GSM CELLULAR MONITORING SYSTEMS - PKI Electronic
Document Sample


GSM CELLULAR
MONITORING SYSTEMS
PKI ELECTRONIC INTELLIGENCE GmbH GERMANY
Dear Customer,
For the past 10 years PKI has been developing cellular monitoring systems. We offer the full range
of surveillance devices for mobile phones, including “passive systems“ for 5.0/5.1/5.2 encryption and
“active systems“, that are also for 5.0/5.1/5.2 encryptions, as well as for CDMA.
Additionally, our products include a huge range of accessories, such as IMSI catchers, decryption
units, direction finders, jammers, power amplifiers, WLAN, etc. In spite of their complex functionality,
all devices come with an easily understandable instruction manual, which also describes their
advantages and disadvantages and their possible field of application.
Therefore, you as the “end-user” have the possibility to combine all desired devices according to your
needs and wishes. Of course we can be of assistance, if you specify your personal requirements and
we would be pleased to establish a personally designed and tailor-made configuration of devices.
Our devices allow surveillance and localization of mobile phones without any restriction. All you need
is a computer and some knowledge of the systems. In order to cover this, we also offer 4-weeks
training courses.
Your PKI-Team
Contents
Comparison Active vs. Passive GSM Monitoring Systems page 3
PKI 1520 Passive GSM Monitoring System for A5.2 (A5.0) Encryption page 4
PKI 1540 Passive GSM Monitoring System for A5.1, A 5.2(A5.0) Encryption page 5
PKI 1560 Active GSM Monitoring System page 6
PKI 1580 Active GSM Monitoring System with IMSI Catcher and Decryption Unit page 7
PKI 1600 CDMA Monitoring System page 8
PKI 1620 GSM IMSI Catcher page 9
PKI 1640 3G UMTS IMSI Catcher page 10
PKI 1660 - PKI 1675 Transmission Power Amplifier page 11
PKI 1680 GSM Direction Finder page 12
PKI 1700 GSM Direction Finder for Mobile Vehicles page 13
PKI 1720 High Power 3G and GSM Jammer page 14
PKI 1740 High Power Jammer page 15
2 Catalogues are available for download at www.pki-electronic.com
Production and Development
Comparison Active vs. Passive GSM Monitoring Systems
A passive GSM Monitoring System is completely invisible for the target and the
network operator. The passive system exclusively uses receiver units in order to intercept the
transmissions between the mobile phone and the network. This way, you are limited to receiving data
that is transmitted between the network and the mobile phone, which does not contain any information
that allows identifying a known target again or which could indicate the target’s appearance in the
nearby area. Therefore, the use of a passive system makes sense at places, where many potentially
suspect persons are making calls in the area nearby, and you don’t know your specific target in
advance. Alternatively the use near a base station could make sense, enabling you to monitor all
conversations within the surrounding area.
If you are looking for a specific target mobile phone, or you want to be informed of the arrival of a
specific target, then an active system should be your choice. Once captured by the simulated base
station of the monitoring system, you can collect all information of the target, such as the IMSI, IMEI,
telephone number and other unchangeable data, which allows identifying the target again later or to
connect it to your base station. Even impersonating the suspect is possible, so you can send or receive
calls or text messages instead of the target person or manipulate the text messages by changing their
contents. You obtain full control of the mobile phone, which allows for example increasing its
transmission power in order to avoid losing your target. This facilitates the tracing of a suspect during
mobile use of the system. It is even possible to covertly turn the mobile phone into transmission mode,
in order to locate it with directional finding systems. With a passive system you are constrained to wait
until the target phone is making a call, or you have to call it yourself in order to force the mobile phone
to switch into transmission mode. The active system itself generally is not detectable by the user or a
network operator.
The calls are not diverted and there is no need for a SIM card in order to direct the calls to the network
operator. The calls are invoiced to the subscriber’s telephone bill, and compared to former active
systems there are no limitations on interception of incoming calls and text messages.
The active system works as a true and invisible man in the middle attack.
