Lawful Interception Identity Discovery for Cross-Network Continuity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing lawful interception systems struggle to maintain continuous monitoring of communication targets as they move between different network technologies or services, especially when not all identities associated with the target are known by the law enforcement agency.
Innovation Solution
A method and system that enables communication devices to receive a known identity of a target from a Law Enforcement Monitoring Facility, request and obtain additional identities from a user register, and send intercept-related information to the facility, ensuring continuous lawful interception across multiple services and technologies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If lawful interception is established using a known identity of a target, then interception can be activated for that specific identity, but continuous monitoring is lost when the target uses additional identities or moves between network technologies
Solution Approach 1:
The ADMF proactively requests additional identities from the user register before interception is needed. By obtaining all associated identities in advance (IMSI, MSISDN, IP addresses, etc.), the system ensures that when a target switches identities or network technologies, the LEMF already has the information needed to maintain continuous monitoring without interruption
Solution Approach 2:
The user register acts as an intermediary between the LEMF and the target's multiple identities. The ADMF queries the user register using a known identity, and the user register returns all associated identities. This intermediary mechanism enables the system to discover additional identities without directly accessing the target's complete identity portfolio
2Reliability
If the system requests and processes additional identities from the user register, then continuous interception across multiple identities is enabled, but the complexity of the interception system increases
Solution Approach 1:
The ADMF is designed to handle multiple identity types universally (IMSI, MSISDN, IP addresses, device identifiers) through a single interface. The system processes different identity formats through the same workflow of querying the user register and receiving additional identities, eliminating the need for separate handling mechanisms for each identity type and reducing overall system complexity
Solution Approach 2:
The system implements a feedback loop where the LEMF sends intercept requests to the ADMF, which queries the user register for additional identities, and the DF uses these identities to activate interception. This automated feedback mechanism ensures that identity information is continuously updated and utilized without manual intervention, maintaining interception continuity while managing complexity through automation
Data Source
Figure 1
Figure 2~3
Figure 4~5
AI summary
A method of establishing lawful interception, LI, of an LI target within a telecommunication network, comprising: at a communication device (300) hosting an LI administrative function, ADMF: receiving from a Law Enforcement Monitoring Facility, LEMF, (610) a first request message (612) containing: - a target identifier comprising a known identity of an LI target; and - a request for additional identities associated with the known identity; and sending a second request message (614) to a user register requesting additional identities associated with the known identity; at a communication device (400) hosting the user register: receiving the second request message (614); obtaining from the user register at least one additional identity associated with the known identity; and sending a message (616) to a lawful interception delivery function, LI DF, containing said at least one additional identity associated with the known identity; and at a communication device (500) hosting the LI DF: receiving the message from the user register (616); and sending an intercept related information, IRI, message (618) to the LEMF containing said at least one additional identity associated with the known identity.