49 results about "Lawful interception" patented technology

A Lawful Interception Administration Function device (102) comprising a memory and a processor, the memory containing instructions which when executed on the processor, cause the LI ADMF device (102) to send to a Network Repository Function (110) a discovery request message for discovering at least one NEF device (103) and at least one Application Function, AF, device (107) served by the NEF device; receive a discovery response message comprising information about the NEF device and the AF device; receive from a LEA (101) a first request message for subscribing to a notification of the event provided by the AF device, the application identified by an identifier; send a second request message, to a NEF device comprising an IRI-POI (104) to subscribe to the notification of the event, the NEF device identified based on the information comprised in the discovery response message; and receive a subscribe response message confirming the subscription to the notification of the event.

Disclosure are techniques for allocating aggregation devices in a lawful intercept system. In an embodiment, a method includes maintaining a list of point of interception aggregation (PAG) functions in a network function repository function (NRF) of a cellular network upon instantiation of the PAG functions; receiving a lawful intercept (LI) request; querying the NRF to determine a respective PAG function; and associating a point of interception (POI) function with the respective PAG function.

Methods and apparatus for automatically securing communications between a mediation device (MD) and a law enforcement device, such as an agent's terminal, to which intercepted communications, e.g., traffic, is sent are described. Based on a desired intercept request to be implemented, a Lawful Interception (LI) administration (admin) device (LID) identifies at least a first mediation device (MD) which will be involved in implementing the intercept request. The LID then proceeds to enable the use of a private certificate authority to automatically generate and provision the MD and a law enforcement device with certificates and private keys via an automated process. Each of the MD and law enforcement device automatically obtain a security certificate and corresponding private key. The security certificates and corresponding private keys are then used, in an automated manner, to establish a mutual TLS connection between the MD and the law enforcement device.

A method of enabling lawful interception of an encrypted communication comprises generating a secret key for a second user and deriving a proof-of-work-protected key from the secret key. The secret key is reconstructable with less cryptographic work with the proof-of-work-protected key than without the proof-of-work-protected key. The method further comprises providing the proof-of-work-protected key to a system of a law enforcement organization, receiving, at a system of the second user, an encrypted communication from a system of a first user, and decrypting the encrypted communication with the secret key or with a further secret key generated based on the secret key. This method allows the system of the law enforcement organization to reconstruct the secret key based on the proof-of-work-protected key by performing cryptographic work and decrypt the encrypted communication with or based on the reconstructed secret key.

A communication network device hosting a lawful interception administration function, LI-ADMF, network element, NE. The device comprises includes interface circuitry, a processor and memory having instructions executable by the processor whereby the communication network device is operative to receive, from a law enforcement agency, LEA, a request to receive information related to at least one unmanned aerial system, UAS, hosted communication device registered with a communication network, send a request to at least one of a mobility management device or a user subscription management device to provide the information, receive at least part of the requested information from at least one of the mobility management device or the user subscription management device and send the received information to a law enforcement management function, LEMF.

A communications network device (100) hosting a lawful interception. LI, administration function. ADMF, the communications network device comprising interface circuitry (102), a processor (104) and a memory (106), said memory containing instructions (110) executable by said processor whereby the communications network device (100) is operative to:—send an X1 request message to a network element, NE, the X1 request message configured to request the NE to send status information of a field of an X1 GetAllDetailsResponse message to the LI ADMF; and—receive an X1 response message from the NE including the requested status information.

Access, mobility management and regulatory services are supported for satellite access to a Fifth Generation (5G) core network. A coverage area, e.g., country, region, multiple countries, and international areas, are divided into fixed virtual cells having well defined geographic boundaries and fixed tracking areas. Information for the virtual cells and / or tracking areas and associated with one or more public land mobile networks (PLMNs) may be provided to a user equipment (UE). The UE may obtain its position, e.g., using a satellite positioning system, and determine the serving virtual cell or tracking area in which it is located. The UE may perform registration with a serving core network in a serving PLMN associated with the serving virtual cell or tracking area. Regulatory services, such as emergency (EM) calls, lawful interception (LI), wireless emergency alerts (WEA) may be provided based on the serving virtual cell or tracking area.