Tel.: +49(0)4154 - 98 96 32 • Fax: +49(0)4154 - 740 16 • E-mail: information@pki-electronic.com 3
Passiv Cellular Monitoring Systems
PKI 1520
Passive GSM Monitoring System for A5.2 (A5.0) Encryption
front
back
The PKI 1520 is a combination of a laptop, the Our PKI 1520 allows direct decryption of A5.2 Specifications:
reception unit (the size depends on the desired encrypted conversations on the dual-band Components:
channels) and the key decryption unit. Power networks GSM 900/1800 and the single-band • Receiver unit, Laptop computer with software,
supply and antenna are included in the package. networks GSM 1900 or GSM 850. antenna.
• Frequency ranges: 900/1800 or
This system is expandable until up to 32 duplex- The system has been developed for mobile use 850 or 1900 MHz
channels. Each reception unit disposes of 8 (4-8 duplex-channels) and can be used at any • Power supply: inside 12 V DC,
duplex-channels. Recording of all incoming place where conversations shall be monitored. 110V – 230V power supply
conversations, as well as all text messages is
possible. A similar device developed for stationary use, for Receiver Unit
example in a car, can also make sense due to its • Dimensions: 320 x 300 x 80 mm
The controller software allows data evaluation maximal exploitation of 32 duplex-channels and • Weight: 3,8 kg
from the laptop’s hard disk at any time. is also available in our product range. Unlike our
PKI 1560 and PKI 1580 the stationary system is
A localization of this passive system is not able to identify and hold specifically targeted
impossible, because it does not emit any active conversations on mobile phones, because it
signals. The surveillance of GSM telephone works on a passive basis and therefore does not
conversation is possible via handheld device as have any influence on the monitored mobile
well as via the base station. phone.
PKI 1520 establishes a log file of all telephone
numbers of all incoming and outgoing calls. For
the identification of the telephone number of the
surveyed person our active systems PKI 1560
and PKI 1580 can be used.
4 Catalogues are available for download at www.pki-electronic.com
Production and Development
PKI 1540
Passive GSM Monitoring System for A5.1, A 5.2 (A5.0) Encryption
The PKI 1540 is not limited to A5.2 decryption, Monitoring of GSM telephone conversations in 32 duplex-channels (both conversation
but can also decrypt the much more elaborated the near surrounding is possible with both, the partners). Each receiver unit is equipped with up
A5.1 encryption system. The A5.1 encryption is handheld device as well as the base station. As all to 8 duplex-channels.
mainly used in Europe and the USA. A conversations and text messages are recorded
localization of the monitoring devices is on the hard disk of the laptop, an evaluation of
impossible, as this system works on a passive the data is possible at any time. PKI 1540 creates
basis and does not emit any signals. The a log file listing all telephone numbers of Specifications:
decryption unit is the main piece of the PKI 1540 incoming and outgoing calls. The identification of Components:
in order to decrypt A5.1 encoded conversations. the telephone number of the monitored person • Receiver unit, Laptop computer with software,
Because such a professional high-capacity can be done with our active systems PKI 1560 or Decyption unit, antenna.
