Prioritizing lawful intercept sessions

• US 8,601,118 B2
• Filed: 06/13/2011
• Issued: 12/03/2013
• Est. Priority Date: 06/13/2011
• Status: Expired due to Fees

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Shankarappa, Divakar
• Primary Examiner(s): Joo, Joshua
• Application Number:
  US13/158,974
• Publication Number:
  US 20120317273A1
• Time in Patent Office: 904 Days
• Field of Search: 709223-226
• US Class Current: 709/224
• CPC Class Codes: H04L 47/821 Prioritising resource allocation or reservation requests
• CPC Class Codes: H04M 2201/14 Delay circuits; Timers
• CPC Class Codes: H04M 3/2281 Call monitoring, e.g. for law enforcement purposes; Call tracing; Detection or prevention of malicious calls

Abstract

A method may include receiving a request for a lawful intercept (LI) session, where the LI session is associated with a particular priority of a set of priority levels, and determining whether a maximum quantity of LI sessions has been initiated by a network device. The method may further include initiating a new LI session based on the request, when the maximum quantity of LI sessions has not been initiated; determining whether at least one LI session exists that is associated with a lower priority than the particular priority, when the maximum quantity of LI sessions has been initiated; and terminating a particular LI session associated with a lowest priority and initiating a new LI session based on the received request, when the at least one LI session associated with the lower priority exists.

Claims

1. A method performed by a network device, the method comprising:

receiving, by the network device, a request for a lawful intercept (LI) session,

the LI session being associated with a particular priority of a set of priority levels;

determining, by the network device, whether a maximum quantity of LI sessions has been initiated by the network device;

initiating, by the network device and when the maximum quantity of LI sessions has not been initiated, a new LI session based on the request;

determining, by the network device and when the maximum quantity of LI sessions has been initiated, whether at least one LI session exists that is associated with a lower priority than the particular priority;

terminating, by the network device and when the at least one LI session associated with the lower priority exists, a particular LI session associated with a lowest priority, when terminating the particular LI session, the method includes;

selecting a set of existing LI sessions associated with the lowest priority,

determining whether at least one LI session, in the selected set of existing LI sessions, is associated with an invalid target, and

selecting, when at least one LI session is associated with the invalid target, the at least one LI session associated with an invalid target as the particular LI session to terminate;

initiating, by the network device, the new LI session based on the received request and based on terminating the particular LI session associated with the lowest priority; and

dropping, by the network device and when the at least one LI session associated with the lower priority does not exist, the received request without initiating the new LI session.

2. The method of claim 1, further comprising:

informing a law enforcement agency associated with the terminated particular LI session that the particular LI session has been terminated.

3. The method of claim 1, where the set of priority levels includes a low priority level and a high priority level.

4. The method of claim 1, where the set of priority levels includes a low priority level, a medium priority level, and a high priority level.

5. The method of claim 1, where, when terminating the particular LI session, the method further includes:

determining, when the at least one LI session is not associated with the invalid target, whether at least one LI session, in the selected set of existing LI sessions, is in an idle state; and

selecting, when at least one LI session is in the idle state, an LI session, from the selected set of existing LI sessions, associated with a longest idle time as the particular LI session to terminate.

6. The method of claim 5, further comprising:

selecting, when at least one LI session is not in the idle state, an LI session, from the selected set of existing LI sessions, associated with an oldest initiation timestamp as the particular LI session to terminate.

7. The method of claim 1, where the network device includes a packet data network gateway of a Long Term Evolution access network.

