermore, it features numerous search und filtering options in order to locate the target mobile phone. In combination with our locating device/direction finder PKI 1680 it is possible to specifically track a target mobile phone, even in populated areas. Our active GSM monitoring system works on a fully transparent basis and is completely undetectable. The detection of all active mobile phones in the near surrounding is done by the IMSI catcher, which offers numerous manipulation possibilities of the target mobile phone s connections. Establishing a direct contact (call / text message) with the monitored telephones is possible as well. All incoming conversations and text messages are recorded on the hard disk of the laptop. The PKI 1560 includes the network access station (dual-band), the BTS unit (radio cell) and the laptop with the controller software. Depending on the application area and network quality one or two single-band BTS units are necessary. Components: Network Access Station, BTS unit, laptop computer with software, antennas. Frequency ranges: 900/1800 or 850 or 1900 MHz Operating range: 50-1000 m Power supply: 12 V DC, 110V - 230V power supply Connectors: LAN, antennas, power supply. Network Access Station Dimensions: 320 x 300 x 80 mm Weight: 3,8 kg BTS Unit Dimensions: 320 x 300 x 80 mm Weight:3,8 kg Tel.: +49(0)4154-98 96 32 Fax: +49(0)4154-740 16 E-mail: information@pki-electronic.com 13

Active Cellular Monitoring Systems PKI 1580 Active GSM Monitoring System with IMSI Catcher and Decryption Unit This system leaves nothing to be desired in the field of cellular monitoring. It offers monitoring of all connections with GSM A5.1, A5.2 or A5.0 encryption. Thus, a complete control of all incoming and outgoing conversations of the monitored mobile phone is possible, as well as the identification of all active mobile phones nearby (IMSI catcher). All incoming conversations and text messages can be stored on the hard disk of the laptop with the controller software. The decryption unit can be used independently from the monitoring system. All it needs is a data connection, e.g. internet, VPN or LAN between the PKI 1580 and the decryption unit. One decryption unit can be used by several cellular monitoring systems. This also makes sense when using the mobile version, as due to its weight and dimensions the decryption unit is intended for stationary use only. The active GSM monitoring system has many advantages compared with the passive system, as it captures a lot of information of the monitored mobile phones, e.g. IMEI, IMSI, their own telephone number, and much more. Its search and filtering features offer numerous possibilities to track the target mobile phone. Furthermore, it features multiple manipulation possibilities concerning the connections of the target phone. In spite of its numerous features, the PKI 1560 works in a complete transparent manner and remains absolutely undetectable. Of major importance of course is the tracking and locating of the monitored mobile phones. For this purpose we offer different types of locating devices and direction finders, as for example the PKI 1680 and PKI 1700. With these devices it is possible to locate the target mobile phone up to an accuracy of 2 m, even in populated areas. Our active GSM Monitoring System PKI 1580 includes the network access station (dual-band), the BTS unit, the laptop with the controller software and decryption unit. According to the network quality and place of operation one or two single-band BTS units are necessary. The system can be upgraded to a maximum of 32 duplex channels. This maximum upgrade is intended for stationary use. The version with 4-8 duplex channels with separate decryption unit has been developed for mobile use. Components: Network Access Station, BTS Unit, decryption unit, laptop computer with software, antennas. Frequency ranges: 900/1800 or 850 or 1900 MHz Operating range: 50-1000 m Power supply: 12 V DC, 110V - 230V power supply Connectors: LAN, antennas, power supply. Network Access Station Dimensions: 320 x 300 x 80 mm Weight: 3,8 kg BTS Unit Dimensions: 320 x 300 x 80 mm Weight: 3,8 kg Decryption Unit Dimensions: 320 x 300 x 510 mm Weight: 19,8 kg 14 Catalogues are available for download at www.pki-electronic.com

