Privacy, Security and Data Protection

Melrose Networks takes privacy, security, and data protection extremely seriously in the design, deployment and operation of the LTE S1 Analyser and associated systems.

The analyser processes only mobile network control-plane signalling from the S1-MME interface, which carries S1AP (S1 Application Protocol) messages between eNodeBs and the MME. It does not access user-plane data, message content, or radio signals. The system analyses S1AP procedures such as handovers, context setup and NAS transport to identify patterns of mobility and behaviour that may indicate UAV activity.

All data processing is conducted in accordance with the principles of data minimisation, necessity, and security-by-design. Only data essential to analytical objectives is processed, and retention periods are minimised. Personally identifiable information (PII) is anonymised or tokenised wherever possible, ensuring compliance with applicable data protection laws and privacy expectations.

To support customer evaluation and privacy compliance, Melrose Networks provides the S1APAnonymise tool. This open-source utility, capable of processing over 400,000 packets per second, allows customers to capture and anonymise relevant S1AP signalling locally before providing it to Melrose Networks for remote analysis or training. It also significantly reduces the size of capture files, improving handling efficiency.

Access to signalling can be restricted to specific eNodeBs — for example, those near borders, critical infrastructure or defence sites — ensuring proportionality and operational control. These requirements are defined in the formal Access Requirements document supplied to customers for engagement with mobile network operators, regulators and legal stakeholders.

Melrose Networks’ commitment to privacy and security is foundational. Every component of the LTE S1 Analyser ecosystem — from its architecture to supporting tools — is developed to safeguard sensitive data while enabling lawful, effective and responsible detection of UAV activity.