METHOD FOR PROVIDING A LAW ENFORCEMENT AGENCY WITH SAMPLED CONTENT OF COMMUNICATIONS

• US 20150341392A1
• Filed: 11/15/2012
• Published: 11/26/2015
• Est. Priority Date: 11/15/2012
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Fiorillo, Lorenzo, Marfia, Francesca
• Granted Patent: US 9,602,551 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/306 intercepting packet switched data communications, e.g. Web, Internet or IMS communications

Abstract

Presented are a method and a node in a Lawful Interception (LI) network, in which the node is configured to provide a Law Enforcement Agency with Intercept Related Information (IRI) and Content of Communications (CC) of data traffic in a digital communications network. The IRI and CC are forwarded to an Intercept Mediation and Delivery unit node (IMDU) of the LI network, wherein the IMDU is configured to sample the content of communications according a certain sampling rate to achieve one or more samples of the CC, and to forward the generated one or more samples to the Law Enforcement Agency.

Claims

1. A method in an Intercept Mediation and Delivery unit (IMDU) node in a Lawful Interception (LI) network for providing a Law Enforcement Agency with Intercept Related Information (IRI) and Content of Communications (CC) from data traffic in a digital communications network, said data traffic being related to one or more target identities and interceptable by an Intercepting Control Element in a common node of said LI network and digital communications network, wherein said Intercepting Control Element being configured to receive a request to intercept data traffic related to one or more target identities, collect IRI and CC related to said one or more requested target identities, and forward the IRI and CC to an Intercept Mediation and Delivery unit node of the LI network, the method comprising:

receiving the IRI and CC from said Intercepting Control Element;

sampling the CC according a certain sampling rate to achieve one or more samples; and

forwarding the generated one or more samples to the Law Enforcement Agency.

2. The method according to claim 1, wherein the CC comprises data packets involving data packet headers, and wherein sampling the CC comprises:

retrieving and analysing data packet headers of the CC for locating a block of one or more data packets to be a sample.

3. The method according to claim 2, wherein the intercepted data traffic involves a video stream, comprising a sequence of frames, said frames being split across a number of data packets involving data packet headers comprising a timestamp field and a marker bit, said marker bit indicates the start and the end of a frame, and wherein sampling the CC comprises:

generating each sample by gathering data packets having the same timestamp in the timestamp field.

4. The method according to claim 1, wherein forwarding the generated one or more samples comprises:

forwarding the generated one or more samples via a third Handover Interface in the LI network to the Law Enforcement Management Function unit.

5. The method according to claim 1, wherein a sample comprises one or more data packets, each data packet involving a Lawful Intercept header comprising at least one of the following data:

frame number;

type;

timestamp;

or

samples correlation Identification.

6. The method according to claim 1, the method further comprising:

collecting metadata from the received IRI;

inserting said metadata into an IRI report; and

forwarding the IRI report via a second Handover Interface in the LI network to the Law Enforcement Agency.

7. The method according to claim 6, wherein the IRI report may comprise at least one of the following metadata:

URL;

IP address;

file name;

or

sample correlation Identification.

8. The method according to claim 1, wherein the method further comprises:

receiving a request to intercept data traffic related to one or more target identities, said request involving a request for sending samples of the CC.

9. An intercept Mediation and Delivery unit (IMDU) node of a Lawful Interception (LI) network configured to provide a Law Enforcement Agency with Intercept Related Information (IRI) and Content of Communications (CC) of data traffic in a digital communications network, said data traffic comprising data traffic being related to one or more target identities and intercepted by an Intercepting Control Element in a common node of said LI network and digital communications network, said Intercepting Control Element being configured to receive a request to intercept data traffic related to one or more target identities, collect IRI, and CC related to said one or more requested target identities, and forward the IRI and CC to an Intercept Mediation and Delivery unit node of the LI network, the IMDU comprising:

a sampling filter configured to sample the CC according a certain sampling rate to achieve one or more samples of the CC; and

an interface configured to forward the generated one or more samples to the Law Enforcement Agency.

10. The IMDU node according to claim 9, wherein the CC comprises data packets involving data packet headers, and the sampling filter is configured to retrieve and analyse the data packet headers of the CC for locating a block of one or more data packets to be a sample.

11. The IMDU node according to claim 9, wherein the intercepted data traffic involves a video stream which is composed of a sequence of frames, said frames being split across a number of data packets involving data packet headers comprising a timestamp field and a marker bit, said marker bit indicates the start and the end of a frame, and wherein the sampling filter is configured to generate each sample by gathering data packets having the same timestamp.

12. The IMDU node according to claim 9, wherein the interface is a third Handover Interface.

13. The IMDU node according to claim 9, wherein each of the one or more samples comprises one or more data packets, each data packet involving a Lawful Intercept header comprising at least one of the following data:

frame number;

type;

timestamp;

or

samples correlation Identification.

14. The IMDU node according to claim 9, further configured to:

collect metadata from the received IRI;

insert said metadata into an IRI report; and

forward the IRI report via a second Handover Interface to the Law Enforcement Agency node.

15. The IMDU node according to claim 14, wherein the IRI report may comprise at least one of the following metadata:

URL;

IP address;

file name;

or

sample correlation Identification.

16. The IMDU node according to claim 9, wherein the IMDU node is further configured to receive, from the Law Enforcement Management Function unit node, the request to intercept data traffic related to one or more target identities via a first Handover Interface (HI) of the IMDU node, said request involving a request for sending samples of the CC back to the Law Enforcement Agency node.

17-23. -23. (canceled)

24. A non-transitory computer readable medium comprising computer program code loadable into a processor, which when executed in the processor causes an Intercept Mediation and Delivery Unit (IMDU) to:

receive the IRI and CC from said Intercepting Control Element;

sample the CC according a certain sampling rate to achieve one or more samples; and

forward the generated one or more samples to the Law Enforcement Agency.