Method and apparatus for securely transmitting lawfully intercepted VOIP data

• US 20090034510A1
• Filed: 08/03/2007
• Published: 02/05/2009
• Est. Priority Date: 08/03/2007
• Status: Active Grant

• Current Assignee: CenturyLink Intellectual Property LLC (Lumen Technologies, Inc.)
• Original Assignee: Embarq Holdings Company LLC (Lumen Technologies, Inc.)
• Inventors: Smith, Shane M., Smoyer, Clinton J.
• Granted Patent: US 9,456,009 B2
• Time in Patent Office: Days
• US Class Current: 370/352
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04L 65/1076 Screening of IP real time communications, e.g. spam over Internet telephony [SPIT]
• CPC Class Codes: H04M 3/2281 Call monitoring, e.g. for law enforcement purposes; Call tracing; Detection or prevention of malicious calls

Abstract

A method, apparatus, and computer usable program product for transmitting intercepted VOIP data are provided in the illustrative embodiments. A VOIP call is intercepted in response to a lawful request for intercept by a law enforcement agency. VOIP data associated with the intercepted VOIP call is encrypted. The encryption may use a virtual private network an encryption using a key of a specific length, bit stuffing, or other encryption methods. The encrypted VOIP data is transmitted to the law enforcement agency using a public data network either during the VOIP call or after the VOIP call. The intercept request may be made during the VOIP call, or before the VOIP call. Furthermore, the VOIP data of the VOIP call may be stored before transmitting to the law enforcement agency, and archived based on archiving rules. The request for the intercept may be queued for processing according to queuing rules. Notifications based on the request for intercept, VOIP call characteristics, or characteristics of the VOIP data may be sent to one or more law enforcement agencies, and may also be encrypted.

Claims

1. A method for transmitting intercepted VOIP data, the method comprising:

intercepting a VOIP call in response to a request for intercept by a law enforcement agency;

encrypting VOIP data associated with the intercepted VOIP call to form encrypted VOIP data; and

transmitting the encrypted VOIP data to the law enforcement agency using a public data network.

2. The method of claim 1, wherein the request is received one of during the VOIP call, before the VOIP call, and after the VOIP call.

3. The method of claim 1, further comprising:

storing the VOIP data.

4. The method of claim 3, wherein the storing is of the VOIP data before encrypting.

5. The method of claim 3, wherein the storing is of the VOIP data after encrypting but before transmitting.

6. The method of claim 1, wherein the encrypting step further comprises:

using one of a virtual private network, an encryption using a key of a specific key length, bit stuffing, and an encryption specific to the law enforcement agency.

7. The method of claim 1, wherein the transmitting occurs one of during the VOIP call and after the VOIP call.

8. The method of claim 1, further comprising:

queuing a plurality of requests for intercept in a queue.

9. The method of claim 8, wherein the queuing is based on a set of rules, and wherein a rule in the set of rules uses a priority associated with the law enforcement agency to determine a position of the request for intercept in the queue.

10. The method of claim 1, further comprising:

notifying the law enforcement agency with a notification about an event, wherein the event is related to at least one of the request for intercept, the VOIP call, and the VOIP data.

11. The method of claim 10, wherein the notification is encrypted.

12. The method of claim 10, wherein the notification is delivered to a second law enforcement agency.

13. The method of claim 11, wherein the notification and the VOIP data are encrypted using different encryptions.

14. The method of claim 1, further comprising:

archiving the VOIP data.

15. The method of claim 14, wherein the archiving is based on a set of rules, and wherein a rule in the set of rules uses at least one of the request for intercept, a characteristic of the VOIP data, and a characteristic of the VOIP call to determine a scope of archiving.

16. A computer usable program product in a computer readable medium storing computer executable instructions for transmitting intercepted VOIP data that, when executed, cause a data processing system to:

intercept a VOIP call in response to a request for intercept by a law enforcement agency;

encrypt VOIP data associated with the intercepted VOIP call to form encrypted VOIP data; and

transmit the encrypted VOIP data to the law enforcement agency using a public data network.

