CC6000 Active Intercept

Transcription

1 CC6000 Active Intercept When real-time intelligence is needed on suspected Terrorist and Criminal Organizations, the CC6000 is the next generation of Active Interception Technologies. This system is able to show Persons of Interest as well as Random Traffic on multiple Radio Access Technologies. Once a Person has been designated a Target, he now is under the system s watch. All calls and text messages captured of that Target will be targeted by the surveillance officer. All network transactions from handsets in range will be targeted in order to track criminal / terrorist elements. Includes multiple network search tools for fast deployments in areas with many networks. For important investigations, the CC6000 represents a true solution to those seeking calls and text messages of Targets in dangerous regions. Also available in a field-deployable ruggedized mil-spec case, tested for shock and vibration. The CC6000 Passive Intercept offers: Voice & SMS on GSM & UMTS & optional LTE Network Targeting Direction Finder Capable.... And More. Setup involves a quick configuration based on local providers in the area of use. * Subject to local laws and regulations

2 Features Impressive Detection & Coverage Area - the CC6000 is able to cover an area that is comparable to other active technologies on uplink & downlink mobile pathways ; this permits the system to operate in as a Man-in-the-Middle, providing the ability to collect identities in range, monitoring the communications, and track their movements. Network Monitoring - The CC6000 can show the mobile landscapes involved for a monitoring mission ; it can show tower and user instances for collection missions, permitting the surveillance operator to choose which towers and users to monitor (and which to ignore). It supports an automatic scanning mode in order to quantify what channels are used for transmission. Targeted Networks - The CC6000 is able to Target GSM in 900 MHz, 1800 MHz, as well as UMTS in 2100 MHz + LTE Bands employed globally. It can map the location of Targeted mobiles in GSM, UMTS, + LTE, providing a userselectable mandate for choosing what bands to monitor. Mobile Interrogation / Catching: The system is designed to collect mobile identities such as IMSI and IMEI in GSM, UMTS, and LTE. Silent Call - The CC6000 can capture the current TMSI number. They system can send a Silent SMS to a service channel of the target's mobile phone without alerting the target. The message is discreet, and is used for non-alerting purposes in order to not tip off the target they are under surveillance. Remote Access - the CC6000 can be remotely accessed to allow a remote connection via standard internet in order to establish the means for a surveillance officer to connect remotely and access the system. Dynamic Allocation of System Resources - The CC6000 uses run-time information to utilize system resources as efficiently as possible based on the traffic load of BTS levels during surveillance, making the system work in an effective and efficient manner. A/5.1 + A/5.2 Decipher - The CC6000 is able to break a51&2 Security protocols. This Decipher can be built into the system and serves the needs of surveillance officers who require mission critical decryption for fast intelligence collection. Fast Target Assignment - The CC6000 can acquire a suspected mobile phone activates quickly. Once the operator turns it on, he can configure it to operate in the country of deployment quickly.

3 CC6000 Technical Data Designed to support GSM 900 MHz, GSM 1800 MHz, UMTS 2100 MHz, + LTE Tasked to show targeted mobile via map display so the surveillance officer can see Radio Access Technologies in 2G, 3G & 4G whereby cell distribu on is map driven for specific monitoring missions. Operator also can choose cells to focus on, for 2G, 3G & 4G or all. Catcher Sub system used to grab IMSI/IMEI iden fier of corresponding GSM, UMTS & LTE subscribers within specified cell ID range. Opera on to permit ac ve interroga on of two GSM providers, two UMTS & two LTE providers simultaneously. GSM Bands for 900 MHz and 1800 MHz by modular design Hidden Tx/Rx antennas. UMTS Band for 2100 MHz by modular design On board power amplifier applica on for each module Strong Laptop GUI for autonomous opera on. Internal GSM, UMTS & LTE scanner. Direc on Finder applica on for mobile tracking missions. LTE modular design when specified So ware for system opera on included System Traits: Performance Factors System opera on with A50, A51 & A52 and other specified type of network encryp on. System design for discreet, covert opera on and portability, permi ng carry / expand and operability when needed at any required place with minimum a en on The system is designed to perform with the ability to support Na ve 3G intercep on as well as GSM on 3 simultaneous calls. The System is designed to collect informa on in a covert manner, disturbing subscribers (other people using their phones). The system is designed to conduct Real me cross correla on in order to dis nguish a phone (or phones) that exists in several interroga on areas. Cell Catcher Applica on Selec ve Accept Mode Catch all GSM/UMTS/LTE phones of selected network and return phones back to network except for specified list of phones to remain captured Denial of Service Mode Catch all GSM/UMTS/LTE phones of selected network and moving them to out of service mode. Phones will remain in this mode even a er the system transmission is terminated (phones can be re ac vated only by restart ac on) Selec ve Reject Mode Catch and hold all GSM/UMTS/LTE phones of selected network and return only specified list of phones back to network. Accept Mode Catch and hold all GSM/UMTS/LTE phones of selected network Reject Mode Catch all GSM/UMTS/LTE phones of selected network and return phones back to network

