29 results about "Lawful interception" patented technology

A Lawful Interception Administration Function device (102) comprising a memory and a processor, the memory containing instructions which when executed on the processor, cause the LI ADMF device (102) to send to a Network Repository Function (110) a discovery request message for discovering at least one NEF device (103) and at least one Application Function, AF, device (107) served by the NEF device; receive a discovery response message comprising information about the NEF device and the AF device; receive from a LEA (101) a first request message for subscribing to a notification of the event provided by the AF device, the application identified by an identifier; send a second request message, to a NEF device comprising an IRI-POI (104) to subscribe to the notification of the event, the NEF device identified based on the information comprised in the discovery response message; and receive a subscribe response message confirming the subscription to the notification of the event.

Methods and apparatus for automatically securing communications between a mediation device (MD) and a law enforcement device, such as an agent's terminal, to which intercepted communications, e.g., traffic, is sent are described. Based on a desired intercept request to be implemented, a Lawful Interception (LI) administration (admin) device (LID) identifies at least a first mediation device (MD) which will be involved in implementing the intercept request. The LID then proceeds to enable the use of a private certificate authority to automatically generate and provision the MD and a law enforcement device with certificates and private keys via an automated process. Each of the MD and law enforcement device automatically obtain a security certificate and corresponding private key. The security certificates and corresponding private keys are then used, in an automated manner, to establish a mutual TLS connection between the MD and the law enforcement device.

A communication network device hosting a lawful interception administration function, LI-ADMF, network element, NE. The device comprises includes interface circuitry, a processor and memory having instructions executable by the processor whereby the communication network device is operative to receive, from a law enforcement agency, LEA, a request to receive information related to at least one unmanned aerial system, UAS, hosted communication device registered with a communication network, send a request to at least one of a mobility management device or a user subscription management device to provide the information, receive at least part of the requested information from at least one of the mobility management device or the user subscription management device and send the received information to a law enforcement management function, LEMF.

A communications network device (100) hosting a lawful interception. LI, administration function. ADMF, the communications network device comprising interface circuitry (102), a processor (104) and a memory (106), said memory containing instructions (110) executable by said processor whereby the communications network device (100) is operative to:—send an X1 request message to a network element, NE, the X1 request message configured to request the NE to send status information of a field of an X1 GetAllDetailsResponse message to the LI ADMF; and—receive an X1 response message from the NE including the requested status information.

Access, mobility management and regulatory services are supported for satellite access to a Fifth Generation (5G) core network. A coverage area, e.g., country, region, multiple countries, and international areas, are divided into fixed virtual cells having well defined geographic boundaries and fixed tracking areas. Information for the virtual cells and / or tracking areas and associated with one or more public land mobile networks (PLMNs) may be provided to a user equipment (UE). The UE may obtain its position, e.g., using a satellite positioning system, and determine the serving virtual cell or tracking area in which it is located. The UE may perform registration with a serving core network in a serving PLMN associated with the serving virtual cell or tracking area. Regulatory services, such as emergency (EM) calls, lawful interception (LI), wireless emergency alerts (WEA) may be provided based on the serving virtual cell or tracking area.

A method (400) for performing a lawful interception for managing services in a network (106) is disclosed The method (400) includes receiving (402) at least one service request corresponding to at least one service associated with at least one User Equipment (UE). The method (400) includes dynamically generating (404) at least one information header comprising a plurality of information corresponding to the at least one service. The method (400) further includes transmitting (406) the at least one information header to at least one of a Lawful Interception and Monitoring (LIM) system or / and one or more network components. The LIM system performs the lawful interception corresponding of the at least one service based on the at least one information header. The one or more network components provide the at least one service based on the at least one service request and the at least one information header.

Access, mobility management and regulatory services are supported for satellite access to a Fifth Generation (5G) core network. A coverage area, e.g., country, region, multiple countries, and international areas, are divided into fixed virtual cells having well defined geographic boundaries and fixed tracking areas. Information for the virtual cells and / or tracking areas and associated with one or more public land mobile networks (PLMNs) may be provided to a user equipment (UE). The UE may obtain its position, e.g., using a satellite positioning system, and determine the serving virtual cell or tracking area in which it is located. The UE may perform registration with a serving core network in a serving PLMN associated with the serving virtual cell or tracking area. Regulatory services, such as emergency (EM) calls, lawful interception (LI), wireless emergency alerts (WEA) may be provided based on the serving virtual cell or tracking area.

