We need to connect to more than one network to cover Turkey. There is no need to install any hardware in GSM operators for remote installation. All equipment is available at the operators.
In such cases, there is a need for local operators to provide the following elements:
2*E1 or SIGTRAN (more than MTP and SCCP) used for MAP: SCCP global header allocation, SSN (6, 7, 8, 0*91 (145), optional 0*95 (149)) and MTP point codes with both path connections to HPLMN SS7 network (pre-installed in IR21).
1 – Benefits of Implementing a Local Hub
Capacity Expansion: Servers allow to generate a significant amount of queries, enabling to enhance the data resulting from the use of the system such as Geoskrim, proximity alarms, internet user alerts, robotics, and geo-intelligence tools.
Enhance Privacy: Network servers are considered a standard means of communication with cellular network operators. The server that is part of the network is able to perform queries on targets, increasing autonomy and confidentiality, defining internal-based query as end-to-end flow within the country and under the full control of operational agencies.
Improved Accuracy (Geo+): The network setup application adds new features to get the target location at GPS level and improve the location demand of various network elements.
2 – Draft
In recent years, mobile phones have become one of the most popular means of communication. In addition, mobile phones are an important source of information for military units, intelligence, and law enforcement that conduct research to gather information about potential suspects, known criminals, and terrorists.
In parallel, cellular intelligence technologies and methods are constantly developing and evolving with the types of information obtained from mobile phones, network servers are becoming more comprehensive and variable.
One critical piece of information is the location of the subscriber, and although there are major advancements in technology, obtaining this information is still a challenge.
Extracting location information in real time with the control of subscriber’s network services can greatly assist operational agencies in improving their daily activities. However, even with current tools, achieving precise, real-time or near real-time location intelligence in the cellular network is not an easy task. Cellular networks are complex and accessing subscriber information is not easy. Retrieving this information from the network is time-consuming and costly. When a subscriber roams randomly, the exact location at the cellular ID level may not always be reached. In addition, in many circumstances, mobile operators do not want to cooperate with operational agencies to give them the authority for changing and controlling the network services provided to their subscribers. In short, connecting to cellular networks will significantly affect operational success.
Landmark solutions are a first mile and last mile technology marvel, developed and designed to meet the above mentioned issues and operational agency requirements.
Landmark Solution
Decision makers need precision to better respond to catastrophic events and deploy troops; they need instant connectivity to elaborate intelligence systems to protect citizens.
To meet this need, we recommend Landmark, our geospatial intelligence solution -a comprehensive, integrated end-to-end solution for compiling, processing, compliance, managing, and production of images, and data development in the future.
Landmark solution is a strategic solution that is easily utilized by authorities, emergency responders, and decision makers who plan all available data around geographic locations around the globe. This solution provides operational agencies with the ability to track, locate and manipulate terrorists, known criminals, and potential suspects anywhere in the world. In addition, it provides important information about the subscriber such as status and location history.
Landmark capacity depends on the ability to capture and send standard signaling messages (MAP messages) across the SS7 network. This solution does not require software or hardware installation on both the mobile phone and the cellular network. Landmark can secretly track any network subscriber anywhere in the world, even if the GPS signal is not detected.
It can be used to assist operational agencies in a variety of operations such as natural disasters, locating and tracking criminals.
Landmark Benefits
- A strategic real-time solution – provides a bird’s eye view of GSM/UMTS subscribers’ location from dense sector to cell priority
- Global – A complete and comprehensive GEOINT solution with worldwide monitoring capability
- Independent – Performs online network queries about subscriber status and location in real-time with minimal dependency on cooperation from local service providers.
- Confidential and Secure – Connected to SS7 protocol, secure and transparent
- Intuitive and friendly interface – Secure connection
Landmark Uniqueness
- The right solution that ensures process security
- All queries are done through the intelligence route, which hides them and makes it impossible to monitor or display them with SS7 commands.
- Adding modules and capabilities that allow the operator various analytical and functional capabilities
- Flexible installation modules – A system that connects to gateways worldwide with minimal impact to all networks or securely remotely connects to SS7 on a network server installed at one of the local telecom operators
3 – Typical Operation Scenario
Typical Landmark workflow includes the following steps:
- Landmark network queries for subscriber location based on subscriber mobile number (MSISDN)
- Retrieving the subscriber’s location at Country/Network/MSC/cell level (GPS latitude/longitude coordinates are available using internal data or commercial services.)
- Displaying the geographical the subscriber’s location on the map view with additional accessible information such as phone status (On/Off/Busy/Not Busy), host country, host operator, MSC (key) and subscriber’s IMSI
- Feeding other tactical units that form IMSI capture and locating
4 – Landmark Platform
The Landmark platform is integrated with the SS7 network server, analysis algorithms, databases and mapping engines and management models to achieve end-to-end GEOINT solutions.
The solution includes the following components:
- Application/Client-Side Server: The system’s central intelligence servers, using the approach to advanced broad-minded systems, the server manages all the pathways from interrogation, signal processing, network and database processing, analysis and displaying results.
It connects to local or worldwide SS7 (Secure IP connection, over IPsec) switches, allowing the location of the subscriber to be obtained.