The present invention discloses a legal eavesdropping method for physical-layer security-assisted suspicious ad-hoc communication, belonging to the field of wireless communication, which includes: establishing an optimization problem model for active eavesdropping interference power allocation in physical-layer security-assisted suspicious ad-hoc communication; transforming the established optimization problem into a two-layer optimization problem with inner and outer nesting, where the outer-layer optimization problem optimizes the relative eavesdropping rate and the inner-layer optimization problem optimizes the interference power allocation; solving the outer-layer optimization problem by the bisection method to obtain the relative eavesdropping rate, and for a given relative eavesdropping rate, solving the inner-layer optimization problem by the Lagrange method to obtain the interference power allocation. The present invention mainly aims at the scenario where suspicious ad-hoc communication terminals use physical-layer security technology for communication. The legal eavesdropper can optimize the interference power allocation to maximize the relative eavesdropping rate of the eavesdropping node, and use active eavesdropping to interfere to reduce the channel quality of the suspicious communication link and greatly improve the eavesdropping performance.

A method (400) for performing a lawful interception for managing services in a network (106) is disclosed The method (400) includes receiving (402) at least one service request corresponding to at least one service associated with at least one User Equipment (UE). The method (400) includes dynamically generating (404) at least one information header comprising a plurality of information corresponding to the at least one service. The method (400) further includes transmitting (406) the at least one information header to at least one of a Lawful Interception and Monitoring (LIM) system or / and one or more network components. The LIM system performs the lawful interception corresponding of the at least one service based on the at least one information header. The one or more network components provide the at least one service based on the at least one service request and the at least one information header.

Access, mobility management and regulatory services are supported for satellite access to a Fifth Generation (5G) core network. A coverage area, e.g., country, region, multiple countries, and international areas, are divided into fixed virtual cells having well defined geographic boundaries and fixed tracking areas. Information for the virtual cells and / or tracking areas and associated with one or more public land mobile networks (PLMNs) may be provided to a user equipment (UE). The UE may obtain its position, e.g., using a satellite positioning system, and determine the serving virtual cell or tracking area in which it is located. The UE may perform registration with a serving core network in a serving PLMN associated with the serving virtual cell or tracking area. Regulatory services, such as emergency (EM) calls, lawful interception (LI), wireless emergency alerts (WEA) may be provided based on the serving virtual cell or tracking area.

A lawful interception administrative function (ADMF) transmits (201) to a network element (NE) via an XI interface, a request for information pertaining to LI tasks that are associated with the NE. The request comprises a bulk indicator that indicates a procedure of transmission, from the NE to the ADMF, of said information pertaining to LI tasks. The NE determines (203), based at least on the bulk indicator, whether or not transmission of said information pertaining to LI tasks is to be performed using the procedure of transmission indicated by the bulk indicator. If it is determined that transmission of said information pertaining to LI tasks is to be performed using the procedure of transmission indicated by the bulk indicator, the NE transmits (205), to the ADMF via the X1 interface using the procedure of transmission indicated by the bulk indicator, said information pertaining to LI tasks.

Methods, systems, and computer-readable media for routing of packets for lawful interception (LI). A system includes at least one session border controller (SBC) configured to forward media streams to a forwarding function. The system includes a forwarding function implemented on a centralized node of a telecommunications network. The forwarding function is configured to receive media streams and forward each media stream to a respective lawful interception intermediary server of at least one country associated with the media stream. The forwarding function is configured to, in response to receiving a first packet of a first media stream from the SBC, perform a destination lookup on the first media stream and send an intermediary server identifier for the first media stream to the SBC. The SBC can be configured to send a session release indicator and a direction flag to the forwarding function.

A method (600) for providing cryptographic information to a Lawful Interception Function (LIF) (also referred to as ALICP). The method comprises obtaining (s602) an address for the LIF. The method further includes obtaining (s604) cryptographic information (e.g., a cryptographic key) used to secure communications between a user equipment (UE) and an application function (AF). The method further comprises using (s606) the obtained address for the LIF to provide a report message (m518, m524) of the obtained cryptographic information to the LIF.

The invention provides an IMS data stream legal interception method and system based on GEO satellite communication, and the method comprises the steps: deploying an MEC in a base station or a ground station, and presetting an interception target list in the MEC; constructing a special network slice special for intercepting data transmission; analyzing the IMS call signaling from the first terminal device based on the MEC so as to extract corresponding user identity information; if the user identity information exists in the interception target list, the MEC applies for reserved slice resources corresponding to the private network slice from a base station or a ground station; and the MEC copies the voice data stream of the first terminal device to a specified interface through the private network slice. According to the method, the interception response time of the voice data stream is greatly shortened, and the capture timeliness requirement of the key data of the voice data stream in a high-delay environment is met. In addition, by using the special network slice, the problem of signal attenuation caused by long-distance transmission is effectively solved, and the integrity of intercepted data is guaranteed.

