System and method for lawful interception (LI) of Network traffic in a mobile edge computing environment

• US 9,942,825 B1
• Filed: 03/27/2017
• Issued: 04/10/2018
• Est. Priority Date: 03/27/2017
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: Narayanan, Ram Gopal Lakshmi
• Primary Examiner(s): Sarwar, Babar
• Application Number:
  US15/470,605
• Time in Patent Office: 379 Days
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 63/306 intercepting packet switched data communications, e.g. Web, Internet or IMS communications
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04W 4/18 Information format or content conversion, e.g. adaptation by the network of the transmitted or received information for the purpose of wireless delivery to users or terminals
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

Lawful Interception (LI) services may be provided in Radio Access Networks (RANs) implementing Mobile Edge Computing (MEC). An enhanced NodeB (eNB) may receive an LI policy that includes instructions for identifying network traffic subject to LI and for providing copies of the network traffic to a LI infrastructure of one or more server devices. When the eNB receives a request for content from a User Equipment (UE), the eNB may determine whether a local instance of the content is available (via MEC) and, based on the LI policy, whether the request and/or the content are subject to LI. When a local instance is available and the request and content are subject to LI, the eNB may provide a copy of the request and the content to the LI infrastructure, in addition to providing a copy of the content to the UE.

Claims

1. An enhanced Node B (eNB) of a Mobile Edge Computing (MEC) Radio Access Network (RAN) of a wireless telecommunication network, the eNB comprising:

a non-transitory memory device storing a plurality of processor-executable instructions; and

one or more processor configured to execute the processor-executable instructions, wherein executing the processor-executable instructions causes the one or more processors to;

receive, from a core network of the wireless telecommunication network, a Lawful Interception (LI) policy, the LI policy including;

instructions for determining whether network traffic is subject to LI, and

an identifier corresponding to a LI infrastructure consisting of one or more server devices;

receive, from a User Equipment, a request for content, the request including destination information corresponding to a content source located outside the wireless telecommunication network;

determine, based on the request, whether the content is available locally at the MEC RAN;

when the content is available at the MEC RAN,

determine, based on the LI policy, whether the request and the content are subject to LI;

 

when the request and the content are subject to LI,

 

provide a first copy of the content, from the MEC RAN, to the UE,

 

provide, in accordance with the LI policy, the request to the LI infrastructure, and

 

provide, in accordance with the LI policy, a second copy of the content, from the MEC RAN, to the LI infrastructure, and

 

when the request is not subject to LI,

 

provide the first copy of the content, from the MEC RAN, to the UE; and

when the content is not available at the MEC RAN,

forward the request for the content source via a core network of the wireless telecommunication network.

2. The eNB of claim 1, wherein executing the processor-executable instructions causes the one or more processors are to:

prior to receiving the request for the content,

receive content available at the content source,

cause one or more server devices, of the MEC RAN, to host an instance of the content; and

map an Internet Protocol (IP) address, corresponding to the content source, to the instance of the content available at the MEC RAN.

3. The eNB of claim 2, wherein, to provide the first copy of the content, from the MEC RAN to the UE, the one or more processors are to:

use the IP address of the content source to indicate, to the UE, that a source of the first copy of the content is the content source.

4. The eNB of claim 2, wherein, to determine that the content is available at the MEC RAN, the one or more processors are to:

forward, to the one or more server devices of the MEC RAN, the request for the content, and

receive content, corresponding to the request, from the one or more server devices.

5. The eNB of claim 1, wherein:

the LI policy includes a Traffic Flow Template (TFT) corresponding to content specified in the LI policy, and

to determine whether the request and the content are subject to LI, the one or more processors are to;

compare the TFT to the request for the content and the first copy of the content from the MEC RAN.

6. The eNB of claim 1, wherein the LI policy is received, by the eNB, from a policy server of the core network, the policy server being configured to:

receive a request for the wireless telecommunication network to provide LI services,

create the LI policy based on the request to provide the LI services, and

communicate the LI policy to the eNB.

7. The eNB of claim 1, wherein, to provide the request and the second copy of the content to the LI infrastructure, the one or more processors are to:

communicate the request and the second copy of the content to an LI server, of the wireless telecommunication network, using at least one General Packet Radio Service (GPRS) Tunneling Protocol (GTP) tunnel between the eNB and the LI server.

8. The eNB of claim 7, wherein, upon receiving the request and the second copy of the content, the LI server is to forward the request and the second copy of the content to the Li infrastructure based on a copy of the LI policy stored by the LI server.

