Lawful Interception Encryption for Location-Based Jurisdiction Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing lawful interception systems face challenges in managing location-dependent interception in communication networks, particularly in IP Multimedia Systems (IMS), where location information is not available at the initiation of a communication session, leading to inefficiencies and potential unauthorized data delivery.
Innovation Solution
Implementing a method and device that encrypts LI data at the network operator level and provides decryption information to law enforcement agencies only when the target's location is within the specified geographical area, ensuring secure and location-dependent delivery of intercepted data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If LI data is delivered to LEA without encryption in IMS network, then the LEA can decode and access the intercepted communication content, but the privacy of the LI target is compromised when location information is not available at session initiation
Solution Approach 1:
The patent applies preliminary action by initializing an encryption mechanism at the beginning of the communication session, before location information becomes available. The LI data is encrypted in advance using this pre-initialized mechanism, and the decryption information is withheld until location confirmation is received, thus protecting privacy proactively rather than reactively
Solution Approach 2:
The patent introduces an intermediary encryption mechanism that acts as a mediator between the LI data and the LEA. The encryption mechanism transforms the LI data into an unreadable form during transmission, and only the authorized LEA with the decryption information can restore the original data, thus protecting privacy during the information loss period
2Adaptability or versatility
If location dependent interception is implemented in IMS without encryption, then the system can deliver LI data to multiple LEAs, but unauthorized LEAs may access LI data they have no jurisdiction over
Solution Approach 1:
The patent applies local quality by providing different treatment to different LEAs based on their jurisdictional authorization. The system maintains the same multi-LEA delivery capability, but each LEA receives decryption information selectively based on whether they are authorized for the specific LI target's location, thus enabling unauthorized LEAs to receive only encrypted, unusable data
Solution Approach 2:
The encryption mechanism serves as an intermediary that controls access to LI data. It allows the system to deliver data to multiple LEAs simultaneously while preventing unauthorized access by ensuring that only authorized LEAs receive the decryption information needed to make the data usable
3Measurement precision
If the network operator buffers LI data until location information is acquired, then location dependent interception can be accurately implemented, but the system becomes expensive and cumbersome
Solution Approach 1:
The patent applies preliminary action by performing the encryption operation at the start of the session, before location information is available. This eliminates the need for complex buffering mechanisms, as the data is rendered secure during transmission and only requires simple decryption at the receiving end when location is confirmed
Solution Approach 2:
The patent extracts the encryption and decryption functions from the complex buffering system. By separating the security function (encryption) from the location verification function, the system achieves accurate location-dependent interception without requiring expensive and cumbersome buffering infrastructure
Data Source
AI summary
Methods and devices overcome the issue caused when target's location is not known at the beginning of a location dependent interception thereby being not possible to determine whether the target is in a law enforcement's agency jurisdiction. The network operator delivers lawful interception data encrypted to the law enforcement agency and provides the decryption information when jurisdiction is confirmed.