8. A network device comprising:

a memory to store lawful intercept (LI) session records associated with existing LI sessions of the network device; and

a processor to;

monitor packets based on the stored LI session records;

receive a request for an LI session,

the LI session being associated with a particular priority of a set of priority levels;

determine whether a maximum quantity of LI sessions, of the stored LI session records, has been initiated by the network device;

initiate, when the maximum quantity of LI sessions has not been initiated, a new LI session based on the request;

determine, when the maximum quantity of LI sessions has been initiated, whether at least one LI session exists, in the stored LI session records, that is associated with a lower priority than the particular priority;

terminate, when the at least one LI session associated with the lower priority exists, a particular LI session, in the stored LI session records, associated with a lowest priority, the processor, when terminating the particular LI session, is further to;

select a set of existing LI sessions, from the stored LI session records, associated with the lowest priority,

determine whether at least one LI session, in the selected set of existing LI sessions, is in an idle state, and

select, when at least one LI session is in the idle state, an LI session associated with a longest idle time as the particular LI session to terminate;

initiate the new LI session based on the received request and based on terminating the particular LI session associated with the lower priority; and

drop, when the at least one LI session associated with the lower priority does not exist, the received request without initiating the new LI session.

9. The network device of claim 8, where the processor is further to:

determine whether at least one LI session, in the selected set of existing LI sessions, is associated with an invalid target,

the processor, when determining whether at least one LI session, in the selected set of existing LI sessions, is in the idle state, is further to;

determine whether at least one LI session, in the selected set of existing LI sessions, is in the idle state based on determining that the at least one LI session is not associated with the invalid target.

10. The network device of claim 8, where the processor is further to:

select, when at least one LI session is not in the idle state, an LI session associated with an oldest initiation timestamp, from the selected set of existing LI sessions, as the particular LI session to terminate.

11. The network device of claim 8, where the network device includes a packet data network gateway of a Long Term Evolution access network.

12. The network device of claim 8, where the network device includes at least one of a Mobility Management Entity, a Serving Gateway, or a Policy and Charging Rules Function of a Long Term Evolution access network.

13. The network device of claim 8, where the network device includes a General Packet Radio Service node.

14. The network device of claim 8, where the network device includes a Call Session Control Function of an Internet Protocol Multi-media Subsystem.

15. The network device of claim 8, where the processor is further to:

transmit, when the particular LI session has been terminated, a notification that the particular LI session has been terminated.

16. A non-transitory computer-readable medium storing instructions, the instructions comprising:

one or more instructions, executable by a processor of a network device, to cause the processor to;

receive a request for a lawful intercept (LI) session,

the LI session being associated with a particular priority of a set of priority levels;

determine whether a maximum quantity of LI sessions has been initiated by the network device;

initiate, when the maximum quantity of LI sessions has not been initiated, a new LI session based on the request;

determine, when the maximum quantity of LI sessions has been initiated, whether at least one LI session exists that is associated with a lower priority than the particular priority;

terminate, when the at least one LI session associated with the lower priority exists, a particular LI session associated with a lowest priority, the one or more instructions to terminate the particular LI session including;

one or more instructions to select a set of existing LI sessions associated with the lowest priority,

one or more instructions to determine whether at least one LI session, in the selected set of existing LI sessions, is associated with an invalid target, and

one or more instructions to select, when at least one LI session is associated with the invalid target, the at least one LI session associated with an invalid target as the particular LI session to terminate;

initiate the new LI session based on the received request and based on terminating the particular LI session associated with the lower priority; and

drop, when the at least one LI session associated with the lower priority does not exist, the received request without initiating the new LI session.

17. The non-transitory computer-readable medium of claim 16, where the one or more instructions to terminate the particular LI session include:

one or more instructions to determine, when the at least one LI session is not associated with the invalid target, whether at least one LI session, in the selected set of existing LI sessions, is in an idle state; and

one or more instructions to select, when at least one LI session is in the idle state, an LI session, from the selected set of existing LI sessions, associated with a longest idle time as the particular LI session to terminate.

18. The non-transitory computer-readable medium of claim 17, where the instructions further comprise:

one or more instructions to select, when at least one LI session is not in the idle state, an LI session, from the selected set of existing LI sessions, associated with an oldest initiation timestamp as the particular LI session to terminate.

19. The non-transitory computer-readable medium of claim 16, where the instructions further comprise:

one or more instructions to transmit, when the particular LI session has been terminated, a notification that the particular LI session has been terminated.

20. The non-transitory computer-readable medium of claim 16, where the set of priority levels includes:

a first priority level,

a second priority level,

the second priority level being different than the first priority level, and a third priority level,

the third priority level being different than the first priority level and being different than the second priority level.