Legal Intercept

• US 20110153809A1
• Filed: 12/23/2009
• Published: 06/23/2011
• Est. Priority Date: 12/23/2009
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Khanchandani, Niraj K., Ghanem, George, Bizga, Lawrence Felix
• Application Number:
  US12/645,485
• Publication Number:
  US 20110153809A1
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: H04L 63/306 intercepting packet switched data communications, e.g. Web, Internet or IMS communications

Abstract

Aspects of the subject matter described herein relate to silently recording communications. In aspects, data associated with a request to establish a communication is modified to cause the communication to be established via a path that includes a recording agent. Modification may include, for example, adding, changing, and/or deleting data within the data. The data as modified is then passed to a protocol entity that uses the data to establish a communication session. Because of the way in which the data has been modified, the protocol entity selects a path that includes the recording agent. The recording agent is then able to silently record the communication.

Claims

1. A method implemented at least in part by a computer, the method comprising:

receiving data regarding establishing a communication session between at least two entities via a switched packet network for a communication that includes audio;

locating one or more parameters in the data that indicate one or more local candidate communication points of at least one of the at least two entities;

removing the one or more parameters from the data to cause the communication session to be established over a path that includes a recording agent that is capable of silently copying the communication between the at least two entities; and

providing the data with the parameters removed to a protocol entity that uses the data to follow a communication protocol to establish the communication session via the path, the protocol entity potentially including one or more of the at least two entities and/or any entity that interacts with one or more of the at least two entities.

2. The method of claim 1, wherein receiving data regarding establishing a communication session between at least two entities comprises receiving the data from a call server that is involved in establishing the communication session, the call server responsible at least for relaying invite requests from a requesting one of the entities to a receiving one of the entities, the call server configurable to provide the data to a recording agent before establishing the communication session.

3. The method of claim 1, wherein receiving data regarding establishing a communication session between two entities comprises receiving the data at a recording agent logically disposed between a requesting entity of the at least two entities and a call server that is involved in establishing the communication session.

4. The method of claim 1, wherein removing the one or more parameters from the data comprises deleting the one or more parameters from session description protocol data that includes the data.

5. The method of claim 1, further comprising receiving a request to monitor packets to and from at least one of the at least two entities and updating a database with an identifier of the at least one of the at least two entities in response to the request.

6. The method of claim 5, further comprising configuring a network device to create a copy of the communication in response to receiving the request, the network device logically disposed within the path.

7. The method of claim 1, further comprising creating a copy of the communication by creating at least one additional stream in conjunction with creating a stream associated with the communication.

8. The method of claim 7, further comprising forwarding the at least one additional stream to an entity identified prior to receiving the data.

9. The method of claim 1, further comprising storing data corresponding to the communication to a storage medium for later retrieval by a law enforcement agent.

10. The method of claim 1, wherein receiving data regarding establishing a communication session comprises receiving session description protocol parameters according to a session initiation protocol of a voice over Internet protocol.

11. A computer storage medium having computer-executable instructions, which when executed perform actions, comprising:

receiving a request to establish a communication session between at least two entities that are capable of communicating at least audio data via a sequence of network packets;

in conjunction with receiving the request, receiving data that indicates one or more candidate communication points of at least one of the at least two entities, the data formatted according to a communication protocol; and

changing the data to cause a protocol entity that uses the data while following the communication protocol to establish the connection via a path that includes a recording agent that is capable of silently copying the communication between the at least two entities, the protocol entity potentially including one or more of the at least two entities and/or any entity that interacts with one or more of the at least two entities; and

providing the data as changed to the protocol entity.

12. The computer storage medium of claim 11, wherein receiving a request to establish a communication session comprises receiving the request at a component that resides in a communication path of at least one of the at least two entities, the communication path transporting attempts to establish communication sessions that include audio.

13. The computer storage medium of claim 11, wherein receiving a request to establish a communication session comprises receiving the request at a call server that is responsible for providing an invite indicating the data as changed to a receiving entity of the at least two entities, the receiving entity comprising an entity that did not send the request to the call server.

14. The computer storage medium of claim 11, wherein changing the data comprises changing a flag, the flag indicating that the path that includes the recording agent be used for the communication session.

15. The computer storage medium of claim 11, wherein changing the data comprises adding additional data to the data, the additional data indicating that the path that includes the recording agent is to be used for the communication session.

16. The computer storage medium of claim 11, wherein changing the data comprises deleting parameters from the data leaving remaining parameters in the data, the remaining parameters indicating that the path that includes the recording agent is to be used for the communication session.

17. The computer storage medium of claim 11, wherein receiving data that indicates one or more candidate communication points of at least one of the at least two entities comprises receiving Internet protocol data that identifies ports and Internet protocol addresses of network address translation devices associated with the at least two entities.

18. The computer storage medium of claim 11, further comprising configuring the recording agent to create a copy of data transmitted in the communication session and to send the copy to an entity associated with a law enforcement agent.

19. In a computing environment, an apparatus, comprising:

a request manager operable to receive a request to establish a communication session between at least two entities that are capable of communicating at least audio data via a sequence of network packets, the request manager further operable to receive data usable to establish one or more network paths between the at least two entities;

a local communication point identifier operable to locate one or more parameters in the data that indicate one or more local candidate communication points of at least one of the at least two entities; and

a local communication point updater operable to modify the data to indicate that the one or more local candidate communications points are not to be used when establishing the communication session between the at least two entities.

20. The apparatus of claim 19, further comprising a recorder manager operable to configure a recording agent to silently copy communication transmitted via the communication session.