System and method for monitoring network communications originating in monitored jurisdictions

• US 20090077227A1
• Filed: 09/13/2007
• Published: 03/19/2009
• Est. Priority Date: 09/13/2007
• Status: Active Grant

• Current Assignee: Caterpillar Incorporated
• Original Assignee: Caterpillar Incorporated
• Inventors: Hutson, James, Force, Paul, Cox, Steven, Crumb, Anthony
• Granted Patent: US 9,363,231 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04L 63/304 intercepting circuit switched data communications lawful interception of wireless network communications H04W12/02
• CPC Class Codes: H04L 63/306 intercepting packet switched data communications, e.g. Web, Internet or IMS communications

Abstract

A method of monitoring network communications originating in monitored jurisdictions includes a step of identifying a monitored jurisdiction within a computer network based on predetermined criteria. The computer network includes at least one monitored jurisdiction and at least one unmonitored jurisdiction. A database is queried to identify at least one communication identifier associated with the monitored jurisdiction. The method also includes a step of storing a list including the at least one communication identifier. Only network communication having communication identifiers included in the list are monitored.

Claims

1. A method of monitoring network communications, comprising:

identifying a monitored jurisdiction within a computer network based on predetermined criteria, wherein the computer network includes at least one monitored jurisdiction and at least one unmonitored jurisdiction;

querying a database to identify at least one communication identifier associated with the monitored jurisdiction;

storing a list including the at least one communication identifier; and

monitoring only network communications having communication identifiers included in the list.

2. The method of claim 1, wherein the identifying step includes identifying a jurisdiction having a regulation permitting monitoring of communications and identifying a jurisdiction having regulations forbidding monitoring of communications.

3. The method of claim 2, wherein the identifying step includes identifying a jurisdiction having an uncertain regulation regarding monitoring of communications.

4. The method of claim 2, wherein the identifying step is repeated at a predetermined frequency.

5. The method of claim 1, wherein the querying step includes querying at least one database to identify a network address associated with the monitored jurisdiction.

6. The method of claim 5, wherein the monitoring step includes monitoring network address based network communications leaving the computer network.

7. The method of claim 1, wherein the querying step includes querying at least one database to identify an email address associated with the monitored jurisdiction.

8. The method of claim 7, wherein the monitoring step includes monitoring email address based network communications leaving the computer network.

9. The method of claim 1, wherein the querying step, the storing step, and the monitoring step are repeated on a daily basis.

10. The method of claim 1, wherein the monitoring step includes identifying network communication events within the network communications.

11. A system for monitoring network communications, comprising:

a computer network with portions located in at least one monitored jurisdiction and at least one unmonitored jurisdiction, wherein the monitored jurisdiction is identified based on predetermined criteria;

at least one database having at least one communication identifier associated with the monitored jurisdiction;

a process for storing a list including the at least one communication identifier; and

a monitoring tool for monitoring only network communications having communication identifiers included in the list.

12. The system of claim 11, wherein the predetermined criteria include a regulation permitting monitoring of communications.

13. The system of claim 11, wherein the communication identifier includes a network address associated with the monitored jurisdiction.

14. The system of claim 13, wherein the network communications include network address based network communications leaving the computer network.

15. The system of claim 11, wherein the communication identifier includes an email address associated with the monitored jurisdiction.

16. The system of claim 15, wherein the network communications include email address based network communications leaving the computer network.

17. The system of claim 11, wherein the monitoring tool is configured to identify network communication events within the network communications.