Lawful Interception of Broadband Data Traffic

• US 20090041011A1
• Filed: 04/03/2008
• Published: 02/12/2009
• Est. Priority Date: 04/03/2007
• Status: Abandoned Application

• Current Assignee: At&T Delaware Intellectual Property, Inc. (AT&T, Inc.)
• Original Assignee: At&T Delaware Intellectual Property, Inc. (AT&T, Inc.)
• Inventors: Sheppard, Scott
• Application Number:
  US12/062,226
• Publication Number:
  US 20090041011A1
• Time in Patent Office: Days
• US Class Current: 370/360
• CPC Class Codes: H04L 63/306 intercepting packet switched data communications, e.g. Web, Internet or IMS communications

Abstract

Methods, systems, and computer-readable media provide for lawfully intercepting broadband data traffic. According to one aspect, a method for intercepting data traffic in a dedicated enterprise network comprising a range of contiguous Internet Protocol (IP) addresses is provided. According to the method, a plurality of provider edge (PE) routers and a plurality of provider (P) routers are deployed. Each of the PE routers is operatively coupled to each of the P routers in a multi-homed configuration, and each of the PE routers and P routers forms a communication link. The data traffic is intercepted across the communication links for the range of contiguous IP addresses.

Claims

1. A method for intercepting data traffic in a dedicated enterprise network comprising a range of contiguous Internet Protocol (IP) addresses, comprising:

deploying a plurality of provider edge (PE) routers and a plurality of provider (P) routers, each of the PE routers being operatively coupled to each of the P routers in a multi-homed configuration, and each of the PE routers and P routers forming a communication link; and

intercepting the data traffic across the communication links for the range of contiguous IP addresses.

2. The method of claim 1, wherein intercepting data traffic across the communication links for the range of contiguous IP addresses comprises configuring the PE routers to intercept the data traffic across the communication links for the range of contiguous IP addresses.

3. The method of claim 2, wherein intercepting data traffic across the communication links for the range of contiguous IP addresses comprises:

deploying a plurality of splitters at each of the communication links; and

deploying a plurality of probes, each of the probes operatively coupled to one of the splitters, and each of the probes adapted to intercept the data traffic split from the corresponding splitter at the corresponding communication link for the range of contiguous IP addresses.

4. The method of claim 3, wherein each of the plurality of splitters comprises a multi-mode 70/30 splitter.

5. The method of claim 3, wherein each of the plurality of probes comprises a Gigabit Ethernet (GigE) probe.

6. The method of claim 1, wherein the each of the communication links comprises a Gigabit Ethernet (GigE) link.

7. The method of claim 1, wherein plurality of PE routers comprises a first PE router and a second PE router, the first PE router being located at a first point of presence, and the second PE router being located at a second point of presence.

8. A method for measuring a performance of a lawful broadband data interception system, comprising:

configuring a network element to generate data traffic via Service Assurance Agent (SAA) functionality provided by the network element;

transmitting the data traffic across a broadband network;

intercepting the data traffic being transmitted across the broadband network; and

measuring the performance of the lawful broadband data interception system based on the intercepted data traffic.

9. The method of claim 8, wherein the network element comprises a router or a switch.

10. The method of claim 8, wherein measuring the performance of the lawful broadband data interception system based on the intercepted data traffic comprises verifying that the data traffic is intercepting the data traffic being generated via the SAA functionality.

11. The method of claim 8, wherein measuring the performance of the lawful broadband data interception system based on the intercepted data traffic comprises:

determining a time at which the data traffic is generated at the network element; and

determining a time at which the data traffic is intercepted.

12. The method of claim 8, wherein measuring the performance of the lawful broadband data interception system based on the intercepted data traffic comprises measuring the performance for each of a plurality of data traffic types.

13. The method of claim 12, wherein the data traffic types comprise ping, hypertext transfer protocol (HTTP), domain name system (DNS), and file transfer protocol (FTP).

14. A computer-readable medium having instructions stored thereon for execution by a processor to provide a method for intercepting data traffic in a dedicated enterprise network comprising a range of contiguous Internet Protocol (IP) addresses, the method comprising:

deploying a plurality of provider edge (PE) routers and a plurality of provider (P) routers, each of the PE routers being operatively coupled to each of the P routers in a multi-homed configuration, and each of the PE routers and P routers forming a communication link; and

intercepting the data traffic across the communication links for the range of contiguous IP addresses.

15. The computer-readable medium of claim 14, wherein intercepting data traffic across the communication links for the range of contiguous IP addresses comprises configuring the PE routers to intercept the data traffic across the communication links for the range of contiguous IP addresses.

16. The computer-readable medium of claim 15, wherein intercepting data traffic across the communication links for the range of contiguous IP addresses comprises:

deploying a plurality of splitters at each of the communication links; and

deploying a plurality of probes, each of the probes operatively coupled to one of the splitters, and each of the probes adapted to intercept the data traffic split from the corresponding splitter at the corresponding communication link for the range of contiguous IP addresses.

17. The computer-readable medium of claim 16, wherein each of the plurality of splitters comprises a multi-mode 70/30 splitter.

18. The computer-readable medium of claim 16, wherein each of the plurality of probes comprises a Gigabit Ethernet (GigE) probe.

19. The computer-readable medium of claim 14, wherein the each of the communication links comprises a Gigabit Ethernet (GigE) link.

20. The computer-readable medium of claim 14, wherein plurality of PE routers comprises a first PE router and a second PE router, the first PE router being located at a first point of presence, and the second PE router being located at a second point of presence.