Equipment for interception and demodulation of RF signals.

Equipment for interception and demodulation of RF signals.

Seller Granit Island Group
James M. Atkinson, Granite Island Group

Equipment for interception and demodulation of RF signals

95 ELF/VLF/VHF/UHF Receiver

The 95 ELF/VLF/VHF/UHF Receiver is becoming the industry leader in TSCM and SIGINT. It is a wideband, zero-beat frequency converter, all-digital radio with software-controlled signal demodulation.

With its HF section with zero frequency conversion, the device has excellent sensitivity and high selectivity. No other radio receiver on the market comes close to these parameters.

The 95S receiver covers a frequency range of 3 kHz to 2 GHz, and with the addition of the MSY-0208 synthesizer, the upper frequency range can be increased to 8 GHz. The receiver can actually be tuned to a frequency down to 0 Hz (DC voltage), but the receiver parameters are degraded. The product provides an I/Q signal output, which allows vector signal analysis.

95S is the 19″ rack-mount version, and 95V is the version with VME backplane and chassis. The VME version is much more compact and has much better performance.

The Miniature Surveillance System (MSS) is a “TSCM tool in a small case” with a total frequency coverage of 5 kHz to 2 GHz. There are four versions of the system and a wide variety of accessories (direction finding antenna array, fluxgate gyrocompass, GPS transit unit, etc.).

Anyone who has received formal government training in TSCM or SIGINT has been trained in the MSS and should be familiar with this series of MSS.

MSS-2100 is a complete system that provides signal detection, collection and analysis in a single integrated package. The modular design of the system allows it to be configured to operate in a variety of use cases.

The MSS-2100 system consists of:

1. Antenna or sensor system for receiving signals.
2. A collection and analysis subsystem to ensure optimal signal collection in a predetermined frequency range.
3. Pre-processing of detected emissions.
4. Data processing function that allows comparing the parameters of detected emissions with a previously created database and forming an analysis algorithm in accordance with the operator's intention.
5. Collection capability that allows saving all spectral data for subsequent return to them and analysis.
6. Operator interface that allows selecting operating modes, analyzing the sensitive frequency range and displaying the analysis results.

MSS-2100/WJ2 (PN: 752-8074-003)— baseline system using two Watkins-Johnson receivers as the RF section (WJ-8710 and WJ-8607).

Two such receivers cover frequency ranges from 5 kHz to 30 MHz and from 2 MHz to 2032 MHz, respectively, which provides a frequency range of the system from 5 kHz to 2 GHz and above. Four additional antennas can be connected to the VHF/HF receiver using software control, including a built-in antenna — a power line. Two of the external antenna inputs can also be connected to the VHF/UHF receiver. The power line can be connected to the VLF/HF radio receiver to facilitate the detection of VLF eavesdropping devices installed in the power line wires.

The system includes a power supply and IF interfaces for connecting an external analog signal monitor, which can be placed in the equipment case. The system has a maximum scanning speed of 350 MHz per second with a maximum bandwidth. Demodulation of AM, FM, carrier frequency signals, signals with an independent sideband, separate sideband, AM pulse signals, with an upper sideband and a lower sideband is performed. The system supports up to five IF bandpass filters (three of which are included in the system). These filters can have a bandwidth from 6.4 kHz to 8 MHz.

MSS-2100/WJ1 (PN: 752-8074-002) is a baseline system and uses a single Watkins-Johnson WJ-8607 receiver, which sacrifices the VLF/HF bands.

MSS-2100/AOR1 (PN: 752-8074-001)uses a single AOR AR-3000 receiver and is a low-cost version of the MSS (the WJ receiver costs 20 times more than the AOR receiver). The VLF/HF performance of this receiver is not satisfactory and should not be used for TSCM purposes.

MSS-1200a

MSS-1200a is an older version of the MSS with many of the same technical specifications as the MSS-2100. It covers a range of 10 kHz to 2 GHz, with an IF bandwidth of 3 kHz to 4 MHz.

MSS-1200b

MSS-1200b is an older version of MSS with many of the same specifications as MSS-2100. It covers a range of 100 kHz to 1.2 GHz with a bandwidth of 3 kHz to 300 kHz.

MSS-1500

MSS-1500 is a version of MSS-1200 built for the US government. It has the same specifications and operation as MSS-1200.

MSS-3500

The MSS-3500 system is expected to be announced in the fall of 1988. This system will use the VME version of the 95v in a mini rack configuration. The system is expected to cover the range from DC to 8 GHz and will include both a direction finder and a card to provide modulation recognition.