9. A method, comprising:

receiving, by an enhanced Node B (eNB) of a Mobile Edge Computing (MEC) Radio Access Network (RAN) of a wireless telecommunication network, a Lawful Interception (LI) policy, the LI policy including;

instructions for determining whether network traffic is subject to LI, and

an identifier corresponding to a LI infrastructure consisting of one or more server devices;

receiving, from a User Equipment, a request for content, the request including destination information corresponding to a content source located outside the wireless telecommunication network;

determining, based on the request, whether the content is available locally at the MEC RAN;

when the content is available at the MEC RAN,

determining, based on the LI policy, whether the request and the content are subject to LI;

when the request and the content are subject to LI,

 

providing a first copy of the content, from the MEC RAN, to the UE,

 

providing, in accordance with the LI policy, the request to the LI infrastructure, and

 

providing, in accordance with the LI policy, a second copy of the content, from the MEC RAN, to the LI infrastructure, and when the request is not subject to LI,

 

providing the first copy of the content, from the MEC RAN, to the UE; and

when the content is not available at the MEC RAN,

forwarding the request for the content source via a core network of the wireless telecommunication network.

10. The method of claim 9, further comprising:

prior to receiving the request for the content,

receiving content available at the content source,

causing one or more server devices, of the MEC RAN, to host an instance of the content; and

mapping an Internet Protocol (IP) address, corresponding to the content source, to the instance of the content available at the MEC RAN.

11. The method of claim 10, wherein providing the first copy of the content, from the MEC RAN to the UE, comprises:

using the IP address of the content source to indicate, to the UE, that a source of the first copy of the content is the content source.

12. The method of claim 10, wherein determining that the content is available at the MEC RAN comprises:

forwarding, to the one or more server devices of the MEC RAN, the request for the content, and

receiving content, corresponding to the request, from the one or more server devices.

13. The method of claim 9, wherein:

the LI policy includes a Traffic Flow Template (TFT) that corresponds to content specified in the LI policy, and

determining whether the request and the content are subject to LI includes comparing the TFT to the request for the content and the first copy of the content from the MEC RAN.

14. The method of claim 9, wherein the LI policy is received, by the eNB, from a policy server of the core network, the policy server being configured to:

receive a request for the wireless telecommunication network to provide LI services,

create the LI policy based on the request to provide the LI services, and

communicate the LI policy to the eNB.

15. The method of claim 9, wherein providing the request and the second copy of the content to the LI infrastructure comprises:

communicating the request and the second copy of the content to an LI server, of the wireless telecommunication network, using at least one General Packet Radio Service (GPRS) Tunneling Protocol (GTP) tunnel between the eNB and the LI server.

16. The method of claim 15, wherein, upon receiving the request and the second copy of the content, the LI server is to forward the request and the second copy of the content to the LI infrastructure based on a copy of the LI policy stored by the LI server.

17. A non-transitory computer readable medium storing a plurality of processor-executable instructions, wherein executing the processor-executable instructions causes one or more processors to:

receive, from a core network of the wireless telecommunication network, a Lawful Interception (LI) policy, the LI policy including;

instructions for determining whether network traffic is subject to LI, and

an identifier corresponding to a LI infrastructure consisting of one or more server devices;

receive, from a User Equipment, a request for content, the request including destination information corresponding to a content source located outside the wireless telecommunication network;

determine, based on the request, whether the content is available locally at the MEC RAN;

when the content is available at the MEC RAN,

determine, based on the LI policy, whether the request and the content are subject to LI;

when the request and the content are subject to LI,

 

provide a first copy of the content, from the MEC RAN, to the UE,

 

provide, in accordance with the LI policy, the request to the LI infrastructure, and

 

provide, in accordance with the LI policy, a second copy of the content, from the MEC RAN, to the LI infrastructure, and when the request is not subject to LI,

 

provide the first copy of the content, from the MEC RAN, to the UE; and

when the content is not available at the MEC RAN,

forward the request for the content source via a core network of the wireless telecommunication network.

18. The non-transitory computer readable medium of claim 17, wherein executing the processor-executable instructions causes the one or more processors to:

prior to receiving the request for the content,

receive content available at the content source,

cause one or more server devices, of the MEC RAN, to host an instance of the content; and

map an Internet Protocol (IP) address, corresponding to the content source, to the instance of the content available at the MEC RAN.

19. The non-transitory computer readable medium of claim 18, wherein, to provide the first copy of the content, from the MEC RAN to the UE, the one or more processors are to:

use the IP address of the content source to indicate, to the UE, that a source of the first copy of the content is the content source.

20. The non-transitory computer readable medium of claim 18, wherein, to determine that the content is available at the MEC RAN, the one or more processors are to:

forward, to the one or more server devices of the MEC RAN, the request for the content, and

receive content, corresponding to the request, from the one or more server devices.