GENERAL   EQUIPMENT   INC.                    

 Supports both A5.1 and A5.2 deciphering

 Totally transparent and undetectable by the Mobile Operator and the subscriber

 Support for all frequency bands

 Gathering intelligence information even when target is not using the mobile phone

 User-friendly operation

Advantages:

 Easy change of Mobile Operator by changing a parameter only

 Interception operation starts in less than 15 seconds

Options and extra features:

 Remote operation – controlling of interception mission via Internet

 Detecting GSM-standard mobile stations, located within the zone controlled by the System,

 Registering traffic (incoming and outgoing communications) from these mobile stations,

 Manipulating the state of mobile stations, which have been registered by the system.

The System operates in stealth mode in GSM networks, which use various encoding types (А5.2, А5.1)

 Defining mobile station key parameters - IMSI, IMEI, Kc, etc, which are required for System operation;

 Full control over mobile station incoming and outgoing traffic within the System’s reach zone;

 Manipulating the state of mobile stations, including the possibility of identifying the location of a mobile station (target) by activating its transmitter.

The system is the only system in the world that can operate in a range between 1-2 Km (with long range option).

The system default configuration supports up to 1 Km. The actual system range will be depending on the environment where it is being used. Typically in a heavily built-up urban area the range will be about 150 meters that is because BTS in an urban area covers small area influence on the real capture area of system.

In more open areas where the cell coverage area is larger the actual interception distances.

Optional models can be provided for increased range.

The dominator I can perform several manipulations to provide more information about the targets.

 The system can force the activation and the transmission of the target phone to feed the Direction Finder (DF) system

 Early Kc evaluation is performed by the MS unit. It helps to shorten the authentication call process. It helps only if Mobile Operator change the Kc every few calls.

 The system force the target mobile phone to a certain ARFCN traffic channel to correlate with the operation of a DF system

 The system shows constant indications of the reception level from the Mobile subscriber as well as constant level display of the BTS.

 PLMN detection – The Dominator I includes a very important function that called "Get Public number". It detects the Mobile Subscriber telephone number (PLMN number) by capture its number when sending the callerId over hidden incoming call.

 Tracking and analysis tools by saving subscribers lists that include fade out subscribers, rejected subscribers and " target presence " subscriber lists,

 Target history tracking list - to view the information stored in the database on a subscriber with IMSI identification

 Backup utilities - Convert Voice recording to standard .WAV files to be recorded on removable storage media. Database can be exported due to Microsoft Access MDB format.

 Intelligence Analysis functions helps the operator to search for specific conversation or SMS. The operator can apply many filters to search for an event. SQL query language also provide means to search for events

 Easy way to detect if Target replaces SIM cards. Each HLR list displays the IMSI (SIM Id number) and the IMEI (Equipment Id number). Using the correlation function the operator finds the changes of new IMSI/IMEI combinations.

 The system applies transmission level control to determine the Tx level of the BTS.

 Intelligence gathering when the target does not participate in incoming/outgoing calls (call standby).

 Quick Mobile Operator change. The operator may change to a new operator by changing the LAI ( MCC + MNC) in the system BTS parameters setup.

 IMSI and IMEI catching. (Secretly obtaining mobile station main identification parameters (IMSI, IMEI, TMSI, Kc etc).

 Detection, controlling of mobile stations entering and leaving, turning the power on and off in the System's coverage zone.

 Preventing operation of a certain mobile station (Target) or of station groups, which are in the System's coverage zone.

The System initializes the operation of the base station. Thus, one cell is formed (further - internal network) for which the MCC, MNC and ARFCN values will correspond to the parameters of a cellular communication operator, operating in a given district (further - external network), and the LAC is set to a different value from what is used in the real network. The mobile phones, which are within its operation radius (further - subscribers), will acknowledge activation of a strong channel and will start the registration procedure. They will transmit to the System their IMSI, IMEI, TMSI (received in real GSM networks), class mark, KCN. The program’s “BTS control” window will display a list of registered subscribers (called in the system - HLR). For the subscribers, registration in the internal network does not differ from registration in the external network.

Maintaining full control over mobile station incoming and outgoing traffic within the System’s coverage zone;

Two control modes:

1. Random mode Interception (all mobile stations)- Capture and record all incoming and outgoing traffic within the System’s coverage zone;

2. Tracking mode Interception – IMSI and/or IMEI (only targets)

The System supports subscriber (target) selection by the known IMSI and/or IMEI identifiers and also has the given identifiers search tools based on the registered subscribers’ statistical list processing results.

The System operates in stealth mode and it cannot be detected by the mobile stations’ users. The system does not create interference for external mobile GSM networks.

The “Target Correlation” function helps to identify the Targets specific parameters from a list of all subscribers that were registered in the system.

This function is intended to search for the target’s IMSI/IMEI identifiers with the purpose of their subsequent use as selection parameters. This technique is based on comparing the lists of subscribers, registered in the internal network, obtained from various sources (at different addresses) during various time periods

 The System supports mobile station operation (restoring the radio coverage zone) in critical situations (natural or technologic disasters);

 Hostage situations - search, detection and possible contact with the GSM mobile station owners in disaster areas, accidents (supporting exclusive System’s operator’s contact with pre-determined mobile stations).

 It can be used as a local area network for a small office.