A lawful interception administrative function (ADMF) transmits (201) to a network element (NE) via an XI interface, a request for information pertaining to LI tasks that are associated with the NE. The request comprises a bulk indicator that indicates a procedure of transmission, from the NE to the ADMF, of said information pertaining to LI tasks. The NE determines (203), based at least on the bulk indicator, whether or not transmission of said information pertaining to LI tasks is to be performed using the procedure of transmission indicated by the bulk indicator. If it is determined that transmission of said information pertaining to LI tasks is to be performed using the procedure of transmission indicated by the bulk indicator, the NE transmits (205), to the ADMF via the X1 interface using the procedure of transmission indicated by the bulk indicator, said information pertaining to LI tasks.

Methods, systems, and computer-readable media for routing of packets for lawful interception (LI). A system includes at least one session border controller (SBC) configured to forward media streams to a forwarding function. The system includes a forwarding function implemented on a centralized node of a telecommunications network. The forwarding function is configured to receive media streams and forward each media stream to a respective lawful interception intermediary server of at least one country associated with the media stream. The forwarding function is configured to, in response to receiving a first packet of a first media stream from the SBC, perform a destination lookup on the first media stream and send an intermediary server identifier for the first media stream to the SBC. The SBC can be configured to send a session release indicator and a direction flag to the forwarding function.

The present disclosure enables lawful interception management (LIM) server integration with a centralized data layer (CDL) server and a converge telephony application server (CTAS). An X1 provisioning request from the LIM server is entertained at the CDL server and the LIM server determines details of the CDL server for target provisioning using an X1 interface. Further, an X2 interface is used by the CTAS to send data to the LIM server. If target is provisioned for interception, the CDL server will transfer X2 records towards LIM server, otherwise the CDL server will discard the data.

The present disclosure provides a system (110) and a method for centralized lawful interception in a network. The system (110) is a cost effective and centralized solution that helps in streamlining of LI provisioning to a single network function (NF) or a cluster of NFs efficiently, as all the provisioning requests will be handled and limited to a centralized lawful interception function (CLIF) (112) only and will not be extended to NFs. All procedures pertaining to the provisioning and interception will be offloaded to the CLIF (112) and application.

Method for decryption of end-to-end encrypted messages, wherein said messages are encrypted through user plane data encryption.

A method for managing data delivery flow performed by an Element of Lawful Interception, ELI, device, (106, 108) the method comprising: receiving (206, 212), from a Lawful Interception, LI, Administration Function, LI- ADMF, device (104), an activate task message or a modify task message comprising a truncable indicator that indicates that data delivery of intercepted data to a Law Enforcement Monitoring Facility, LEMF, device (114) associated with a task is to be truncated upon occurrence of a network condition; determining (302, 402) that the network condition has occurred at the ELI device (106, 108) or at another ELI device (106, 108) associated with the task; and delivering (306, 408) truncated intercepted data towards the LEMF device, wherein the truncated intercepted data further comprises an indicator that the truncated intercepted data is truncated Other methods preformed by an ELI device, network nodes, a computer program and a carrier are also disclosed.

A method, apparatus, and computer program for receiving an application session establishment request comprising an authentication and key management for applications, AKMA, Key Identifier, A-KID; producing an application key request (Naanf_AKMA_ApplicationKey_Get_request) comprising information elements AKMA Key Identifier A-KID; an application function identifier, AF_ID; and an application encryption key indication (Nnef_AKMA_AF_Encryption_Key_Indication); and sending the produced application key request (Naanf_AKMA_ApplicationKey_Get_request) to a home AKMA anchor function, hAAnF, or to a network exposure function, NEF, for enabling lawful interception in the VPLMN.

A lawful interception provisioning function, LIPF (113) and a system information retrieval function, SIRF (114), communicate with each other via the X1 and X2 protocols. The LIPF (113) obtains, from the SIRF (114), information pertaining to a network function, NF(107), which is an instance of a virtual network function, VNF, in a telecommunication 5network (100), where said information is unrelated to any LI target and any task associated with a point of interception, POI (135), in the NF (107).

