Showing posts with label SIGINT. Show all posts
Showing posts with label SIGINT. Show all posts

Monday, 17 March 2014

Open Question: Could US Military SIGINT satellites help to narrow down flight MH370's last location?

Please note: this post contains discussions of a highly speculative nature

Over the past days, it has become clear that the lost Malaysian Airlines flight MH370 has flown on for some 7 hours after contact was lost at 17:20 UT (March 7 UT, local March 8). This information comes from radio "ping-backs" of the aircraft's ACARS system received by the Inmarsat 3-F1 satellite, a geostationary communications satellite that is located at longitude 64 E over the Indian Ocean. These ping-backs were received hours after the last radio contact with the pilots and hours after the transponder was shut off, and indicate that the aircraft was still powered and 'alive' hours after it disappeared. A well written story at the CNN website gives backgrounds on the receptions and the system.

Position and footprint of Inmarsat 3-F1
click image to enlarge

In this post, I will briefly summarize how Inmarsat 3-F1 detected the aircraft and determined a wide arc where the aircraft could have been at that time. I will then explore whether additional signal receipts by classified US Military Signals Intelligence (SIGINT) satellites might perhaps have been possible. If such additional receptions exist (an open question!) they would enable to further narrow down the location of the last ping-back.

That will largely be a theoretical exercise, as so far there has been no word that the US SIGINT satellite constellation did detect these ping-backs. This post therefore entails a clear element of speculation, and the central question remains an explicit open question.


Backgrounds: 'Marco Polo' between an aircraft and a satellite

Someone in the aircraft shut off the radar transponder beacon and the active ACARS messaging system near 17:20 UT. Yet this did not fully disable the ACARS system. The system kept answering periodic "pings" by the Inmarsat 3-F1 (1996-020A) satellite. These "pings", basically a kind of "Marco?" message,  are periodically sent out by the satellite and when received by the aircraft ACARS antenna, the aircraft pings back a brief "handshake" basically saying "Polo!". While such a handshake does not contain clear information about where the aircraft is when the active ACARS is disabled, it does contain the aircraft ID.

According to press reports, the last ping-back from flight MH370 was received 7 hours after the flight disappeared, near 00:11 UT on March 8. Apparently, only Inmarsat 3-F1 received these ping-backs.

From the time it took the radio-ping to travel from Inmarsat 3-F1 to the aircraft and then back again, the distance (but not direction) of the aircraft to the satellite can be determined. For example, at a radiowave speed of 300 000 km/s, a time difference of say 0.2 seconds between Inmarsat sending the ping and receiving the answer back, indicates the aircraft is at a distance of 30 000 km from the satellite.

Once you know the distance, you can draw a globe with that radius around the location of the Inmarsat satellite. Where that globe cuts the earth surface, it creates a circle, centred on the sub-satellite point. The aircraft must have been somewhere on that circle. This is basically how the wide arc that has been published was constructed, an arc which runs from Thailand to Kazakhstan in the north, and Indonesia to Australia and the Indian Ocean in the south. The aircraft could have been anywhere on that big arc, an area stretching thousands of kilometers.


To pinpoint the aircraft more accurately to a particular spot in the arc, one needs a detection by a second and preferably a third satellite.


Could US SIGINT satellites provide additional receptions for these pings?

One source of such additional ping-back signal receptions, in theory could be one of several Signals Intelligence (SIGINT) satellites employed by the US military. Please note that I say IN THEORY as the US government hasn't provided any statements that they did (which might indicate that they didn't). In other words: I am speculating on an open question here.

It depends on a lot of factors, not the least of which are questions whether these satellites were listening at the time, and whether they were monitoring the particular VHF/UHF radiofrequencies in question. Those are questions I do not have the answers to. What I will do, is discuss which US military satellites could potentially have received these ping-backs because they had coverage of the area.

1. The Mentor and Trumpet SIGINT satellites

Two US SIGINT systems in high orbits cover(ed) the relevant area: (1) several of the very large Mentor/Advanced Orion SIGINT satellites in geostationary orbit: and (2) one of the SBIRS/TRUMPET combined SIGINT and SBIRS satellites which moves in a Highly Elliptical Orbit and hovered high above the northern hemisphere at the time.

These SIGINT satellites serve to eavesdrop on radio communications including satellite- and mobile telephony, missile telemetry and signals from groundbased and airborne radar systems.

USA 184 TRUMPET imaged on 25 Aug 2009 by the author

 Mentor 4 imaged on 18 Nov 2012 by the author


The TRUMPET satellite in HEO which had coverage of (a part of) the area at that time is  USA 184 (2006-027A). The geostationary Mentor satellites covering the area are Mentor 1, 3, 4, 5 and 6 (1995-022A, 2003-041A, 2009-001A, 2010-063A and 2012-034A).