Interception and Monitoring Systems Production and Development PKI 1600 CDMA Monitoring System The PKI 1600 CDMA Monitoring System works in the CDMA 2000 1x and IS95a and b networks. As it works in a completely passive mode, it cannot be located and does not cause any interference in the mobile telephone networks. This system includes a reception unit with antenna as well as a laptop with the monitoring software. It captures the strongest mobile phone transceiver station in the surrounding area and then starts monitoring the conversations, text messages and all data of the persons captured in the reception area. All captured data is stored on the laptop for further evaluation at any time. It is possible to record conversations that have been selected according to specific criteria or to directly listen into the conversation. This might be important, if no other information about the target is known. If due to unfavorable circumstances only one side of the conversation can be captured, the PKI 1600 however continues to record the communication on the remaining channel. Both, stationary and mobile use is possible as it is equipped with all relevant connections. Components: Laptop with Windows operating system and controller software, receiver unit, aerial. Connection between receiver unit and laptop: USB 2.0 connector. Power supply: 12V - 24V, 110V - 230V power supply Receiver Unit: Dimensions: 320 x 300 x 80 mm Weight: 3,8 kg PKI 1620 GSM IMSI Catcher This handy device creates a list of all active (switched on) mobile telephones in your proximity. All captured data, such as IMSI, IMEI are recorded in the data base and can be evaluated at any time. It offers substantial statistical evaluation possibilities of the recorded data. The PKI 1620 can easily be combined with our PKI 1680 direction finder, a combination that allows exact locating of a specifically selected mobile phone. Additionally, with the PKI 1620 you have the possibility to selectively block conversations between specific persons. The GSM IMSI Catcher PKI 1620 comes in a complete set including the laptop and controller software, the BTS unit, antenna and power supply. Components: Main device, Laptop computer, BTS unit, antennas, power supply. Frequency ranges: 900/1800 or 850 or 1900 MHz Power output: 0,1 W - 8W Power supply: battery pack inside 12 VDC/5Ah, 110V - 230V power supply Size: 320 x 280 x 75 mm Weight: 3,5 kg Tel.: +49(0)4154-98 96 32 Fax: +49(0)4154-740 16 E-mail: information@pki-electronic.com 15

Interception and Monitoring Systems PKI 1640 3G UMTS IMSI Catcher With the PKI 1640 you can catch all active UMTS mobile phones in your proximity. All captured data, such as IMSI, IMEI, TMSI will be stored in the data base and are available for further evaluation at any time. A huge range of statistical data analysis methods is possible. With our 3G UMTS IMSI Catcher you can redirect single UMTS mobile phones to specific GSM frequencies, in order to monitor the conversation with our active or passive cellular monitoring systems. Furthermore, the PKI 1640 allows suppression of specifically selected conversations of targeted persons. The PKI 1640 comes with BTS unit, laptop with controller software, antenna and power supply. Components: Laptop computer, BTS unit, antennas, power supply. Frequency ranges: 900/1800 or 850 or 1900 MHz Power output: 0,1 W - 8W Power supply: battery pack inside 12 VDC/5Ah, 110V - 230V power supply Size: 320 x 280 x 75 mm Weight: 3,5 kg PKI 1670 PKI 1675 Transmission Power Amplifiers The PKI 1670 and PKI 1675 transmission power amplifiers considerably enlarge the operating range of the PKI 1620 IMSI Catchers and the active monitoring systems PKI 1560 and PKI 1580. The increased transmission power covers a larger area and consequently allows the IMSI Catcher to capture more information. In combination with the active monitoring systems PKI 1560 and PKI 1580 it is possible to extend and hold the connection of the captured mobile phone to the BTS. This may be of special importance during mobile use in a car, for example. If several BTS units with different frequency ranges are used with the active monitoring systems or the IMSI Catcher, one transmission power amplifier for each BTS unit with the same frequency is necessary. PKI 1670 Frequency range: 900MHz / 1800MHz / 1900MHz Max. power: 16W Max. amplification: 18dB Power consumption: less than 80W Power supply: 24V Dimensions: 180 x 100 x 220 mm Connections: 2x antenna (in/out), power supply PKI 1675 Frequency range: 1800MHz Max. power: 50W Max. amplification: 18dB Power consumption: less than 80W Power supply: 230V Dimensions: 340 x 250 x 190 mm Connections: 2x antenna (in/out), power supply 16 Catalogues are available for download at www.pki-electronic.com