A lawful interception administrative function, LI ADMF, (108) in a telecommunication network (100) obtains from a quantum key distribution network, QKDN, (10) a quantum key and a key stream identifier, KSID, associated with the quantum key. The LI ADMF (108) transmits the KSID associated with the quantum key to an LI entity (107, 136) in the telecommunication network (100). The LI entity (107, 136) then obtains, from the QKDN (10), a quantum key associated with the KSID transmitted by the LI ADMF (108). Such a procedure provides a secure exchange of quantum keys to enable encryption of sensitive data within messages exchanged by LI entities in the telecommunication network (100).

Methods and systems for managing SUPI privacy in a PLMN hosting NPN scenario Embodiments herein is to disclose methods and systems for managing Subscription Permanent Identifier (SUPI) privacy in a Public Land Mobile Network (PLMN) hosting Non-Public Network (NPN) scenario in a wireless communication network, wherein SUPI privacy is provided using a virtual SUPI without impacting operations of a User Equipment (UE) currently being served by the wireless communication network. Embodiments herein disclose a key (K_AMF) being generated at an operator premises instead of customer premises. Embodiments herein disclose virtual SUPI being provided to a Lawful Interception (LI) framework (if required), while preserving the SUPI privacy at customer side.

A method for configuring an Element of Lawful Interception, ELI, device (202) in a network function performed by a Lawful Interception, LI, Security Engine, LISE, device (208). The method comprises receiving (304), from the ELI device, a schema request to configure the ELI device, wherein the schema request comprises an ELI identifier and information identifying a type and version of the network function associated with the ELI device; retrieving (306), from an LI Configuration Repository Function, LICREPF (210), a schema identifier based on the information identifying the type and version of the network function; providing (308), to the ELI device, the schema identifier; receiving (312) information identifying an instance of ELI; providing (316), to the ELI device, a list of names of parameters; receiving (320) an indication that the ELI device configuration is complete; and storing (322) information about the ELI device configuration to the LICREPF.

Methods and apparatuses for lawful interception (LI) are disclosed. According to an embodiment, a first network node implementing session management determines whether or not a target has roamed out internationally from a home network to a visiting network, or whether or not a target has roamed back from a visiting network to a home network. The first network node sends, to a second network node, one or more messages for stopping LI reporting for the target in response to determining that the target has roamed out internationally, or starting the LI reporting for the target in response to determining that the target has roamed back to the home network.

A first Lawful Interception, LI, Administrative Function, ADMF, communication device (202), a first Network Element, NE, communication device (203), and methods are disclosed The first LI ADMF communication device is configured to: store a first status (410) of an LI task; send a task request message (420), to a first NE communication device, to perform an action associated with the LI task, the task request message comprising a first indication (510) to notify about a change of the status; receive a task response message (430), from the first NE communication device, the task response message comprising a result (610) associated with the task request message; receive, from the first NE communication device, if the status has changed, a report request message (440) comprising a second status (710) of the LI task; compare the received second status to the stored first status; perform an action (450) based on the comparison; and send, to the first NE communication device, a report response message (460).

Methods and systems for reporting a provisioning transaction in a wireless communication network are disclosed. According to an implementation, a lawful interception management system (LIMS) of the wireless communication network may receive, from a law enforcement agency (LEA), a request to track activities of a subscriber of services provided through the communication network. The request may be submitted through a third-party server located in a public network. LIMS may transmit the request to a communication service provider (CSP). Upon receiving the request, CSP may forward the request to one or more servers via dedicated interfaces respectively assigned. The one or more servers may be configured to intercept the provisioning transactions that occurred on different radio access networks, e.g., 2G / 3G, 4G / LTE, or 5G. Once the provisioning transaction is intercepted, LIMS may be immediately notified via the dedicated interfaces. Information related to the provisioning transactions is reported to LEA.

A Lawful Interception Administration Function device (102) comprising a memory and a processor, the memory containing instructions which when executed on the processor, cause the LI ADMF device (102) to send to a Network Repository Function (110) a discovery request message for discovering at least one NEF device (103) and at least one Application Function, AF, device (107) served by the NEF device; receive a discovery response message comprising information about the NEF device and the AF device; receive from a LEA (101) a first request message for subscribing to a notification of the event provided by the AF device, the application identified by an identifier; send a second request message, to a NEF device comprising an IRI-POI (104) to subscribe to the notification of the event, the NEF device identified based on the information comprised in the discovery response message; and receive a subscribe response message confirming the subscription to the notification of the event.