Position of various Mentor satellites and TRUMPET USA 184
Mentor satellite footprints


USA 184 area coverage and footprint detail
click image to enlarge

2. NOSS (Naval Ocean Surveillance System) SIGINT satellites

Apart from the Mentor and Trumpet SIGINT satellites in high orbits, the US also operates a series of SIGINT satellites with accurate geolocalization capabilities in a Low Earth Orbit. It concerns the US Navy Naval Ocean Surveillance System (NOSS) satellites, of which there are several. They operate in close pairs, orbiting at an altitude of about 1000 x 1200 km in 63 degree inclined orbits. Their main purpose is to locate and track shipping through the radio communications of the latter.

A NOSS duo (NOSS 3-4) imaged by the author on 29 Jan 2011


Two duo's of NOSS satellites were covering the northern half of the area at the time of the last ping-back received by Inmarsat 3-F1: the NOSS 3-5 and NOSS 3-6 duo's (2011-014A and B and 2012-048A and P).

The NOSS 3-6 duo had the best coverage, which includes the full northern arc from Thailand to Kazakhstan determined by the Inmarsat reception:

click images to enlarge
position of the NOSS 3-5 and NOSS 3-6 duo at the time of the last pingback

in 3D: yellow arc is where the aircraft could be according to the Inmarsat 3-F1 reception

Chinese SIGINT

China operates a satellite system similar to the US NOSS, consisting of three satellite trio's in the Yaogan series (Yaogan 9A, B, C; 16A, B, C; 17A, B, C). None of these however had coverage of the relevant areas in the Indian Ocean, central Asia or southern Eurasia at that time.

Coverage summary

From the brief satellite coverage analysis summed up above, it seems that the northern overland arc from Thailand to Kazakhstan was potentially well covered by various US military SIGINT satellites: five Mentor satellites, a TRUMPET and a NOSS duo. The southern Indian Ocean arc is slightly less well covered (no TRUMPET or NOSS coverage) but was nevertheless in view of several geostationary Mentor SIGINT satellites.

The question now is: could one or more of these SIGINT satellites have captured the same ACARS ping-backs received by Inmarsat 3-F1? If so, the combination of their data with the Inmarsat data could potentially narrow down the last known position of the aircraft considerably.

It all depends on whether the satellites in question were actively listening at that time, and moreover, whether their monitoring includes the radio frequencies in which the ACARS ping-backs of flight MH370 operated. It perhaps also includes questions like whether any signals received are all kept on file, or if some selection is made and much deemed of no interest is directly discarded.

Those are some big serious "ifs", that I simply do not know the answers to: this stuff is, after all, classified. So far, the US government has not indicated that one of their SIGINT systems did capture the ping-backs. Which might mean that they didn't, as I can't imagine that they did not check for it.

Classified SIGINT satellite positions in this post (and previous posts) are based on orbits calculated by Mike McCants, based on amateur observations communicated on the SeeSat-L mailing list.


Addendum 18 March 2014:
In my initial analysis posted 17/03/2014, I forgot to include two other and older geostationary US SIGINT satellites: the two Mercury/ADVANCED VORTEX satellites that are located over East Africa.


 click images to enlarge

It concerns Mercury 1  (1994-054A) and Mercury 2 (1996-026A). Both satellites were recently moved to a new orbital position over East Africa and are station-keeping there, indicating they are operational. Their footprint includes the area of interest, although the southern Indian Ocean arc is close to the edge of their coverage.

Mercury 1 imaged by the author on 29 Dec 2013

Thursday, 2 January 2014

An unknown object in (near) Geostationary orbit: Express AM-5?

The evening of December 29 2013 started clear, so I did a small survey of a part of the geostationary belt. Main focus of the session was PAN, as well as Mentor 4 and 6.

Inspecting the images I found an unidentified object in near-Geostationary orbit some 4 degrees east of PAN, between Mentor 6 and NSS 5, on several images (positions here). The image below shows it near M42, the Orion nebula, near 19:17 UT:

click image to enlarge

In addition to the UNID you can also see a classified satellite at left, Mentor 6 (2012-034A), a SIGINT satellite also known under the code name Advanced Orion. At right are two commercial geostationary satellites, NSS 5 (1997-053A) and Galaxy 26 (1999-005A).

Cees Bassa in the Netherlands and Greg Roberts in South Africa also observed what is likely the same UNID object later that night. While it is not easy to fit a reliable orbit to such a relatively short span of observations, the suggestion is an object with an inclination near 0 and a Mean Motion of about 0.92 revolutions per day, i.e. an object near Geostationary altitudes.