NTN- auxiliary cardcage.

NTN is a PC cardcage that allows ISA cards to be inserted and managed directly from the MSS (without requiring a large external computer). This allows a small laptop to be used and the ISA support to be “overloaded” onto the MSS. The auxiliary cardcage is mounted in a small MSS case, allowing for increased security during operations.

MR-2100 — Modulation Type Recognizer/Classifier.

The MR2100 Modulation Recognizer provides the TSCM team with a fully automated system that “catalogs” different modulation types to facilitate quality TSCM inspections. The ISA card uses multi-dimensional universal covariant matrix statistics to automatically identify up to 36 modulation types typically in 150 ms per signal (33 signals in 5 seconds). New PCMCIA and PCI versions of this card are expected in the fall of 1998 (along with the release of the new MSS-3500 system).

DF-2100 Direction Finding Subsystem

The DF-2100 direction-finding subsystem consists of an ISA PC card and can be used with or without an external display (depending on your requirements). The range from 15 to 2000 MHz is covered by a device consisting of four monopoles. An optional autonomous indicator allows independent operation without using a PC. The optional global satellite positioning system and induction compass provide operation on mobile vehicles while moving and show the intersection of vectors on a digital map. The DF-2100 can be created virtually or by radio. The system uses the well-known pseudo-Doppler method. The root-mean-square error in determining the angle is within five degrees. A new version of the DF-2100, contained on a single PCMCIA plug-in card, is expected in the fall of 1998 (along with the release of the new MSS-3500 system).

Note: TSCM specialists using MSS should be aware of some weaknesses of this system:

• The frequency range covered is limited to 2 Gigahertz, which is a problem when the threat involves common video and audio transmitters that can be purchased at a radio market or spy shop.
• The frequency range does not fully cover the 1-18 GHz region used in covert video eavesdropping devices that are readily available under the counter.
• The product does not meet the requirements for working against microwave eavesdropping devices using 16, 64 and 256 quadrature amplitude modulation. Such devices are constantly used by various intelligence agencies around the world.
• Work with antenna systems — power lines is limited to the VLF/HF subsystem, which does not allow detecting VHF/UHF eavesdropping devices using power circuits; such devices operating in the range of 130-400+ MHz are quite available on the market.
• The product has a very limited IF, which is a serious problem if the threat includes spread spectrum eavesdropping devices. Such devices can only be detected when the IF is 70 MHz or higher (MSS has an IF of 21.4 MHz or lower).
• MSS performs very poorly at detecting pulse modulation devices, including video transmitters and computer bugs.
• VLF detection does not go below 5 kHz, which does not cover audio frequencies. When speech is applied to AC power lines, MSS will not detect the threat (a favorite method used by Chinese and Soviet intelligence agencies against U.S. targets).
• MSS is poor at detecting wideband FM transmissions with a subcarrier because this requires the IF signal to be fed to a second VLF/HF receiver. MSS does not currently provide this type of connection.

Watkins-Johnson (WJ-8710A, WJ-8654, WJ-8609A, WJ-8609A-01, WJ-8607A, WJ-8607, WJ-8809A/SYS, WJ-31290-1)

The entire line of Watkins-Johnson equipment has enjoyed great success in the TSCM and SIGINT community. It is expensive, ruggedized, and combat-ready. It is designed for use by the defense and intelligence community, which has very specific requirements. Watkins-Johnson products are designed to operate in the most «inhumane» environments, and virtually every spy plane, NSA listening post, or listening post contains a lot of Watkins-Johnson equipment.

To summarize the TSCM and WJ relationship, any serious TSCM TEAM has at least $50,000 worth of Watkins Johnson equipment to conduct TSCM.

Anyone who has completed formal government training in TSCM and SIGINT has learned to use Watkins Johnson receivers and should be an expert in their use.

WJ-8710A — Compact VLF/HF Digital Receiver

This all-synthetic general purpose HF receiver has fantastic VLF bug detection and demodulation capabilities. The receiver covers a range from 5 kHz to 30 MHz and is controlled by an external computer. It has standard AM, AM MTCM, FM, CW, USB, LSB and SSB detection modes. The WJ-8710a is an ultra-compact, lightweight version of the larger WJ-8711 and HF-1000. The DSO (Digital Scan Output) option provides a digital scan output that displays the IF signal in digital format.