4 Network Cloning Applica on While emula ng a real network (in GSM mode), the system is designed to support transmission of all network parameters visible on the handset display, including: MNC: Mobile Network Code Cell Info (CBCH) MCC: Mobile Country Code Intercep on Applica on The System is designed to collect the following applica ons in all modes for each interrogated mobile: Timing advance (TA). IMSI/IMEI/TMSI. Date & me of interroga on. Real me alert of phones exis ng in the system DB. Home network. Real me indica on of previous interrogated phones. IMSI/IMEI replacements. GPS posi on of the system at the interroga on me. System Build System main unit dimensions (W x H x D) in cm and Weight in Kg to be determined at the me of procurement, including laptop, antennas, ba ery, network monitor and cabling. The system main unit shall be portable with the following mechanical proper es: Case shall be made of a protec ve tough shell. Max weight 50 Kg (including 2G, 3G, 4G & Power Amplifier) Carry case with trolley Hardware & So ware The system Hardware & So ware generally includes current opera ng systems and designs, with five year warranty features available. The so ware is generally configurable and can scale for future changes. The system generally includes any addi onal hardware if required. The so ware is reliable to industry standards pertaining to COMINT technologies. All SW opera on, administra on, user documenta on is included. Hardware system configura on may be available for reference by authorized users only. System Memory Able to create exportable report with sta s cal/historical analysis for repeated iden fica on from mul ple sessions, exchange of SIM card, exchange of handset via filtering tools. Provide real me indica ons upon repeated iden fica on, exchange of SIM card or mobile terminal. Captured informa on is stored within the System's database, accessible via laptop, with suitable DBMS (MySQL applicable). Support database of at least 20,000 different IMSI numbers and ability to query database online & offline. The Database is able to be exported ; it also is designed to import data. Able to present all the intercepted (minimum 4 calls/sms at a me), calls and SMS playback the calls from the DB

5 GUI Interac vity The system is designed to allow the surveillance officer to add an interrogated phone quickly to the target list, directly from the GUI interroga on list. The system's GUI is windows based. Power The system can permit vehicle power while igni on is on or off ; if off, a ba ery op on + a switching power supply may be available. An AC charger for external ba ery is available. System designed for both Volt AC / Hz, 12 Volt DC, or 24 Volt DC, and all required power cords, adapters and inverters are op onal for seamless opera on goals. The ideal Vehicle power levels are: a) opera ng in parallel with the vehicle's power system ; once the vehicle powers up, the system is designed to charge. b) the system is also designed to provide charging support of the vehicles main ba ery. Antennas and Accessories Antenna Gain (in db) is determined at the me of procurement. Quan ty and Antenna type are determined at the me of procurement. Each antenna is provided with a magne c mount for op mum ease of use. The system is designed to include antennas for all applicable bands. System can permit diagnos cs for aler ng on: Hardware fault. Applica on fault Database fault. Self Diagnos cs UMTS Applica on Frequencies The system is designed to employ 3 frequency bands in a single unit for (900, 1800, 2100 MHz and LTE frequencies when specified). Transmission Power The system is designed to support configurable high power transmission minimum 25 Wa s per Brand. 3G Silent Call The System is designed to perform pure 3G silent call for 3G direc on finding. RF Power The power transmission output is determined a er purchaser needs have been disclosed. Push Target Phone The system is designed to perform selec vely push a target 3G/4G phone to 2G Network Monitor The system is designed to detect ac ve 3G & 4G cells in the area and present it on the map. UMTS Spectrum Scanner The UMTS spectrum scanner unit is designed to decode 3G/UMTS informa on required for the configura on of the 3G / UMTS ac ve unit. Blocking Capabili es The system is designed to be able to have selec ve 3G mobile phone / selec ve network blocking capabili es. During Silent SMS opera on, the System can send a silent call to the target's phone. A er this happens, the surveillance officer is able to selec vely push a target from 3G or 4G to 2G ; the system is designed to perform a con nuous Silent SMS call to a target's phone ( and the system is designed to permit regular incoming and outgoing calls and SMS during this opera on. Mul Network Coverage Capabili es The system is designed to automa cally detect 3G and 4G Networks in the relevant frequency bands and without any limita on on number of networks.

