Methods and apparatus for wiretapping IP-based telephone lines

• US 20030200311A1
• Filed: 06/09/2003
• Published: 10/23/2003
• Est. Priority Date: 01/08/2002
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Services Corporation (Verizon Communications Inc.)
• Inventors: Baum, Robert T.
• Granted Patent: US 7,836,160 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: H04L 45/54 Organization of routing tables
• CPC Class Codes: H04L 45/60 Router architectures
• CPC Class Codes: H04L 45/742 Route cache; Operation thereof
• CPC Class Codes: H04L 61/4547 for personal communications, i.e. using a personal identifier

Abstract

Methods and apparatus for wiretapping IP telephone calls are described. At the time an IP telephone registers its current IP address and telephone number with a soft switch responsible for routing calls to the IP telephony device a list of telephone numbers to be monitored is checked. If the number being registered is to be monitored, information identifying the edge router through which the IP telephony device connects to the IP network is obtained. The edge router is then sent a monitor message with the IP address corresponding to the telephone number to be monitored. IP packets including the specified IP address are then forwarded by the identified edge router to a monitoring station. Packet forwarding may involve packet duplication with the original packets being allowed to continue on to their original destination and the duplicated packets being forwarded or, alternatively, a simple packet redirection operation.

Claims

1. A method of monitoring IP telephone calls routed over at least a portion of an IP network, the method comprising:

determining if an IP telephony device corresponds to a telephone number to be monitored;

in response to determining that said IP telephony device corresponds to a telephone number to be monitored, obtaining information identifying the edge router through which said IP telephony device is coupled to the IP network; and

transmitting a monitor command with an IP address being used by said IP telephony device to the identified edge router.

2. The method of claim 1, further comprising the step of:

transmitting a monitoring update command to the identified edge router in response to determining that the IP address used by said IP telephony device has changed.

3. The method of claim 2, wherein the monitoring update command includes the IP address sent with the previously transmitted monitor command and a new IP address being used by said IP telephony device.

4. The method of claim 3, further comprising:

transmitting a discontinue monitoring command to said identified edge router in response to IP address aging information indicating that the IP address supplied with the transmitted monitoring command is no longer valid for use by said IP telephony device.

5. The method of claim 1, further comprising:

transmitting a discontinue monitoring command to said identified edge router in response to IP address aging information indicating that the IP address supplied with the transmitted monitoring command is no longer valid for use by said IP telephony device.

6. The method of claim 1, further comprising:

maintaining a list of telephone numbers to be monitored; and

wherein determining that said IP telephony device corresponds to a telephone number to be monitored includes comparing a telephone number associated with said IP telephony device to said list of telephone numbers.

7. The method of claim 6, wherein said determining step is performed by a soft switch used to control telephone call routing in said IP network when said IP telephony device registers with said soft switch.

8. The method of claim 7, further comprising:

operating the identified edge router to forward packets including the IP address transmitted with said monitor command to a monitoring station.

9. The method of claim 1, further comprising:

operating the identified edge router to forward packets including the IP address transmitted with said monitor command to a monitoring station.

10. The method of claim 9, wherein operating the identified edge router to forward packets includes:

operating the identified edge router to duplicate packets including the IP address transmitted with the monitor command; and

to forward the duplicated packets to said monitoring station.

11. The method of claim 10, wherein the edge router allows one of each duplicated packets to be routed to the original packet destination.

12. The method of claim 9, wherein operating the identified edge router to forward packets includes:

operating the identified edge router to reroute packets including the IP address transmitted with the monitor command to said monitoring station.

13. An apparatus for use in monitoring IP telephone calls routed over at least a portion of an IP network, the device comprising:

means for determining if an IP telephony device corresponds to a telephone number to be monitored;

means for obtaining information identifying the edge router through which said IP telephony device is coupled to the IP network; and

means for transmitting a monitor command with an IP address being used by said IP telephony device to the identified edge router when it is determined that an IP telephony device corresponds to a telephone number to be monitored.

14. The apparatus of claim 13 wherein said means for determining includes:

a list of telephone numbers to be monitored.

15. The apparatus of claim 14, wherein said apparatus is a soft switch, the soft switch including:

means for performing an IP telephony device registration operation.

16. The apparatus of claim 15, wherein said soft switch includes a list of IP telephony devices associated with telephone number which are being monitored and information identifying an edge router associated with each listed IP telephony device.

17. The apparatus of claim 16, further comprising:

means for transmitting a discontinue monitoring command to an edge router associated with a listed IP telephony device in response to the listed IP telephony device de-registering with said soft switch.

18. A method of monitoring IP communications routed over at least a portion of an IP network, the method comprising:

determining if an IP communications device is to be monitored;

in response to determining that an IP communications device is to be monitored, obtaining information identifying the edge router through which said IP communications device to be monitored is coupled to the IP network; and

transmitting a monitor command with an IP address being used by said IP communications device to be monitored to the identified edge router.

19. The method of claim 18, wherein said determining step is performed when an IP communications device registers for IP communications routing purposes.

20. The method of claim 19, further comprising:

operating the identified edge router to forward packets including the IP address transmitted with said monitor command to a monitoring station.

21. The method of claim 18, further comprising the step of:

transmitting a monitoring update command to the identified edge router in response to determining that the IP address used by said IP communications device to be monitored has changed.

22. The method of claim 21, wherein the original IP address used by said IP communications device to be monitored and a new IP address being used by said IP communications device to be monitored is transmitted with said monitoring update command.