Interception and Monitoring Systems Production and Development PKI 1680 GSM Direction Finder Our cellular monitoring devices not only allow monitoring of conversations, identification of telephone numbers, etc., but also the locating of a target mobile phone with an accuracy of 2 m. The PKI 1680 is a handheld device that has been developed for locating of mobile phones. It can be combined with our GSM monitoring systems PKI 1560 and PKI 1580. A directional antenna can either be worn on the body or inside the laptop bag. With our PKI 1560 or PKI 1580 you can identify the necessary reception channel, which must be manually entered into the GSM direction finder. In order to locate a mobile phone with the PKI 1680, the target phone must be in transmission mode, which is the case during a conversation. Alternatively, it can be switched into transmission mode with our active GSM monitoring systems PKI 1560 or PKI 1580 or with our IMSI catcher PKI 1620. In addition to its field strength display, the PKI 1680 furthermore offers locating via audio control by means of earphones, which is especially useful during covert monitoring operations. The operating range of the PKI 1680 covers the GSM frequencies 900 (channel 1 to 124), 1800 (channel 512 to 885) and 1900 MHZ. Components: Handheld device, antennas, charger, headphones. Dimensions: 120 x 75 x 25 mm Weight: 400 g Power supply: 3.6 V / 1950 mah, Li-Ion battery Frequency range: 900, 1800, 1900 MHz PKI 1700 GSM Direction Finder for Mobile Vehicles The PKI 1700 is a direction finding system that allows locating and tracking of GSM mobile devices. It is equipped with an antenna unit, which can be mounted on the roof of the car, and a controller unit, that displays the direction of the located mobile phone in relation to the position of your car. The PKI 1700 can be used in combination with the active monitoring systems PKI 1560 and PKI 1580, as well as with the PKI 1620 IMSI Catcher, with which the target mobile phone can be switched into transmission mode. Its special advantage is its extremely high sensibility that allows exact locating even over greater distances. For further locating operations, e.g. inside of buildings we recommend our mobile direction finder PKI 1680. Components: Direction finding device with display, cables, direction finding antenna for use on car roof. Frequency ranges: 900/1800/850/1900 MHz Operating range: 1-3000 m depending on topology Power supply: 12 V DC Connectors: Direction finding antenna, power supply. Tel.: +49(0)4154-98 96 32 Fax: +49(0)4154-740 16 E-mail: information@pki-electronic.com 17

Interception and Monitoring Systems PKI 1720 High Power 3G and GSM Jammer The PKI 1720 is a high capacity jammer for the 3G/UMTS frequency range, as well as for GSM frequencies. This highly developed jamming device is perfect for combination with our GSM monitoring systems and the GSM IMSI catcher. By selectively jamming the 3G/UMTS frequencies, all UMTS telephones in the operating area are switched into GSM mode. Once changed into GSM mode, they can easily be monitored with our monitoring systems. Its special advantage is its high capacity, which is of special importance during operation near UMTS base stations, in order to obtain the desired effect. It is possible to separately activate the single frequency ranges of the PKI 1720, which allows specifically targeted operation and an individual adaptation to any requirements. Output power: up to 15 watt (TX power can be decreased by steps for each band seperately) Shielding radius: up to 40 meters Operating temperature: 0-50 C Operating humidity: up to 85% Power supply: 12-24 V or power converter Size: 25 x 18 x 5 cm PKI 1740 High Power Jammer The PKI 1740 is a high power jammer for all GSM and 3G (UMTS) frequency ranges. It reliably disables all communications within the direct proximity of the PKI 1740. The transmission power of each single frequency range can be adjusted or deactivated independently from each other. In combination with our GSM monitoring systems or the GSM IMSI Catcher it is possible to transfer 3G (UMTS) mobile