The Mean Motion could suggest an old object being moved to a Graveyard Orbit. If this is the case, we haven't been able to identify which 'old' object it is yet.

Another option is that this is a new object. The only likely candidate in that case is the Russian satellite Express AM-5 which was launched on December 26th. This object seems to have been temporarily "lost" by JSpOC: as I write this (Jan 2),  Space-Track does not list orbital elements later than December 26th (when it was still in  a temporary transfer orbit).

For the moment, Mike McCants has given it the name UNK 131229 (with the acronym UNK meaning "Unknown").

This observing session also served to check on PAN (2009-047A). PAN is a highly mobile satellite and often moves position in May and December (I have written on the mystery of this satellite before). Not this time, it seems: it is still at the position it has been in for several months, forming a trio with the commercial satellites Yahsat 1B and Intelsat 10:


click image to enlarge

Other classified objects imaged this night were the old SIGINT Mercury 1 (USA 105, "Advanced Vortex", 1994-054A), and the SIGINT Mentor 4 (USA 202, 2009-001A). Mercury 1 was placed at 48 E and recovered by me about a year ago.


click images to enlarge

During this observing session, I captured a bright irregular orange light moving across the sky: a 'Thai Lantern' ( a miniature hot-air balloon). They are the cause of many false fireball and re-entry reports. Here it is, moving through Orion while carried by the wind:



Two days earlier, on December 27, I also did my periodic check on Prowler (90-097E), using the 61-cm Cassegrain of Sierra Stars Observatory in Markleeville, California (MPC G68).

I concluded the evening of the 29th by making some shots of M31, the Andromeda Galaxy. Unfortunately, some thin haze came in after a while. The image below is a stack of 16 haze-free images of 30 seconds exposure each, with a CLS filter (against light pollution - the images were taken from Leiden town center)) and Zeiss 2.8/180mm lens piggyback on the mount of my C6:

click image to enlarge

Friday, 23 November 2012

UNID geosat Unknown 121118 is probably the classified SIGINT Mercury 1 (94-054A)

As I reported on this blog earlier, I discovered an unidentified object in an 8.4 degree inclined geosynchronous orbit in the evening of November 18 (see images below). It was given the designation "Unknown 121118" and also observed by Greg Roberts from South Africa the next evening, showing it to be truely geosynchronous at longitude 48 E.

click images to enlarge



I initially thought it would probably be a commercial satellite that had been recently relocated. However, as USSTRATCOM has still not identified the object, we are beginning to suspect it is a classified object, and we have some idea of its identity.

Ted Molczan pointed out that the 8.44 degree inclination is similar to that of Mercury 1 (94-054A). The brightness of the object is similar too. Mercury 1 was last located over the western Atlantic near 43 W, and had not been observed for over two months. Peter Wakelin imaged its former position on November 21 and could not find it. So there is a good chance it has been moved, and is my Unknown 121118, now located at 48 E.


click map to enlarge

The Mercury (also known as 'Advanced Vortex' ) geostationary satellites are classified US military SIGINT ('eavesdropping') satellites. Two were launched during the 1990-ies: the launch of a third one failed when the rocket booster malfunctioned, destroying the satellite. Mercury 1 (94-054A) launched on 27 August 1994 was the first. Given that it now appears to have been repositioned and is station-keeping at 48 E, is appears to be still operational, 18 years after it was launched.

Why it has been repositioned over 48 E, somewhere within the last two months (and probably near the more recent part of that timespan) is a matter of speculation. Maybe it is monitoring communications on the Syria-Turkey border; maybe it is listening in on Iran; or maybe it is monitoring communications of Somalian pirates near the Horn of Africa.

In June this year I imaged Mercury 1's sister ship Mercury 2 (see here), which was of a similar brightness as 'Unknown 121118'. That object at that time seemed headed for a graveyard orbit and hasn't been observed for a while. It has a slightly larger orbital inclination than Mercury 1 / Unknown 121118.

Friday, 1 April 2011

NROL-34: Odin and Frigga

NROL-34 is slated for launch from Vandenberg on April 12th. The Atlas V 411 will launch a secret payload for the NRO: some independant analysts suspect it is a Trumpet SIGINT (of the same type as USA 184 and USA 200), to be launched into a Molniya type orbit.

The mission patch (below) shows the Scandinavian God Odin, recognizable by the eye-patch and the raven on its shoulder. Odin goes accompanied by two raven, and offered an eye to the dwarf Mimir in order to be allowed to drink from the source of Wisdom. As a God he personifies Wisdom, Strength and Battle. Note how these topics come back in the rim text, and how "Wisdom" is a good metaphor for SIGINT:

click image to enlarge



The battle axe could be a stylized version of a satellite with a radio dish (e.g., SIGINT).

