Monitoring probe for identifying a user plane identifier of a user device

• US 9,439,094 B2
• Filed: 01/13/2016
• Issued: 09/06/2016
• Est. Priority Date: 08/06/2013
• Status: Expired due to Fees

• Current Assignee: Cellos Software Limited
• Original Assignee: Cellos Software Limited
• Inventors: Javed, Adnan
• Primary Examiner(s): Patel, Parth
• Application Number:
  US14/994,673
• Publication Number:
  US 20160127933A1
• Time in Patent Office: 237 Days
• Field of Search: 370/241
• US Class Current: 1/1
• CPC Class Codes: H04L 43/12 Network monitoring probes
• CPC Class Codes: H04W 24/08 Testing, supervising or monitoring using real traffic

Abstract

Methods of identifying a user plane identifier of a user device by a monitoring probe in communication with a network device, the monitoring probe, and the system using the same are disclosed. In an embodiment, the monitoring probe includes a monitor, a comparator and a user plane identifier output. The monitor monitors a network device for receipt of a first control plane message comprising a first control plane identifier and a user device identifier, and monitors the network device for receipt of a second control plane message comprising a second control plane identifier and a user plane identifier. The comparator compares the first with the second control plane identifier to determine whether the control plane identifiers correspond. The user plane identifier output outputs the user plane identifier being identified as that of the user device, when the control plane identifiers correspond.

Claims

1. An apparatus for identifying a user plane identifier of a user device by a monitoring probe in communication with a first network device and a second network device, the apparatus comprising:

first circuitry for monitoring the first network device for receipt of a first control plane message comprising a first control plane identifier and a user device identifier;

second circuitry for monitoring, in response to receipt of the first control plane message, the second network device for receipt of a second control plane message comprising a second control plane identifier and a user plane identifier;

a comparator for comparing, in response to receipt of the second control plane message, the first control plane identifier with the second control plane identifier in order to determine whether or not the first control plane identifier corresponds to the second control plane identifier;

output circuitry for outputting, in response to a determination that the first control plane identifier corresponds to the second control plane identifier, the user plane identifier such that the user plane identifier is identified as the user plane identifier of the user device;

said second circuitry for monitoring the second network device for receipt of a third control plane message comprising another user device identifier and a third control plane identifier;

third circuitry for monitoring, in response to receipt of the third control plane message, a third network device for receipt of a fourth control plane message comprising a fourth control plane identifier and a first control plane parameter;

a second comparator for comparing, in response to receipt of a fourth control plane message, the third control plane identifier with the fourth control plane identifier in order to determine whether or not the third control plane identifier corresponds to the fourth control plane identifier;

said first circuitry for monitoring, in response to a determination that the third control plane identifier corresponds to the fourth control plane identifier, the first network device for receipt of a fifth control plane message comprising a sixth control plane message and a seventh control plane message;

a third comparator for comparing, in response to receipt of a fifth control plane message, the first control plane parameter with the second control plane parameter in order to determine whether or not the first control plane parameter corresponds to the second control plane parameter;

a fourth comparator for comparing, in response to a determination that the first control plane parameter corresponds to the second control plane parameter, the sixth control plane message with the first control plane identifier in order to determine whether or not the sixth control plane message corresponds to the first control plane identifier; and

said output circuitry for outputting, in response to a determination that the sixth control plane message corresponds to the first control plane identifier, the other user device identifier such that the other user plane identifier is identified as the user plane identifier of the user device.

2. The apparatus as claimed in claim 1, wherein the user plane identifier of the user device is arranged to identify one or more data packets transmitted from the first network device to the second network device.

3. The apparatus as claimed in claim 2, wherein the first network device is an evolved NodeB (eNB) and the second network device is a Mobility Management Entity (MME).

4. The apparatus as claimed in claim 3, wherein the second control plane message is an Initial Context Setup Request Message, and the user plane identifier is a user plane Serving-Gateway Internet Protocol address (S-GW IP address) or a user plane Serving-Gateway Tunnelling End Identity (S-GW TEID).

5. The apparatus as claimed in claim 1, wherein the user plane identifier is output in association with the user device identifier to a memory for storage, in order to identify the user plane identifier as the user plane identifier of the user device.

6. The apparatus as claimed in claim 1, wherein each one of the first control plane identifier and the second control plane identifier is an evolved NodeB S1 Application Protocol Identifier (eNB-UE-S1AP-ID).

7. The apparatus as claimed in claim 1, wherein the first control plane message is an Attach Request message or an Identity Response message.

8. The apparatus as claimed in claim 7, wherein the user device identifier is an International Mobile Subscriber Identity (IMSI) or a Globally Unique Temporary Identity (GUTI).

9. The apparatus as claimed in claim 1, wherein the third network device is a Home Subscriber Server (HSS).

10. The apparatus as claimed in claim 9, wherein the third control plane message is an Authentication Information Request message, the fourth control plane message is an Authentication Information Answer message, and the fifth control plane message is an Authentication Response message.

11. The apparatus as claimed in claim 10, wherein the other user device identifier is an International Mobile Subscriber Identity (IMSI), each one of the third control plane identifier and the fourth control plane identifier is a sequence number, the first control plane parameter is an expected authentication result (XRES) parameter, the sixth control plane message is an evolved NodeB S1 Application Protocol Identifier (eNB-UE-S1AP-ID), and the second control plane parameter is an authentication result (RES) parameter.

12. The apparatus as claimed in claim 1 wherein said first and second comparators are the same.

13. The apparatus as claimed in claim 1 wherein said third and fourth comparators are the same.