Case 4:13-cr-00818-PJH Document 225-2 Filed 08/22/16 Page 1 of 3 1 BRIAN J. STRETCH (CABN 163973) United States Attorney 2 BARBARA J. VALLIERE (DCBN 439353) 3 Chief, Criminal Division 4 JOSEPH M. ALIOTO, JR. (CABN 215544) WILLIAM FRENTZEN (LABN 24421) 5 SCOTT D. JOINER (CABN 223313) BRIGID S. MARTIN (CABN 231705) 6 Assistant United States Attorneys 1301 Clay Street, Suite 340S Oakland, California 94612 Telephone: (415) 436-7200 Fax: (415) 436-6753 Joseph.Alioto@usdoj.gov William.Frentzen@usdoj.gov Scott.Joiner@usdoj.gov Brigid.Martin@usdoj.gov 7 8 9 10 11 12 Attorneys for United States of America UNITED STATES DISTRICT COURT 13 NORTHERN DISTRICT OF CALIFORNIA 14 15 16 17 18 19 20 OAKLAND DIVISION UNITED STATES OF AMERICA, Plaintiff, v. PURVIS ELLIS, et al., Defendants. 21 22 23 24 25 26 27 28 OPD DECLARATION CR 13-00818 PJH-DMR ) NO. CR 13-00818-PJH-DMR ) ) DECLARATION ) ) ) ) ) ) ) Case 4:13-cr-00818-PJH Document 225-2 Filed 08/22/16 Page 2 of 3 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 1. I, , a sworn peace officer with the Oakland Police Department (OPD), do swear and affirm as follows: 2. I have personal knowledge of the facts stated herein and if called to testify could and would testify competently and truthfully to the same. 3. The Oakland Police Department deployed a cell-site simulator (the device) on the night of January 21-22, 2013 to locate the cell phone of Defendant Purvis Ellis. I am trained in the operation of such devices and personally familiar with the configuration and operation of the device that night. I was the officer responsible for operating the device that night in an attempt to locate Purvis Ellis’ phone. 4. The technical specifications and tradecraft associated with the device are deemed by OPD to be “law enforcement sensitive” because the disclosure of such information could aid criminals in countering police surveillance and interfere with future investigations. 5. In general, cell site simulators function by transmitting as a cell tower. In response to the signals emitted by the simulator, cellular devices in proximity to the device identify the simulator as a cell tower in the area and thus transmit signals to the simulator that identify the device in the same way that they would with a networked tower. 6. A cell site simulator receives and uses an industry standard unique identifying number assigned by a device manufacturer or cellular network provider. When used to locate a known cellular device, like defendant Ellis’ cell phone, a cell site simulator initially receives the unique identifying numbers from multiple devices in the vicinity of the simulator, such as a Mobile Identification Number (“MIN”) or electronic serial number (“ESN”). Once the cell site simulator identifies the specific cellular device for which it is looking, it will obtain the signaling information relating only to that particular phone. 7. By transmitting as a cell tower, cell site simulators (including the cell site simulator used in this case) acquire the identifying information from cellular devices as described above. This identifying information is limited, however. Cell site simulators do not function as a GPS locator, as they do not obtain or download any location information from the device or its applications. 8. The device in this case was configured to look for the identifying information for phone number 510-904-7509, a cellular device which I understood belonged to defendant Purvis Ellis. The device was not configured to capture the content of any communications, including data contained on the phone itself. The cell site simulator does not remotely capture e-mails, texts, contact lists, images, or other data from the phone, nor does it, as configured, provide subscriber account information. The device used to locate the defendant’s cell phone therefore did not capture, collect, decode, view or otherwise obtain any content transmitted from the defendant’s cell phone or any others in the area. 9. As part of , I believe I received an alert to respond to 1759 Seminary Avenue, Oakland, CA, at around 6:40 PM on January 21, 2013. January 21, 2013, was a Monday. At the time of the alert I would have been off duty and it would have taken me an hour and a half to two hours to get to the scene of the shooting 10. I responded to 1759 Seminary Avenue with an OPD van. Among other things the van contained robots and cameras that the SWAT team anticipated having to use at 1759 Seminary Avenue. The van also contained the cell site simulator equipment. I was involved in deploying one of the SWAT team’s robots soon after arriving at the scene, at around 9:00 PM.1 1 Although I am trained in the operation of the cell site simulator, and can operate the device if and when authorized, my duties as a member of the are not limited to operating a cell site OPD DECLARATION CR 13-00818 PJH-DMR Case 4:13-cr-00818-PJH Document 225-2 Filed 08/22/16 Page 3 of 3 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 11. Sometime after midnight, in the early morning hours of January 22, 2013, I powered on and began operating the cell site simulator. 12. Prior to operating the cell site simulator, OPD first contacted the telephone carrier of the subject cellular telephone and completed the required exigent circumstance request form to obtain a pen register/trap trace and subscriber information for phone number 510-904-7509 to assist in locating the cellular telephone with the cell site simulator. I did not begin operating the device until after OPD obtained this information from the telephone provider. 13. At some point during the night (I do not recall exactly when), I requested FBI assistance to help locate the defendant’s cell phone. I believe the FBI began operating their cell site simulator the next morning, at around 10:00 AM on January 22, 2013. In order for the FBI to effectively use their cell site simulator, it was necessary for me to power off the OPD cell site simulator I had been using. I turned off the OPD cell site simulator at around the same time the FBI began using their device (approximately 10:00 AM). 14. Pursuant to standard practice, after the location operation OPD did not retain any information regarding the information encountered by its cell site simulator. One of the reasons for clearing the information is to preserve the operational use of the equipment (the equipment cannot be used on another operation until the data from prior missions has been purged. Otherwise, the data from the prior operation would be co-mingled with the non-purged data from the new operation, interfering with the effective use of the data pertaining to each individual operation). Another reason is to protect third-party privacy and avoid retaining retain information about individuals who are not the subject of criminal investigations 15. In the present case, I purged the information at approximately 10:00 AM when I powered off the device to allow FBI to employ their cell site simulator. I declare under penalty of perjury under the laws of the United States that the foregoing is true 16 and correct. 17 Executed this 22nd day of August, 2016, in Oakland, California. 18 Respectfully submitted, 19 /s/ 20 Oakland Police Department 21 22 23 24 25 26 27 28 simulator. OPD DECLARATION CR 13-00818 PJH-DMR _