Designed hub platform, Landmark’s application server includes 6 key functional elements:
- Authorization Center – Authorized and assigned to access the circle system according to the authorization levels (admin, team leader, user) through the VPN tunnel.
- Agglomeration switch– Processes, manages, aggregates all queries on the users’ side and directs queries to the appropriate SS7 keys to identify, respond to actions, and capture answers from the relevant data.
- Signaling Network Servers – Using signaling connection ports in the SMSC on client and carrier
It uses standard SS7 commands to add intelligence to carry query requests to appropriate STPs or other network elements (HLP, VLR, SMSC, FDA links, etc.) with intelligent traffic management to avoid overloading and similar problems.
- Analysis System – Process information from the computer to answer queries, analyze all raw query information within the database
Adding a reporting module to show data inside maps and tables, ensuring that the latest data is used.
- Database – Connecting to carrier databases to get the latest data and integrate new incoming data. It has a sensitive structure due to its content. Data security of the surrounding server machines is controlled by external loading. Providing IP policies, meeting procedures fully, adding restores
- Network Management System – Managing communication and operation of all system resources and components, optimizing network traffic, providing reports, logging system performance and usage
- Workspace: A local or remote client can meet the application. The subscriber’s information and location on the map are displayed.
- Network Server: Needs organization of queries or SMS in case of heavy traffic. A network driver switch is recommended. Optionally this server is installed in one of the mobile operators, either inside or outside the country. In both cases it needs SS7 network interface.
The mobile network is a dynamic network server based on the standard cellular signaling system (SS7) that seamlessly connects to multi-functional systems. It provides the location of the subscriber anywhere in the world on a country/network/LAC/cell ID level, such as HLR, MSC/VLR, SMSC/FDA, SCP (intelligence network), USSD&OTA, and SMS documents sent to networks.
Network servers are designed according to GSM standards. The internal functions within the node and all interfaces of the GSM/UMTS/IMS network are designed using these standards:
- MAP-ITU MAP versions 2, 3 and ANSI IS41 D
- INAP-INAP CS-1,CS-2
- CAP-CAP versions 1, 2, 3
The Landmark platform is the best ever built to provide leadership over IBM and Dialog. Based on modules, the platform consists of several hardware components.
5 – Application Mode
Local installation to the cellular operator: The network server is connected via a secure IP connection with signaling messages sent and received through the local operator, while the application server and the isolated database are installed. This option is available for full local collaboration.
Local setup is shown in the diagram below:
1) Infrastructure (Hardware)
- Application Server: The logic servers of the system are connected to the SS7 network ports from which the subscriber’s location is taken. (Secure IP connection, over IPsec)
- Workplaces: Local or remote computer where a user can obtain the application server and view the subscriber’s information on a map
PC or laptop workplaces are CFEs.
Hardware for local setup of SS7 hub at the local mobile operator within the country:
- Network Server (SS7 hub): Sending queries to cellular networks to locate subscribers around the world. The hardware provides the customer with the ability to increase the number of queries per day. The hardware to be installed at the customer site, which has a connection to one of the telecom operators in the SS7 hub home country or to the SS7 network. Hardware includes SS7 nodes: SMSC/FDA, MAP master input, HLR interface, VLR controller, USSD GW, GSM STP, Global Header Translator: SS7 protocol stack (MAP, INAP, CAMEL and Patented INAP extensions)
2) System Licenses
Locator – Provide the capability to send single or multiple location queries to mobile operators over the SS7 network to deduce subscriber’s location
Analyzer – Collect, analyze and display Landmark location results according to various selectable criteria
Main Robots – Simple rules that can be defined by the user:
- User via Internet: Alerts when the target’s mobile phone, which is currently switched off, is switched on again and the GSM cellular network is registered. This alert allows the phone to be monitored anywhere in the world.
- Safe area: Generates an alarm when the target enters/exits a predetermined area or zone, or comes within a predetermined perimeter around a specific location. This alert is only available within the home country.
Advanced Robots – A powerful set of user-definable rules:
- Country: Notifies if a specific target is connected or disconnected from any local network within a specific country.
- End-to-End: Enables tracking of the proximity of targets if two separate targets approach or move away from a selected value.
Remarks
- The system converts the cell ID to coordinates only if such information is available. Cell ID location may vary depending on the accuracy and coverage of the commercial database.
To improve accuracy, the following options are at the client’s discretion:
- Manually update the location of cells from their own sources via the fetch CSV file option
- Enriching commercial database using commercial tools (drive test)
- Implementing a standalone map tool
- Based on worldwide roaming agreements, it will display the target’s information if such information is available in the system. Location information may not be obtained if the target is hosted by an operator that blocks such queries, or in the absence of roaming agreements with telecom network ports.
- In some countries, system access to determine locations will require special treatment to avoid NSA.
- The location of the target will be based on its local mobile number (MSISDN). In most cases, the system will display the IMSI and allow locating the target by entering the IMSI number.
- Installation of the system includes the setup of a dedicated SS7 telecom port at one of the mobile operators within the country.
- Functionally, it’s important to pay attention to warnings of system queries. In such an event, it minimizes the risk of higher than expected threshold values in foreign networks.