Method for Lawfully Intercepting Communication IP Packets Exchanged Between Terminals

• US 20110167164A1
• Filed: 03/10/2011
• Published: 07/07/2011
• Est. Priority Date: 09/26/2008
• Status: Active Grant

• Current Assignee: Media Patents S.L.
• Original Assignee: Media Patents S.L.
• Inventors: Fernández Gutierrez, Alvaro
• Granted Patent: US 8,127,005 B2
• Time in Patent Office: Days
• US Class Current: 709/228
• CPC Class Codes: H04L 63/306 intercepting packet switched data communications, e.g. Web, Internet or IMS communications
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04M 3/2281 Call monitoring, e.g. for law enforcement purposes; Call tracing; Detection or prevention of malicious calls

Abstract

A method for lawfully intercepting communication IP packets exchanged between terminals is provided. The method involves assigning an IP address associated with a telecommunication service provider to, for example, a sending terminal for use as its IP address in communications with a receiving terminal, the telecommunication service provider providing SIP proxy services for establishing communication between the sending and receiving terminals. The communication IP packets are intercepted in such a way that the terminals are unaware of the interception.

Claims

1. A computer-implemented method for lawfully intercepting communication IP packets exchanged between a first terminal having a first IP address and a second terminal having a second IP address, the method comprising:

first equipment in a data network of a first communications service provider transmitting a third IP address to the first terminal for use as a source IP address of the first terminal in a field of session establishment messages to be transmitted from the first terminal to establish communication between the first terminal and the second terminal,

the first equipment and/or second equipment in the data network receiving at least some of the communication IP packets; and

intercepting the communication IP packets in the data network.

2. A method according to claim 1, wherein the session establishment messages are SIP (Session Initiation Protocol) message and the field of the session establishment message is a SDP (Session Description Protocol) connection field.

3. A method according to claim 1, further comprising the first equipment and/or the second equipment removing the first IP address from the communication IP packets received from the first terminal before the communication IP packets are sent to the second terminal.

4. A method according to claim 1, wherein the communication IP packets comprise media packets.

5. A method according to claim 2, wherein the communication IP packets comprise media packets.

6. A method according to claim 5, wherein the media packets are RTP (Real Time Protocol) packets.

7. A method according to claim 1, wherein the third IP address is associated with the first equipment.

8. A method according to claim 7, wherein the first equipment has one or more network interfaces, the third IP address being an IP address of one of the one or more network interfaces.

9. A method according to claim 1, wherein the first terminal is a Mobile Node and the first equipment is a Home Agent.

10. A method according to claim 9, wherein the Home Agent communicates with the Mobile Node using Mobile IP version 4, versions or modifications of Mobile IP version 4, or equivalents thereof.

11. A method according to claim 9, wherein the Home Agent communicates with the Mobile Node using Mobile IP version 6, versions or modifications of Mobile IP version 6, or equivalents thereof.

12. A method according to claim 1, wherein the second terminal does not belong to the first telecommunications service provider.

13. A method according to claim 1, wherein the first terminal does not belong to the first telecommunications service provider.

14. A method according to claim 1, wherein the first terminal belongs to a second telecommunications service provider and the second terminal belongs to a third telecommunications service provider, the first, second and third telecommunication service providers being different from one another.

15. A method according to claim 1, wherein the communication IP packets are intercepted by lawful intercepting equipment in the data network which is connected to a law enforcement agency.

16. A method according to claim 1, wherein the second terminal does not belong to the first telecommunications service provider, the communication IP packets being intercepted by lawful intercepting equipment in the data network which is connected to a law enforcement agency (LEA) device, the intercepting equipment receiving instructions from the LEA device to intercept the communication IP packets in a communication established by using a SIP Uniform Resource Identifier (URI) of a user of the first terminal or the second terminal.

17. A method according to claim 2, further comprising the first equipment and/or the second equipment in the data network receiving SIP messages from the second terminal, at least some of the SIP messages received in IP packets from the second terminal having the third IP address as a destination address.