phones specifically onto GSM frequencies, where they can be monitored for further investigations. Due to its high transmitting power, the PKI 1740 is perfect for use in areas with good cellphone coverage. It jams all downlink frequencies between the BTS of the network operator and the mobile phone. By this, the GSM/3G telephone network will not be affected at all. Frequency ranges: - GSM 850 - GSM 900 - GSM 1800 - GSM 1900-3G/UMTS Output power: up to 250W (TX power can be decreased by steps for each band seperately) Dimensions: 72 x 46 x 35 cm Weight: about 80 kg including areals Operating temperature: 0-50 C Operating humidity: up to 80% Accessory: 230V or 110V power supply, or 12 / 24 V DC optional. 12-15 dbi directional antenna 7-8 dbi omni directional antenna PKI 1760 Separate GSM Network Such a private mobile communications network can e.g. be used on ships, during disasters or on the occasion of events, etc. A connection to the conventional telephone network via VOIP or ISDN is also possible. It offers an operating range of up to 30 km when using an antenna on a radio mast, e.g. telescopic mast PKI 9655-65. The PKI 1760 is available in different security level designs. The customary GSM devices can be used as mobile phones. Power supply: 110/220VAC Operating range: 30 km max. number of mobile phones used: 600 Power output: 20 W Miscellaneous: Voice service, SMS service, data service max. 150 kbit/s On request, the PKI 1760 can also be delivered as CDMA network. 18 Catalogues are available for download at www.pki-electronic.com

Interception and Monitoring Systems Production and Development PKI 1800 Digital Telephone Monitoring System The PKI 1800 is a comprehensive and state-ofthe-art end-to-end solution for monitoring, processing, analysis and dissemination of intercepted telecommunication interactions. Due to rapid structural changes in worldwide telecommunication systems a solution integrating all such tasks is provided by the PKI 1800. It offers facilities to monitor ISDN, Digital, PCM30 transmissions as well as all other forms of communication whether they be voice, fax, modem, radio communication or other data transfer. Based on a single, unified platform, PKI 1800 handles all kinds of telephone and Internet data and thus offering unprecedented features. It provides security agencies with flexibility, reliability and versatility in signal intelligence interception and analysis. The PKI 1800 combines all these facilities to comfortably managing unlimited amounts of intercepted communications together with instant target information by just using a minimal amount of space and manpower. The major feature of the PKI 1800 is its flexibility and extraordinary storage capacity, linked to its ability to instantly recall, via the displayed data management target software, intercepted target telephone calls without interrupting the digital tape recording and archiving process. This enables the operator to either carry out interception and playback from one system, or optionally via a separate playback unit. This means that highly classified and priority interception can be configured for transfer by authorised users on a real time basis to a selected location ensuring that the right persons are informed on time. The PKI 1800 is available in several versions, depending on the number of channels and end-users monitoring requirements, from minimum 8 channels to 64 or max 128 channels. The major criteria of the PKI 1800 software is to display all information immediately and to enable instant evaluation, thus dramatically reducing the time needed, compared to time-consuming evaluation of reel or audio tapes. The software is known as the target evaluation and configuration interface (TEC) which is installed onto the delivered workstation. The sophisticated menu provides optimal guidance for selection/viewing and processing of large quantities of data. The TEC software has one control menu and 4 submenus being linked to user's authorisation key code. They are easiliy accessible and can be seen at a glance on the display monitor. Upon entry to the main control menu selection, the user will see - displayed on the screen - the current channel status which provides activity information as well as remaining tape time, disk end time and selection for the 4 submenus via the preprogrammed password. The configuration menu enables