A method performed by a Lawful Interception Administration Function device (102) is disclosed. The method comprises receiving from a Law Enforcement Agency (101), a first request message for subscribing to a notification of an event, wherein the event is a monitoring event or a Non-IP Data Delivery event; sending a second request message, to a Network Exposure Function, NEF, device (103) comprising an Intercept Related Information Point of Interception, IRI-POI, (104) to subscribe to the notification of the event by provisioning the IRI-POI in the NEF device; and receiving a subscribe response message from the NEF device confirming the subscription to the notification of the event. Further, the embodiments relate to the NEF device, the LI ADMF device, the Mediation and Delivery Function 2 device, their corresponding methods as well as computer programs, carriers of such computer programs and computer program products of such computer programs.

The present disclosure provides a method for supporting Lawful Interception (LI) performed by a Network Data Analytics Function (NWDAF) device (206) that includes receiving (302), from an LI Administration Function (LI ADMF) device (204), a request for analytics associated with a target, wherein the request for analytics comprises information identifying the target and an application identifier identifying an application for which analytics are requested The method also includes providing (304), to a Mediation and Delivery Function (MDF) device (236), analytics information associated with usage data of the target and that is also associated with the application identifier.

The present disclosure provides not just a method for authenticating and authorizing the entities and microservices allowed to send X2 / X3 traffic, but also a mechanism to control the permissions of the same entities and microservices for establishing a session in which they are allowed to send X2 / X3 traffic The disclosure introduces a Lawful Interception (LI) Identity and Access Manager (LI-IAM) function device with the architecture of the LI Interception Management System (LI-IMS) that manage and verify the identities of entities requesting access to X2 / X3 interface traffic, thereby ensuring that only authorized requests are processed. The LI-IAM function device grants secure processing of identity data and provides authorization for X2 / X3 transmission, so representing a new method to fortify the security posture of LI operations by mitigating risk of unauthorized access to X2 / X3 interfaces.

Methods (400, 700) and devices (110, 120, 300, 610, 620, 810, 850, 1000, 1100) determine a hash function to be used before storing and transmitting target identifiers. A lawful interception, LI, core device (120, 300, 620) then calculates a target identifier hashed value, TIHV, using the hash function and a hashing key, stores an indication of the hash function, the hashing key and the TIHV, and transmits the indication, the hashing key and the TIHV to the network element that is configured to intercept LI data. The network element applies the hash function with the hashing key to intercepted target identifiers retrieved from intercepted LI data. If one of the intercepted target identifiers hashed values matches a TIHV received from the LI core device, the network element forwards LI data to the LI core device, which similarly matches and forwards LI data to a law enforcement monitoring facility.

A method (200) performed by a communication device hosting an element of lawful interception, ELI. The method comprises: receiving (202) an indication of an alarm Issue; assigning (204) an Issue identifier to the alarm Issue, wherein the Issue identifier uniquely identifies the alarm Issue; preparing (206) a Report Issue request message for reporting of the alarm Issue, the Report Issue request message including the Issue identifier, an indication of an Issue type of the alarm Issue and information indicative of the alarm Issue; and sending (208) the Report Issue request message to a lawful interception administration function, LI ADMF.

A method for identifying an active administration function (ADMF) in a lawful interception deployment that utilizes an ADMF set comprising a plurality of ADMFs can be implemented by a network element. The method can include exchanging lawful interception signaling with a first ADMF when the first ADMF is the active ADMF. The method can also include receiving an auditing request message from one of the plurality of ADMFs in the ADMF set and sending a ping request message to each ADMF in the ADMF set. The method can also include receiving a ping response message from a second ADMF among the plurality of ADMFs in the ADMF set and identifying the second ADMF as the active ADMF in response to receiving the ping response message. The method can also include exchanging second lawful interception signaling with the second ADMF when the second ADMF is the active ADMF.

The present disclosure relates to a packet data units (PDU) reliability system that improves lawful interception (LI) network functions in a cloud computing system for a telecommunications network. The PDU reliability system utilizes new components and elements within the network functions of the telecommunications network to improve the reliability and robustness of transmitted PDUs. These components include PDU acknowledgment packets, sequence number lists, and PDU receipt timers. For instance, the PDU reliability system utilizes a mediation and delivery function (MDF) to generate PDU acknowledgment packets based on PDUs received from a point of interception (POI) application to indicate which PDUs have been successfully received during PDU receipt timers. Based on the PDU acknowledgment packets, the PDU reliability system causes the POI application to perform one or more PDU actions to ensure the robust and reliable transmission of the PDUs.