Project Carmen Sandiego for Mobile Phone Security

The Project Carmen Sandiego was created by Don Bailey and Nick DePetrillo and illustrated it as BlackHat 2010. This project was made possible because they wanted to increase the awareness of people on mobile phone security.

Using this commercially-available technology, people can now “track down GSM cell phone numbers, identify the person who owns the phone, and tracks the destinations of that person.”

An example of Project Carmen Sandiego is the HLR or Home Location Register. This technology is described as “a central database that contains details of each mobile phone subscriber that is authorized to use the GSM core network. There can be several logical, and physical, HLRs per public land mobile network (PLMN), though one international mobile subscriber identity (IMSI)/MSISDN pair can be associated with only one logical HLR (which can span several physical nodes) at a time. The HLRs store details of every SIM card issued by the mobile phone operator. Each SIM has a unique identifier called an IMSI which is the primary key to each HLR record.

According to Bailey, the HLR technology is available and can be cross-referenced with Mobile Switching Center Information. This can help in locating the phone’s spot.