the user to select and change the technical charateristics of each channel depending on the input conditions. This enables the PKI 1800 to monitor telephone interception from various types of exchanges and radio communication input channels simultaneously. PKI 1800 Digital Playback Unit The optional extras available include the digital playback unit which recalls earlier recordings either directly from the DAT cassette of the PKI 1800 or from archived versions. It is an essential accessory to the PKI 1800. Housed in a standard desk top PC with built-in 4 channel voice card, hard disk and loudspeaker the digital playback unit is used for a number of applications. Usually used as a playback unit for evaluation of recorded data it alternatively can be used as a mass storage facility for archiving or as a supervising position. It incorporates the standard PKI 1800 software enabling instant recall and evaluation. The intercepted data is loaded onto the digital playback unit from the DAT cassette or linked to the PKI 1800 for automatic download. The unit can be installed with one or two DAT drives, enabling the evaluated data to be downloaded onto the 2nd drive with the non-essential data being ignored, cancelled or simply kept on the 1st DAT for archiving. The optional extras include a built-in fax and data interception system plus a transcription interface. Channels: 8, 64 or 128 Voice interface cards: 4 voice channels per card, each channel digitised to 64 kbits/s using ADPCM conversion. User selectable data compression to 32 kbits/s or 16 kbits/s Frequency response: 300 Hz to 3.400 Hz Non detectable input impedance Simultaneous playback and on-line recording Network upgradeable, high MTBF reliability, 1/T1 interception Automatic monitoring, interception and recording Password protection Selectable input characteristics, PABX interfaces Analogue/ISDN line, LAN/WAN facility Tape / DVD archiving Line inputs: Parallel telephone input impedance - > 30 kohm (isolated to 3000 V) warning bleep (as CCITT 180) Transformer isolated: input impedance - 600 Ohm (isolated to 3000 V) E1/T2: 2.048 MHz E1 & 1.544 MHz T2 digital data link Line outputs Transformer isolated: output impedance - 600 Ohm (isolated) output signal - 0 dbm 0=1.23 Vrms Monitor output Internal speaker Headphone jack socket Data interface cards: 4 channels per card, synchronous/asynchronous RS232/RS422 serial data data rate up to 64 kbits/s rapid access Storage: 1 GB hard disk Archival storage: digital audio tape (DAT) Recording time: 1 GB hard disk - 1 hr for 64 channels at 32 kbits/s. tape - up to 24 hrs for 64 channels at 32 kbits/s depending on capacity of the storage device Reliability: MTBF - 80.000 hours Power supply: single phase AC 240/115 V 50/60 Hz Power consumption: < 150 W Weight: 8 channels 55 kg 128 channels 165 kg Dimensions: 8 channels 56 x 38 x 70 cm 128 channels 60 x 157 x 70 cm PC requirement min 286 based PC or better/ EGA or VGA display Tel.: +49(0)4154-98 96 32 Fax: +49(0)4154-740 16 E-mail: information@pki-electronic.com 19

Interception and Monitoring Systems PKI 1810 Tactical Inmarsat Satellite Monitoring System Communication via satellites becomes increasingly attractive and is possible almost anywhere in the world. Especially in regions with poor infrastructure, the use of this means of communication has meanwhile become common. With the PKI 1810, monitoring of Inmarsat B, M, M4 and Mini-M services can be realised. No matter if fax, data or voice communication. Absolutely unrecognised by the conversation partners, any communication is made available by means of the tactical PKI 1810 monitoring system or recorded for later use. All data, such as telephone numbers of the conversation partners, location data, day and time and a lot more, is also saved for later evaluations or can be extracted directly from the system. This passive method allows full duplex audio monitoring and GPS position monitoring of the targets. The evaluation of these individual data enables the complete preparation of movement profiles or allows to track targets. Tactical system for mobile use Portable receiver unit Dimensions: approx. 40 x 34 x 23 cm Weight: approx. 