WJ-8654 — miniature VHF/UHF receiver — microseptor

The WJ-8654 Microseptor is an extremely compact general purpose VHF/UHF receiver covering the 20 MHz to 1 GHz range. The HFE option shifts the low end of the range to 500 kHz, the FE option shifts the “high end” to at least 2.4 GHz. It has standard AM, FM, continuous carrier, upper sideband, and lower sideband detection modes. Subcarriers are detected by connecting the receiver output to the input of an RF receiver such as the WJ-8718 (see above). The WJ-8654HFE can be tuned to various frequencies down to 0 Hz (DC) with no loss of performance. A very popular addition to the WJ-8654 is the WJ-9168 Signal Visualizer, which uses two 21.4 MHz IF outputs to create a panoramic display in real time. The entire system, including the WJ-8654, RF extension, microwave extension, and signal visualizer, weighs less than six pounds and measures only 4.5 x 3.0 x 7.8 inches. Six complete systems, a battery, antenna, and laptop fit easily into a standard small suitcase (with room to spare).

WJ-8609A VHF/UHF Wideband Receiver

The WJ-8609 is a small, lightweight, general purpose VHF/UHF receiver with frequency coverage from 20 MHz to 512 MHz. The FE option will increase the upper frequency from 20 MHz to 2 GHz. The receiver's five bandwidths range from 500 kHz to 40 MHz. The WJ-8609A is a great device for detecting video eavesdropping devices. The receiver weighs five pounds and measures 1.5 x 6.5 x 10.5 inches. It is controlled from an external laptop.

WJ-8609A-01 — Wideband Microwave Receiver Mini Receiver

The WJ-8609A-01 is used with the WJ-9290 frequency downconverter to provide coverage from 235 MHz to 18 GHz. This allows the compact miniseptor to cover the microwave range. For easy detection of modern microwave devices with a spread spectrum, the device has a very wide bandwidth (from 500 kHz to 40 MHz).

WJ-8607A — VHF/UHF Receiver Miniseptor with fast range tuning

The WJ-8607A, a fast-tuning mini-septor, is a compact, lightweight, general-purpose VHF/UHF receiver covering the frequency range from 2 MHz to 512 MHz. With the FE option, the range is from 2 MHz to 2 GHz. The receiver allows scanning at a rate of 200 µsec at 25 kHz (1 MHz interval in 8 ms). The DSO (Digital Scan Output) option provides a digital analysis output, which presents the IF signal in digital format. The receiver is controlled from an external laptop.

WJ-8809A/SYS — Microwave Receiver System

The WJ-8809A/SYS is a small, lightweight, fast-tuning microwave receiving system with frequency coverage from 100 MHz to 18.5 GHz. It is a very wideband receiver that enables detection of modern microwave video and data eavesdropping devices operating on a spread spectrum. The receiver is controlled from an external laptop.

WJ-31290-1 — Miniature Microwave Receiving System

The WJ-31290-1 is a miniature, lightweight microwave receiving system providing frequency coverage from 500 MHz to 26.5 GHz. The system is designed to receive high-order PCM/QAM (Pictogram-Controlled Modulation and Quadrature Amplitude Modulation) signals with high data rates. The 1 GHz, 160 MHz, and 70 MHz IF outputs provide a range of bandwidths from 250 kHz to 500 MHz. This is a very wideband receiver, facilitating the detection of modern microwave spread spectrum data and video eavesdropping devices. The receiver is controlled from an external laptop and operates in a compact case.

CS-6700 ACES — advanced portable system for ELINT/ESM (ESM- Electronic Signal Monitoring (radio intelligence)

This system is very popular with TSCM groups. This basic system provides coverage from 500 MHz to 18 GHz, which can be extended to 40 GHz. The system has instantaneous wide bandwidth and very high sensitivity. The TN-618 tuner provides an IF of 1 GHz with a bandwidth of 500 MHz, which provides a very high probability of intercept. The system is controlled from a Sun Microsystems laptop and can “track” up to 1024 suspicious emissions. The emitter library can contain from 4000 to 10,000 entries. The system is excellent for detecting spread spectrum, frequency hopping, multi-beam, pulsed and continuous carrier eavesdropping devices.

CS-2040 — Mini-Hawk Receiver System

The Mini-Hawk Receiver System is based on the HAWK architecture and can be configured to control two systems with rotating antennas. The C-244 controller weighs only 40 pounds and provides a 640 x 480 pixel color display. 1 GHz, 160 MHz, and 21.4 MHz IF outputs provide a range of bandwidths from 100 kHz to 500 MHz. The main system covers from 500 MHz to 18 GHz.

