Lawful Interception Hash Handshake for Outage-Free Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In radio communication systems, the manual updating of hash functions in network elements (NEs) for lawful interception (LI) causes temporary monitoring outages due to the need for human intervention, which contradicts the dynamic nature of 5G networks with frequent node changes, and there is a lack of automated mechanisms for selecting and updating hash functions in Network Functions Virtualization (NFV) environments.
Innovation Solution
A handshake mechanism is introduced between LI core devices and NEs to automatically select and update hash functions, allowing gradual changes without interrupting LI monitoring, using a handshake mechanism to agree on common hash functions and update stored information one by one.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual updating of hash functions is used in network elements, then security is maintained through controlled hash function changes, but LI monitoring outages occur due to human intervention requirements
Solution Approach 1:
The system enables self-service through automated handshake protocols between LI core devices and network elements. The hash function selection and updating process is performed automatically without human intervention, allowing the system to maintain security while eliminating monitoring outages caused by manual updates.
Solution Approach 2:
The patent implements preliminary action by pre-establishing a list of available hash functions and keys in both the LI core device and network element before updates are needed. This allows the system to perform hash function changes in advance or without interruption, avoiding monitoring outages while maintaining security through controlled updates.
2Reliability
If manual setting of hashing algorithm is used, then security control is maintained, but adaptability to dynamic 5G network changes is reduced
Solution Approach 1:
The patent applies dynamics by making the hash function selection adaptive rather than static. The system dynamically selects hash functions from a pre-established list based on current network conditions and capabilities. This allows automated adaptation to 5G network changes while maintaining security control through structured hash function management.
Solution Approach 2:
The handshake mechanism incorporates feedback loops where the LI core device and network element exchange information about available hash functions and keys. This feedback mechanism enables automated selection of appropriate hash functions that adapt to network changes while maintaining security through controlled, verified updates.
3Productivity
If automatic hash function selection is implemented, then LI monitoring continuity is maintained during updates, but system complexity increases due to handshake mechanisms
Solution Approach 1:
The patent segments the hash function management into distinct components: a pre-established list of hash functions and keys stored in both LI core devices and network elements, and a handshake protocol for selection. This segmentation reduces overall complexity by organizing the automated selection process into manageable, modular components that maintain monitoring continuity.
Data Source
AI summary
Methods (400, 700) and devices (110, 120, 300, 610, 620, 810, 850, 1000, 1100) determine a hash function to be used before storing and transmitting target identifiers. A lawful interception, LI, core device (120, 300, 620) then calculates a target identifier hashed value, TIHV, using the hash function and a hashing key, stores an indication of the hash function, the hashing key and the TIHV, and transmits the indication, the hashing key and the TIHV to the network element that is configured to intercept LI data. The network element applies the hash function with the hashing key to intercepted target identifiers retrieved from intercepted LI data. If one of the intercepted target identifiers hashed values matches a TIHV received from the LI core device, the network element forwards LI data to the LI core device, which similarly matches and forwards LI data to a law enforcement monitoring facility.