The present disclosure enables lawful interception management (LIM) server integration with a centralized data layer (CDL) server and a converge telephony application server (CTAS). An X1 provisioning request from the LIM server is entertained at the CDL server and the LIM server determines details of the CDL server for target provisioning using an X1 interface. Further, an X2 interface is used by the CTAS to send data to the LIM server. If target is provisioned for interception, the CDL server will transfer X2 records towards LIM server, otherwise the CDL server will discard the data.

The present disclosure provides a system (110) and a method for centralized lawful interception in a network. The system (110) is a cost effective and centralized solution that helps in streamlining of LI provisioning to a single network function (NF) or a cluster of NFs efficiently, as all the provisioning requests will be handled and limited to a centralized lawful interception function (CLIF) (112) only and will not be extended to NFs. All procedures pertaining to the provisioning and interception will be offloaded to the CLIF (112) and application.

Method for decryption of end-to-end encrypted messages, wherein said messages are encrypted through user plane data encryption.

A method for managing data delivery flow performed by an Element of Lawful Interception, ELI, device, (106, 108) the method comprising: receiving (206, 212), from a Lawful Interception, LI, Administration Function, LI- ADMF, device (104), an activate task message or a modify task message comprising a truncable indicator that indicates that data delivery of intercepted data to a Law Enforcement Monitoring Facility, LEMF, device (114) associated with a task is to be truncated upon occurrence of a network condition; determining (302, 402) that the network condition has occurred at the ELI device (106, 108) or at another ELI device (106, 108) associated with the task; and delivering (306, 408) truncated intercepted data towards the LEMF device, wherein the truncated intercepted data further comprises an indicator that the truncated intercepted data is truncated Other methods preformed by an ELI device, network nodes, a computer program and a carrier are also disclosed.

A method, apparatus, and computer program for receiving an application session establishment request comprising an authentication and key management for applications, AKMA, Key Identifier, A-KID; producing an application key request (Naanf_AKMA_ApplicationKey_Get_request) comprising information elements AKMA Key Identifier A-KID; an application function identifier, AF_ID; and an application encryption key indication (Nnef_AKMA_AF_Encryption_Key_Indication); and sending the produced application key request (Naanf_AKMA_ApplicationKey_Get_request) to a home AKMA anchor function, hAAnF, or to a network exposure function, NEF, for enabling lawful interception in the VPLMN.

A lawful interception provisioning function, LIPF (113) and a system information retrieval function, SIRF (114), communicate with each other via the X1 and X2 protocols. The LIPF (113) obtains, from the SIRF (114), information pertaining to a network function, NF(107), which is an instance of a virtual network function, VNF, in a telecommunication 5network (100), where said information is unrelated to any LI target and any task associated with a point of interception, POI (135), in the NF (107).

A request associated with a destination to which a point of interception, POI, (135) is to transmit intercepted data via an X2 / X3 interface during lawful interception, LI, is received from an administrative function, ADMF (108), via an X1 interface. The request comprises an identifier of the destination and version information that specifies at least one version of a transmission protocol to use by the POI for transmission of intercepted data to the identified destination. The POI determines whether or not the POI is able to transmit intercepted data via the X2 / X3 interface using a version of the protocol that is equal to one of the versions in the received version information. The received version information is compared with version information available in the POI. A response is transmitted via the X1 interface that indicates if the POI is able to transmit intercepted data via the X2 / X3 interface.

A communication system and method for identifying a threatening and / or illegal call includes (1) a telephony network, (2) a first user device in communication with the telephony network, wherein the first user device is assigned to a first user who is an organization member, (3) a second user device in communication with the telephony network, wherein the second user device is assigned to a second user who is not an organization member, (4) a communications server in communication with at least the first user device, (5) a natural language processor (NLP) in communication with the communications server; and (6) a threatening language database in communication with the communications server and / or the NLP. The NLP is configured to monitor language used by the second user during a communication with first user to identify threatening language by comparing the language used by the second user to the threatening language in the threatening language database.

