gsm cellular monitoring systems - capitalei.com monitoring.pdf · pki 1740 high power jammer page...

PKI ELECTRONIC INTELL IGENCE GmbH GERMANY

GSM CELLULARMONITORING SYSTEMS

2 Catalogues are available for download at www.pki-electronic.com

Contents

Comparison Active vs. Passive GSM Monitoring Systems page 3PKI 1520 Passive GSM Monitoring System for A5.2 (A5.0) Encryption page 4PKI 1540 Passive GSM Monitoring System for A5.1, A 5.2(A5.0) Encryption page 5PKI 1560 Active GSM Monitoring System page 6PKI 1580 Active GSM Monitoring System with IMSI Catcher and Decryption Unit page 7PKI 1600 CDMA Monitoring System page 8PKI 1620 GSM IMSI Catcher page 9PKI 1640 3G UMTS IMSI Catcher page 10PKI 1660 - PKI 1675 Transmission Power Amplifier page 11PKI 1680 GSM Direction Finder page 12PKI 1700 GSM Direction Finder for Mobile Vehicles page 13PKI 1720 High Power 3G and GSM Jammer page 14PKI 1740 High Power Jammer page 15

Dear Customer,

For the past 10 years PKI has been developing cellular monitoring systems. We offer the full rangeof surveillance devices for mobile phones, including “passive systems“ for 5.0/5.1/5.2 encryption and“active systems“, that are also for 5.0/5.1/5.2 encryptions, as well as for CDMA.

Additionally, our products include a huge range of accessories, such as IMSI catchers, decryptionunits, direction finders, jammers, power amplifiers, WLAN, etc. In spite of their complex functionality,all devices come with an easily understandable instruction manual, which also describes theiradvantages and disadvantages and their possible field of application.

Therefore, you as the “end-user” have the possibility to combine all desired devices according to yourneeds and wishes. Of course we can be of assistance, if you specify your personal requirements andwe would be pleased to establish a personally designed and tailor-made configuration of devices.

Our devices allow surveillance and localization of mobile phones without any restriction. All you needis a computer and some knowledge of the systems. In order to cover this, we also offer 4-weekstraining courses.

Your PKI-Team

Production and Development

3Tel.: +49(0)4154 - 98 96 32 • Fax: +49(0)4154 - 740 16 • E-mail: [email protected]

Comparison Active vs. Passive GSM Monitoring Systems

A passive GSM Monitoring System is completely invisible for the target and thenetwork operator. The passive system exclusively uses receiver units in order to intercept thetransmissions between the mobile phone and the network. This way, you are limited to receiving datathat is transmitted between the network and the mobile phone, which does not contain any informationthat allows identifying a known target again or which could indicate the target’s appearance in thenearby area. Therefore, the use of a passive system makes sense at places, where many potentiallysuspect persons are making calls in the area nearby, and you don’t know your specific target inadvance. Alternatively the use near a base station could make sense, enabling you to monitor allconversations within the surrounding area.

If you are looking for a specific target mobile phone, or you want to be informed of the arrival of aspecific target, then an active system should be your choice. Once captured by the simulated basestation of the monitoring system, you can collect all information of the target, such as the IMSI, IMEI,telephone number and other unchangeable data, which allows identifying the target again later or toconnect it to your base station. Even impersonating the suspect is possible, so you can send or receivecalls or text messages instead of the target person or manipulate the text messages by changing theircontents. You obtain full control of the mobile phone, which allows for example increasing itstransmission power in order to avoid losing your target. This facilitates the tracing of a suspect duringmobile use of the system. It is even possible to covertly turn the mobile phone into transmission mode,in order to locate it with directional finding systems. With a passive system you are constrained to waituntil the target phone is making a call, or you have to call it yourself in order to force the mobile phoneto switch into transmission mode. The active system itself generally is not detectable by the user or anetwork operator.The calls are not diverted and there is no need for a SIM card in order to direct the calls to the networkoperator. The calls are invoiced to the subscriber’s telephone bill, and compared to former activesystems there are no limitations on interception of incoming calls and text messages.

The active system works as a true and invisible man in the middle attack.


Passiv Cellular Monitoring Systems

PKI 1520

The PKI 1520 is a combination of a laptop, thereception unit (the size depends on the desiredchannels) and the key decryption unit. Powersupply and antenna are included in the package.

This system is expandable until up to 32 duplex-channels. Each reception unit disposes of 8duplex-channels. Recording of all incomingconversations, as well as all text messages ispossible.

