System and Method for Logging Communications

• US 20090113036A1
• Filed: 10/24/2007
• Published: 04/30/2009
• Est. Priority Date: 10/24/2007
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Knowledge Ventures, L.P. (AT&T, Inc.)
• Inventors: Zampiello, Geoffrey
• Granted Patent: US 9,253,148 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04L 63/308 retaining data, e.g. retaining successful, unsuccessful communication attempts, internet access, or e-mail, internet telephony, intercept related information or call content
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 67/54 Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users

Abstract

A method for logging communication includes determining when a target user is active and identifying an access device and private Internet Protocol (IP) address associated with the target user when the target user is active. The method further includes causing the access device to provide traffic information associated with the target user to a logging device.

Claims

1. A method for logging communication, comprising:

determining when a target user is active;

identifying an access point and private Internet Protocol (IP) address associated with the target user when the target user is active; and

causing the access point to provide traffic information associated with the target user to a logging device.

2. The method of claim 1 wherein the traffic information includes a source/destination pair for the communication.

3. The method of claim 2 further comprising capturing the communication, wherein the communication is associated with the access point and matches the source/destination pair.

4. The method of claim 1 wherein causing the access point to provide traffic information includes causing the access point to send a copy of the communication to the logging device.

5. The method of claim 1 further comprising reconstructing the communication based on the traffic information.

6. The method of claim 5 further comprising storing the reconstructed communication.

7. The method of claim 1 wherein identifying the access point and private IP address includes querying a RADIUS server.

8. A method for logging communication, comprising:

determining when a target user is active;

identifying an access point and private Internet Protocol (IP) address associated with the target user when the target user is active;

providing the access point with the private IP address; and

causing the access point to send a copy of network traffic associated with the private IP address to a logging device.

9. The method of claim 8 wherein the network traffic associated with the private IP address matches a network traffic type.

10. The method of claim 8 wherein the copy of the network traffic is encrypted prior to sending to the logging device.

11. The method of claim 8 further comprising reconstructing the communication from the copy of the network traffic.

12. The method of claim 8 further comprising storing the communication.

13. The method of claim 8 wherein identifying the access point and private IP address includes querying a RADIUS server.

14. A method for logging communication, comprising:

determining when a target user is active;

identifying an access point and private Internet Protocol (IP) address associated with the target user when the target user is active;

providing the access point with the private IP address; and

causing the access point to provide, to a logging device, source/destination pairs for network traffic associated with the private IP address.

15. The method of claim 14 further comprising causing the logging device to capture the network traffic associated with the private IP address, wherein the network traffic matches the source/destination pair.

16. The method of claim 15 wherein the network traffic matches a network traffic type.

17. The method of claim 14 further comprising reconstructing the communication based on the network traffic.

18. The method of claim 14 further comprising storing the communication.

19. The method of claim 14 wherein identifying the access point and private IP address includes querying a RADIUS server.

20. A method for logging communication, comprising:

identifying an access point and private Internet Protocol (IP) address associated with a target user; and

causing the access point to log traffic information associated with the private IP address.

21. The method of claim 20 wherein the traffic information includes a source/destination pair.

22. The method of claim 20 further comprising copying traffic associated with the private IP address.

23. The method of claim 20 further comprising reconstructing the communication based on the traffic information.

24. The method of claim 23 further comprising storing the reconstructed communication.

25. The method of claim 20 wherein identifying the private IP address includes querying a RADIUS server.