processor of course has its price, it is advisable PKI 1580. • Frequency ranges: 900/1800 or
to use only one decryption unit for several 850 or 1900 MHz
monitoring systems. Internet, VPN or LAN can With the PKI 1540 it is not possible to find and • Power supply: 12 V DC,
provide the necessary data connections, which, hold specific mobile phones, because a passive 110V - 230V power supply
as a further advantage, allows mobile use of this system does not have any influence on the • Connectors: LAN, antenna, power supply
system. This provides a maximum flexibility for monitored telephones. For this purpose,
numerous monitoring operations. however, we offer our active systems PKI 1560 Receiver unit
and PKI 1580. • Dimensions: 320 x 300 x 80 mm
On request we can also supply a device for • Weight: 3,8 kg
stationary use, which also includes the The PKI 1540 works in the dual-band range
decryption unit. The PKI 1540 is equipped with a GSM900/1800 or in the single-band range GSM Decryption unit
receiver unit with a maximum of 32 duplex- 850 and GSM 1900 and can be equipped with up • Dimensions: 510x320x190 mm
channels, a laptop, antenna, power supply and a to 4-32 duplex-channels according to your • Weight: 19,8 kg
key decryption unit. needs, i.e. it is possible to record a maximum of
Tel.: +49(0)4154 - 98 96 32 • Fax: +49(0)4154 - 740 16 • E-mail: information@pki-electronic.com 5
Active Cellular Monitoring Systems
PKI 1560
Active GSM Monitoring System
The PKI 1560 can monitor all connections with The detection of all active mobile phones in the Specifications:
A5.2 or A5.0 encryption. Depending on the near surrounding is done by the IMSI catcher, Components:
system of the monitored GSM-network and the which offers numerous manipulation • Network Access Station, BTS unit, laptop
used device, it is also possible to monitor and possibilities of the target mobile phone’s computer with software, antennas.
record conversations with A5.1 encryption. The connections. • Frequency ranges: 900/1800 or
PKI 1560 allows full control of all incoming and 850 or 1900 MHz
outgoing conversations of the monitored mobile Establishing a direct contact (call / text message) • Operating range: 50 - 1000 m
phones. with the monitored telephones is possible as • Power supply: 12 V DC,
well. All incoming conversations and text 110V - 230V power supply
Unlike the passive systems, this device supplies messages are recorded on the hard disk of the • Connectors: LAN, antennas, power supply.
extensive information about the monitored laptop.
devices, such as IMEI, IMSI, telephone number, Network Access Station
and much more. Furthermore, it features The PKI 1560 includes the network access • Dimensions: 320 x 300 x 80 mm
numerous search und filtering options in order to station (dual-band), the BTS unit (radio cell) and • Weight: 3,8 kg
locate the target mobile phone. the laptop with the controller software.
Depending on the application area and network BTS Unit
In combination with our locating device/direction quality one or two single-band BTS units are • Dimensions: 320 x 300 x80 mm
finder PKI 1680 it is possible to specifically track necessary. • Weight:3,8 kg
a target mobile phone, even in populated areas.
Our active GSM monitoring system works on a
fully transparent basis and is completely
undetectable.
6 Catalogues are available for download at www.pki-electronic.com
Production and Development
PKI 1580
Active GSM Monitoring System with IMSI Catcher and Decryption Unit
This system leaves nothing to be desired in the possibilities to track the target mobile phone. Specifications:
field of cellular monitoring. It offers monitoring Furthermore, it features multiple manipulation Components:
of all connections with GSM A5.1, A5.2 or A5.0 possibilities concerning the connections of the • Network Access Station, BTS Unit, decryption
encryption. Thus, a complete control of all target phone. unit, laptop computer with software, antennas.
incoming and outgoing conversations of the • Frequency ranges: 900/1800 or
monitored mobile phone is possible, as well as In spite of its numerous features, the PKI 1560 850 or 1900 MHz
the identification of all active mobile phones works in a complete transparent manner and • Operating range: 50 - 1000 m
nearby (IMSI catcher). remains absolutely undetectable. Of major • Power supply: 12 V DC,
importance of course is the tracking and locating 110V - 230V power supply
All incoming conversations and text messages of the monitored mobile phones. For this • Connectors: LAN, antennas, power supply.
can be stored on the hard disk of the laptop with purpose we offer different types of locating
the controller software. devices and direction finders, as for example the Network Access Station
PKI 1680 and PKI 1700. With these devices it is • Dimensions: 320 x 300 x 80 mm
The decryption unit can be used independently possible to locate the target mobile phone up to • Weight: 3,8 kg
from the monitoring system. All it needs is a data an accuracy of 2 m, even in populated areas.
