Catcher 3G/IMEI/IMSI/TMSI

Number of 3G subscribers in the world is growing up rapidly and the demands from defense and security customers from producers for  off‐the‐air interception systems solutions for 3G phones and their calls remains unanswered.
The 3G-Booster is the most advanced interception product for the 3G generation; the product was designed to fulfill the first urgent need for intelligence gathering of information from the 3G mobiles. The 3G-Booster offers some unique advantages that drive it to be the most advanced and cost effective solution in the market. The 3G-Booster allows the user to collected store all mobile related data (IMSI / IMEI Catcher) and on top of that, to “command” 3G mobiles to move to 2G mode or completely to be jammed.

Number of 3G subscribers in the world is growing up rapidly and the demands from defense and security customers from producers for off‐the‐air interception systems solutions for 3G phones and their calls remains unanswered.
The 3G-Booster is the most advanced interception product for the 3G generation; the product was designed to fulfill the first urgent need for intelligence gathering of information from the 3G mobiles. The 3G-Booster offers some unique advantages that drive it to be the most advanced and cost effective solution in the market. The 3G-Booster allows the user to collected store all mobile related data (IMSI / IMEI Catcher) and on top of that, to “command” 3G mobiles to move to 2G mode or completely to be jammed.

System main advantages:

1.    Multi Network Coverage – the unit scans and detects active 3G networks automatically. Operator can decide which networks the system should intercept, few or all networks.

2.    Catch new 3G mobile identities – the unit detects 3G phones and collects their identities (IMSI, IMEI and TMSI) for the specific networks.

3.    Extended Mobile Parameters – in addition to the mobile identities, the system detects the mobile model and country of origin of the mobile.

4.     Mobile location – the system measures distance to the 3G phones with high accuracy of less than 30 m. By using directional antenna, location can be detected. By using more than 2 systems, mobile location can be detected with high accuracy.

5.    Frequency Coverage – each system can intercept up to 3 frequency bands used by UMTS according to the specific region. The basic default configuration is for 850 /1700 /2100MHz

6.    3G Migration – operator can command / force each mobile (or all mobiles) to migrate to 2G. Rest of the phones remains in 3G mode. Once target phone is in 2G mode, it will remain in this mode until reboot is done. This unique feature makes interception of 3G mobiles possible by passive or active 2G interception systems.

7.    Selective “Jamming” – operator can inhibit each mobile (or all mobiles of a specific provider) in a selective manner. By doing that, the mobile will be out of service till mobile reset is done.

8.    Network Jamming – operator can block mobiles of a specific provider upon decision

9.    Presence Verification / Targets – operator can define list of specific target mobiles. Whenever target is detected, operator will get an indication.

10. Comparison – operator can compare between 2 target files to detect the identities that are present in the 2 files and by that, to detect specific mobiles that were present in those 2 places.

11. Deployment – system can be deployed in a variety of configurations, such as in Samsonite case, small independent boxes, etc.

12. Simple operation – system MMI is based on a single main screen divided to few windows, for short training and to eliminate the need for GSM experts.

13. Fast deployment – system can be deployed within few minutes by a non-expert operator.

14. Periodic Scanning – system can repeat the scanning sequence in an automatic manner and store each set of results as separate file. This mode is designed for silent target presence detection.

Introduction

This document provides basic product description and major technical characteristics of the 3G-Booster and the operation capabilities.  The 3G-Booster is an Active system, specially designed to provide 3G mobile identities and to selectively control the mobiles. The 3G-Booster acts as a smart base station with
special configuration, it performs scanning and mobile interrogation. The following illustration presents the 3G-Booster operational concept:

1.1         System main capabilities

1.    Interception of 3G networks
2.    Identification of 3G mobiles in separation to the different providers
3.    List of mobile identities (IMSI / IMEI / TIMSI)
4.    Extracting mobile type and country of origin
5.    Measuring mobile distance from the system with relatively high accuracy of tens of meters
6.    Intercept to control transmission power for each provider separately
7.    Operational files can be stored / loaded according to mission type
8.    Triple frequency band coverage  (850 / 1,700 / 2,100MHz)
9.    System can be operated by a script written according to mission type
10. Target mode – detection of specific target mobiles
11. Built in transmission power up to 8W (operator can set specific power for each network)
12. Intercept to block specific provider mobiles

