The SingInt PGIS-900/1800 system is designed to passively intercept and decode duplex voice & data channels encrypted using A5.X (A5.1; A5.2; A5.3) algorithms. The system is available in a wide range of variants depending on the end users specific requirements. The system can be mounted as standard for static intercept tasks or built into a fully mobile intercept system for mobile tracking and intercept of moving targets.
The PGIS-900/1800 has two intercept & decryption modes. The first mode allows real-time monitoring of the targets GSM communications, but this relies on access to the targets SIM card or to the Cellular Network Providers (CNP) database. The second mode allows for delayed monitoring of the targets GSM communications when there is no access to the CNP database or the targets SIM card. The delay depends on the specific encryption level being used in the zone being monitored and the exact specification of the PGIS. Details of how the PGIS works in both modes is described below:
There are three ways a real-time intercept can be set up to monitor a targets voice and data channels:
- The cellular network provider's database access can be obtained.
- The target's SIM can be copied in 15 minutes but this requires physical access to the targets SIM card.
- The cellular networks encryption is turned off/ disabled.
Delayed monitoring is not real-time because a special decryption block is used to decrypt the voice and data channels. This delay is approximately one or two minutes depending on the PGIS specification and the level of encryption being used in the intercept area. The obvious advantage is that no access to the SIM card or the CNP database is needed.
Establishing An Intercept
Available base stations scan.
The PGIS gives the user the ability to automatically find all the signals emitted by the nearest GSM 900/1800 base stations. During the scanning process a table is created showing all the GSM base stations radio signals found by the system and their parameters. The radio signals that have the best signal to noise ratios are automatically taken for control by the system. The signal levels for these stations will be shown in the visual control window of the users console.
In this mode the operator can manually select for the control the required base station signals from the list of signals found.
Monitoring of Base Stations Control Channels.
This mode gives the user the ability to run the control on the command float on the base stations control channels. The system finds the exact frequency placement of the base stations control channels (SDCH) and depending on the control channel frequency placement, the PGIS configuration and scanning strategy is created.
Selecting the System Configuration.
The system gives the user the ability to choose the configuration depending on;
- the TX power emissions of the base stations and accessibility of these emissions,
- frequency placement of the SDCH channels,
and covers the possible zones for the targets cell phone (s) to go on-line. Three PGIS RX channels from the available eight (in standard configuration) are used to provide reliable control of the monitored target(s) duplex voice channels. The first five RX channels of the PGIS are usually used to create the configuration.
The systems software allows the use of the previously created configurations. Depending on the configuration of the system required then additional channels may be added to increase the number of targets being monitored and intercepted.
Creating Grouped Lists of Targets.
The PGIS users console allows the creation and tracking of monitored target groups. This is achieved by creating a list of targets with their phone numbers, targets names and other relevant data into corresponding fields of the list. These lists can then be grouped as required. The remaining fields will be automatically updated according to the amount of data collected by the system during the monitoring session. The group list of controlled targets can be modified by using the controls inside of the control window during a session.
Monitored Targets TMSI Retrieval.
Automatic TMSI Retrieval
In order to automatically retrieve a targets TMSI you must have a connection to a land line. To run the automatic TMSI retrieval you have to select from the list of targets the line that contains the needed targets phone number. At the end of the search process the PGIS determines the existence of the target inside the zone that is accessible by the system. If the target exists inside of the coverage zone then the TMSI given to the target by the cellular network is placed into the corresponding window.
All the TMSI changes happening each time the target goes online or reregisters during the movement from the one base stations coverage zone to another zone are automatically tracked by the system.
Manual TMSI Retrieval
This is done when there is no land line access.
The user selects the corresponding line from the targets list; presses the MANUAL control from the menu and dials the targets number on the mobile phone. At the end of the search process the PGIS determines the existence of the target inside the zone being accessible for the system. If the target exists in side of the coverage zone then the TMSI given to the target by the cellular network is placed into the corresponding window.
The system allows the registering of all the TMSI changes each time the target goes online or reregisters.
The TMSI changes that happen when the target is changing the active base station are tracked automatically. In case the target goes out of the PGIS coverage area or switches the cell phone off the operator has to repeat the TMSI retrieval process.
Interception of A5.1, A5.2, 5.3 Encrypted Voice Channels.
Interception of the Targets from the Lists.
The system allows the voice channel interception of the targets according their priority in the lists. Targets that have a lower index number in the list will have the higher priority. This mode is used to intercept only listed targets.
If during the interception of one target another one that has a higher priority assigned to it goes online the PGIS automatically stops the interception of the lower priority one and starts intercepting the higher priority one. If a target that is going online has a lower priority than the one currently being intercepted then the PGIS continues to intercept the higher priority target and just updates the TMSI for the lower priority one. The PGIS has a manual priority override mode.
Multiple Target(s) Interception
The PGIS is capable of monitoring all users in the PGIS coverage area but as soon as a listed target goes online then one of the non listed targets is dropped and the target is intercepted.
The system allows fast entering of non-listed targets into the monitored list of targets to be monitored without interrupting the current intercept.
To record the decoded output you can store it locally or to connected recording devices via the linear output of the system. The system can store voice tracks on the systems hard drive (s) for current or future decryption and playback.
Software is available to allow targets within the PGIS coverage area to be tracked real-time on mapping.
Technical and operational training either in Singapore, in the end users country or in another mutually suitable area. This training is conducted exclusively by experts on the system.
Technical Support & Warranty
Repairs may be done in the users country or returned to Singapore for major repairs if for example the PGIS becomes physically damaged by the user. The hardware complies to each specific component manufacturers warranty however the warranty will not be valid if the unit has not been used in accordance with the PGIS manual or the casing has damaged or tampered with in anyway.
Technical Hardware Specifications
The specific technical requirements of the system must be agreed with the supplier to determine the exact capabilities and specifications of the PGIS. These variables include;
- Processor type.
- Amount of RAM.
- Hard Drive Space.
- Independent power supply for isolated or mobile operations.
- Dual or Single monitor configuration.
- Connection cabling.
- Automatic scanning handset.
- User Manual, language to be specified, Mandarin and English are standard.
- Hardened casings to industrial or military specifications.
- Number or RX channels.
- SMS, fax/data interception module.
- A5.x decryption module.
- Mapping Software.
- SIM card reader option.
- Hermetically sealed and shock proof transport and storage case.