connection, e.g. internet, VPN or LAN between BTS Unit
the PKI 1580 and the decryption unit. One Our active GSM Monitoring System PKI 1580 • Dimensions: 320 x 300 x 80 mm
decryption unit can be used by several cellular includes the network access station (dual-band), • Weight: 3,8 kg
monitoring systems. This also makes sense the BTS unit, the laptop with the controller
when using the mobile version, as due to its software and decryption unit. According to the Decryption Unit
weight and dimensions the decryption unit is network quality and place of operation one or two • Dimensions: 510 x 320 x 190 mm
intended for stationary use only. single-band BTS units are necessary. The system • Weight: 19,8 kg
can be upgraded to a maximum of 32 duplex
The active GSM monitoring system has many channels. This maximum upgrade is intended for
advantages compared with the passive system, stationary use. The version with 4-8 duplex
as it captures a lot of information of the channels with separate decryption unit has been
monitored mobile phones, e.g. IMEI, IMSI, their developed for mobile use.
own telephone number, and much more. Its
search and filtering features offer numerous
Tel.: +49(0)4154 - 98 96 32 • Fax: +49(0)4154 - 740 16 • E-mail: information@pki-electronic.com 7
Active Cellular Monitoring Systems
PKI 1600
CDMA Monitoring System
The PKI 1600 CDMA Monitoring System works in be important, if no other information about the Specifications:
the CDMA 2000 1x and IS95a and b networks. As target is known. If due to unfavorable Components:
it works in a completely passive mode, it circumstances only one side of the conversation • Laptop with Windows operating system and
cannot be located and does not cause any can be captured, the PKI 1600 however controller software, receiver unit, aerial.
interference in the mobile telephone networks. continues to record the communication on the • Connection between receiver unit and laptop:
This system includes a reception unit with remaining channel. Both, stationary and mobile USB 2.0 connector.
antenna as well as a laptop with the monitoring use is possible as it is equipped with all relevant • Power supply: 12V - 24V,
software. It captures the strongest mobile phone connections. 110V - 230V power supply
transceiver station in the surrounding area and
then starts monitoring the conversations, text Receiver Unit:
messages and all data of the persons captured in • Dimensions: 320 x 300 x 80 mm
the reception area. All captured data is stored on • Weight: 3,8 kg
the laptop for further evaluation at any time. It is
possible to record conversations that have been
selected according to specific criteria or to
directly listen into the conversation. This might
8 Catalogues are available for download at www.pki-electronic.com
Production and Development
PKI 1620
GSM IMSI Catcher
This handy device creates a list of all active The GSM IMSI Catcher PKI 1620 comes in a Specifications:
(switched on) mobile telephones in your complete set including the laptop and controller Components:
proximity. All captured data, such as IMSI, IMEI software, the BTS unit, antenna and power • Main device, Laptop computer, BTS unit,
are recorded in the data base and can be supply. antennas, power supply.
evaluated at any time. It offers substantial • Frequency ranges: 900/1800 or
statistical evaluation possibilities of the recorded 850 or 1900 MHz
data. • Power output: 0,1 W - 8W
• Power supply: battery pack inside 12 VDC/5Ah,
The PKI 1620 can easily be combined with our 110V - 230V power supply
PKI 1680 direction finder, a combination that • Size: 320 x 280 x 75 mm
allows exact locating of a specifically selected • Weight: 3,5 kg
mobile phone. Additionally, with the PKI 1620
you have the possibility to selectively block
conversations between specific persons.
Tel.: +49(0)4154 - 98 96 32 • Fax: +49(0)4154 - 740 16 • E-mail: information@pki-electronic.com 9
Active Cellular Monitoring Systems
PKI 1640
3G UMTS IMSI Catcher
With the PKI 1640 you can catch all active UMTS The PKI 1640 comes with BTS unit, laptop with • Power output: 0,1 W - 8W
mobile phones in your proximity. All captured controller software, antenna and power supply. • Power supply: battery pack inside 12 VDC/5Ah,
data, such as IMSI, IMEI, TMSI will be stored in 110V - 230V power supply
the data base and are available for further • Size: 320 x 280 x 75 mm
evaluation at any time. A huge range of statistical • Weight: 3,5 kg
data analysis methods is possible. With our 3G
UMTS IMSI Catcher you can redirect single
UMTS mobile phones to specific GSM Specifications:
frequencies, in order to monitor the conversation Components:
with our active or passive cellular monitoring • Laptop computer, BTS unit,
systems. Furthermore, the PKI 1640 allows antennas, power supply.