The controller software allows data evaluationfrom the laptop’s hard disk at any time.

A localization of this passive system isimpossible, because it does not emit any activesignals. The surveillance of GSM telephoneconversation is possible via handheld device aswell as via the base station.

PKI 1520 establishes a log file of all telephonenumbers of all incoming and outgoing calls. Forthe identification of the telephone number of thesurveyed person our active systems PKI 1560and PKI 1580 can be used.

Our PKI 1520 allows direct decryption of A5.2encrypted conversations on the dual-bandnetworks GSM 900/1800 and the single-bandnetworks GSM 1900 or GSM 850.

The system has been developed for mobile use(4-8 duplex-channels) and can be used at anyplace where conversations shall be monitored.

A similar device developed for stationary use, forexample in a car, can also make sense due to itsmaximal exploitation of 32 duplex-channels andis also available in our product range. Unlike ourPKI 1560 and PKI 1580 the stationary system isnot able to identify and hold specifically targetedconversations on mobile phones, because itworks on a passive basis and therefore does nothave any influence on the monitored mobilephone.

Specifications: Components:• Receiver unit, Laptop computer with software, antenna.

• Frequency ranges: 900/1800 or850 or 1900 MHz

• Power supply: inside 12 V DC,110V – 230V power supply

Receiver Unit• Dimensions: 320 x 300 x 80 mm•Weight: 3,8 kg

Passive GSM Monitoring System for A5.2 (A5.0) Encryption

front

back



PKI 1540

The PKI 1540 is not limited to A5.2 decryption,but can also decrypt the much more elaboratedA5.1 encryption system. The A5.1 encryption ismainly used in Europe and the USA. Alocalization of the monitoring devices isimpossible, as this system works on a passivebasis and does not emit any signals. Thedecryption unit is the main piece of the PKI 1540in order to decrypt A5.1 encoded conversations.Because such a professional high-capacityprocessor of course has its price, it is advisableto use only one decryption unit for severalmonitoring systems. Internet, VPN or LAN canprovide the necessary data connections, which,as a further advantage, allows mobile use of thissystem. This provides a maximum flexibility fornumerous monitoring operations.

On request we can also supply a device forstationary use, which also includes thedecryption unit. The PKI 1540 is equipped with areceiver unit with a maximum of 32 duplex-channels, a laptop, antenna, power supply and akey decryption unit.

Monitoring of GSM telephone conversations inthe near surrounding is possible with both, thehandheld device as well as the base station. As allconversations and text messages are recordedon the hard disk of the laptop, an evaluation ofthe data is possible at any time. PKI 1540 createsa log file listing all telephone numbers ofincoming and outgoing calls. The identification ofthe telephone number of the monitored personcan be done with our active systems PKI 1560 orPKI 1580.

With the PKI 1540 it is not possible to find andhold specific mobile phones, because a passivesystem does not have any influence on themonitored telephones. For this purpose,however, we offer our active systems PKI 1560and PKI 1580.

The PKI 1540 works in the dual-band rangeGSM900/1800 or in the single-band range GSM850 and GSM 1900 and can be equipped with upto 4-32 duplex-channels according to yourneeds, i.e. it is possible to record a maximum of

32 duplex-channels (both conversationpartners). Each receiver unit is equipped with upto 8 duplex-channels.

Specifications: Components:• Receiver unit, Laptop computer with software, Decyption unit, antenna.


• Power supply: 12 V DC,110V - 230V power supply

• Connectors: LAN, antenna, power supply

Receiver unit• Dimensions: 320 x 300 x 80 mm•Weight: 3,8 kg

Decryption unit• Dimensions: 510x320x190 mm•Weight: 19,8 kg

Passive GSM Monitoring System for A5.1, A 5.2 (A5.0) Encryption


PKI 1560

The PKI 1560 can monitor all connections withA5.2 or A5.0 encryption. Depending on thesystem of the monitored GSM-network and theused device, it is also possible to monitor andrecord conversations with A5.1 encryption. ThePKI 1560 allows full control of all incoming andoutgoing conversations of the monitored mobilephones.

Unlike the passive systems, this device suppliesextensive information about the monitoreddevices, such as IMEI, IMSI, telephone number,and much more. Furthermore, it featuresnumerous search und filtering options in order tolocate the target mobile phone.

