Network Security

Unified Signaling Shield (Multi-Protocol Signaling Firewall)

Introducing the cutting-edge Unified Signaling Shield (USS), a Multi-Protocol Signaling Firewall designed to empower Communication Service Providers (CSPs) in effectively monitoring, controlling, and managing signaling traffic with both national and international operators, carriers, and telecom service providers.

In the current digital environment, it is essential for CSPs to safeguard networks against a variety of threats, including protocol vulnerabilities, unauthorized exposure of subscriber data, and location tracking across protocols such as SS7, Diameter, and GTP-C. Additionally, challenges like voice call fraud—including Wangiri scams, robocalls, caller ID spoofing, and Flash calls—highlight the need for strong protective measures. The PROTEI Unified Signaling Shield goes further by utilizing proprietary rules informed by extensive market knowledge and deployment experience.

Malicious entities do not restrict their attacks to single protocols; they exploit various interfaces to achieve their objectives. Recent incidents show an increase in the complexity and sophistication of attacks, particularly those orchestrated by nation-states. Such threats, executed across multiple protocols at once, can evade detection if protocols are kept separate from each other.

PROTEI Unified Signaling Shield functions as a comprehensive multi-protocol firewall, defending SS7, Diameter, GTP-C, SIP, and ISUP protocols. By utilizing a unified platform for signaling processing across all protocols, the USS enables real-time correlation during active processing, rather than relying solely on post-processing or reporting. This advanced capability allows the USS to effectively counter sophisticated multi-protocol attacks, detecting and blocking them in real time.

Moreover, the PROTEI USS is designed to identify and address unexpected or unconventional signaling messages by applying the appropriate MTP, SCCP, TCAP, and MAP policing rules. It also features intuitive dashboards that offer CSPs a clear overview of ongoing activities and the manner in which the USS is managing these threats.

Additionally, the PROTEI USS complies with GSMA guidelines FS.11, FS.19, FS.20, and FS.36, which encompass all facets of GSMA’s Category 1, 2, and 3 security recommendations. It exceeds these standards by identifying unusual low-level activities, signaling inconsistencies, and other anomalies.

Central Equipment Identity Register (CEIR)

High-capacity, multi-protocol, advanced signaling solution
Full compliance with international standards.

PROTEI CEIR enables network operators to enter the IMEI of stolen handsets into a “blacklist”, thus preventing them from being registered on the network.

Protei CEIR/EIR system is a comprehensive, flexible platform designed to combat device theft, fraud, cloning, and market counterfeit issues.

Addressing a Critical Market Challenge:
In some countries, counterfeit and substandard mobile phones can account for up to 20% of the market. To protect consumers and ensure network integrity, governments must enforce strict conformity standards for all equipment manufacturers, vendors, and operators — including consumer devices like mobile phones and wireless adapters.

Our Innovative Solution:
Protei CEIR/EIR offers a robust device registration solution for all imported devices, supporting seamless registration via a dedicated Web GUI or M2M API for external systems. For personally imported devices, registration can also be conducted through web portals, USSD, or mobile apps. Each registration process is backed by verification workflows for data accuracy and tax collection, with a flexible billing module supporting multiple tariffs based on business rules.

Tackling the Challenge of Already Used Devices:
A major obstacle in device registration is integrating devices already in use by subscribers. Our team has extensive experience in handling such complex registrations while maintaining control over fraudulent or stolen devices. Trust in our expertise.

Securing Devices via IMEI & IMEI-Cloning Resistance:
While IMEI is a primary factor for device blocking, advanced technology allows IMEI reprogramming — especially in stolen or cloned devices. Protei’s solution pairs IMEI with IMSI or MSISDN, creating one of the industry’s first anti-cloning systems that verifies device authenticity and prevents fraud effectively.

Reducing Spectral Congestion & Enhancing Service Quality:
Counterfeit phones degrade spectral efficiency, lead to higher dropped calls, and increase access failures, impacting all users. Our system leverages GSMA’s global TAC list to block devices with invalid IMEI numbers, helping governments enforce import bans on unauthorized devices and protect consumers.

Protecting the Public and Enhancing User Confidence:
A stolen or lost device can threaten individual privacy and security. Protei CEIR not only blocks or tracks such devices but also offers expansion options for comprehensive control, making it an essential tool for telecom operators and government agencies aiming to safeguard their populations.

Modular & Scalable — Start Small, Grow with Confidence:
Protei CEIR is a multilingual, modular platform designed for flexibility. Deploy the core functionality first with options to add advanced modules later, ensuring cost-effective scalability tailored to your needs.

Protei CEIR — Your Partner to Secure Mobile Networks, Combat Fraud, and Protect Consumers.
We supply turnkey CEIR/EIR solutions to telecom operators and government agencies worldwide, setting new standards in device management and security.

Key Benefits

Full handling of Check IMEI functionality
Using standard procedures for detection
Horizontally scalable solution
Processing of "blacklists" and "graylists"
Easy integration with network elements
Wide opportunities for implementing additional services