Lawful Interception of Unauthorized Subscribers and Equipments

• US 20080216158A1
• Filed: 03/18/2005
• Published: 09/04/2008
• Est. Priority Date: 03/18/2005
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Imbimbo, Amedeo, Iovieno, Maurizio
• Granted Patent: US 9,173,091 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04L 63/306 intercepting packet switched data communications, e.g. Web, Internet or IMS communications
• CPC Class Codes: H04M 2207/18 wireless networks
• CPC Class Codes: H04M 3/20 with means for interrupting existing connections; with means for breaking-in on conversations
• CPC Class Codes: H04M 3/38 Graded-service arrangements, i.e. some subscribers prevented from establishing certain connections queuing arrangements H04Q3/64
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/037 of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/80 Arrangements enabling lawful interception [LI]

Abstract

The present invention relates to methods and arrangements in a telecommunication system to override current access rights. The telecommunication system comprises an Access Point IAP; MSC, SGSN associated with a Configuration Unit ICU. The method comprises the following steps: —Receiving to the Access Point IAP; MSC, SGSN from the Configuration Unit ICU, a request (1) to monitor a system member MS, SIM. —Receiving to the Access Point from the Configuration Unit, a request (2) to override deprived access rights for the system member MS, SIM. —Overriding in the Accept Point IAP; MSC, SGSN, the deprived access rights for the member.

Claims

1. A method in a telecommunication system to monitor unauthorized system members, the telecommunication system comprising an Access Point associated with a Configuration the method comprising the following steps:

receiving to the Access Point from the Configuration Unit, a request to monitor a system member

receiving to the Access Point from the Configuration Unit, a request to override deprived access rights for the system member; and

overriding in the Accept Point, the deprived access rights for the member.

2. The method of claim 1 comprising the following further step:

sending from the Access Point to the Configuration Unit, an indication of the members overridden access right.

3. The method of claim 1 comprising the following further steps:

sending a service request message from the member to the Access Point;

establishing the requested service in the system.

4. The method of claim 3 comprising the following further step:

delivering Intercept Related Information related to the system member, from the Access point to the Configuration Unit.

5. The method of claim 1 comprising the following further steps:

verifying in the Access Point that access rights for the member are deprived.

6. The method of claim 1 comprising the following further steps:

sending a check request regarding the members access rights, from the Access Point to the register that contains the wanted information;

replying to the request by sending information from the register to the Access Point that the access rights for the member have been deprived.

7. The method of claim 1 comprising the following further steps:

prior to overriding the deprived access rights, sending a first service request message from the member to the Access Point;

rejection of the first service request;

subsequent to overriding the deprived access rights, sending a second service request message from the member to the Access Point;

rejection of the second service request.

8. A method in a telecommunication system to inform a Monitoring Function of a change of classification of a target under interception, which telecommunication system comprises an Access Point associated with a Configuration Unit, comprising the following steps:

receiving to the Access Point from the Configuration Unit, a request to monitor the target;

registration in the Access Point, a change of classification activity involving the monitored target;

delivering information related to the change of classification activity, from the Access Point to the Configuration Unit.

9. The method of claim 8 comprising an operator associated with the Access Point, which method comprises the following further steps:

Sending of a change of classification for the monitored target from the operator to the Access Point.

10. The method of claim 8, whereby the information related to the change of classification activity comprises at least one of the following parameters:

IMEI.

Observed IMSI.

Old classification in the Access Point.

New classification in the Access Point.

11. An arrangement in a telecommunication system to monitor unauthorized system members, the telecommunication system comprising an Access Point associated with a Configuration Unit, the arrangement comprising:

means for receiving to the Access Point from the Configuration Unit, a request to monitor a system member;

characterized in

means for receiving to the Access Point from the Configuration Unit, a request to override deprived access rights for the system member;

means for overriding in the Accept Point, the deprived access rights for the member.

12. The arrangement of claim 11 comprising:

means for sending from the Access Point to the Configuration Unit, an indication of the members overridden access right.

13. The arrangement of claim 11, comprising:

means for sending a service request message from the member to the Access Point;

means for establishing the requested service in the system.

14. The arrangement of claim 13 comprising:

means for delivering Intercept Related Information related to the system member, from the Access point to the Configuration Unit.

15. The arrangement of claim 11 comprising:

means for verifying in the Access Point that access rights for the member are deprived.

16. The arrangement of claim 15 comprising:

means for sending a check request regarding the members access rights, from the Access Point to the register that contains the wanted information;

means for replying to the request by sending information from the register to the Access Point that the access rights for the member have been deprived.

17. The arrangement of claim 11 comprising:

means for sending a first service request message from the member to the Access Point, prior to overriding in the Access Point, the deprived access rights;

means for rejecting the first service request;

means for sending a second service request message from the member to the Access Point, after overriding in the Access Point, the deprived access rights;

means for rejecting of the second service request.

18. An arrangement in a telecommunication system to inform a Monitoring Function of a change of classification of a target under interception, the telecommunication system comprising:

an Access Point associated with a Configuration Unit, the Access Point comprising;

means for receiving to the Access Point from the Configuration Unit, a request to monitor the target;

means for registration in the Access Point, a change of classification activity involving the monitored target;

means for delivering information related to the change of classification activity, from the Access Point to the Configuration Unit.

19. The arrangement in a telecommunication system according to claim 18, which system comprises an operator associated with the Access Point, the arrangement comprising:

means for sending a change of classification for the monitored target from the operator to the Access Point.