A lawful interception administrative function, LI ADMF, (108) in a telecommunication network (100) obtains from a quantum key distribution network, QKDN, (10) a quantum key and a key stream identifier, KSID, associated with the quantum key. The LI ADMF (108) transmits the KSID associated with the quantum key to an LI entity (107, 136) in the telecommunication network (100). The LI entity (107, 136) then obtains, from the QKDN (10), a quantum key associated with the KSID transmitted by the LI ADMF (108). Such a procedure provides a secure exchange of quantum keys to enable encryption of sensitive data within messages exchanged by LI entities in the telecommunication network (100).

Methods and systems for managing SUPI privacy in a PLMN hosting NPN scenario Embodiments herein is to disclose methods and systems for managing Subscription Permanent Identifier (SUPI) privacy in a Public Land Mobile Network (PLMN) hosting Non-Public Network (NPN) scenario in a wireless communication network, wherein SUPI privacy is provided using a virtual SUPI without impacting operations of a User Equipment (UE) currently being served by the wireless communication network. Embodiments herein disclose a key (K_AMF) being generated at an operator premises instead of customer premises. Embodiments herein disclose virtual SUPI being provided to a Lawful Interception (LI) framework (if required), while preserving the SUPI privacy at customer side.

The invention relates to the technical field of unauthorized covert communication, in particular to an unauthorized covert communication detection method, which comprises the following steps: deploying a DRIS near an unauthorized user Alice, and setting the DRIS in a working state, so that a signal sent by the Alice and reflected by the DRIS generates random phase shift; a DRIS channel signal and a direct channel signal are superposed to form a combined channel, and a legal lie compares the power intensity of a signal received by the combined channel with an optimal judgment threshold to judge whether the unauthorized user Alice communicates with the Bob or not. In an unauthorized covert communication scene, full passive interference can be performed by using the DRIS, so that the probability that Willie detects covert communication between the unauthorized user Alice and the unauthorized user Bob is increased, and the communication performance of the unauthorized user is remarkably reduced.

A method for providing lawful interception, LI, in a radio communication system (500) with network slices, NSs, (520, 530, 540). The method comprises: providing a broker LI provisioning function, bLIPF (508) connected to an LI centralized function, LICF, (506), and to at least one slice LI provisioning function, sLIPF, (528, 538, 548) implemented on one of the NSs; receiving an LI target identity, if the LICF determines that a party of a network service provided using a network function, NF, (522, 524, 526, 532, 534, 536, 542, 544, 546) running on the one of the NSs has the LI target identity; and conveying the LI target identity from the bLIPF to the at least one sLIPF, wherein the at least one sLIPF activates a point of interception, POI, (522p, 524p, 526p, 532p, 534p, 536p, 542p, 544p, 546p) associated with or embedded in the NF to intercept data.

A communication network device (100) that hosts a legal interception (LI) management function (ADMF) includes an interface circuit (102), a processor (104), and a memory (106). The memory includes instructions (110) executable by the processor, whereby the communication network device (100) is configured to send an X1 request message to a network element (NE) that requests the NE to send status information of fields of an X1 GetAllDetailsResponse message to the LI ADMF, and to receive from the NE an X1 response message including the requested status information.

A determination is made that an identity of a non-target communicating entity (102) with which a target communicating entity (101) is communicating, is to be obfuscated in any report of lawful interception of the target communicating entity (101) to a law enforcement agency (131). Lawful interception is performed of the target communicating entity (101) and information pertaining to the lawful interception of the target communicating entity (101) is reported to the law enforcement agency (131). The reported information comprises non-obfuscated identity information of the target communicating entity (101) and obfuscated identity information of the non-target communicating entity (102).

A Lawful Interception (LI) Administrative Function (ADMF) device (130), a network element, NE, device (140), a mediation and delivery function (MDF) device (150), methods and computer programs are disclosed The LI ADMF device (130) is configured to generate a log correlation identifier (310), the log correlation identifier (310) is related to the target UE identifier (115); send, over a first interface (171), a first message (320) to a network element, NE, device (140), the first message (320) comprising the log correlation identifier (310); collect one or more LI logs (410) related to the target UE identifier (115), the one or more LI logs (410) comprise the log correlation identifier (310); and analyse the collected one or more LI logs (410) based on the log correlation identifier (310).