8 kg Power supply: 12 V DC - 20 A / 110-230 V AC (integrated mains adapter) Laptop with installed protected software 1 antenna to receive the satellite (downlink) 1 antenna to receive the monitored unit (uplink) If you are interested in the design and planning of a strategic monitoring system, please inform us briefly so that PKI can submit an adequate quotation. PKI 1815 Thuraya Monitoring System With a network mainly covering Europe, Asia, India and Africa, the Thuraya system, thanks to the latest technology, allows communication with a small compact and above all GSM compatible mobile phone. The communication between two Thuraya conversation partners is directly realised via the satellite and not, as with other satellite systems, via a ground station. Conversations from other networks, however, are directed via a ground station as usual. The tactical Thuraya monitoring system PKI 1815 was developed to receive, decode and monitor communication in the Thuraya system. Whether voice, SMS or fax: with this completely passive system, the relevant communication can be monitored, recorded and evaluated absolutely undiscovered. The rugged unit is optimally designed for rapid deployment. With its user-friendly interface, the installed software offers a fast configuration and optimum results for the operator during operation. Tactical system for mobile use Portable receiver unit Dimensions: 10 x 32 x 21 cm Weight: approx. 7.6 kg Power supply: 12 V DC / 110 / 230 V AC Integrated rechargeable Li-ion battery (max. 2 h operating time) Display: 15" Qwerty keyboard removable. Two whip antennas for transmission and reception mode of the targets. If you are interested in a strategic Thuraya monitoring solution, please inform us briefly so that PKI can submit an adequate quotation. 20 Catalogues are available for download at www.pki-electronic.com

Interception and Monitoring Systems Production and Development PKI 1830 Wireless Network Monitor, Decrypter and Viewer via WLAN or Bluetooth PKI 1830 is a powerful wireless network monitor and analyzer that enables you to monitor and view any wireless 802.11 a/b/g/n communication around you. The system detects and displays all wireless access points and stations within reception range and provides important information about each of them. Now, after all necessary data is in front of user the target can be selected and capturing of all transmissions can start. PKI 1830 is a comprehensive and affordable tool for wireless LAN administrators, security professionals, network programmers, or anyone who wants to have a full picture of the WLAN traffic. The application requires Windows 2000/XP/2003/Vista/2008 and a compatible wireless network adapter. PKI 1830 can also be used for interception via Bluetooth. PKI 1830 provides the following features: scanning for WiFi stations and access points capturing 802.11a, 802.11b, 802.11g and 802.11n WLAN traffic WEP or WPA keys specification to decrypt encrypted datas display of detailed per-node and per-channel statistics display of detailed IP connections statistics: IP addresses, ports, sessions, etc. reconstruction of TCP sessions configuration of alarms that can notify you about important events, such as suspicious datas, high bandwidth utilization, unknown addresses, rogue access points etc. creation of pie charts of protocols monitoring of bandwidth utilization browsing of captured and decoded datas in real time searching of strings or hex data in contents of captured data creation of files containing individual or all data packets offline loading and display of captured files PKI 1850 PC-supported Telephone Monitoring System The surveillance of any kind of telecommunication, of course, is our main field of business. Whether analogue, digital or cellular, you will find the corresponding monitoring device in our scope of supply and in this catalogue. The PKI 1850 has been developed for the monitoring of digital and ISDN telephone lines. But the main advantage is that it can be used for stationary and mobile use. Without any problem each necessary data, like telephone number, date, time and other criteria can be stored on a laptop. Each call will be stored as a WAV-file. By means of the supplied software, the WAV-file can easily be administrated and can be opened to hear the content of each call plus indicating the relevant data. Each WAV-file can be stored in compressed or uncompressed version for further action. Dimensions of unit without laptop approx. 76 x 55 x 19 mm Weight of unit without laptop approx. 