2. System overview

2.1         General
The 3G-Booster is an active UMTS (WCDMA) IMSI / IMEI Catcher system intended to detect active 3G networks operating in different frequency bands and 3G mobile which are active in the specific 3G network within the operational range of the system. 
Active means that the system is using a smart active module / algorithm that scans for active networks and for each network, for relatively a very short time, it communicates with the mobiles to get the mobile identities. The 3G-Booster supports the relevant frequency bands used in UMTS networks. 
The following image presents the basic 3G-Booster unit:

2.2      Building Blocks
The 3G-Booster main purpose is to intercept and detect 3G mobiles. In order to perform the above, the 3G-Booster basic configuration (other configurations can be provided) contains the following sub systems / modules:
•       Smart UMTS IMSI catcher 
•       Wide band antennas (directional or Omni directional)
•       System Notebook Computer

2.3      Functional diagram
The 3G-Booster unit includes 2 main modules: smart base station module and RF power buster. Typical system configuration includes a notebook computer (software can be installed on any computer) that sets the system parameters and the 3G-Booster unit.

2.4         3G Booster Unit
The 3G-Booster unit includes 3 modules required for the system operation:
•       Active advanced unique UMTS base station, capable of transmitting in 3 frequency bands
•       Unit power supply
•       RF Power controlled amplifier
The following image depicts the basic UMTS advanced base station module:

2.5       System Multi Band Antennas
As the system supports 3 frequency bands, a wide band antenna is provided as a standard configuration (the basic configuration is a directional antenna). Other
antennas can be used according to the operational needs.
The antenna is water proof and its configuration makes it suitable for fixed or vehicle installations for all cellular frequency bands. 

2.5.1 Directional Antenna
This antenna, the Multi Band Panel Antenna, covers all the bands for 2G, 2.5G and 3G cellular (as well as ISM, WLAN and Bluetooth), including the range
805 - 960MHz, 1700 – 2170 (and for Bluetooth it can cover 2,400– 2,500MHz as well). 
Antenna typical gain:

•       Low band  (GSM900) ----------------------8.5 dBi
•       High band (GSM1900, UNTS)-  7.5 – 10 dBi

The following image displays the antenna

The antenna band width is 700 at the low frequency and 600 for the high frequency. The antenna is aesthetic, small and has unobtrusive profile that blends easily with any environment. The antenna can be easily used either for Indoor or Outdoor Applications and features different mounting options.  Each antenna weights about 0.5Kg and the size is about 230 x 214 x 31 mm. Basic configuration includes 2 directional antennas.

2.5.2 Omni Directional Antennas
The antenna covers the following bands: 850 - 960MHz and 1700 - 2300MHz.
Antenna typical gain:
Low band ------ 3 - 4.5 dBi
High band--5.5 – 6.5 dBi
A single antenna and the brackets which are presented in the following image weights less than 1Kg:

3. System Deployment

System configuration is simple and straight forward, only few cables are required. The following diagram shows the full system layout:

System is supplied with all required cables and power supply.
System installation can be done within less than 10 minutes as only few steps are required:
•       Connect antennas to the unit 
•       Connect power supply 
•       Connect LAN cable between the unit and the notebook computer
•       Switch the Notebook computer ON 
•       Verify that the network connection is set to fixed IP: 192.168.16.204
•       Turn ON the 3G-Booster
•       Run the program

3.1       System Deployment Configurations
The 3G-Booster can be used in few configurations:
•       Stand Alone, Local Operation – in this configuration all units are in the same location, connected with cables between the units
•       2G / 3G Combined Active Solution – in this configuration the 3G-Booster and the system (Semi Passive 2G Solution) are operated by the same user from a single operator post.

2G / 3G Combined Mixed Solution – in this configuration the 3G-Booster and Passive 2G interception system are operated by the same operator from a single operator post.

Concealed 3G IMSI Catcher – in this configuration the 3G-Booster is operated by Bluetooth communication while the system is in a camouflaged configuration and operation is done via a portable small computer or a smart mobile phone.

3.2       System Deployment and Operational Considerations
The UMTS communication is sensitive to propagation conditions and topography and as such, it is affected by many parameters which means that operator needs to
plan carefully the deployment of the system. It is recommended to pay attention to the following:

• Clear view from the antenna to the area of interest (in which coverage is required) will improve the antenna interception
  Antenna will perform better if the surrounding area of the antenna will be clear (for Omni antenna it should be from all sides)
  Antenna should not be placed nearby metal obstacles 
  Maximum isolation is required between transmit and receive antenna 
  Deployment should not be done near by a UMTS base station
  Using a directional antenna will allow operator to be focused on area of interest
  Passive system should not be operated simultaneously with the 3G-Booster system.