17. The computer usable program product of claim 16, wherein the request is received one of during the VOIP call, before the VOIP call, and after the VOIP call.

18. The computer usable program product of claim 16, further comprising executable instructions that, when executed, cause a data processing system to:

store the VOIP data, forming stored VOIP data.

19. The computer usable program product of claim 18, wherein the stored VOIP data is the VOIP data before encrypting.

20. The computer usable program product of claim 18, wherein the stored VOIP data is the VOIP data after encrypting but before transmitting.

21. The computer usable program product of claim 16, wherein the executable instructions causing the data processing system to encrypt further comprise executable instructions that, when executed, cause a data processing system to:

use one of a virtual private network, an encryption using a key of a specific key length, bit stuffing, and an encryption specific to the law enforcement agency.

22. The computer usable program product of claim 16, wherein the transmitting occurs one of during the VOIP call and after the VOIP call.

23. The computer usable program product of claim 16, further comprising executable instructions that, when executed, cause the data processing system to:

perform queuing of a plurality of requests for intercept in a queue.

24. The computer usable program product of claim 23, wherein the queuing is based on a set of rules, and wherein a rule in the set of rules uses a priority associated with the law enforcement agency to determine a position of the request for intercept in the queue.

25. The computer usable program product of claim 16, further comprising executable instructions that, when executed, cause the data processing system to:

notify the law enforcement agency with a notification about an event, wherein the event is related to at least one of the request for intercept, the VOIP call, and the VOIP data.

26. The computer usable program product of claim 25, wherein the notification is encrypted.

27. The computer usable program product of claim 25, wherein the notification is delivered to a second law enforcement agency.

28. The method of claim 26, wherein the notification and the VOIP data are encrypted using different encryptions.

29. The computer usable program product of claim 16, further comprising executable instructions that, when executed, cause the data processing system to:

perform archiving of the VOIP data.

30. The computer usable program product of claim 29, wherein the archiving is based on a set of rules, and wherein a rule in the set of rules uses at least one of the request for intercept, a characteristic of the VOIP data, and a characteristic of the VOIP call to determine a scope of archiving.

31. A system for transmitting intercepted VOIP data, the system comprising:

an intercept handling component for intercepting a VOIP call in response to a request for intercept by a law enforcement agency,

an encryption component for encrypting VOIP data associated with the intercepted VOIP call to form encrypted VOIP data; and

a transmitting component for transmitting the encrypted VOIP data to the law enforcement agency using a public data network.

32. The system of claim 31, wherein the request is received one of during the VOIP call, before the VOIP call, and after the VOIP call.

33. The system of claim 31, further comprising:

a storage for storing the VOIP data.

34. The system of claim 33, wherein the storing is of the VOIP data before encrypting.

35. The system of claim 33, wherein the storing is of the VOIP data after encrypting but before transmitting.

36. The system of claim 31, wherein the encrypting component uses one of a virtual private network, an encryption using a key of a specific key length, bit stuffing, and an encryption specific to the law enforcement agency.

37. The system of claim 31, wherein the transmitting occurs one of during the VOIP call and after the VOIP call.

38. The system of claim 31, further comprising:

queuing logic for queuing a plurality of requests for intercept in a queue.

39. The system of claim 38, wherein the queuing is based on a set of rules, and wherein a rule in the set of rules uses a priority associated with the law enforcement agency to determine a position of the request for intercept in the queue.

40. The system of claim 31, further comprising:

a notification component for notifying the law enforcement agency with a notification about an event, wherein the event is related to at least one of the request for intercept, the VOIP call, and the VOIP data.

41. The system of claim 40, wherein the notification is encrypted.

42. The system of claim 40, wherein the notification is delivered to a second law enforcement agency.

43. The system of claim 41, wherein the notification and the VOIP data are encrypted using different encryptions.

44. The system of claim 31, further comprising:

an archiving system for archiving the VOIP data.

45. The system of claim 44, wherein the archiving is based on a set of rules, and wherein a rule in the set of rules uses at least one of the request for intercept, a characteristic of the VOIP data, and a characteristic of the VOIP call to determine a scope of archiving.