Interception system and method

• US 20020051457A1
• Filed: 09/11/2001
• Published: 05/02/2002
• Est. Priority Date: 03/12/1999
• Status: Abandoned Application

• Current Assignee: Nokia Networks (Nokia Corporation)
• Original Assignee: Nokia Networks (Nokia Corporation)
• Inventors: Eloranta, Jaana
• Application Number:
  US09/952,370
• Publication Number:
  US 20020051457A1
• Time in Patent Office: Days
• US Class Current: 370/401
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1403 Architecture for metering, charging or billing
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04M 2207/18 wireless networks
• CPC Class Codes: H04M 2207/185 wireless packet-switched
• CPC Class Codes: H04M 2207/187 combining circuit and packet-switched, e.g. GPRS
• CPC Class Codes: H04M 3/2281 Call monitoring, e.g. for law enforcement purposes; Call tracing; Detection or prevention of malicious calls
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/72 Subscriber identity

Abstract

An interception method and system for performing a lawful interception in a packet network such as a GPRS network is described, wherein a subscriber identity is allocated to an interceptor, such that the interceptor is treated as a mobile station. Thus, the interception traffic is processed as usual data traffic which can be charged using normal charging procedures and which can be intercepted using the normal lawful interception methods. Accordingly, no additional functions are required for charging and intercepting an interception.

Claims

1. An interception system for performing a lawful interception in a packet network, comprising:

a) interception activation and deactivation means (JAD) for allocating a subscriber identity to an interception data destination (IDD); and

b) interception data collection means (IDC) for creating a subscriber connection by using said allocated subscriber identity, in response to an interception activation message received from said interception activation and deactivation means (TAD), wherein said subscriber connection is used for transmitting intercepted data to said interception destination (IDD).

2. An interception system according to claim 1, wherein said subscriber identity is allocated in response to the receipt of an interception request from an interception authority via a user interface (UI).

3. An interception system according to claim 1 or 2, wherein said packet network is a GPRS network, said interception activation and deactivation means (AD) are arranged in a legal interception gateway (LIG), and said interception data collection means (IDC) are arranged in a gateway GPRS support node (GGSN).

4. An interception system according to claim 3, wherein said subscriber identity is an IMSI number and said subscriber connection is a GPRS tunnel.

5. An interception system according to claim 4, wherein said interception data collection means (IDC) is arranged to create said GPRS tunnel by updating internal data structures of said gateway GPRS support node (GGSN).

6. An interception system according to claim 5, wherein said internal data structure is a PDP context.

7. An interception system according to claim 1, wherein said interception data collection means (IDC) is arranged in a GPRS network element and adapted to transmit a PDP context creation message to a gateway GPRS support node (GGSN) in order to create a GPRS tunnel used as said subscriber connection.

8. An interception system according to claim 7, wherein said intercepted data are transferred from said GPRS network element to said gateway GPRS support node by using GTP protocol messages.

9. A network element for a packet network, comprising:

a) interception activation and deactivation means (AD) for allocating a subscriber identity to an interception data destination (IDD); and

b) message generation means for generating an interception activation message comprising said subscriber identity and supplying said interception activation message to another network element (GGSN) having an interception data collection function.

10. A network element according to claim 9, wherein said subscriber identity is allocated in response to the receipt of an interception request from an interception authority via a user interface (UI).

11. A network element according to claim 9 or 10, wherein said network element is a lawful interception gateway (LIG) and said another network element is a gateway GPRS support node (GGSN).

13. A network element according to claim 12, wherein said network element is a gateway GPRS support node (GGSN) and said another network element is a lawful interception gateway (LIG).

15. An interception method according to claim 14, wherein said subscriber identity is allocated in response to an interception request from an interceptor.

16. An interception method according to claim 14 or 15, wherein a plurality of predetermined subscriber identities of said packet network are reserved for the allocation to interception data destinations.

17. An interception method according to claim 16, wherein an interception hierarchy is defined on said predetermined subscriber identities, said interception hierarchy being used to check whether an interception destination is allowed to intercept an interception data flow to another interception destination.

12. A network element for a packet network, comprising:

a) interception data collection means (IDC) for creating a subscriber connection by using a subscriber identity allocated to an interception destination (IDD), in response to an interception activation message received from another network element (LIG) having an interception activation and deactivation function, said interception activation message comprising said subscriber identity; and

b) transmitting means for transmitting collected intercepted data to said interception destination (IDD) via said subscriber connection.

14. An interception method for performing a lawful interception in a packet network, comprising the steps of:

a) allocating a subscriber identity to an interception data destination (IDD);

b) creating a subscriber connection by using said allocated subscriber identity; and

c) using said subscriber connection for transmitting intercepted data to said interception destination (IDD).

18. An interception method according to any one of claims 14 to 17, wherein said subscriber identity is allocated when a first interception request is received from said interceptor.

19. An interception method according to any one of claims 14 to 18, wherein said subscriber identity is deallocated when an interception deactivation request has been received.

20. An interception method according to any one of claims 14 to 19, wherein all interception data and control messages are transmitted via said subscriber connection.

21. An interception method according to any one of claims 14 to 20, wherein said subscriber identity is included in an interception destination information.

22. An interception method according to any one of claims 14 to 21, wherein said subscriber identity is an IMSI address of a GPRS network, and said subscriber connection is a GPRS tunnel of said GPRS network.