Network policy architecture for legal monitoring system and its policy processing method

Abstract

The present invention relates to a network strategy framework applied to a legal interception system, which comprises a strategy library, a global strategy decision point, a local strategy decision point connected with the global strategy decision point and a strategy execution point connected with the local strategy decision point. The present invention also relates to a strategy processing method, which has four steps. Firstly, the strategy execution point sends a registration request to the global strategy decision point via the local strategy decision point; secondly, according to the registration request, the global strategy decision point queries the strategy library to acquire a strategy template, which is then sent down; thirdly, the local strategy decision point analyzes strategy rules and, according to the strategy rules, derives strategy subclasses according to the strategy template; and finally, the strategy execution point obtains the strategy subclasses, which are then distributed. By means of a three-layer system strategy architecture, the present invention alleviates the processing load of the upper-layer global strategy decision point, flexibly loads various modules related to the strategy execution of the legal interception system and encrypts the sent-down strategy subclasses, thus protecting the safety of strategy information.

Description

technical field [0001] The invention relates to the field of network security, in particular to a network policy framework applied to a lawful interception system and a policy processing method based on the network policy framework. Background technique [0002] Lawful interception means that under the premise of approval by the corresponding authorized agency, the law enforcement agency issues an interception request order to the network operator / access provider / service provider (NWO / AP / SvP), and the NWO / AP / SvP will send the public An information security technology that copies the communication content and call-related information of users of the telecommunication network (Public Telecommunication Network, PTN) and sends it to law enforcement agencies. [0003] In the field of network security management, legal interception and possession play an important role: First, it can enhance national security, strengthen the monitoring of key import and export channels, and meet s...

AI Technical Summary

Problems solved by technology

[0008] The purpose of the present invention is to solve the shortcomings of the existing policy management structure, such as the lack of confidentiality of policies and the heavy processing burden of policy decision points, etc., and adopt a three-layer network policy framework suitable for legal interception systems. To reduce the processing burden of policy decision points, realize unified lawful interception policy management including security, QoS, and interception

Images