In combination with our locating device/directionfinder PKI 1680 it is possible to specifically tracka target mobile phone, even in populated areas.Our active GSM monitoring system works on afully transparent basis and is completelyundetectable.

The detection of all active mobile phones in thenear surrounding is done by the IMSI catcher,which offers numerous manipulationpossibilities of the target mobile phone’sconnections.

Establishing a direct contact (call / text message)with the monitored telephones is possible aswell. All incoming conversations and textmessages are recorded on the hard disk of thelaptop.

The PKI 1560 includes the network accessstation (dual-band), the BTS unit (radio cell) andthe laptop with the controller software.Depending on the application area and networkquality one or two single-band BTS units arenecessary.

Specifications: Components:• Network Access Station, BTS unit, laptopcomputer with software, antennas.


• Operating range: 50 - 1000 m• Power supply: 12 V DC,110V - 230V power supply

• Connectors: LAN, antennas, power supply.

Network Access Station• Dimensions: 320 x 300 x 80 mm•Weight: 3,8 kg

BTS Unit• Dimensions: 320 x 300 x80 mm•Weight:3,8 kg

Active GSM Monitoring System

Active Cellular Monitoring Systems



PKI 1580

This system leaves nothing to be desired in thefield of cellular monitoring. It offers monitoringof all connections with GSM A5.1, A5.2 or A5.0encryption. Thus, a complete control of allincoming and outgoing conversations of themonitored mobile phone is possible, as well asthe identification of all active mobile phonesnearby (IMSI catcher).

All incoming conversations and text messagescan be stored on the hard disk of the laptop withthe controller software.

The decryption unit can be used independentlyfrom the monitoring system. All it needs is a dataconnection, e.g. internet, VPN or LAN betweenthe PKI 1580 and the decryption unit. Onedecryption unit can be used by several cellularmonitoring systems. This also makes sensewhen using the mobile version, as due to itsweight and dimensions the decryption unit isintended for stationary use only.

The active GSM monitoring system has manyadvantages compared with the passive system,as it captures a lot of information of themonitored mobile phones, e.g. IMEI, IMSI, theirown telephone number, and much more. Itssearch and filtering features offer numerous

possibilities to track the target mobile phone.Furthermore, it features multiple manipulationpossibilities concerning the connections of thetarget phone.

In spite of its numerous features, the PKI 1560works in a complete transparent manner andremains absolutely undetectable. Of majorimportance of course is the tracking and locatingof the monitored mobile phones. For thispurpose we offer different types of locatingdevices and direction finders, as for example thePKI 1680 and PKI 1700. With these devices it ispossible to locate the target mobile phone up toan accuracy of 2 m, even in populated areas.

Our active GSM Monitoring System PKI 1580includes the network access station (dual-band),the BTS unit, the laptop with the controllersoftware and decryption unit. According to thenetwork quality and place of operation one or twosingle-band BTS units are necessary. The systemcan be upgraded to a maximum of 32 duplexchannels. This maximum upgrade is intended forstationary use. The version with 4-8 duplexchannels with separate decryption unit has beendeveloped for mobile use.

Specifications: Components:• Network Access Station, BTS Unit, decryption unit, laptop computer with software, antennas.


• Operating range: 50 - 1000 m• Power supply: 12 V DC,110V - 230V power supply

• Connectors: LAN, antennas, power supply.

Network Access Station• Dimensions: 320 x 300 x 80 mm•Weight: 3,8 kg

BTS Unit• Dimensions: 320 x 300 x 80 mm•Weight: 3,8 kg

Decryption Unit• Dimensions: 510 x 320 x 190 mm•Weight: 19,8 kg

Active GSM Monitoring System with IMSI Catcher and Decryption Unit

8


Catalogues are available for download at www.pki-electronic.com

PKI 1600

The PKI 1600 CDMA Monitoring System works inthe CDMA 2000 1x and IS95a and b networks. Asit works in a completely passive mode, itcannot be located and does not cause anyinterference in the mobile telephone networks.This system includes a reception unit withantenna as well as a laptop with the monitoringsoftware. It captures the strongest mobile phonetransceiver station in the surrounding area andthen starts monitoring the conversations, textmessages and all data of the persons captured inthe reception area. All captured data is stored onthe laptop for further evaluation at any time. It ispossible to record conversations that have beenselected according to specific criteria or todirectly listen into the conversation. This might

be important, if no other information about thetarget is known. If due to unfavorablecircumstances only one side of the conversationcan be captured, the PKI 1600 howevercontinues to record the communication on theremaining channel. Both, stationary and mobileuse is possible as it is equipped with all relevantconnections.