Supports detection by the usual (standard) radio control resources of the location of a given mobile station, located within the System's coverage zone, by concealed activation of the mobile station’s transmitter.

The following units are included with the System:

 Paging channel stations - to receive from one external network’s LAC incoming subscribers’ call messages, registered in the internal network;

 Mobile stations - to support authentication procedure, initiated by the external network, during incoming and outgoing subscribers’ calls, registered in the internal network. The mobile stations are automatically tuned to the internal network base station’s ARFCN channel;

 Active stations - to interact with the external GSM network on behalf of the subscriber, registered in the internal network.

 Notebook PC to perform the control, storage, information production and analysis tools. The Notebook Pc is handling the real time deciphering function.

 BTS cloning system includes:

o A base station (BTS), tuned to one of the GSM-900 or GSM-1800 frequency bands (with preliminary agreement);

 Multi BTS (multi bands and multi Mobile operators support) connection could be ordered

o A base station transmitting channel amplifier

o Two (or more) channels of mobile stations for Kc calculation.

o Internal Directional antennas

 Target cloning unit includes:

o A complete set of up to 6 active stations.

o A paging channel station 1 or 2 units;

 A notebook with the corresponding software (PC)

o IBM ThinkPad T60 or better

o Processor 1.86GHz

o 80Gbyte hard disk

o 2.048 Gbyte RAM;

 External Directional antenna for the GSM frequency multi band

 A set of connection cables.

 Long distance optional components

o High gain High power antennas

o Long distance amplifiers units

The range of the system is defined between the system and the target. The range is between 150 meters in town to 1km in rural areas and up to 2km with long distance option.

With wireless option the range will be defined by the sum of the distance between the target and the battery operate BTS cloning and the distance between the cloning BTS to the recording system

– the Laptop. So the range may be increase to 600 meters in town to much more even 15 km in LOS (Line Of Sight).

With the wireless option we can make interception Inside buildings while the recording system will be in a van out of the building.

The system Graphic User Interface (GUI) is composed of main window and some sub programs that enables the process of the information that was captured during the interception process:

The main windows enable the full and easy control of the field interception mission. It provides an easy setup of the system parameters and a full automatic capture and presentation of the communication protocols of the subscribers.

The system main windows:

The main window presents the status of the 4 channels receivers and voice recorders.

Via the main windows the system operator manages the target list parameters and controls the modes of operations.

The target correlation window enables to isolate the target IMSI/IMEI parameters by correlating of subscribers lists with or without the target presence. The targets correlation window enables also to detect the replacing of SIM cards in mobile handsets by correlating the IMSI and IMEI data.

The system DF adds both a direction finding and a tracking vehicle GPS location capability to existing system basic GSM phone interception systems. The whole system fits into a single case and can be deployed on any vehicle in less than ten minutes.

Extremes of performance of mobile tracking have always required sophisticated equipment and highly skilled operators. The system DF offers simplicity of deployment and use whilst maintaining the range and sensitivity of more complex and expensive equipment. The system DF has been designed to offer the simplest dual band GSM cellular phone location solution available on the market today.

 Installed and ready to use in under ten minutes

 Single page controller display shows all tracking information

 Audible tone varies according to range for ease of use

 Digital signal processing removes need for operator fine tuning and improves

sensitivity

 Data interface allows the GPS position of the tracking vehicle and the direction to the target to be displayed by Director mapping software.

 Suitable for mobile deployment & operation

 Audible tone changes to indicate GSM lock.

The system DF add-on option comprises three major components:

 Antenna pod

 Receiver

 Hand held controller

The antenna pod receives the incoming signal and is connected by two screened cables to the receiver. If the system is deployed on a car the pod is fixed to the roof by magnets and/or roof straps to each corner. The use of roof straps is recommended under all conditions.

The receiver detects the cell phone signals, automatically synchronizes to the GSM signal and calculates the bearing to the selected phone. Tracking data is displayed on the hand held display (HHC1) which is also used to select the optimum average period.

HHC1 displays the signal bearing on a polar display with a resolution of +/- 1 degree. The signal strength is displayed on a bar graph and the signal quality is indicated by the length of the direction pointer.

Vehicle based mapping application design with large buttons for optional touch screen use. It displays the local and the target position with DF cone when available. It also enables easy interface with Google earth maps and images.

The method of operation is based on two vehicles. First vehicle with the interception system that forces the target phone to send continues signal transmission. The second vehicle is deployed with the DF components. The direction to target is displayed as a compass pointer and the relative signal strength is shown as a bar graph and numerically. The audio tone increases in frequency as Dominator DF gets closer to the target giving a clear warning of a close encounter.

 Indoor direction finder

 Small and light weight

 Support GSM900, DCS1800 and PCS1900

 Rechargeable batteries

 Sound indication

Many clients are asking for passive because they do not want that the interception mission will be detected by the targets. The client assumes that the fact that the system transmit signal to the air may cause the detection by the target.

Yes, this 'non transmission' is the benefit of the passive method but this is the only benefit of these systems.

The passive method cause many difficulties and disadvantages. More facts about A5.1 passive interception systems:

number of channels in the area.

The Dominator I is the only non detectable active system in the world.

Here are some of the characteristics of the modern active system:

9. Distance is affected by other base stations. Standard distance is up to 1Km.