PKI - Model 1100 -Interception Management System

The PKI 1100 system offers connected MCs to establish a controlled connection to the transition nodes of the network operator. The functionality ensures that the monitoring requests sent by the MC are transmitted to the correct transition nodes and in turn the monitored communications are forwarded to the corresponding MCs. PKI 1100 can be connected to a wide variety of telecommunications networks, each system being able to support multiple security agencies at the same time. In the process, a strict separation between the security agencies is ensured. The system is a combination of hardware and software to control all types of monitoring activities from different network types.

The most important functions:

• Interfaces to PSTN, ISDN, GSM, 3G, LTE, VoIP, NGN and IP networks
• Support of several manufacturers for proprietary network elements (X1, X2, X3)
• Support of various telecommunications providers (HI1, HI2, HI3)
• Support of different MCs
• Support of several security agencies
• Strict separation of security agencies
• Meets the ETSI telecommunications monitoring standards
• Control of system usage by central assignment of user rights and roles
• Report and logging function
• The automatic self-check keeps the status information of the connected interfaces up to date
• Voice and data router, which duplicates the monitored traffic from the network to the different MCs

Support of the most different telecommunications networks of multiple security agencies at the same time.

The most important advantages of the PKI 1100 System:

• Real time overview of all markers, connections to the network providers and security agencies
• Each security agency has access to the list of monitored network nodes, the type of supported markers and manufacturer-specific options
• Each security agency can view a list of its monitoring activities, the monitoring period and the list of network elements for which the activity is enabled
• If more than one security agency simultaneously monitors a target, PKI 1100 ensures that each security agency receives a separate copy of the monitored communication content and of the metadata
• If monitored communication content or the metadata cannot be forwarded immediately (if for example the connection between the PKI 1100 Interception Management System and the security agency is temporarily not available), PKI 1100 stores the data in a buffer memory until it can be delivered; however, this is limited to a defined data volume or a certain period
• All commands of PKI 1100 and their results are logged. The logs comprise and save both all actions listed automatically by the system and all user interactions. The logs are only accessible for the PKI 1100 system administrators
• Network environments whose day profiles show high traffic load peaks can be covered by using the load distribution functionality (option)
• The capacity of the PKI 1100 Interception Management System can be easily extended
• As a result of the modular architecture, the PKI 1100 software can be distributed flexibly to the available hardware in order to achieve an optimum processing speed.

• Supports ETSI, 3GPP, CALEA, SORM and a wide variety of national standarts for handover interfaces for circuit-switched telephony and IP data
• Regularly tested compatibility with the most important network providers
• Scalable interfaces, processing bandwidth, memory and number of users
• Open platform supporting future decoders
• Indexing and processing engines automatically analyze large amounts of unstructured data
• Highest security standards offer protection against external intrusion and malicious content such as viruses

The standard configuration of the MC comprises the following units:

Handover interfaces

• Connection to diverse standardized interfaces of network operators
• Accept communication from different networks
• Convert different input formats into a uniform format Processing and storage
• Processes, controls and saves the monitored communication
• Exports and imports data from/to other systems

Display and evaluation Graphical user interface to analyse monitored communication and to control the MC

Optional functions
Diverse analysis tools are available for the MC. Possible extensions are:

PKI 1100 Information System
The PKI Information System allows for the geographical monitoring of suspects in mobile phone networks and shows the location of the monitored persons and their movements on the map. This makes it easy to evaluate movement profiles and to recognize behavioural patterns of persons.

Search engine
The scalable search engine module offers a search function which has been developed especially for the current and future requirements of security agencies. It comprises all text information processed by the system.

Voice recognition
The voice recognition module can recognize individual speakers as well as spoken language, gender, age group, key words. Moreover, it offers the option to convert language into text.

PKI 1100 Interception Management System
The PKI Interception Management System enables security agencies to control complex network topologies from different manufacturers and network providers. It provides a central provisioning interface to enable or disable monitoring markers directly from the MC.