Encrypted Target Identifier Storage for Lawful Interception Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Law enforcement's ability to conduct lawful communications interception is compromised due to the risk of system administrators accessing plain text target identifiers stored on network devices, which can lead to unauthorized disclosure or manipulation of interception targets.
Innovation Solution
Implementing a method where interception target information is stored and used in encrypted form on network devices, with the encrypted data loaded into active memory for secure processing, preventing access by system administrators and detecting unauthorized decryption requests through a security device like the Lawful Intercept Secrets Engine.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If interception target information is stored in plain text form on network devices, then interception operations can be easily implemented, but the security of target information is compromised and administrators can access target identities
Solution Approach 1:
The patent introduces an encryption intermediary layer between the storage system and the interception application. Target information is encrypted using encryption keys stored in a key management system, and decryption is performed through a controlled interface that verifies authorization. This intermediary mechanism allows the interception application to access decrypted target information while preventing direct access by system administrators, thus resolving the contradiction between security and accessibility.
2Reliability
If encrypted target information is stored on network devices, then security is improved, but the complexity of the system increases due to encryption and decryption requirements
Solution Approach 1:
The patent extracts the encryption and decryption functionality from the network device itself and places it in a separate key management system. The network device only stores encrypted target information and communicates with the key management system when decryption is needed. This extraction reduces the complexity burden on the network device while maintaining the security benefits of encryption, as the cryptographic operations are handled by a specialized external system.
3Ease of repair
If administrators have access to the operating system of network devices, then system maintenance is easier, but unauthorized access to target information becomes possible
Solution Approach 1:
The patent segments the target information storage and access control from the general system administration domain. Encryption keys are stored separately in a dedicated key management system, and decryption operations require specific authorization that is independent of general system administrator privileges. This segmentation ensures that even if an administrator compromises the operating system, they cannot access target information without also compromising the separate key management system, thus maintaining security while allowing normal system maintenance.
Data Source
AI summary
Lawful intercept is supported by providing a network communications device target identifiers in encrypted form. Received encrypted target identifiers are stored in a non-volatile storage device. Before communications interception occurs, one or more encrypted target identifiers are loaded into active memory which is secure and not accessible by a network device operating system administrator. A decryption request is sent to a security device and the result loaded into the secure active memory. Plain text target identifier(s) returned by the security device are loaded directly into the active memory without being stored in the operating system administrator accessible storage device. In the case of a reset resulting in the contents of the active memory being lost, the active memory is repopulated by sending decryption requests using the stored encrypted target identifiers to indicate to the security device the target identifiers which need to be decrypted and reloaded into active memory.