6 Mul Protocol Catcher IMSI/IMEI/TMSI Catching Capabili es The system is designed to detect 2G, 3G & 4G phones and their iden es (IMSI, IMEI and TMSI) for the network of interest. Direc on Finder GSM/UMTS Hand held Direc on Finder (with minimum 4 x hand held DF). Frequency Range: On any ARFCN The system is built as a portable form factor The system is designed to detect GSM by means of silent call Frequency/ Channel Resolu on: Able to be specified at me of order based on end user request. Display Type/ Parameter: Available at me of order. Power requirement: Available at me of order. Accuracy: Available at me of order. Weight: Available at me of order. Range and weight of Hand Held DF: Available at me of order. Capable to integrate mul DF applica ons. Antenna: Type: Available at me of order. Gain: Available at me of order. Addi onal Data Probability of success: > 90% Output from the 2G key retrieval : Kc Opera ng System: Windows 7 Pro 64 bit Dimensions of addi onal hardware component (LxWxH): 350mm X 240mm X 2U Weight: 3.5 Kg Portability: Ground portable Breaking me (average): A5/2 Real me (0.01 sec average) A5/1 Near real me (0.3 sec average) Input to the 2G key retrieval : All transferred SDCCH, and SACCH frames up to key retrieval

7 Local opera on: Standard Ethernet connec on 100Mbps 2G raw data for key retrieval Humidity: 95% Remote opera on: Standard remote protocol over standard internet 2G raw data for key retrieval Temperature: Opera ng 0º to 50ºC Storage 5º to 60ºC Electrical : AC input: VAC/50 60Hz DC input: 12V Power consump on: 100W Addi onal Data 2 Power Amplifier The Power Amplifier is designed to accommodate a minimum of two amplifying channels for use with GSM. The power transmission output would be determined at me of procurement. The Power Amplifier is designed to accommodate a minimum of two amplifying channels for use with UMTS. The power transmission output would be determined at me of procurement. The System's is designed with mul ple power amplifiers in order to power the system's Mul network func onality. Vehicle Kit AC Ba ery charger Interceptor moun ng kit Power amplifier vehicle moun ng fixture 12 V vehicle power unit with connec ons to standalone ba ery and to vehicle ba ery Direc onal antenna with minimum 8dBi gain Omni direc onal antenna with minimum 6dBi gain3. Antenna kit

8 Addi onal Details: GSM Transmission Power: The System is designed to have GSM output transmission power. This power level is determined at me of procurement. BTS: The system is Mul BTS capable. Each frequency can be chosen at me of procurement. Real me Cross Matching: The system is designed to conduct real me cross correla on to dis nguish a phone (or phones) that exists in several interroga on places. Real me Alert: The system is designed to present a color coded real me alert for a captured target that is defined in the DB. Different groups of targets can be defined by different colors. Remote Covert Opera on: The system is designed to support remote opera on by using a PC/Pocket PC via wireless link. All so ware controls are generally via wireless control. Max distance for such wireless control to be can be chosen at me of procurement. Fast switching between Networks: The switching of interroga on parameters including the change of channels and/or networks are designed to take place on command by the system operator, with li le to no breaks in between transmission. Ba ery Opera on: The system is designed to operate on ba ery power for approximately 6 hours con nually under ideal condi ons for output of 2G, 3G & 4G modules simultaneously. Ba ery weight is approximately 40 kg +/ Car Opera on: The system is designed to support car opera on. Installa on & training is available. Ini al Warm up Time: The system s ini al warm up me from cold start is approximately 10 minutes. Power Amplifiers and Antennas: The system is designed to connect various Power Amplifiers and Antennas to allow different transmission set ups. Scalability: The system build is able to accept upgrades for expanded opera on. Scalability: The system can be easily made to handle usage and growth requirements. Time Slot U liza on per Channel: 8 (full GSM backbone) channels are available at me of procurement. Existence Check: The system is designed to indicate if a captured target (in GSM Accept mode and Selec ve Accept mode ) is s ll held by the system's private network func onality. GSM, UMTS & LTE RF mapping: The system is designed to permit the user to plot GSM, UMTS and LTE RF condi ons on an integrated map engine. GSM, UMTS & LTE RF mapping: The system is designed to employ real me map posi oning. Search Parameters: The system is designed to search for a target in range based on IMSI or IMEI a ributes found in the GSM and UMTS Neighbors List The system is designed to transmit in the GSM/UMTS/LTE by module. Interroga on Priority Module: The system is designed to have an embedded priority module used to transmit over the BCCH channel. This type of design is used to cause phones in range to gravitate toward the system's private network func onality and force them to register onto the system's network. TMSI Catching: The system is designed to grab the TMSI of target phone (in addi on to IMSI/IMEI).

9