GSM Tracking via IMSI and TMSI Interception

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current GSM network protocols have implementation deficiencies that hinder effective tracking of unauthorized individuals entering premises, as they lack robust mechanisms for identifying and locating mobile devices within specific location areas.

Innovation Solution

A system utilizing a software-defined radio (SDR) coupled with algorithms to intercept and analyze GSM signals, employing IMSI and TMSI identification, along with location area analysis, to passively track and identify mobile devices, and a database to differentiate between authorized and unauthorized devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If GSM network protocols are used for tracking mobile devices, then device identification capability is provided, but tracking reliability and precision are insufficient due to protocol implementation deficiencies

Engineering Contradiction:
Improvetracking reliabilityVSAvoidlocation identification precision
Core Design Contradiction:
ReliabilityVSMeasurement precision

Solution Approach 1:

The patent introduces an intermediary tracking system that intercepts and analyzes GSM signaling messages between mobile devices and base stations. This intermediary layer extracts location area information, IMSI, and TMSI from the signaling traffic, enabling reliable tracking without requiring direct access to network core databases. The intermediary system bridges the gap between basic GSM protocols and advanced tracking requirements.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces traditional mechanical/network-based tracking mechanisms with a software-based signal analysis approach. Instead of relying on direct network database queries or physical tracking infrastructure, the system uses software-defined radio to capture, decode, and analyze GSM signaling messages, substituting complex network infrastructure with software processing of communication protocols.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Object-affected harmful factors

If mobile device tracking is implemented to improve security, then unauthorized individual detection is enabled, but false positives increase due to inability to distinguish authorized and unauthorized devices

Engineering Contradiction:
Improveunauthorized entry detectionVSAvoiddetection accuracy
Core Design Contradiction:
Object-affected harmful factorsVSReliability

Solution Approach 1:

The patent implements feedback mechanisms where the tracking system continuously monitors device behavior patterns, location area transitions, and signaling message characteristics. This feedback is used to update device profiles and distinguish between authorized and unauthorized devices based on their communication patterns, reducing false positives by adapting to legitimate user behavior variations.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The patent applies local quality analysis by examining specific characteristics of signaling messages and location area information at different stages of device movement. The system analyzes local details such as TMSI allocation patterns, location area code changes, and message timing to differentiate between authorized devices following normal protocols and unauthorized devices attempting to infiltrate the network.

Inventive Principle:
Principle #3Local quality

3Difficulty of detecting and measuring

If passive tracking of mobile devices is implemented, then intrusion detection capability is provided, but device complexity increases due to additional analysis requirements

Engineering Contradiction:
Improveintrusion detection capabilityVSAvoidsignal analysis complexity
Core Design Contradiction:
Difficulty of detecting and measuringVSDevice complexity

Solution Approach 1:

The patent segments the complex signal analysis task into distinct processing stages: message capture, message decoding, location area identification, IMSI/TMSI extraction, and intrusion detection. Each stage processes specific aspects of the GSM signaling messages independently, making the overall complex analysis manageable through modular processing functions that can be implemented sequentially.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS12137497B2System and method of tracking a mobile device
Publication Date: 2024.11.05 TRESPASS TRACKER LTD
  • US12137497B2 patent drawing
  • US12137497B2 patent drawing
  • US12137497B2 patent drawing

AI summary

Systems and methods for tracking mobile devices are provided. One system comprises at least one processor and memory storing code which when executed by the at least one processor configure the at least one processor to perform a method of tracking a mobile device. The method comprises receiving a disassemble international mobile subscriber identity (IMSI) attach message from a base station, identifying the identified mobile device within a location area using the IMSI and LAI, receiving a decode and capture message from the base station, and identifying the unidentified mobile device as being the identified mobile device within the location area. The disassemble IMSI attach message includes an IMSI and a location area identity (LAI) associated with an identified mobile device. The decode and capture message includes a temporary mobile subscriber identity (TMSI) and LAI associated with an unidentified mobile device.