Chapter 24. Discovery of Call Detail Records

Information in this chapter:

• Discovery issues in cellular evidence
• Example language for call detail records
Call detail records are used in many criminal cases to attempt to determine where a subject was from the cell tower location information. Getting the right records can make a difference in being able to properly analyze and interpret this type of evidence.
Keywords
Cellular Evidence, Call Detail Records, Cell Towers

Introduction

In order to properly analyze call detail records, a considerable amount of information should be gathered in addition to the cell tower locations and the call detail report. In this chapter we look at language for use in requesting this information in the most detailed manner possible. Bear in mind that all of the information you request may not be available because different cellular carrier companies’ retention policies vary. Some carriers begin to purge records as early as 18 months after a call is recorded, while others may keep records for several years. The only way to know is to contact the custodian of records and inquire about the carrier’s individual retention policy.
In any case where you are going to seek this information, even if it is a considerable amount of time after the date of the incident, it may be prudent to issue a preservation order to prevent the loss of any further stored data.

24.1. Discovery issues in cellular evidence

Call detail records in and of themselves provide minimal information. This is because the call detail records are used by the cellular carriers for the purpose of financial transactions such as generating bills to the subscriber and also for the purpose of settling accounts with other carriers.
However, when call detail records are needed for the purpose of evidence, additional information is needed to perform a comprehensive analysis. A standard call detail report will not contain any technical information about the individual cell towers or the health of the system at the time. If you only have a listing of calls made and the location of the various cell towers that were used in the transmission and reception of the calls, a lot can be left to interpretation. While locating a cell phone is not possible from historical records, many claims are made as to the location of a cell phone from these records.
In order for the analysis to be as complete as possible, information about the cell towers must also be gathered:
• Coverage maps for each cell tower,
• Whether or not cell towers were undergoing maintenance,
• The configuration of each of the cell towers
This information is needed so that the analyst can properly identify and map out the specific coverage area of a tower or tower sector.
The language that is included in the following section attempts to capture information about the configuration and health of the cellular system at the time of the incident. It also attempts to capture the history of any calls made, text messages, and data access for the phones in question.
Simply requesting the call detail records and cell tower locations for a cellular phone number will not compel the carrier to give you information that could be critical to your case. The cell phone system and how it works along with examples of the usage of the evidence you are asking for here is covered in Chapter 33.

24.2. Example language for call detail records

This example language includes all of the items that you would want to get when requesting cellular phone records in order for your expert to be able to provide the best analysis possible.
Defense or plaintiff requests the following information be provided regarding cell phone communications for cell phone number(s) 000-000-0000 for the period of time between 00-00-2000 and 00-00-2000.
Any information including but not limited to:
1. Subscriber information for the above listed numbers, not limited to financially responsible party, social security number, billing address, features and services, and equipment
2. All call originations, call terminations, call attempts, voice and text message transactions, including push-to-talk, data communications, and voice communications
3. All stored SMS, MMS, or browser cache
4. Beginning and ending cell phone tower identifiers for each call cell phone tower/cell site location information including latitude and longitude for the coverage area, specifically for City, State, for the time period requested
5. Central office identifiers for the area of coverage for the time period requested
6. All connection attempts including completed and failed connections and call duration times to one one-hundredth of a second
7. A complete table of cell towers/cell site information for all cell towers/cell sites in the service area. This will include cell tower location information, cell tower/cell site designation information, and cell tower/cell site identification numbers and date of service origination for each tower/site, and date of service termination for each tower/site
8. A detail of the coverage radius and configuration of the cell towers/sites as of the time period requested
9. A Radio Frequency Plan map for the service area for the phone numbers for the time period requested
10. Originating and receiving phone numbers or network IDs for all incoming and outgoing call transactions, data transactions, and push-to-talk sessions
11. Date and time information for all transactions to one one-hundredth of a second
12. A legend and definition for any and all abbreviations used in the reports provided
13. Any information regarding roaming agreements with other carriers in the area that were in effect as of the time period requested
14. Any information regarding default or pushed to phone preferred roaming lists (PRLs) in effect for the time period request and for six months leading up to the time period requested
15. Any trouble tickets for towers within area designated herein for the dates and times designated herein
16. Any stored handset identification data for any cell phones related to the call detail records
Please indicate in your response to this subpoena if there is any data loss due to the time difference between the date of the receipt of this subpoena and the time period requested, and if so, a detailed description of what data is not recoverable versus what data would be recoverable based on the carrier’s retention period for call detail records, cell tower/site records, and Radio Frequency Plan records.

Summary

In this chapter we looked at some of the discovery issues relating to cellular evidence. We have also included sample language for obtaining as much information as possible for call detail records and supporting information that may be obtained in the course of discovery.
..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset