Cell Phone Monitoring

Mobile phone tracking is a process for identifying the location of a mobile phone, whether stationary or moving. Localization may be effected by a number of technologies, such as the multilateration of radio signals between (several) cell towers of the network and the phone or by simply using GNSS. To locate a mobile phone using multilateration of mobile radio signals, the phone must emit at least the idle signal to contact nearby antenna towers and does not require an active call. The Global System for Mobile Communications (GSM) is based on the phone's signal strength to nearby antenna masts.

Mobile positioning may be used for location-based services that disclose the actual coordinates of a mobile phone. Telecommunication companies use this to approximate the location of a mobile phone, and thereby also its user."Location Based Services for Mobiles: Technologies and Standards“
Shu Wang, Jungwon Min and Byung K. Yi
IEEE International Conference on Communication (ICC) 2008
Beijing, China

Technology

The location of a mobile phone can be determined in a number of ways.

Network-based

The location of a mobile phone can be determined using the service provider's network infrastructure. The advantage of network-based techniques, from a service provider's point of view, is that they can be implemented non-intrusively without affecting handsets. Network-based techniques were developed many years prior to the widespread availability of GPS on handsets. (See for one of the first works relating to this.)

The technology of locating is based on measuring power levels and antenna patterns and uses the concept that a powered mobile phone always communicates wirelessly with one of the closest base stations, so knowledge of the location of the base station implies the cell phone is nearby.

Advanced systems determine the sector in which the mobile phone is located and roughly estimate also the distance to the base station. Further approximation can be done by interpolating signals between adjacent antenna towers. Qualified services may achieve a precision of down to 50 meters in urban areas where mobile traffic and density of antenna towers (base stations) is sufficiently high. Rural and desolate areas may see miles between base stations and therefore determine locations less precisely.

GSM localization uses multilateration to determine the location of GSM mobile phones, or dedicated trackers, usually with the intent to locate the user.

The accuracy of network-based techniques varies, with cell identification being the least accurate (due to differential signals transposing between towers, otherwise known as "bouncing signals") and triangulation as moderately accurate, and newer "advanced forward link trilateration" timing methods as the most accurate. The accuracy of network-based techniques is both dependent on the concentration of cell base stations, with urban environments achieving the highest possible accuracy because of the higher number of cell towers, and the implementation of the most current timing methods.

One of the key challenges of network-based techniques is the requirement to work closely with the service provider, as it entails the installation of hardware and software within the operator's infrastructure. Frequently the compulsion associated with a legislative framework, such as Enhanced 9-1-1, is required before a service provider will deploy a solution.

In December 2020, it emerged that the Israeli surveillance company Rayzone Group may have gained access, in 2018, to the SS7 signaling system via cellular network provider Sure Guernsey, thereby being able to track the location of any cellphone globally.

Handset-based

The location of a mobile phone can be determined using client software installed on the handset. This technique determines the location of the handset by putting its location by cell identification, signal strengths of the home and neighboring cells, which is continuously sent to the carrier. In addition, if the handset is also equipped with GPS then significantly more precise location information can be then sent from the handset to the carrier.

Another approach is to use a fingerprinting-based technique, where the "signature" of the home and neighboring cells signal strengths at different points in the area of interest is recorded by war-driving and matched in real-time to determine the handset location. This is usually performed independent from the carrier.

The key disadvantage of handset-based techniques, from service provider's point of view, is the necessity of installing software on the handset. It requires the active cooperation of the mobile subscriber as well as software that must be able to handle the different operating systems of the handsets. Typically, smartphones, such as one based on Symbian, Windows Mobile, Windows Phone, BlackBerry OS, iOS, or Android, would be able to run such software, e.g. Google Maps.

One proposed work-around is the installation of embedded hardware or software on the handset by the manufacturers, e.g., Enhanced Observed Time Difference (E-OTD). This avenue has not made significant headway, due to the difficulty of convincing different manufacturers to cooperate on a common mechanism and to address the cost issue. Another difficulty would be to address the issue of foreign handsets that are roaming in the network.

SIM-based

Using the subscriber identity module (SIM) in GSM and Universal Mobile Telecommunications System (UMTS) handsets, it is possible to obtain raw radio measurements from the handset. Available measurements include the serving Cell ID, round-trip time, and signal strength. The type of information obtained via the SIM can differ from that which is available from the handset. For example, it may not be possible to obtain any raw measurements from the handset directly, yet still obtain measurements via the SIM.

Wi-Fi

Crowdsourced Wi-Fi data can also be used to identify a handset's location. The poor performance of the GPS-based methods in indoor environment and the increasing popularity of Wi-Fi have encouraged companies to design new and feasible methods to carry