18. A method according to claim 1, wherein the communication IP packets comprise the session establishment messages and media packets.

19. A method according to claim 18, wherein the communication IP packets are intercepted in the data network upon the first equipment and/or the second equipment and/or third equipment in the data network detecting an identifier of a user of the first terminal.

20. A method according to claim 19, wherein the identifier is a URI (Uniform Resource Identifier).

21. A method according to claim 2, wherein the communication IP packets comprise SIP messages and media packets.

22. A method according to claim 21, wherein the communication IP packets are intercepted in the data network upon the first equipment and/or the second equipment and/or third equipment in the data network detecting an identifier of a user of the first terminal, the identifier being a SIP URI (Session Initiation Protocol Uniform Resource Identifier).

23. A computer-implemented method for lawfully intercepting communication IP packets exchanged between a first terminal having a first IP address and a second terminal having a second IP address, the method comprising:

first equipment in a data network of a first telecommunications service provider transmitting a third IP address to the first terminal for use in a SDP (Session Description Protocol) connection field of SIP (Session Initiation Protocol) messages to be transmitted by the first terminal to establish communication between the first terminal and the second terminal,

the first equipment and/or second equipment in the data network receiving from the first terminal encapsulated IP packets with an outer header containing the first IP address, a inner header containing the third IP address, and a destination address, the first and/or second equipment removing the outer header before sending the communication IP packets to the destination address; and

intercepting the communication IP packets in the data network.

24. A method according to claim 23, wherein the communication IP packets are media packets.

25. A method according to claim 24, wherein the media packets are RTP (Real Time Protocol) packets.

26. A method according to claim 23, wherein the third IP address is associated with the first equipment.

27. A method according to claim 23, wherein the first equipment has a network interface, the third IP address being an IP address of the network interface.

28. A method according to claim 23, wherein the first terminal is a Mobile Node and the first equipment is a Home Agent.

29. A method according to claim 28, wherein the Home Agent communicates with the Mobile Node using Mobile IP version 4, versions or modifications of Mobile IP version 4, or equivalents thereof.

30. A method according to claim 28, wherein the Home Agent communicates with the Mobile Node using Mobile IP version 6, versions or modifications of Mobile IP version 6, or equivalents thereof.

31. A method according to claim 23, wherein the second terminal does not belong to the first telecommunications service provider.

32. A method according to claim 23, wherein the first terminal does not belong to the first telecommunications service provider.

33. A method according to claim 23, wherein the first terminal belongs to a second telecommunications service provider and the second terminal belongs to a third telecommunications service provider, the first, second and third telecommunication service providers being different from one another.

34. A method according to claim 23, wherein the communication IP packets are intercepted by lawful intercepting equipment in the first data network which is connected to a law enforcement agency device.

35. A method according to claim 23, wherein the second terminal does not belong to the first telecommunications service provider, the communication IP packets being intercepted by lawful intercepting equipment in the first data network which is connected to a law enforcement agency (LEA) device, the intercepting equipment receiving instructions from the LEA device to intercept the communication IP packets in a communication established by using a SIP Uniform Resource Identifier (URI) of a user of the first terminal or the second terminal.

36. A method according to claim 23, further comprising the first equipment and/or the second equipment in the data network receiving SIP messages from the second terminal, at least some of the SIP messages received from the second terminal in IP packets having the third IP address as a destination address.

37. A method according to claim 23, wherein the communication IP packets comprise SIP messages and media packets.

38. A method according to claim 37, wherein the communication IP packets are intercepted in the data network upon the first equipment and/or the second equipment and/or third equipment in the data network detecting an identifier of a user of the first terminal.

39. A method according to claim 38, wherein the identifier is a URI (Uniform Resource Identifier).

40. A method according to claim 38, wherein the identifier is a SIP URI (Session Initiation Protocol Uniform Resource Identifier).