Method and systems for intelligent signaling router-based surveillance

• US 20060133595A1
• Filed: 01/13/2006
• Published: 06/22/2006
• Est. Priority Date: 04/09/2002
• Status: Active Grant

• Current Assignee: Tekelec Global, Inc. (Oracle Corporation)
• Original Assignee: Tekelec
• Inventors: Ravishankar, Venkataramaiah
• Granted Patent: US 7,123,710 B2
• Time in Patent Office: Days
• US Class Current: 379/229
• CPC Class Codes: H04L 63/306 intercepting packet switched data communications, e.g. Web, Internet or IMS communications
• CPC Class Codes: H04M 3/2281 Call monitoring, e.g. for law enforcement purposes; Call tracing; Detection or prevention of malicious calls
• CPC Class Codes: H04M 7/006 Networks other than PSTN/ISDN providing telephone service, e.g. Voice over Internet Protocol (VoIP) , including next generation networks with a packet-switched transport layer H04L65/00 takes precedence; aspects not specific to the type of network H04M3/00; special services in those networks H04M3/42
• CPC Class Codes: H04M 7/06 using auxiliary connections for control or supervision , e.g. where the auxiliary connection is a signalling system number 7 link

Abstract

Methods and systems for intelligent signaling-router-based surveillance are disclosed. A surveillance and signaling router receives call signaling messages, identifies call signaling messages associated with users under surveillance and determines a surveillance type for the call signaling messages. If the surveillance type is content-related, the surveillance and signaling router forwards the message to a call server. The call server replaces parameters in the message and in subsequent messages so that the call is transparently set up through a media proxy server. The media proxy server copies the media stream to a delivery function. If the surveillance type is non-content-related, the surveillance and signaling router sends a copy of the message or information extracted from the message to an external device.

Claims

1. A method for intelligent signaling-router-based surveillance, the method comprising:

at a signaling router capable of routing call-related signaling messages between users in a communications network;

(a) receiving a signaling message;

(b) determining whether the signaling message is associated with a user or device under surveillance;

(c) in response to determining that the signaling message is associated with a user or device under surveillance, determining whether content-related or non-content-related surveillance is required; and

(d) in response to determining that non-content-related surveillance is required, copying data from the signaling message and forwarding the data to a delivery function.

2. The method of claim 1 wherein performing steps (a)-(d) at a signaling router includes performing steps (a)-(d) at a signaling router capable of routing call signaling messages of a plurality of different call signaling protocols.

3. The method of claim 1 wherein receiving a signaling message includes receiving a SIP signaling message.

4. The method of claim 1 wherein receiving a signaling message includes receiving an H.323 signaling message.

5. The method of claim 1 wherein receiving a signaling message includes receiving an SS7 signaling message.

6. The method of claim 1 wherein receiving a signaling message includes receiving a signaling message from a first user of a first signaling protocol for establishing a call with a second user of a second signaling protocol different from the first signaling protocol.

7. The method of claim 1 wherein determining whether the signaling message is associated with a user or device under surveillance includes searching a surveillance database in the signaling router using a user or device identifier extracted from the signaling message.

8. The method of claim 7 wherein the user or device identifier comprises a SIP URL.

9. The method of claim 7 wherein the user or device identifier comprises an IP address.

10. The method of claim 7 wherein the user or device identifier comprises a calling or called party address.

11. The method of claim 1 wherein copying data from the signaling message includes copying user identification information from the signaling message.

12. The method of claim 1 wherein copying data from the signaling message includes copying user location information from the signaling message.

13. The method of claim 1 comprising, in response to determining that content-related surveillance is required, forwarding the signaling message to the call server, and at the call server, signaling the called and calling users for establishing media communications through a media proxy server.

14. The method of claim 13 wherein signaling the called and calling users includes altering signaling parameter information in the call-related signaling message and forwarding the altered signaling message to its intended destination.

15. The method of claim 14 wherein altering signaling parameter information includes altering media port information in the call-related signaling message.

16. The method of claim 13 comprising, at the media proxy server, forwarding content between the called and calling users and copying the content to a delivery function.