The launch patch (below) features Frigga. Frigga is the wife of Odin, and the name as such is probably attached to the launch vehicle:

click image to enlarge


The latter patch is of very similar design to a number of other recent patches (NROL-41 FIA Radar 1, see patch here, and below; and NROL-49). I like this recent new design style, they look much better than the sometimes very generic other recent NRO and USAF Black Space patches.

Note how (as with the other mentioned designs) some letter codes are included in the blue "vermicelli" filling the Earth globe: one can recognize "NROL" (bottom), "Frigga" (top) and what could be a name, "Galth" (?), or possibly "Caltech".

Below are the two mentioned launch patches for NROL-41 and NROL-49 which show a similar design. All three have the earth globe, setting or rising sun (NROL-41 has the setting sun, and this might signify the retrograde orbit of the FIA Radar: note how NROL 49 and the NROL-34 patch have a rising sun), and a heroine/Godess (the Devil in the NROL-49 patch is female, and all patches feature female names: Gladys, Betty and Frigga); plus similar rim text designs:

click images to enlarge:


Monday, 29 November 2010

PAN and other geostationary satellites in a frosty winter sky

Last Sunday evening, the pass of the Terra SAR X and Tandem X close duo posted earlier here and a pass of Lacrosse 4 shortly after that, were not the only observations I made. Somewhat later that night, I targetted several geostationary satellites, using both the Canon EF 2.5/50 mm Macro lens and the Carl Zeiss Jena Sonnar MC 2.8/180 mm lens (the latter for the first time on geostationary objects).

click image to enlarge


The image above, taken with the EF 2.5/50mm lens, shows two geostationary objects close to the Orion nebula.

One is the classified object USA 202/Mentor 4 (2009-001A), a big SIGINT geostationary satellite with a brightness of about mag. +8. It has featured on this observing blog earlier. The other one, Galaxy 8 (1997-078A), is a commercial communications satellite and was captured serendipitously in the same image while it was brightly but briefly flashing. It is not visible in an image taken 30 seconds later (and only faintly visible in an image taken 3.5 minutes earlier).

I also imaged the mysterious classified geostationary PAN (2009-047A) for the first time, using the new Carl Zeiss Jena Sonnar MC 2.8/180 mm lens. Below image shows it together with the nearby commercial geostationary satellites Paksat 1 (1996-006A) and Hellas-sat 2 (2003-020A).

click image to enlarge


PAN is a very mysterious object, the mysteries surrounding the 2009 launch being discussed at length by Dwayne Day in his Space Review article here. The mystery was (and is), that no Agency (neither NRO, USAF, US Navy nor CIA) claimed responsibility for the launch. Owner and role are hence unknown. There was much speculation about the possible role of the spacecraft, and the meaning of the acronym PAN. The latter got at least one "solution" when the launch patch (below) appeared, suggesting PAN stood for "Palladium At Night". Whatever that may mean.



The same images that contained PAN, Paksat and Hellas-sat 2 also contained the very faint trail of a Breeze-M tank (2009-050C) and two more geostationary satellites: Eutelsat W4 and Eutelsat W7 (2000-028A and 2009-065A). This all in an image only a few degrees wide!

click image to enlarge


Last but not least, the classified geostationary communicatiosn satellite Milstar 5 (2002-001A) was imaged. In the same image(s), two other, commercial geostationary satellites were visible: Galaxy 11 (1999-071A) and Inmarsat 4-F2 (2005-044A). A rich haul of geostationary objects, obtained at mildly frosty temperatures of -2.5 C!

Sunday, 11 January 2009

The glinting behaviour of USA 32 (88-078A)

The year 2009 has started with a period of frost, and hence clear skies. I observed on January 6 and 9 and this evening (the 11th), catching a batch of objects: Lacrosse 3, USA 32, and various NOSS duo's.

The image of USA 32 (88-078A, a SIGINT satellite launched in September 1988) of this evening very nicely shows the glinting behaviour of this satellite. Along the trail, small bright dots (= very short glints) can be seen at regular intervals. They are indicated by the downward pointing arrows in the image (a 10.05 second exposure taken with my Canon EOS 450D and EF 50/2.5 Macro lens at F2.8):

(click image to enlarge)


Below is a brightness profile derived from the pixel brightness along the trail. The same peaks as indicated by the arrows in the photograph, show up well and are labelled A to H:

(click image to enlarge)


Analyzing the position of the glints, shows the following sequence:

1) a series of 4 or more glints at a regular 1.20 second interval;
2) followed by 2.0 seconds of no, or much less bright glints;
3) followed again by 4 or more glints at a regular 1.20 second interval.