Specifications: Components:• Laptop with Windows operating system and controller software, receiver unit, aerial.

• Connection between receiver unit and laptop: USB 2.0 connector.

• Power supply: 12V - 24V,110V - 230V power supply

Receiver Unit:• Dimensions: 320 x 300 x 80 mm•Weight: 3,8 kg

CDMA Monitoring System



PKI 1620

This handy device creates a list of all active(switched on) mobile telephones in yourproximity. All captured data, such as IMSI, IMEIare recorded in the data base and can beevaluated at any time. It offers substantialstatistical evaluation possibilities of the recordeddata.

The PKI 1620 can easily be combined with ourPKI 1680 direction finder, a combination thatallows exact locating of a specifically selectedmobile phone. Additionally, with the PKI 1620you have the possibility to selectively blockconversations between specific persons.

The GSM IMSI Catcher PKI 1620 comes in acomplete set including the laptop and controllersoftware, the BTS unit, antenna and powersupply.

Specifications: Components:• Main device, Laptop computer, BTS unit, antennas, power supply.• Frequency ranges: 900/1800 or850 or 1900 MHz

• Power output: 0,1 W - 8W • Power supply: battery pack inside 12 VDC/5Ah,110V - 230V power supply

• Size: 320 x 280 x 75 mm•Weight: 3,5 kg

GSM IMSI Catcher

10



PKI 1640

With the PKI 1640 you can catch all active UMTSmobile phones in your proximity. All captureddata, such as IMSI, IMEI, TMSI will be stored inthe data base and are available for furtherevaluation at any time. A huge range of statisticaldata analysis methods is possible. With our 3GUMTS IMSI Catcher you can redirect singleUMTS mobile phones to specific GSMfrequencies, in order to monitor the conversationwith our active or passive cellular monitoringsystems. Furthermore, the PKI 1640 allowssuppression of specifically selectedconversations of targeted persons.

The PKI 1640 comes with BTS unit, laptop withcontroller software, antenna and power supply.

Specifications: Components:• Laptop computer, BTS unit, antennas, power supply.


• Power output: 0,1 W - 8W • Power supply: battery pack inside 12 VDC/5Ah,110V - 230V power supply

• Size: 320 x 280 x 75 mm•Weight: 3,5 kg

3G UMTS IMSI Catcher



The PKI 1660 / 1665 / 1670 / 1675 transmission power amplifiers considerably enlarge the operating range of the PKI 1620 IMSI Catchers and the activemonitoring systems PKI 1560 and PKI 1580. The increased transmission power covers a larger area and consequently allows the IMSI Catcher to capturemore information. In combination with the active monitoring systems PKI 1560 and PKI 1580 it is possible to extend and hold the connection of thecaptured mobile phone to the BTS. This may be of special importance during mobile use in a car, for example. If several BTS units with different frequencyranges are used with the active monitoring systems or the IMSI Catcher, one transmission power amplifier for each BTS unit with the same frequency isnecessary.

Specifications: PKI 1660• Frequency range:900MHz / 1800MHz / 1900MHz

•Max. power: 16W•Max. amplification: 18dB• Power consumption: less than 80W• Power supply: 24V• Dimensions: 180x100x220 mm• Connections: 2x antenna (in/out), power supply





Specifications: PKI 1670• Frequency range: 1800MHz•Max. power: 50W•Max. amplification: 18dB• Power consumption: less than 80W• Power supply: 230V• Dimensions: 340x250x190 mm• Connections: 2x antenna (in/out), power supply

PKI 1660 PKI 1665 PKI 1670 PKI 1675

Transmission Power Amplifiers

12



PKI 1680

Our cellular monitoring devices not only allowmonitoring of conversations, identification oftelephone numbers, etc., but also the locating ofa target mobile phone with an accuracy of 2 m.

The PKI 1680 is a handheld device that has beendeveloped for locating of mobile phones. It canbe combined with our GSM monitoring systemsPKI 1560 and PKI 1580. A directional antennacan either be worn on the body or inside thelaptop bag.

With our PKI 1560 or PKI 1580 you can identifythe necessary reception channel, which must bemanually entered into the GSM direction finder.In order to locate a mobile phone with the PKI1680, the target phone must be in transmission

mode, which is the case during a conversation.Alternatively, it can be switched intotransmission mode with our active GSMmonitoring systems PKI 1560 or PKI 1580 orwith our IMSI catcher PKI 1620.