An optional frequency converter provides coverage from 20 MHz to 40 GHz. Typically, this system is mounted on mobile assets and used to determine the off-site environment prior to performing TSCM testing on the asset.

CS-2221 — Miniature Receiver System

The CS-2221 Miniature System is a laptop-controlled system that covers a frequency range from 500MHz to 18GHz. The system measures 11.5 x 11 x 3.5 inches and weighs 28 pounds.

WJ-36400 — Spectrum Monitoring System

The WJ-36400 is an easily transportable system and can be installed in either a carrying case or a rack. It is a cost-effective superheterodyne microwave receiver with frequency coverage from 80 MHz to 18 GHz. Its scanning speed, sensitivity and wide RF/IF bandwidth exceed those of most spectrum analyzers. This system is very popular for monitoring inside sensitive areas, SCIFs and shielded rooms.

TSR-620 Series Receivers

The TRC-620 Series is one of the finest families of intercept receivers available. Three models provide frequency coverage from 300 kHz to 1.35 GHz, extendable to 2.7 GHz. The products utilize digital IF processing and a highly efficient signal processing algorithm. The TRC-2981 and TRC-3941B are excellent complements to any of the TRC-620 Series receivers, providing panoramic indication.

Marcony Bragg Cell Receiver (“cellular receiver”)

The Bragg Cell receiver splits an extremely wideband signal into a series of parallel frequency channels. The split signal is then detected by a series of photodetector elements. This provides frequency coverage in excess of 2 GHz, with a frequency resolution down to 100 kHz. This receiver is used in a variety of non-linear locators to increase their efficiency. This type of product is typically used to detect frequency hopping and spread spectrum signals.

Nanomin Receiver

This is a miniature multi-channel interception receiver with a frequency range from 20 MHz to 1.5 GHz. The presence of multiple IF bandwidths and the ability to demodulate AM, FM and continuous carrier (CW) signals allows interception of voice signals, data and telemetry signals, as well as pulsed signals. Primarily used by TSCM groups as a spectrum analyzer, which forms a very good basis, which is completely controlled from a laptop.

SCR-7204 Receiver

This is a remarkable series of VHF/UHF radio receivers with frequency coverage from 20 MHz to 2.5 GHz. It has small dimensions and an integrated IF panoramic display SCD-7304.

VHF/UHF Receiver RG-5545A

VHF/UHF receiver with frequency coverage from 20 MHz to 1 GHz. Integrated IF panoramic display RG-1320A and four IF passbands.

EB-100 miniport receiver.

Portable VHF/UHF receiver with frequency coverage from 20 MHz to 1 GHz. Very sensitive, but weak above 500 MHz. Handheld active directional antenna NE-100 provides detection of HF radiation at close distances from the source. Integrated mini IF panoramic display EPZ-100 provides indication in the 100 kHz band at an IF equal to 10.7 MHz. This system is very popular in TSCM groups, Europe and the UK, which cannot be said about the USA.

HP E6501A VXI Receiver

New HP VXI mini rack-mounted receiving system with frequency coverage from 20 MHz to 1 GHz (optional — from DC to 3 GHz). Powerful DSP IF signal processing, very sensitive analog receiver section. A variety of blocks can be used to create a direction-finding system for spatial analysis with a good price/performance ratio. A VHF/HF mixer is usually used to lower the lower frequency limit to DC. This receiver can be used to monitor the 21.4 MHz frequency at the IF output of a spectrum analyzer. With the help of a powerful DSP algorithm, it is possible to demodulate signals (AM, FM, PM, SSB, continuous carrier, etc.). The presence of digital I and Q outputs allows vector analysis. And although the basic system costs $15,000, it is a very valuable system to use when conducting TSCM.

Audiotel International (Scanlock ECM, Scanlock 2000)

The Scanlock ECM+ countermeasure receiver is a TSCM instrument covering the frequency range from 12 kHz to 4 GHz and higher. This spectrum is covered by two sub-ranges: from 8 kHz to 10 MHz and from 10 MHz to 4+ GHz.

Scanlock 2000 — This is an older product with coverage from 10 MHz to 4 GHz.

Both products are quite expensive: the ECM+ has a base price of $9,500, while the 2000 has a base price of $5,520. While both units meet their specific requirements, the money would be better spent on a Watkins-Johnson or Rockwell receiver.

Both products should only be used for TSCM services in low-threat environments.

For more information on intercept receivers that can also be used for TSCM, click on the highlighted text below.

TSCM Intercept and Search Receivers/Radios