suppression of specifically selected • Frequency ranges: 900/1800 or
conversations of targeted persons. 850 or 1900 MHz
10 Catalogues are available for download at www.pki-electronic.com
Production and Development
PKI 1660 PKI 1665 PKI 1670 PKI 1675
Transmission Power Amplifiers
The PKI 1660 / 1665 / 1670 / 1675 transmission power amplifiers considerably enlarge the operating range of the PKI 1620 IMSI Catchers and the active
monitoring systems PKI 1560 and PKI 1580. The increased transmission power covers a larger area and consequently allows the IMSI Catcher to capture
more information. In combination with the active monitoring systems PKI 1560 and PKI 1580 it is possible to extend and hold the connection of the
captured mobile phone to the BTS. This may be of special importance during mobile use in a car, for example. If several BTS units with different frequency
ranges are used with the active monitoring systems or the IMSI Catcher, one transmission power amplifier for each BTS unit with the same frequency is
necessary.
Specifications:
PKI 1660
• Frequency range:
900MHz / 1800MHz / 1900MHz
• Max. power: 16W
• Max. amplification: 18dB
• Power consumption: less than 80W
• Power supply: 24V
• Dimensions: 180x100x220 mm
• Connections: 2x antenna (in/out), power supply
Specifications:
PKI 1665
• Frequency range:
900MHz / 1800MHz / 1900MHz
• Max. power: 16W
• Max. amplification: 18dB
• Power consumption: less than 80W
• Power supply: 24V
• Dimensions: 180x100x220 mm
• Connections: 2x antenna (in/out), power supply
Specifications:
PKI 1670
• Frequency range:
900MHz / 1800MHz / 1900MHz
• Max. power: 16W
• Max. amplification: 18dB
• Power consumption: less than 80W
• Power supply: 24V
• Dimensions: 180x100x220 mm
• Connections: 2x antenna (in/out), power supply
Specifications:
PKI 1670
• Frequency range: 1800MHz
• Max. power: 50W
• Max. amplification: 18dB
• Power consumption: less than 80W
• Power supply: 230V
• Dimensions: 340x250x190 mm
• Connections: 2x antenna (in/out), power supply
Tel.: +49(0)4154 - 98 96 32 • Fax: +49(0)4154 - 740 16 • E-mail: information@pki-electronic.com 11
Active Cellular Monitoring Systems
PKI 1680
GSM Direction Finder
Our cellular monitoring devices not only allow mode, which is the case during a conversation. Specifications:
monitoring of conversations, identification of Alternatively, it can be switched into Components:
telephone numbers, etc., but also the locating of transmission mode with our active GSM • Handheld device, antennas, charger,
a target mobile phone with an accuracy of 2 m. monitoring systems PKI 1560 or PKI 1580 or headphones.
with our IMSI catcher PKI 1620. • Dimensions: 120 x 75 x 25 mm
The PKI 1680 is a handheld device that has been • Weight: 400 g
developed for locating of mobile phones. It can In addition to its field strength display, the PKI • Power supply: 3.6 V / 1950 mAh, Li-Ion battery
be combined with our GSM monitoring systems 1680 furthermore offers locating via audio • Frequency range: 900, 1800, 1900 MHz
PKI 1560 and PKI 1580. A directional antenna control by means of earphones, which is
can either be worn on the body or inside the especially useful during covert monitoring
laptop bag. operations.
With our PKI 1560 or PKI 1580 you can identify The operating range of the PKI 1680 covers the
the necessary reception channel, which must be GSM frequencies 900 (channel 1 to 124), 1800
manually entered into the GSM direction finder. (channel 512 to 885) and 1900 MHZ.