50 g SO-interface ITU-Standard I.430 Connection 2 x RJ45 Western Modular Tests Polarity, Framing, Power, Protocol Channels 2 x (D, B1, B2), E, M, A, Q, S USB 1.1 and 2.0 (full speed) USB socket USB Type B Power < 90 ma LEDs 4 x red/green Storage: 16 KB per second/call, uncompressed WAV file. Sampling frequency 8000 Hz WAV format A-Law Stereo, Mono, MP3, GSM Operating System required on PC/laptop: Windows 2000, Windows Server 2003, Windows XP, Windows Vista Software disk space max. 140 MB Processor 500 MHz (min for single device operation) Connection to telephone system Point-to-Point or Point-to-Multipoint Device package includes PKI 1850 device, Software-CD, USB and ISDN cables, instruction manual PKI 1855 Hard Disc Converter With PKI 1855 it is easy to copy datas from built-in hard discs. Just connect the hard disc to the USB port of your PC by means of the PKI 1855. Compatible with all standard 1,8, 2,5 and 3,5 IDE hard discs. By means of this copying converter you can easily obtain all important information. Furthermore this converter is also suitable for testing and connection of all types of hard discs and burner via USB 2.0 port. Hard discs: SATA (L-type) and IDE, copying possible Sizes: 1,8, 2,5 or 3,5 Comes with: converter, adapter, power plug, SATA-cable Various: no installation inside PC necessary Tel.: +49(0)4154-98 96 32 Fax: +49(0)4154-740 16 E-mail: information@pki-electronic.com 21

Interception and Monitoring Systems PKI 1860 Telephone Tapping Device The PKI 1860 can easily and quickly be installed on telephone lines, subject to entering the room at least once or for a short time. It allows continuous tapping of a telephone line without leaving outer traces. Just clip the contact clamp onto the telephone cable and listen to the conversation of both sides via the includedheadphones, or alternatively save it with a recording device. The only way to tap telephone lines without having to cut them. Impossible to be detected or located via TDR reflectometer. Easy and quick installation just fix the clamp onto the cable and turn it on. Equipped with connection sockets for headphones and recording device (D 1300) Dimensions: approx. 34 x 20 x 114 mm PKI 1865 Digital Telephone Conversation Recorder Small but powerful a technological miracle. With this recorder all telephone conversations can be controlled. It works on both, analogue and digital telephone systems. Very simple installation between receiver and telephone set by means of the included connection assembly. Due to the integrated voice-control all telephone conversations will be recorded automatically and can be monitored either via the integrated speaker or earphones (included). Also included is a connection cable for playback via PC. Power supply: 2 x 1.5 V batteries type AAA Operating temperature: 0-40 C Frequency range: 500 Hz-3500 Hz Max. output: 200 mw / 8 ohm Operation time: more than 12 hours Dispay: LCD USB interface: USB 2.0 standard Weight: approx. 34 g w/o batteries Dimensions: 115 x 33 x 15 mm Supported data formats: 1) MP3 (MPEG 1,2 and 2,5 with audio layer 3) 2) WMA (Windows-Media-Audio) Data stream 1) MPE (8 to 320 kbps) on playback 2) WMA (32 to 192 kbps) Recordings: Telephone, integrated and external microphone, line-in Max. number of recorded segments: 2 x 200 segments / files Name of directories and data type: (directory/recording quality/data type) IP *1 / ACT data type SP *1 / WAV data type MP *1 / MP3 data type *1 IP, SP und HP = low, standard and high performance Average recording capacity: 1 GB Memory depending on recording quality and type: (HP) *1 10 h (SP) *1 70 h (IP) *1 282 h PKI 1870 Conversation Recorder This analogue conversation recorder stores your telephone conversations automatically onto standard audio cassettes. Due to the integrated voice control the recording does not start until beginning of a conversation and automatically stops at its end. The total recording time is up to 8 hours. With the PKI 1870 you have the possibility to control all telephone conversations in your house during your absence. A similar device for digital telephone systems is part of our product range as well. Please contact us for detailed information. Recording time: 8 h on standard 120 min. audio cassette Integrated microphone for notes Output for headset Included: adapter for telephone receiver, audio cassette, power plug 22 Catalogues are available for download at www.pki-electronic.com