17. The method of claim 16 wherein the content includes voice data.

18. The method of claim 16 wherein the content includes video data.

19. The method of claim 16 wherein the content includes text messages.

20. The method of claim 1 comprising:

(a) receiving a non-call-related signaling message;

(b) determining whether the non-call-related signaling message is associated with a user or device under surveillance; and

(c) in response to determining that the non-call-related signaling message is associated with a user or subscriber under surveillance, copying information from the non-call-related signaling messages and forwarding the information to the delivery function.

21. A method for intelligent surveillance, the method comprising:

(a) receiving a signaling message;

(b) determining, using at least one parameter in the signaling message, a surveillance type required for a user; and

(c) performing a surveillance action based on the surveillance type.

22. The method of claim 21 wherein determining a surveillance type required for a user includes determining whether content-related or non-content-related surveillance is required for the user.

23. The method of claim 22 wherein, in response to determining that non-content-related surveillance is required for the user, the method further includes determining a surveillance subtype required for the user.

24. The method of claim 23 wherein determining a surveillance subtype required for the user includes determining whether trap and trace or pen register surveillance is required for the user.

25. The method of claim 21 wherein performing a surveillance action includes copying the signaling message and forwarding the original signaling message to its intended destination.

26. The method of claim 21 wherein steps (a)-(c) are performed at a signaling message router.

27. A surveillance and signaling router comprising:

(a) a communications module including a communications protocol stack for sending and receiving signaling messages over a packet-based network;

(b) a surveillance module operatively associated with the communications module for identifying signaling messages associated with users or devices under surveillance, determining a surveillance type for the signaling messages associated with users under surveillance, and for performing a surveillance action based on the surveillance type; and

(c) a surveillance database operatively associated with the surveillance module for storing data for identifying the signaling messages associated with users or devices under surveillance, the surveillance types, and the surveillance actions.

28. The surveillance and signaling router of claim 27 wherein the communications module is adapted to send and receive signaling messages over an IP network.

29. The surveillance and signaling router of claim 27 wherein the communications module is adapted to send and receive signaling messages over an SS7 network.

30. The surveillance and signaling router of claim 28 wherein the communications module includes a SIP signaling application for sending receiving SIP signaling messages over the IP network.

31. The surveillance and signaling router of claim 28 wherein the communications module includes an H.323 signaling application for sending and receiving H.323 signaling messages over the IP network.

32. The surveillance and signaling router of claim 27 including a plurality of communications modules for sending and receiving signaling messages over a plurality of networks of different types.

33. The surveillance and signaling router of claim 27 wherein the surveillance module is adapted to determine whether signaling messages are associated with calls that require content-based or non-content-based surveillance.

34. The surveillance and signaling router of claim 33 wherein the surveillance module is adapted to redirect the signaling messages associated with calls requiring content-based surveillance to a call server.

35. The surveillance and signaling router of claim 33 wherein, for the signaling messages that require non-content-based surveillance, the surveillance and signaling router is adapted to determine whether trap and trace or pen register surveillance is required.

36. An intelligent signaling-router-based surveillance system, the system comprising:

(a) a surveillance and signaling router for routing signaling messages, identifying messages associated with users under surveillance, determining a surveillance type for the identified signaling messages, and performing a surveillance action based on the surveillance type;

(b) a call server operatively associated with the signaling router for receiving call signaling messages associated with users under content-based surveillance and for establishing the content-based surveillance; and

(c) a media proxy server operatively associated with the call server for sending and receiving content between users under content-based surveillance and for copying the content to a delivery function.

37. The system of claim 36 wherein the surveillance and signaling router is adapted to route signaling messages of a plurality of different signaling protocols and to perform surveillance actions for each of the signaling protocols.

38. The system of claim 36 wherein the surveillance and signaling router is adapted to distinguish between signaling messages associated with content-related and non-content-related surveillance and to forward the signaling messages associated with content-related surveillance to the call server.

39. The system of claim 36 wherein the surveillance and signaling router includes a copy function for copying signaling messages associated with non-content-related surveillance to an external device.

40. The system of claim 36 wherein the call server is dedicated to controlling content-related surveillance calls.