Lawful Intercept Authorization System for Roaming Wireless Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current IP mobility solutions, such as Simple IP, require wireless communication devices to obtain new IP addresses when moving, disrupting connections, and communication service providers face challenges in complying with lawful interception regulations, especially when users are not connected through their network, as they must covertly intercept communications without the user's detection.
Innovation Solution
An authorization system in a home wireless network that selects a visited internet connection for a wireless communication device without using the home network, determines if a lawful intercept is required, and includes an intercept attribute in the authorization response to direct intercepted information to a specified destination, ensuring compliance with regulations while maintaining user unawareness of the interception.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a wireless communication device uses Simple IP protocol to obtain a new IP address when moving, then the device can access the internet in the visited network, but the existing connections are disrupted and packet data session changes occur
Solution Approach 1:
The authorization system performs preliminary actions by selecting the visited internet connection and determining lawful intercept requirements during the authorization phase before the actual data transmission begins. This ensures that all necessary routing and interception parameters are pre-configured, allowing seamless handover without connection disruption.
Solution Approach 2:
The authorization system acts as an intermediary between the visited wireless network and the home wireless network. It receives authorization requests from the visited network, makes decisions about internet connection selection and lawful intercept requirements, and returns authorization responses. This intermediary role enables coordinated handover and maintains connection continuity across networks.
2Reliability
If the visited wireless network directly intercepts communications, then lawful interception can be performed, but the user may detect the interception
Solution Approach 1:
The interception attribute is extracted from the authorization process and embedded within the authorization response message. This separates the interception directive from the actual interception execution, allowing the authorization system to covertly instruct the visited network to intercept communications without the user's knowledge. The interception parameter is taken out and placed in the authorization response for later execution.
3Reliability
If the authorization system processes lawful intercept determination during authorization, then interception compliance is ensured, but the authorization process complexity increases
Solution Approach 1:
The lawful intercept determination function is merged with the existing authorization process. The authorization system simultaneously performs authentication, authorization, and lawful intercept determination in a single integrated operation. This combining of functions ensures interception compliance without requiring a separate complex interception decision process.
Solution Approach 2:
The authorization system is designed with multi-functionality, serving as both an authentication/authorization mechanism and a lawful intercept decision-making entity. By making the authorization system universal and capable of performing multiple functions, the patent avoids adding separate specialized interception determination systems, thereby limiting the increase in overall system complexity.
Data Source
AI summary
An authorization system in a home wireless network comprises a communication interface and a processing system, wherein a wireless communication device associated with the home wireless network transfers a request to a visited wireless network for access to an internet. The communication interface is configured to receive an authorization request for the wireless communication device transmitted from the visited wireless network. The processing system is configured to select a visited internet connection for the wireless communication device and determine whether a lawful intercept is required. The processing system is further configured to include an intercept attribute in an authorization response indicating a destination for collecting intercepted information pursuant to the lawful intercept. The communication interface is configured to transfer the authorization response for delivery to the visited wireless network, wherein the visited wireless network provides the access to the internet in response to the authorization response and transfers the intercepted information for delivery to the destination.