Lawful interception of unauthorized subscribers and equipments

• US 9,173,091 B2
• Filed: 03/18/2005
• Issued: 10/27/2015
• Est. Priority Date: 03/18/2005
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Imbimbo, Amedeo, Iovieno, Maurizio
• Primary Examiner(s): Khoshnoodi, Nadia
• Application Number:
  US11/909,017
• Publication Number:
  US 20080216158A1
• Time in Patent Office: 3,875 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04L 63/306 intercepting packet switched data communications, e.g. Web, Internet or IMS communications
• CPC Class Codes: H04M 2207/18 wireless networks
• CPC Class Codes: H04M 3/20 with means for interrupting existing connections; with means for breaking-in on conversations
• CPC Class Codes: H04M 3/38 Graded-service arrangements, i.e. some subscribers prevented from establishing certain connections queuing arrangements H04Q3/64
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/037 of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/80 Arrangements enabling lawful interception [LI]

Abstract

The present invention relates to methods and arrangements in a telecommunication system to override current access rights. The telecommunication system comprises an Access Point IAP; MSC, SGSN associated with a Configuration Unit ICU. The method comprises receiving to the Access Point IAP; MSC, SGSN from the Configuration Unit ICU, a request to monitor a system member MS, SIM. The method further comprises receiving to the Access Point from the Configuration Unit, a request to override deprived access rights for the system member MS, SIM. The method further comprises overriding in the Access Point IAP; MSC, SGSN, the deprived access rights for the member.

Claims

1. A method in a telecommunication system to monitor unauthorized system members, the system members comprising one or more of user equipments and mobile subscribers, the telecommunication system comprising an Access Point associated with a Law Enforcement Monitoring Function, the method comprising the following steps:

receiving to the Access Point from the Law Enforcement Monitoring Function, a request to monitor a system member for which access rights to the telecommunication system have been deprived,

wherein the Law Enforcement Monitoring Function can only monitor system members when they access the telecommunication system;

receiving to the Access Point from the Law Enforcement Monitoring Function, a request to override deprived access rights for the system member; and

overriding in the Access Point, the deprived access rights for the system member, allowing the system member to temporarily access the telecommunication system, thereby enabling lawful interception of the system member;

prior to overriding the deprived access rights, receiving a first service request message from the system member at the Access Point;

rejecting the first service request.

2. The method of claim 1 comprising the following further step:

sending from the Access Point to the Law Enforcement Monitoring Function, an indication of the system member'"'"'s overridden access right.

3. The method of claim 1 comprising the following further steps:

sending a service request message from the system member to the Access Point;

establishing the requested service in the system.

4. The method of claim 3 comprising the following further step:

delivering Intercept Related Information related to the system member, from the Access point to the Law Enforcement Monitoring Function.

5. The method of claim 1 comprising the following further steps:

verifying in the Access Point that access rights for the system member are deprived.

6. The method of claim 1 comprising the following further steps:

sending a check request regarding the system member'"'"'s access rights, from the Access Point to the register that contains the wanted information;

replying to the request by sending information from the register to the Access Point that the access rights for the system member have been deprived.

7. The method of claim 1 comprising the following further steps:

subsequent to overriding the deprived access rights, receiving a second service request message from the member at the Access Point; and

rejecting the second service request.

8. An arrangement in a telecommunication system to monitor unauthorized system members, the system members comprising one or more of user equipments and mobile subscribers, the telecommunication system comprising an Access Point associated with a Law Enforcement Monitoring Function, the arrangement comprising:

means for receiving to the Access Point from the Law Enforcement Monitoring Function, a request to monitor a system member for which access rights to the telecommunication system have been deprived,

wherein the Law Enforcement Monitoring Function can only monitor system members when they access the telecommunication system;

means for receiving to the Access Point from the Law Enforcement Monitoring Function, a request to override deprived access rights for the system member; and

means for overriding in the Access Point, the deprived access rights for the system member, allowing the system member to temporarily access the telecommunication system, thereby enabling lawful interception of the system member;

means for, prior to overriding the deprived access rights, receiving a first service request message from the system member at the Access Point;

means for rejecting the first service request.

9. The arrangement of claim 8 comprising:

means for sending from the Access Point to the Law Enforcement Monitoring Function, an indication of the system member'"'"'s overridden access right.

10. The arrangement of claim 8, comprising:

means for sending a service request message from the system member to the Access Point;

means for establishing the requested service in the system.

11. The arrangement of claim 10 comprising:

means for delivering Intercept Related Information related to the system member, from the Access point to the Law Enforcement Monitoring Function.

12. The arrangement of claim 8 comprising:

means for verifying in the Access Point that access rights for the system member are deprived.

13. The arrangement of claim 12 comprising:

means for sending a check request regarding the system member'"'"'s access rights, from the Access Point to the register that contains the wanted information;

means for replying to the request by sending information from the register to the Access Point that the access rights for the system member have been deprived.

14. The arrangement of claim 8 comprising:

means for receiving a second service request message from the system member at the Access Point, after overriding in the Access Point, the deprived access rights;

means for rejecting the second service request.