In addition to its field strength display, the PKI1680 furthermore offers locating via audiocontrol by means of earphones, which isespecially useful during covert monitoringoperations.

The operating range of the PKI 1680 covers theGSM frequencies 900 (channel 1 to 124), 1800(channel 512 to 885) and 1900 MHZ.

Specifications: Components:• Handheld device, antennas, charger,headphones.

• Dimensions: 120 x 75 x 25 mm•Weight: 400 g• Power supply: 3.6 V / 1950 mAh, Li-Ion battery• Frequency range: 900, 1800, 1900 MHz

GSM Direction Finder



PKI 1700

The PKI 1700 is a direction finding system thatallows locating and tracking of GSM mobiledevices. It is equipped with an antenna unit,which can be mounted on the roof of the car, anda controller unit, that displays the direction of thelocated mobile phone in relation to the positionof your car.

The PKI 1700 can be used in combination withthe active monitoring systems PKI 1560 and PKI1580, as well as with the PKI 1620 IMSI Catcher,with which the target mobile phone can beswitched into transmission mode. Its special

advantage is its extremely high sensibility thatallows exact locating even over greaterdistances. For further locating operations, e.g.inside of buildings we recommend our mobiledirection finder PKI 1680.

Specifications: Components:• Direction finding device with display, cables, direction finding antenna for use on car roof.

• Frequency ranges: 900/1800/850/1900 MHz• Operating range: 1 - 3000 m dependingon topology

• Power supply: 12 V DC• Connectors: Direction finding antenna,power supply.

GSM Direction Finder for Mobile Vehicles

14



PKI 1720

The PKI 1720 is a high capacity jammer for the3G/UMTS frequency range, as well as for GSMfrequencies. This highly developed jammingdevice is perfect for combination with our GSMmonitoring systems and the GSM IMSI catcher.By selectively jamming the 3G/UMTSfrequencies, all UMTS telephones in theoperating area are switched into GSM mode.Once changed into GSM mode, they can easily bemonitored with our monitoring systems. Itsspecial advantage is its high capacity, which is of

special importance during operation near UMTSbase stations, in order to obtain the desiredeffect. It is possible to separately activate thesingle frequency ranges of the PKI 1720, whichallows specifically targeted operation and anindividual adaptation to any requirements.

Specifications: • Output power: up to 15 watt (TX power can bedecreased by steps for each band seperately)

• Shielding radius: up to 40 meters• Operating temperature: 0° - 50° C• Operating humidity: up to 85% • Power supply: 12 - 24 V or power converter• Size: 25 x 18 x 5 cm

High Power 3G and GSM Jammer



PKI 1740

The PKI 1740 is a high power jammer for all GSMand 3G (UMTS) frequency ranges. It reliablydisables all communications within the directproximity of the PKI 1740.

The transmission power of each single frequencyrange can be adjusted or deactivatedindependently from each other. In combinationwith our GSM monitoring systems or the GSMIMSI Catcher it is possible to transfer 3G (UMTS)mobile phones specifically onto GSM

frequencies, where they can be monitored forfurther investigations.

Due to its high transmitting power, the PKI 1740is perfect for use in areas with good cellphonecoverage. It jams all downlink frequenciesbetween the BTS of the network operator and themobile phone. By this, the GSM/3G telephonenetwork will not be affected at all.

Specifications: • Frequency ranges:- GSM 850- GSM 900- GSM 1800- GSM 1900- 3G/UMTS

• Output power: up to 250W (TX power can be decreased by steps for each band seperately)

• Dimensions: 72 x 46 x 35 cm•Weight: about 80 kg including areals• Operating temperature: 0° - 50° C• Operating humidity: up to 80% • Accessory: 230V or 110V power supply,or 12 / 24 V DC optional.12 -15 dBi directional antenna7 - 8 dBi omni directional antenna

High Power Jammer

Großenseer Str.18 • D-22952 Lütjensee / Hamburg / GermanyTel.: 49(0)4154 - 98 96 32 • Fax: 49(0)4154 - 740 16

E-mail: [email protected]: www.pki-electronic.com

PKI ELECTRONIC INTELL IGENCE GmbH GERMANY

PKI Building

gsm cellular monitoring systems - capitalei.com monitoring.pdf · pki 1740 high power jammer page...

Documents