In order to locate a mobile phone with the PKI
1680, the target phone must be in transmission
12 Catalogues are available for download at www.pki-electronic.com
Production and Development
PKI 1700
GSM Direction Finder for Mobile Vehicles
The PKI 1700 is a direction finding system that advantage is its extremely high sensibility that Specifications:
allows locating and tracking of GSM mobile allows exact locating even over greater Components:
devices. It is equipped with an antenna unit, distances. For further locating operations, e.g. • Direction finding device with display, cables,
which can be mounted on the roof of the car, and inside of buildings we recommend our mobile direction finding antenna for use on car roof.
a controller unit, that displays the direction of the direction finder PKI 1680. • Frequency ranges: 900/1800/850/1900 MHz
located mobile phone in relation to the position • Operating range: 1 - 3000 m depending
of your car. on topology
• Power supply: 12 V DC
The PKI 1700 can be used in combination with • Connectors: Direction finding antenna,
the active monitoring systems PKI 1560 and PKI power supply.
1580, as well as with the PKI 1620 IMSI Catcher,
with which the target mobile phone can be
switched into transmission mode. Its special
Tel.: +49(0)4154 - 98 96 32 • Fax: +49(0)4154 - 740 16 • E-mail: information@pki-electronic.com 13
Active Cellular Monitoring Systems
PKI 1720
High Power 3G and GSM Jammer
The PKI 1720 is a high capacity jammer for the special importance during operation near UMTS Specifications:
3G/UMTS frequency range, as well as for GSM base stations, in order to obtain the desired • Output power: up to 15 watt (TX power can be
frequencies. This highly developed jamming effect. It is possible to separately activate the decreased by steps for each band seperately)
device is perfect for combination with our GSM single frequency ranges of the PKI 1720, which • Shielding radius: up to 40 meters
monitoring systems and the GSM IMSI catcher. allows specifically targeted operation and an • Operating temperature: 0° - 50° C
By selectively jamming the 3G/UMTS individual adaptation to any requirements. • Operating humidity: up to 85%
frequencies, all UMTS telephones in the • Power supply: 12 - 24 V or power converter
operating area are switched into GSM mode. • Size: 25 x 18 x 5 cm
Once changed into GSM mode, they can easily be
monitored with our monitoring systems. Its
special advantage is its high capacity, which is of
14 Catalogues are available for download at www.pki-electronic.com
Production and Development
PKI 1740
High Power Jammer
The PKI 1740 is a high power jammer for all GSM frequencies, where they can be monitored for Specifications:
and 3G (UMTS) frequency ranges. It reliably further investigations. • Frequency ranges:
disables all communications within the direct - GSM 850
proximity of the PKI 1740. Due to its high transmitting power, the PKI 1740 - GSM 900
is perfect for use in areas with good cellphone - GSM 1800
The transmission power of each single frequency coverage. It jams all downlink frequencies - GSM 1900
range can be adjusted or deactivated between the BTS of the network operator and the - 3G/UMTS
independently from each other. In combination mobile phone. By this, the GSM/3G telephone • Output power: up to 250W (TX power can be
with our GSM monitoring systems or the GSM network will not be affected at all. decreased by steps for each band seperately)
IMSI Catcher it is possible to transfer 3G (UMTS) • Dimensions: 72 x 46 x 35 cm
mobile phones specifically onto GSM • Weight: about 80 kg including areals
• Operating temperature: 0° - 50° C
• Operating humidity: up to 80%
• Accessory: 230V or 110V power supply,
or 12 / 24 V DC optional.
12 -15 dBi directional antenna
7 - 8 dBi omni directional antenna
Tel.: +49(0)4154 - 98 96 32 • Fax: +49(0)4154 - 740 16 • E-mail: information@pki-electronic.com 15
PKI Building
PKI ELECTRONIC INTELLIGENCE GmbH GERMANY
Großenseer Str.18 • D-22952 Lütjensee / Hamburg / Germany
Tel.: 49(0)4154 - 98 96 32 • Fax: 49(0)4154 - 740 16
E-mail: information@pki-electronic.com
Internet: www.pki-electronic.com
Get documents about "